This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgJGwP15LUo4YECDcBIkP4AvHwk.roa File: RgJGwP15LUo4YECDcBIkP4AvHwk.roa (raw, json) Hash identifier: cBUXvTY8VAXBrSDijokrAtgg/z2Yup/0wFAQsdipKcY= Subject key identifier: 46:02:46:C0:FD:79:2D:4A:38:60:40:83:70:12:24:3F:80:2F:1F:09 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A13F65FC7118452215E190A9B5B6 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgJGwP15LUo4YECDcBIkP4AvHwk.roa Signing time: Fri 02 Jan 2026 14:20:16 +0000 ROA not before: Fri 02 Jan 2026 14:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 62.192.113.0/24 maxlen: 24 92.71.2.0/23 maxlen: 24 92.71.4.0/23 maxlen: 24 92.71.26.0/23 maxlen: 24 92.71.28.0/22 maxlen: 24 92.71.36.0/23 maxlen: 24 92.71.48.0/21 maxlen: 24 92.71.56.0/22 maxlen: 24 92.71.62.0/23 maxlen: 24 135.196.4.0/24 maxlen: 24 135.196.24.0/23 maxlen: 24 135.196.28.0/23 maxlen: 24 135.196.88.0/23 maxlen: 24 135.196.102.0/23 maxlen: 24 135.196.108.0/22 maxlen: 24 135.196.132.0/23 maxlen: 24 135.196.144.0/22 maxlen: 24 135.196.156.0/23 maxlen: 24 135.196.164.0/23 maxlen: 24 135.196.172.0/23 maxlen: 24 135.196.176.0/23 maxlen: 24 135.196.202.0/24 maxlen: 24 135.196.204.0/24 maxlen: 24 195.86.223.0/24 maxlen: 24 213.201.140.0/24 maxlen: 24 213.201.148.0/24 maxlen: 24 213.201.154.0/23 maxlen: 24 213.201.158.0/24 maxlen: 24 213.201.163.0/24 maxlen: 24 213.201.166.0/23 maxlen: 24 213.201.171.0/24 maxlen: 24 213.201.174.0/23 maxlen: 24 213.201.179.0/24 maxlen: 24 213.201.182.0/23 maxlen: 24 213.201.186.0/23 maxlen: 24 213.201.190.0/23 maxlen: 24 213.201.194.0/23 maxlen: 24 213.201.196.0/23 maxlen: 24 213.201.198.0/24 maxlen: 24 213.201.200.0/24 maxlen: 24 213.201.202.0/24 maxlen: 24 213.201.204.0/24 maxlen: 24 213.201.208.0/23 maxlen: 24 213.201.214.0/23 maxlen: 24 213.201.218.0/23 maxlen: 24 213.201.222.0/23 maxlen: 24 213.201.226.0/23 maxlen: 24 213.201.228.0/23 maxlen: 24 213.201.234.0/23 maxlen: 24 213.201.238.0/23 maxlen: 24 217.8.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a1:3f:65:fc:71:18:45:22:15:e1:90:a9:b5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460246c0fd792d4a386040837012243f802f1f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:d3:12:b1:95:24:be:52:cc:85:11:21:5c: 84:ff:9b:05:aa:2f:78:6e:0e:0e:d3:6c:74:0a:41: 9a:86:8f:c5:74:ac:79:3f:48:d2:24:60:ea:dc:14: 91:b2:bd:92:b5:58:2d:b5:5f:21:87:9e:7e:0e:00: db:2e:5f:20:57:c3:9b:7e:76:61:e3:e8:8f:87:fd: 25:be:f8:0a:87:db:e8:02:74:5c:e3:84:84:0e:ad: 43:e0:28:a7:f3:21:85:0b:79:70:ba:4e:7c:26:86: 3d:c3:b7:62:63:03:50:09:0a:24:87:6d:9a:7b:40: c6:1e:f1:37:fe:01:1d:63:25:89:90:96:ad:b2:b3: d9:45:e9:c4:5a:a2:49:41:d6:17:64:57:eb:e3:c1: 39:ef:9e:4a:c4:5c:f0:42:fc:8f:4f:38:7a:89:8b: 63:fc:8a:af:33:15:71:4f:42:56:d7:1b:46:b4:e8: 94:b9:72:d9:09:62:72:46:b4:a2:15:56:a6:3b:0f: 00:fd:18:31:8b:6f:29:bc:54:2c:b8:6a:bd:7a:48: 44:0d:31:31:0b:5b:8e:b2:9a:1b:03:79:d1:9e:6d: df:b2:f3:53:46:38:33:90:a9:4c:e3:a8:ba:65:2c: b6:76:b7:92:24:4a:45:c2:23:38:e0:d7:3b:c7:e0: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:46:C0:FD:79:2D:4A:38:60:40:83:70:12:24:3F:80:2F:1F:09 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgJGwP15LUo4YECDcBIkP4AvHwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.113.0/24 92.71.2.0-92.71.5.255 