This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/B1jG5e5KADil_JiKmCOpoKci4FA.roa File: B1jG5e5KADil_JiKmCOpoKci4FA.roa (raw, json) Hash identifier: 1lkbNKCfDt5FqKIETk7uwiLmq8ORrsXilJ89fLSESUA= Subject key identifier: 07:58:C6:E5:EE:4A:00:38:A5:FC:98:8A:98:23:A9:A0:A7:22:E0:50 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35FE0077C14F41BCA9E43EB28BF66D Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/B1jG5e5KADil_JiKmCOpoKci4FA.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 31.222.248.0/24 maxlen: 24 45.142.39.0/24 maxlen: 24 157.22.0.0/24 maxlen: 24 157.22.1.0/24 maxlen: 24 157.22.2.0/24 maxlen: 24 157.22.3.0/24 maxlen: 24 157.22.4.0/24 maxlen: 24 157.22.5.0/24 maxlen: 24 157.22.6.0/24 maxlen: 24 157.22.7.0/24 maxlen: 24 157.22.8.0/24 maxlen: 24 157.22.9.0/24 maxlen: 24 157.22.10.0/24 maxlen: 24 157.22.11.0/24 maxlen: 24 157.22.12.0/24 maxlen: 24 157.22.13.0/24 maxlen: 24 157.22.14.0/24 maxlen: 24 157.22.15.0/24 maxlen: 24 157.22.20.0/24 maxlen: 24 157.22.21.0/24 maxlen: 24 157.22.22.0/24 maxlen: 24 157.22.23.0/24 maxlen: 24 157.22.24.0/24 maxlen: 24 157.22.25.0/24 maxlen: 24 157.22.26.0/24 maxlen: 24 157.22.27.0/24 maxlen: 24 157.22.28.0/24 maxlen: 24 157.22.29.0/24 maxlen: 24 157.22.30.0/24 maxlen: 24 157.22.31.0/24 maxlen: 24 157.22.32.0/24 maxlen: 24 157.22.33.0/24 maxlen: 24 157.22.34.0/24 maxlen: 24 157.22.35.0/24 maxlen: 24 157.22.36.0/24 maxlen: 24 157.22.37.0/24 maxlen: 24 157.22.38.0/24 maxlen: 24 157.22.39.0/24 maxlen: 24 157.22.40.0/24 maxlen: 24 157.22.42.0/24 maxlen: 24 157.22.43.0/24 maxlen: 24 157.22.48.0/24 maxlen: 24 157.22.49.0/24 maxlen: 24 157.22.51.0/24 maxlen: 24 157.22.52.0/24 maxlen: 24 157.22.53.0/24 maxlen: 24 157.22.54.0/24 maxlen: 24 157.22.55.0/24 maxlen: 24 157.22.56.0/24 maxlen: 24 157.22.57.0/24 maxlen: 24 157.22.59.0/24 maxlen: 24 157.22.60.0/24 maxlen: 24 157.22.61.0/24 maxlen: 24 157.22.62.0/24 maxlen: 24 157.22.63.0/24 maxlen: 24 157.22.64.0/24 maxlen: 24 157.22.66.0/24 maxlen: 24 157.22.67.0/24 maxlen: 24 157.22.68.0/24 maxlen: 24 157.22.69.0/24 maxlen: 24 157.22.70.0/24 maxlen: 24 157.22.71.0/24 maxlen: 24 157.22.76.0/24 maxlen: 24 157.22.77.0/24 maxlen: 24 157.22.78.0/24 maxlen: 24 157.22.79.0/24 maxlen: 24 157.22.80.0/24 maxlen: 24 157.22.81.0/24 maxlen: 24 157.22.82.0/24 maxlen: 24 157.22.83.0/24 maxlen: 24 157.22.84.0/24 maxlen: 24 157.22.85.0/24 maxlen: 24 157.22.86.0/24 maxlen: 24 157.22.87.0/24 maxlen: 24 157.22.88.0/24 maxlen: 24 157.22.89.0/24 maxlen: 24 157.22.90.0/24 maxlen: 24 157.22.91.0/24 maxlen: 