This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/52Q7DQLyWHVz-qGwSotTZ07FWmo.roa File: 52Q7DQLyWHVz-qGwSotTZ07FWmo.roa (raw, json) Hash identifier: +ReeX37S2GX4+iDtKpC9PiAXObWkgs49WhxgvOQyxiA= Subject key identifier: E7:64:3B:0D:02:F2:58:75:73:FA:A1:B0:4A:8B:53:67:4E:C5:5A:6A Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F1498F31C35733ABCECB1D04ACF353D Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/52Q7DQLyWHVz-qGwSotTZ07FWmo.roa Signing time: Fri 02 Jan 2026 14:20:14 +0000 ROA not before: Fri 02 Jan 2026 14:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 195.143.0.0/21 maxlen: 24 195.143.15.0/24 maxlen: 24 195.143.17.0/24 maxlen: 24 195.143.18.0/24 maxlen: 24 195.143.22.0/23 maxlen: 24 195.143.28.0/22 maxlen: 22 195.143.34.0/24 maxlen: 24 195.143.36.0/22 maxlen: 22 195.143.82.0/24 maxlen: 24 195.143.84.0/24 maxlen: 24 195.143.86.0/23 maxlen: 24 195.143.88.0/23 maxlen: 24 195.143.98.0/23 maxlen: 24 195.143.107.0/24 maxlen: 24 195.143.108.0/22 maxlen: 22 195.143.113.0/24 maxlen: 24 195.143.114.0/23 maxlen: 24 195.143.116.0/24 maxlen: 24 195.143.118.0/23 maxlen: 24 195.143.121.0/24 maxlen: 24 195.143.123.0/24 maxlen: 24 195.143.132.0/24 maxlen: 24 195.143.134.0/24 maxlen: 24 195.143.144.0/22 maxlen: 22 195.143.148.0/24 maxlen: 24 195.143.152.0/22 maxlen: 22 195.143.160.0/23 maxlen: 24 195.143.163.0/24 maxlen: 24 195.143.164.0/22 maxlen: 22 195.143.176.0/24 maxlen: 24 195.143.178.0/24 maxlen: 24 195.143.187.0/24 maxlen: 24 195.143.190.0/23 maxlen: 24 195.143.192.0/20 maxlen: 20 195.143.208.0/21 maxlen: 21 195.143.216.0/24 maxlen: 24 195.143.224.0/22 maxlen: 22 195.143.230.0/23 maxlen: 24 195.143.232.0/21 maxlen: 21 195.143.240.0/22 maxlen: 22 195.143.246.0/23 maxlen: 24 195.143.248.0/22 maxlen: 22 195.143.252.0/24 maxlen: 24 195.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:98:f3:1c:35:73:3a:bc:ec:b1:d0:4a:cf:35:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7643b0d02f2587573faa1b04a8b53674ec55a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:ef:19:39:17:96:26:6d:e3:85:79:f0:c2: 2a:20:4f:21:6d:7e:bf:aa:a5:1d:2a:a3:d2:df:01: 62:53:03:70:d7:f2:dc:41:33:ec:66:53:7b:55:04: b9:30:17:5e:9a:96:e5:d4:49:75:a8:8f:c0:f4:bf: e7:63:0a:87:55:0d:d4:09:f0:93:44:93:9b:fe:1d: 19:c8:bb:3b:9c:df:71:32:89:5d:86:78:1a:3d:08: c0:53:4b:f2:ef:3e:f6:07:e7:bb:81:40:3f:81:1a: 8f:ee:c3:3b:95:ef:f4:47:16:86:6c:eb:cd:c3:f4: ff:70:6a:b1:d4:b6:0c:81:7b:65:52:94:91:38:e8: 8e:7b:00:38:2f:09:1b:91:67:82:01:14:dc:77:5d: a1:6d:23:42:bf:9a:3a:00:48:92:76:a5:cf:d5:16: 18:3f:86:bd:08:f9:ff:3c:b2:0a:70:0d:36:ba:6d: 42:79:26:4b:b6:d0:3b:23:69:62:ef:49:1b:87:bb: c6:a6:c0:6d:a8:92:de:2e:36:ae:93:38:36:c2:65: 2b:10:e4:0a:a1:21:b9:f0:e0:cf:37:88:68:ac:83: a2:58:9c:ef:26:a6:0a:6b:88:25:61:2e:a3:99:80: fa:8f:b1:2f:a8:6f:77:49:0b:9b:f1:c8:89:83:3e: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:3B:0D:02:F2:58:75:73:FA:A1:B0:4A:8B:53:67:4E:C5:5A:6A X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/52Q7DQLyWHVz-qGwSotTZ07FWmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.143.0.0/21 