92.71.26.0-92.71.31.255 92.71.36.0/23 92.71.48.0-92.71.59.255 92.71.62.0/23 135.196.4.0/24 135.196.24.0/23 135.196.28.0/23 135.196.88.0/23 135.196.102.0/23 135.196.108.0/22 135.196.132.0/23 135.196.144.0/22 135.196.156.0/23 135.196.164.0/23 135.196.172.0/23 135.196.176.0/23 135.196.202.0/24 135.196.204.0/24 195.86.223.0/24 213.201.140.0/24 213.201.148.0/24 213.201.154.0/23 213.201.158.0/24 213.201.163.0/24 213.201.166.0/23 213.201.171.0/24 213.201.174.0/23 213.201.179.0/24 213.201.182.0/23 213.201.186.0/23 213.201.190.0/23 213.201.194.0-213.201.198.255 213.201.200.0/24 213.201.202.0/24 213.201.204.0/24 213.201.208.0/23 213.201.214.0/23 213.201.218.0/23 213.201.222.0/23 213.201.226.0-213.201.229.255 213.201.234.0/23 213.201.238.0/23 217.8.218.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:84:3e:aa:47:9a:28:a2:46:83:4a:2f:8c:1b:1e:d6:b0:f3: bf:d1:a1:d7:46:8f:dc:3d:43:3b:b1:7a:bf:c6:56:b7:2d:f5: e5:f9:26:e4:3e:b8:6d:33:85:ae:6b:48:2f:c8:f4:76:c3:c3: 7a:ae:fd:5e:e3:68:37:07:2a:3a:e4:71:96:a2:a8:b6:36:5e: 0a:64:fe:43:03:6b:05:2c:df:41:76:e0:60:29:7a:f6:ee:9f: 22:7d:f3:23:31:86:e3:a6:16:d3:9d:1b:22:d6:fb:33:36:7a: 1e:7c:f2:bc:69:fc:6b:c8:6a:a0:fd:21:fb:48:bf:87:88:51: 9e:d4:65:28:30:87:4d:09:71:21:ff:84:85:9f:05:05:b4:6d: 27:af:0d:77:04:63:11:7d:a3:48:6f:a0:fd:a1:ea:aa:e1:be: 92:ac:62:63:e8:5e:f6:34:0d:c8:42:96:8f:ad:36:1e:97:9c: c3:69:00:5a:40:eb:13:b7:e3:15:ff:c0:bc:22:1f:e5:bf:79: 87:ef:92:c9:5d:5b:0d:e2:01:a3:54:70:d0:85:3d:11:47:62: b1:0f:c4:4c:ef:25:7d:e4:db:40:73:4f:f8:cf:46:d2:31:0c: 9f:74:18:02:69:96:05:bb:ff:af:c7:79:28:06:eb:31:dc:78: ad:4f:92:ad -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgISAZt/FKE/ZfxxGEUiFeGQqbW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjAyNDZjMGZkNzkyZDRhMzg2MDQwODM3MDEyMjQzZjgwMmYxZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAzTErGVJL5SzIURIVyE/5sFqi94 bg4O02x0CkGaho/FdKx5P0jSJGDq3BSRsr2StVgttV8hh55+DgDbLl8gV8ObfnZh 4+iPh/0lvvgKh9voAnRc44SEDq1D4Cin8yGFC3lwuk58JoY9w7diYwNQCQokh22a e0DGHvE3/gEdYyWJkJatsrPZRenEWqJJQdYXZFfr48E5755KxFzwQvyPTzh6iYtj /IqvMxVxT0JW1xtGtOiUuXLZCWJyRrSiFVamOw8A/Rgxi28pvFQsuGq9ekhEDTEx C1uOspobA3nRnm3fsvNTRjgzkKlM46i6ZSy2dreSJEpFwiM44Nc7x+AzbwIDAQAB o4IDQzCCAz8wHQYDVR0OBBYEFEYCRsD9eS1KOGBAg3ASJD+ALx8JMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvUmdKR3dQMTVMVW80WUVDRGNCSWtQNEF2SHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCAT4EAgABMIIB NgMEAD7AcTAMAwQBXEcCAwQBXEcEMAwDBAFcRxoDBAVcRwADBAFcRyQwDAMEBFxH MAMEAlxHOAMEAVxHPgMEAIfEBAMEAYfEGAMEAYfEHAMEAYfEWAMEAYfEZgMEAofE bAMEAYfEhAMEAofEkAMEAYfEnAMEAYfEpAMEAYfErAMEAYfEsAMEAIfEygMEAIfE zAMEAMNW3wMEANXJjAMEANXJlAMEAdXJmgMEANXJngMEANXJowMEAdXJpgMEANXJ qwMEAdXJrgMEANXJswMEAdXJtgMEAdXJugMEAdXJvjAMAwQB1cnCAwQA1cnGAwQA 1cnIAwQA1cnKAwQA1cnMAwQB1cnQAwQB1cnWAwQB1cnaAwQB1cneMAwDBAHVyeID BAHVyeQDBAHVyeoDBAHVye4DBADZCNowDQYJKoZIhvcNAQELBQADggEBAA+EPqpH miiiRoNKL4wbHtaw87/RoddGj9w9Qzuxer/GVrct9eX5JuQ+uG0zha5rSC/I9HbD w3qu/V7jaDcHKjrkcZaiqLY2Xgpk/kMDawUs30F24GApevbunyJ98yMxhuOmFtOd GyLW+zM2eh588rxp/GvIaqD9IftIv4eIUZ7UZSgwh00JcSH/hIWfBQW0bSevDXcE YxF9o0hvoP2h6qrhvpKsYmPoXvY0DchClo+tNh6XnMNpAFpA6xO34xX/wLwiH+W/ eYfvksldWw3iAaNUcNCFPRFHYrEPxEzvJX3k20BzT/jPRtIxDJ90GAJplgW7/6/H eSgG6zHceK1Pkq0= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:56 2026 by rpki-client