This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8K42RKqRwh0XdK9Y2I4s3FI5l0.roa File: N8K42RKqRwh0XdK9Y2I4s3FI5l0.roa (raw, json) Hash identifier: HEKcKi7fPWK8ZbYHFPjY9xnB1zC3f0PEJk2ZZb9MPG0= Subject key identifier: 37:C2:B8:D9:12:AA:47:08:74:5D:D2:BD:63:62:38:B3:71:48:E6:5D Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C741475325AB65959F0DBA60F9AA Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8K42RKqRwh0XdK9Y2I4s3FI5l0.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 195.143.0.0/21 maxlen: 24 195.143.15.0/24 maxlen: 24 195.143.17.0/24 maxlen: 24 195.143.18.0/24 maxlen: 24 195.143.22.0/23 maxlen: 24 195.143.28.0/22 maxlen: 24 195.143.34.0/24 maxlen: 24 195.143.36.0/22 maxlen: 24 195.143.82.0/24 maxlen: 24 195.143.84.0/24 maxlen: 24 195.143.86.0/23 maxlen: 24 195.143.88.0/23 maxlen: 24 195.143.98.0/23 maxlen: 24 195.143.107.0/24 maxlen: 24 195.143.108.0/22 maxlen: 24 195.143.113.0/24 maxlen: 24 195.143.114.0/23 maxlen: 24 195.143.116.0/24 maxlen: 24 195.143.118.0/23 maxlen: 24 195.143.121.0/24 maxlen: 24 195.143.123.0/24 maxlen: 24 195.143.132.0/24 maxlen: 24 195.143.134.0/24 maxlen: 24 195.143.144.0/22 maxlen: 24 195.143.148.0/24 maxlen: 24 195.143.152.0/22 maxlen: 24 195.143.160.0/23 maxlen: 24 195.143.163.0/24 maxlen: 24 195.143.164.0/22 maxlen: 24 195.143.176.0/24 maxlen: 24 195.143.178.0/24 maxlen: 24 195.143.187.0/24 maxlen: 24 195.143.190.0/23 maxlen: 24 195.143.192.0/20 maxlen: 24 195.143.208.0/21 maxlen: 24 195.143.216.0/24 maxlen: 24 195.143.224.0/22 maxlen: 24 195.143.230.0/23 maxlen: 24 195.143.232.0/21 maxlen: 24 195.143.240.0/22 maxlen: 24 195.143.246.0/23 maxlen: 24 195.143.248.0/22 maxlen: 24 195.143.252.0/24 maxlen: 24 195.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c7:41:47:53:25:ab:65:95:9f:0d:ba:60:f9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37c2b8d912aa4708745dd2bd636238b37148e65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:eb:8f:a3:a7:ba:76:69:7c:79:61:61:d0:ab: 05:c1:8e:29:ce:57:a6:59:fe:af:01:a4:5a:8f:12: cf:c0:6e:27:85:80:cf:e8:81:d9:17:7b:5d:fe:53: b0:a9:86:ff:88:b1:94:b3:d4:15:2d:5d:83:a8:e8: 10:79:67:04:ae:f2:0a:c3:72:d1:9c:aa:98:65:5d: 63:ef:6a:af:de:bc:fb:9d:20:00:95:e3:00:55:1e: 57:80:5d:09:01:07:8e:98:46:aa:97:a1:67:2f:f1: d4:20:57:69:e4:b8:b8:ef:0f:b8:24:73:0e:35:f5: 93:d2:8d:da:c9:4c:0a:29:b6:20:76:2c:db:9b:df: 5b:9b:d5:37:e1:1c:ff:35:8d:ae:4f:60:f1:df:cf: 48:f1:60:c2:40:e4:2a:54:ad:8d:34:af:cd:e4:b8: ef:b5:81:e3:3e:4d:b9:70:1e:b2:37:e7:9f:ec:f2: 15:23:b2:fb:3f:a1:53:a4:0a:d8:8c:51:86:09:76: 1d:55:70:de:36:87:12:08:fc:10:2e:fe:ed:01:ca: 59:11:0a:42:a0:60:28:8f:88:db:ac:24:e0:10:f9: e5:f8:3e:4f:be:dd:fb:73:7d:9b:9e:73:e9:f2:45: bf:20:0f:b9:4e:ff:22:9e:94:bf:b8:f3:67:35:bd: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C2:B8:D9:12:AA:47:08:74:5D:D2:BD:63:62:38:B3:71:48:E6:5D X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8K42RKqRwh0XdK9Y2I4s3FI5l0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.143.0.0/21 195.143.15.0/24 