24 157.22.92.0/24 maxlen: 24 157.22.93.0/24 maxlen: 24 157.22.94.0/24 maxlen: 24 157.22.95.0/24 maxlen: 24 157.22.96.0/24 maxlen: 24 157.22.98.0/24 maxlen: 24 157.22.99.0/24 maxlen: 24 157.22.104.0/24 maxlen: 24 157.22.105.0/24 maxlen: 24 157.22.107.0/24 maxlen: 24 157.22.108.0/24 maxlen: 24 157.22.109.0/24 maxlen: 24 157.22.110.0/24 maxlen: 24 157.22.111.0/24 maxlen: 24 157.22.112.0/24 maxlen: 24 157.22.113.0/24 maxlen: 24 157.22.114.0/24 maxlen: 24 157.22.115.0/24 maxlen: 24 157.22.117.0/24 maxlen: 24 157.22.118.0/24 maxlen: 24 157.22.120.0/24 maxlen: 24 157.22.121.0/24 maxlen: 24 157.22.122.0/24 maxlen: 24 157.22.123.0/24 maxlen: 24 176.56.37.0/24 maxlen: 24 178.212.143.0/24 maxlen: 24 185.46.175.0/24 maxlen: 24 185.92.211.0/24 maxlen: 24 185.161.79.0/24 maxlen: 24 193.56.29.0/24 maxlen: 24 194.32.238.0/24 maxlen: 24 194.32.239.0/24 maxlen: 24 194.56.180.0/24 maxlen: 24 195.64.110.0/24 maxlen: 24 195.96.146.0/24 maxlen: 24 212.18.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fe:00:77:c1:4f:41:bc:a9:e4:3e:b2:8b:f6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0758c6e5ee4a0038a5fc988a9823a9a0a722e050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:a5:6b:2d:2f:95:37:a1:05:d0:ed:87:d9: 9d:8f:91:21:e5:5a:14:b3:e5:13:de:2a:49:28:cf: d0:64:e5:a1:47:f3:7d:5e:ab:b6:cc:92:2d:63:a3: ea:81:a0:f6:2a:a1:9e:0d:32:6b:68:44:b9:cb:48: 21:e0:bf:94:c5:39:f8:d9:d8:ad:3f:89:bd:f8:db: 3c:67:13:7e:c7:f8:9a:f6:ea:58:86:82:63:a0:b7: 13:a9:11:63:33:84:f3:36:a1:17:7d:77:6a:2d:f3: 50:90:b0:76:a8:3f:c3:77:26:5b:88:0c:44:df:57: b8:73:47:1e:38:8d:7a:23:ff:3a:7e:3a:b9:da:d9: 4e:05:74:64:77:7d:90:aa:94:00:9b:84:58:e9:cd: af:28:b8:a1:a2:f7:fe:3c:3e:af:5b:67:b5:2b:2d: a0:8a:ee:c4:a5:32:4c:fa:dc:fc:2b:96:cd:50:5c: 61:a8:cf:7a:08:4f:31:e8:ce:cc:85:ee:ff:9d:1f: 9b:f1:e7:02:5b:26:8e:58:80:ee:e9:c8:a0:03:c6: 75:15:73:c4:24:8a:c5:d8:ae:74:3d:b6:bc:43:aa: c1:f7:5c:14:89:67:80:81:d3:c6:08:32:70:1f:a3: 08:cb:ff:82:79:42:d5:23:f1:6a:c8:1d:a1:6e:06: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:58:C6:E5:EE:4A:00:38:A5:FC:98:8A:98:23:A9:A0:A7:22:E0:50 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/B1jG5e5KADil_JiKmCOpoKci4FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.248.0/24 45.142.39.0/24 157.22.0.0/20 157.22.20.0-157.22.40.255 157.22.42.0/23 157.22.48.0/23 157.22.51.0-157.22.57.255 157.22.59.0-157.22.64.255 157.22.66.0-157.22.71.255 157.22.76.0-157.22.96.255 157.22.98.0/23 157.22.104.0/23 157.22.107.0-157.22.115.255 157.22.117.0-157.22.118.255 157.22.120.0/22 176.56.37.0/24 178.212.143.0/24 185.46.175.0/24 185.92.211.0/24 185.161.79.0/24 193.56.29.0/24 194.32.238.0/23 194.56.180.0/24 195.64.110.0/24 195.96.146.0/24 212.18.103.