This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lj0UxjKO3pQJJHk6hcV3efygQaQ.roa File: lj0UxjKO3pQJJHk6hcV3efygQaQ.roa (raw, json) Hash identifier: wW+PY0fTHdxDXcleX98fzjHYIPaNoPwqIXHjji/vcs0= Subject key identifier: 96:3D:14:C6:32:8E:DE:94:09:24:79:3A:85:C5:77:79:FC:A0:41:A4 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A2A6573C0C231FD572DB6DF85D4B4271B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lj0UxjKO3pQJJHk6hcV3efygQaQ.roa Signing time: Tue 28 Oct 2025 10:38:03 +0000 ROA not before: Tue 28 Oct 2025 10:38:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3320 IP address blocks: 62.192.100.0/23 maxlen: 23 62.192.106.0/23 maxlen: 23 194.231.159.0/24 maxlen: 24 195.143.0.0/21 maxlen: 24 195.143.15.0/24 maxlen: 24 195.143.17.0/24 maxlen: 24 195.143.18.0/24 maxlen: 24 195.143.22.0/23 maxlen: 24 195.143.28.0/22 maxlen: 24 195.143.34.0/24 maxlen: 24 195.143.36.0/22 maxlen: 24 195.143.82.0/24 maxlen: 24 195.143.84.0/24 maxlen: 24 195.143.86.0/23 maxlen: 24 195.143.88.0/23 maxlen: 24 195.143.98.0/23 maxlen: 24 195.143.107.0/24 maxlen: 24 195.143.108.0/22 maxlen: 24 195.143.113.0/24 maxlen: 24 195.143.114.0/23 maxlen: 24 195.143.116.0/24 maxlen: 24 195.143.118.0/23 maxlen: 24 195.143.121.0/24 maxlen: 24 195.143.123.0/24 maxlen: 24 195.143.132.0/24 maxlen: 24 195.143.134.0/24 maxlen: 24 195.143.144.0/22 maxlen: 24 195.143.148.0/24 maxlen: 24 195.143.152.0/22 maxlen: 24 195.143.160.0/23 maxlen: 24 195.143.163.0/24 maxlen: 24 195.143.164.0/22 maxlen: 24 195.143.176.0/24 maxlen: 24 195.143.178.0/24 maxlen: 24 195.143.187.0/24 maxlen: 24 195.143.190.0/23 maxlen: 24 195.143.192.0/20 maxlen: 24 195.143.208.0/21 maxlen: 24 195.143.216.0/24 maxlen: 24 195.143.224.0/22 maxlen: 24 195.143.230.0/23 maxlen: 24 195.143.232.0/21 maxlen: 24 195.143.240.0/22 maxlen: 24 195.143.246.0/23 maxlen: 24 195.143.248.0/22 maxlen: 24 195.143.252.0/24 maxlen: 24 195.143.254.0/23 maxlen: 24 213.169.194.0/23 maxlen: 23 213.169.248.0/23 maxlen: 23 213.169.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2a:65:73:c0:c2:31:fd:57:2d:b6:df:85:d4:b4:27:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Oct 28 10:38:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=963d14c6328ede940924793a85c57779fca041a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:74:8a:51:48:26:ea:01:ae:c2:62:20:45: 7e:4c:27:87:61:82:58:26:82:60:34:84:64:34:11: cc:f6:57:d3:cf:35:7c:31:2c:d3:05:de:e0:c5:57: 7d:f8:f9:f3:83:1d:f6:75:2f:57:e5:91:12:15:da: 2d:5f:d3:bd:24:7b:ad:27:d7:32:f8:5e:ce:11:9d: 64:88:1c:88:6a:c8:58:5c:3a:bf:43:9a:38:0d:3d: 3c:90:4b:15:ed:de:4d:58:b8:9d:2a:69:84:c7:0b: 73:cd:01:09:a8:2a:86:34:cc:0d:06:11:98:cd:c2: e6:31:34:ef:b3:50:7a:7d:60:b1:37:55:8f:99:5d: 7f:94:2e:4f:9a:32:ac:82:25:a1:91:c1:48:6a:2d: b5:0d:24:0c:9f:d6:f3:fe:d7:12:21:8c:01:9e:58: 0c:5f:10:7d:89:c1:3a:67:05:b0:6d:9c:5c:81:33: 88:4f:03:e3:1b:6e:3d:81:e5:38:a8:30:96:64:29: bd:37:6b:24:61:2e:29:65:e0:7a:e4:45:6c:39:76: 6d:0c:ce:3a:a3:2c:22:4d:ae:f2:09:5c:8c:2c:b7: 4a:f2:05:f5:50:92:c6:ec:b7:52:9b:c9:2b:f7:f1: 78:e7:65:15:05:c0:6a:b9:aa:d3:d6:43:99:b2:de: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:14:C6:32:8E:DE:94:09:24:79:3A:85:C5:77:79:FC:A0:41:A4 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lj0UxjKO3pQJJHk6hcV3efygQaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.100.0/23 