195.143.17.0-195.143.18.255 195.143.22.0/23 195.143.28.0/22 195.143.34.0/24 195.143.36.0/22 195.143.82.0/24 195.143.84.0/24 195.143.86.0-195.143.89.255 195.143.98.0/23 195.143.107.0-195.143.111.255 195.143.113.0-195.143.116.255 195.143.118.0/23 195.143.121.0/24 195.143.123.0/24 195.143.132.0/24 195.143.134.0/24 195.143.144.0-195.143.148.255 195.143.152.0/22 195.143.160.0/23 195.143.163.0-195.143.167.255 195.143.176.0/24 195.143.178.0/24 195.143.187.0/24 195.143.190.0-195.143.216.255 195.143.224.0/22 195.143.230.0-195.143.243.255 195.143.246.0-195.143.252.255 195.143.254.0/23 Signature Algorithm: sha256WithRSAEncryption ca:a9:01:7e:2c:f1:33:b3:4f:71:d9:43:6b:0e:ef:0a:91:bc: cd:4d:0b:c5:d1:48:ea:f9:a3:21:5a:c9:2f:16:ae:6c:07:b0: db:b7:cb:06:59:27:50:6d:fd:05:4e:7c:f7:8d:a1:51:ec:8d: 38:29:8c:b5:6e:e0:87:41:75:40:7b:6b:75:75:56:3d:c2:51: 10:7a:0a:70:d0:e8:1e:1d:81:44:f5:66:42:fb:05:14:7e:31: b8:5e:f4:59:cb:5c:66:6d:ab:01:c1:46:b1:27:d7:fd:26:bd: 38:08:97:82:72:d7:aa:a9:a6:c0:a9:08:4a:40:05:3e:87:ce: f7:4f:61:07:0a:a2:63:42:90:99:17:ce:94:7f:18:98:c2:ce: fd:42:6a:2b:44:9e:4a:8b:a6:38:76:96:26:f5:1c:28:2e:e2: 07:68:f0:6a:20:32:ed:7f:55:70:b7:b5:01:b3:14:e3:bf:4b: 1f:db:3c:1e:bb:5c:00:7b:42:ce:e6:a3:f9:54:d3:b5:46:18: 5c:ad:f2:33:c3:61:9e:0d:6a:81:31:6d:99:9c:c4:4c:70:93: 07:17:d4:e3:7c:c7:86:48:e0:8d:43:7d:61:32:5f:9c:5f:ad: 3b:2a:b4:98:96:ad:85:2e:ff:28:85:39:dd:cc:02:9d:92:9b: 40:cb:1f:58 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZt/FMdBR1Mlq2WVnw26YPmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2MyYjhkOTEyYWE0NzA4NzQ1ZGQyYmQ2MzYyMzhiMzcxNDhlNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6euPo6e6dml8eWFh0KsFwY4pzlem Wf6vAaRajxLPwG4nhYDP6IHZF3td/lOwqYb/iLGUs9QVLV2DqOgQeWcErvIKw3LR nKqYZV1j72qv3rz7nSAAleMAVR5XgF0JAQeOmEaql6FnL/HUIFdp5Li47w+4JHMO NfWT0o3ayUwKKbYgdizbm99bm9U34Rz/NY2uT2Dx389I8WDCQOQqVK2NNK/N5Ljv tYHjPk25cB6yN+ef7PIVI7L7P6FTpArYjFGGCXYdVXDeNocSCPwQLv7tAcpZEQpC oGAoj4jbrCTgEPnl+D5Pvt37c32bnnPp8kW/IA+5Tv8inpS/uPNnNb0AqwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFDfCuNkSqkcIdF3SvWNiOLNxSOZdMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvTjhLNDJSS3FSd2gwWGRLOVkySTRzM0ZJNWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8 AwQDw48AAwQAw48PMAwDBADDjxEDBADDjxIDBAHDjxYDBALDjxwDBADDjyIDBALD jyQDBADDj1IDBADDj1QwDAMEAcOPVgMEAcOPWAMEAcOPYjAMAwQAw49rAwQEw49g MAwDBADDj3EDBADDj3QDBAHDj3YDBADDj3kDBADDj3sDBADDj4QDBADDj4YwDAME BMOPkAMEAMOPlAMEAsOPmAMEAcOPoDAMAwQAw4+jAwQDw4+gAwQAw4+wAwQAw4+y AwQAw4+7MAwDBAHDj74DBADDj9gDBALDj+AwDAMEAcOP5gMEAsOP8DAMAwQBw4/2 AwQAw4/8AwQBw4/+MA0GCSqGSIb3DQEBCwUAA4IBAQDKqQF+LPEzs09x2UNrDu8K kbzNTQvF0Ujq+aMhWskvFq5sB7Dbt8sGWSdQbf0FTnz3jaFR7I04KYy1buCHQXVA e2t1dVY9wlEQegpw0OgeHYFE9WZC+wUUfjG4XvRZy1xmbasBwUaxJ9f9Jr04CJeC cteqqabAqQhKQAU+h873T2EHCqJjQpCZF86UfxiYws79QmorRJ5Ki6Y4dpYm9Rwo LuIHaPBqIDLtf1Vwt7UBsxTjv0sf2zweu1wAe0LO5qP5VNO1RhhcrfIzw2GeDWqB MW2ZnMRMcJMHF9TjfMeGSOCNQ31hMl+cX607KrSYlq2FLv8ohTndzAKdkptAyx9Y -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:15 2026 by rpki-client