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:90:a6:e7:d4:71:6e:2e:49:61:9e:6d:47:68:3e:e7:b9:ce: 50:d5:55:03:cb:96:77:34:b8:15:c4:03:d2:61:2c:04:a6:49: 4a:4a:5b:0a:f1:45:8f:25:34:81:0f:c9:fe:c4:e0:da:59:29: 88:ea:64:e8:db:55:f7:30:26:61:e2:d2:32:96:73:e7:69:af: 03:e4:7e:52:4c:dd:21:d4:05:7a:0e:91:e8:11:dd:6c:27:8d: 04:58:12:91:82:0b:ae:62:78:4e:d3:28:04:10:f3:72:98:77: 95:e3:eb:9b:4d:d4:a3:7f:42:87:33:ed:93:fd:f9:df:f6:18: c4:9c:1c:8f:23:3f:c1:87:d9:d9:0e:fc:d4:15:e0:7b:98:a3: 7a:d7:e5:d8:49:0b:b2:48:87:2a:b0:ad:9d:0f:b3:fb:8b:92: 3f:b1:99:29:43:66:ba:3a:60:e0:90:37:09:f3:85:94:ba:b2: 61:fd:84:7e:0f:21:78:a8:83:ea:ab:7a:10:09:75:50:61:e2: c8:86:72:02:88:ea:70:eb:47:a9:7a:c5:af:d6:96:08:d8:c9: a1:32:5a:75:28:d0:c9:ef:a6:d0:6d:ea:7a:cd:a9:78:fc:d7: d9:de:0e:c2:f6:20:5a:be:39:14:2a:f9:dc:25:0c:c9:9c:77: 13:54:f3:01 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt7Nf4Ad8FPQbyp5D6yi/ZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU4YzZlNWVlNGEwMDM4YTVmYzk4OGE5ODIzYTlhMGE3MjJlMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZGlay0vlTehBdDth9mdj5Eh5VoU s+UT3ipJKM/QZOWhR/N9Xqu2zJItY6PqgaD2KqGeDTJraES5y0gh4L+UxTn42dit P4m9+Ns8ZxN+x/ia9upYhoJjoLcTqRFjM4TzNqEXfXdqLfNQkLB2qD/DdyZbiAxE 31e4c0ceOI16I/86fjq52tlOBXRkd32QqpQAm4RY6c2vKLihovf+PD6vW2e1Ky2g iu7EpTJM+tz8K5bNUFxhqM96CE8x6M7Mhe7/nR+b8ecCWyaOWIDu6cigA8Z1FXPE JIrF2K50Pba8Q6rB91wUiWeAgdPGCDJwH6MIy/+CeULVI/FqyB2hbgZ6nwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFAdYxuXuSgA4pfyYipgjqaCnIuBQMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvQjFqRzVlNUtBRGlsX0ppS21DT3BvS2NpNEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAAf 3vgDBAAtjicDBASdFgAwDAMEAp0WFAMEAJ0WKAMEAZ0WKgMEAZ0WMDAMAwQAnRYz AwQBnRY4MAwDBACdFjsDBACdFkAwDAMEAZ0WQgMEA50WQDAMAwQCnRZMAwQAnRZg AwQBnRZiAwQBnRZoMAwDBACdFmsDBAKdFnAwDAMEAJ0WdQMEAJ0WdgMEAp0WeAME ALA4JQMEALLUjwMEALkurwMEALlc0wMEALmhTwMEAME4HQMEAcIg7gMEAMI4tAME AMNAbgMEAMNgkgMEANQSZzANBgkqhkiG9w0BAQsFAAOCAQEATJCm59Rxbi5JYZ5t R2g+57nOUNVVA8uWdzS4FcQD0mEsBKZJSkpbCvFFjyU0gQ/J/sTg2lkpiOpk6NtV 9zAmYeLSMpZz52mvA+R+UkzdIdQFeg6R6BHdbCeNBFgSkYILrmJ4TtMoBBDzcph3 lePrm03Uo39ChzPtk/353/YYxJwcjyM/wYfZ2Q781BXge5ijetfl2EkLskiHKrCt nQ+z+4uSP7GZKUNmujpg4JA3CfOFlLqyYf2Efg8heKiD6qt6EAl1UGHiyIZyAojq cOtHqXrFr9aWCNjJoTJadSjQye+m0G3qes2pePzX2d4OwvYgWr45FCr53CUMyZx3 E1TzAQ== -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:45 2026 by rpki-client