195.143.15.0/24 195.143.17.0-195.143.18.255 195.143.22.0/23 195.143.28.0/22 195.143.34.0/24 195.143.36.0/22 195.143.82.0/24 195.143.84.0/24 195.143.86.0-195.143.89.255 195.143.98.0/23 195.143.107.0-195.143.111.255 195.143.113.0-195.143.116.255 195.143.118.0/23 195.143.121.0/24 195.143.123.0/24 195.143.132.0/24 195.143.134.0/24 195.143.144.0-195.143.148.255 195.143.152.0/22 195.143.160.0/23 195.143.163.0-195.143.167.255 195.143.176.0/24 195.143.178.0/24 195.143.187.0/24 195.143.190.0-195.143.216.255 195.143.224.0/22 195.143.230.0-195.143.243.255 195.143.246.0-195.143.252.255 195.143.254.0/23 Signature Algorithm: sha256WithRSAEncryption ab:16:34:4f:84:d9:77:df:7c:10:cc:e0:d6:93:97:ce:ec:49: dc:1d:f1:98:06:c8:fd:2b:03:37:9a:3d:23:cb:8d:86:f6:82: c7:35:a9:b5:54:b1:30:0e:93:c9:b6:fb:36:55:52:bb:1b:fb: 27:24:79:fe:ab:b9:0b:81:ab:5f:c2:1f:b0:51:79:b0:04:8a: 6b:78:3d:2c:5e:43:21:bf:ff:87:63:61:a5:4c:4a:45:20:57: 71:45:06:cb:7c:ec:69:21:a1:84:a9:a9:de:72:51:05:45:15: a6:d2:d0:08:ef:26:d2:e9:85:dc:82:da:6b:ed:bc:6e:a7:bd: de:0b:98:4f:70:b8:73:29:97:03:c4:97:fa:a2:a1:12:84:fc: 0f:ad:21:18:26:c9:50:37:29:18:0e:9e:f2:8f:ab:6b:35:35: ef:74:af:eb:fa:c5:a0:f2:71:9c:90:d5:46:ce:8c:d6:d1:77: 93:35:6e:9b:c2:c2:d9:88:c8:a5:e0:62:e3:75:af:37:b8:24: 22:fd:62:00:a5:0e:f8:76:42:87:41:57:6b:6a:da:a5:d2:bf: f0:2f:1a:99:bb:8b:12:19:9c:8f:66:c5:3f:7a:0c:03:9e:f1: 2a:ae:be:96:4a:1e:54:04:96:03:1b:43:94:45:43:09:d3:e7: 39:06:b8:12 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZt/FJjzHDVzOrzssdBKzzU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzY0M2IwZDAyZjI1ODc1NzNmYWExYjA0YThiNTM2NzRlYzU1YTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DLvGTkXliZt44V58MIqIE8hbX6/ qqUdKqPS3wFiUwNw1/LcQTPsZlN7VQS5MBdempbl1El1qI/A9L/nYwqHVQ3UCfCT RJOb/h0ZyLs7nN9xMoldhngaPQjAU0vy7z72B+e7gUA/gRqP7sM7le/0RxaGbOvN w/T/cGqx1LYMgXtlUpSROOiOewA4LwkbkWeCARTcd12hbSNCv5o6AEiSdqXP1RYY P4a9CPn/PLIKcA02um1CeSZLttA7I2li70kbh7vGpsBtqJLeLjaukzg2wmUrEOQK oSG58ODPN4horIOiWJzvJqYKa4glYS6jmYD6j7EvqG93SQub8ciJgz6jTwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFOdkOw0C8lh1c/qhsEqLU2dOxVpqMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvNTJRN0RRTHlXSFZ6LXFHd1NvdFRaMDdGV21vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8 AwQDw48AAwQAw48PMAwDBADDjxEDBADDjxIDBAHDjxYDBALDjxwDBADDjyIDBALD jyQDBADDj1IDBADDj1QwDAMEAcOPVgMEAcOPWAMEAcOPYjAMAwQAw49rAwQEw49g MAwDBADDj3EDBADDj3QDBAHDj3YDBADDj3kDBADDj3sDBADDj4QDBADDj4YwDAME BMOPkAMEAMOPlAMEAsOPmAMEAcOPoDAMAwQAw4+jAwQDw4+gAwQAw4+wAwQAw4+y AwQAw4+7MAwDBAHDj74DBADDj9gDBALDj+AwDAMEAcOP5gMEAsOP8DAMAwQBw4/2 AwQAw4/8AwQBw4/+MA0GCSqGSIb3DQEBCwUAA4IBAQCrFjRPhNl333wQzODWk5fO 7EncHfGYBsj9KwM3mj0jy42G9oLHNam1VLEwDpPJtvs2VVK7G/snJHn+q7kLgatf wh+wUXmwBIpreD0sXkMhv/+HY2GlTEpFIFdxRQbLfOxpIaGEqaneclEFRRWm0tAI 7ybS6YXcgtpr7bxup73eC5hPcLhzKZcDxJf6oqEShPwPrSEYJslQNykYDp7yj6tr NTXvdK/r+sWg8nGckNVGzozW0XeTNW6bwsLZiMil4GLjda83uCQi/WIApQ74dkKH QVdratql0r/wLxqZu4sSGZyPZsU/egwDnvEqrr6WSh5UBJYDG0OURUMJ0+c5BrgS -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:31 2026 by rpki-client