62.192.106.0/23 194.231.159.0/24 195.143.0.0/21 195.143.15.0/24 195.143.17.0-195.143.18.255 195.143.22.0/23 195.143.28.0/22 195.143.34.0/24 195.143.36.0/22 195.143.82.0/24 195.143.84.0/24 195.143.86.0-195.143.89.255 195.143.98.0/23 195.143.107.0-195.143.111.255 195.143.113.0-195.143.116.255 195.143.118.0/23 195.143.121.0/24 195.143.123.0/24 195.143.132.0/24 195.143.134.0/24 195.143.144.0-195.143.148.255 195.143.152.0/22 195.143.160.0/23 195.143.163.0-195.143.167.255 195.143.176.0/24 195.143.178.0/24 195.143.187.0/24 195.143.190.0-195.143.216.255 195.143.224.0/22 195.143.230.0-195.143.243.255 195.143.246.0-195.143.252.255 195.143.254.0/23 213.169.194.0/23 213.169.248.0/23 213.169.254.0/23 Signature Algorithm: sha256WithRSAEncryption 28:25:d6:b3:c3:7f:af:62:cc:db:99:7b:7b:cd:72:7e:54:58: 87:3e:83:f1:86:28:8c:7a:fa:df:49:db:f9:7f:89:fc:f9:bf: 9a:95:cf:2c:9c:53:6e:eb:55:6c:bf:fa:24:e5:ba:1e:54:73: 41:94:08:a2:f3:00:31:77:24:1c:0e:d5:26:85:02:61:29:b3: e0:de:31:ec:ee:a7:d0:57:e5:3f:09:fe:83:b9:60:b8:63:a7: 90:23:5d:ff:6c:6f:2b:4a:a4:51:e2:b3:92:fb:ef:1d:59:45: 5b:46:0a:0c:5d:2b:01:eb:e1:c5:d5:89:6d:67:0f:3d:0c:12: 0d:48:48:25:19:32:68:ff:da:cd:50:5c:d9:45:3b:c0:a5:b1: 46:e2:62:7c:05:9e:6d:7c:dd:c3:d1:48:1c:ba:88:bf:35:e7: e2:e1:53:c0:83:31:1c:f5:e6:d7:7a:6a:d0:e7:13:69:28:a3: fb:02:24:10:76:ed:9e:f5:a8:d5:c2:94:f7:dc:93:09:93:f1: bc:2b:7b:a4:45:3c:1e:1b:3a:78:f4:d0:83:c3:f4:ec:2c:1f: f7:df:8a:6b:02:bc:44:d8:f6:b5:82:69:65:47:9f:4e:71:ce: 48:3e:ab:d1:c8:2a:dd:b1:41:14:8d:08:0d:47:f2:fd:62:bf: 49:9f:40:4a -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAZoqZXPAwjH9Vy2234XUtCcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMDI4MTAzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjNkMTRjNjMyOGVkZTk0MDkyNDc5M2E4NWM1Nzc3OWZjYTA0MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WR0ilFIJuoBrsJiIEV+TCeHYYJY JoJgNIRkNBHM9lfTzzV8MSzTBd7gxVd9+Pnzgx32dS9X5ZESFdotX9O9JHutJ9cy +F7OEZ1kiByIashYXDq/Q5o4DT08kEsV7d5NWLidKmmExwtzzQEJqCqGNMwNBhGY zcLmMTTvs1B6fWCxN1WPmV1/lC5PmjKsgiWhkcFIai21DSQMn9bz/tcSIYwBnlgM XxB9icE6ZwWwbZxcgTOITwPjG249geU4qDCWZCm9N2skYS4pZeB65EVsOXZtDM46 oywiTa7yCVyMLLdK8gX1UJLG7LdSm8kr9/F452UVBcBquarT1kOZst77kQIDAQAB o4IDLTCCAykwHQYDVR0OBBYEFJY9FMYyjt6UCSR5OoXFd3n8oEGkMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvbGowVXhqS08zcFFKSkhrNmhjVjNlZnlnUWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCASgEAgABMIIB IAMEAT7AZAMEAT7AagMEAMLnnwMEA8OPAAMEAMOPDzAMAwQAw48RAwQAw48SAwQB w48WAwQCw48cAwQAw48iAwQCw48kAwQAw49SAwQAw49UMAwDBAHDj1YDBAHDj1gD BAHDj2IwDAMEAMOPawMEBMOPYDAMAwQAw49xAwQAw490AwQBw492AwQAw495AwQA w497AwQAw4+EAwQAw4+GMAwDBATDj5ADBADDj5QDBALDj5gDBAHDj6AwDAMEAMOP owMEA8OPoAMEAMOPsAMEAMOPsgMEAMOPuzAMAwQBw4++AwQAw4/YAwQCw4/gMAwD BAHDj+YDBALDj/AwDAMEAcOP9gMEAMOP/AMEAcOP/gMEAdWpwgMEAdWp+AMEAdWp /jANBgkqhkiG9w0BAQsFAAOCAQEAKCXWs8N/r2LM25l7e81yflRYhz6D8YYojHr6 30nb+X+J/Pm/mpXPLJxTbutVbL/6JOW6HlRzQZQIovMAMXckHA7VJoUCYSmz4N4x 7O6n0FflPwn+g7lguGOnkCNd/2xvK0qkUeKzkvvvHVlFW0YKDF0rAevhxdWJbWcP PQwSDUhIJRkyaP/azVBc2UU7wKWxRuJifAWebXzdw9FIHLqIvzXn4uFTwIMxHPXm 13pq0OcTaSij+wIkEHbtnvWo1cKU99yTCZPxvCt7pEU8Hhs6ePTQg8P07Cwf99+K awK8RNj2tYJpZUefTnHOSD6r0cgq3bFBFI0IDUfy/WK/SZ9ASg== -----END CERTIFICATE-----Generated at Fri Dec 5 07:07:35 2025 by rpki-client