This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JBsrmW8johrvo3DKvCTexMgUJQQ.roa File: JBsrmW8johrvo3DKvCTexMgUJQQ.roa (raw, json) Hash identifier: gHL2cmrFZkdS8JU0vMvHUHFHN79Bs6iCtoQLpNbWlg0= Subject key identifier: 24:1B:2B:99:6F:23:A2:1A:EF:A3:70:CA:BC:24:DE:C4:C8:14:25:04 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019C2F4147AEB15BC1266C0E80B96960ECC2 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JBsrmW8johrvo3DKvCTexMgUJQQ.roa Signing time: Thu 05 Feb 2026 19:22:13 +0000 ROA not before: Thu 05 Feb 2026 19:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 2.56.112.0/24 maxlen: 24 2.56.113.0/24 maxlen: 24 5.183.128.0/24 maxlen: 24 45.132.48.0/24 maxlen: 24 45.157.136.0/24 maxlen: 24 62.68.83.0/24 maxlen: 24 62.68.86.0/24 maxlen: 24 62.68.87.0/24 maxlen: 24 62.204.36.0/24 maxlen: 24 62.204.57.0/24 maxlen: 24 62.233.35.0/24 maxlen: 24 62.233.45.0/24 maxlen: 24 62.233.49.0/24 maxlen: 24 62.233.56.0/24 maxlen: 24 62.233.60.0/24 maxlen: 24 80.68.145.0/24 maxlen: 24 80.68.158.0/24 maxlen: 24 80.91.209.0/24 maxlen: 24 80.91.210.0/24 maxlen: 24 91.213.117.0/24 maxlen: 24 91.226.247.0/24 maxlen: 24 91.242.236.0/24 maxlen: 24 93.177.104.0/24 maxlen: 24 93.177.107.0/24 maxlen: 24 94.143.226.0/24 maxlen: 24 94.158.191.0/24 maxlen: 24 130.193.79.0/24 maxlen: 24 130.255.169.0/24 maxlen: 24 146.19.108.0/24 maxlen: 24 146.19.137.0/24 maxlen: 24 146.19.148.0/24 maxlen: 24 146.19.150.0/24 maxlen: 24 146.19.152.0/24 maxlen: 24 146.19.187.0/24 maxlen: 24 146.19.190.0/24 maxlen: 24 146.19.194.0/24 maxlen: 24 176.56.38.0/24 maxlen: 24 185.122.206.0/24 maxlen: 24 185.155.101.0/24 maxlen: 24 185.218.1.0/24 maxlen: 24 185.232.47.0/24 maxlen: 24 193.3.22.0/24 maxlen: 24 193.141.53.0/24 maxlen: 24 193.239.209.0/24 maxlen: 24 194.26.221.0/24 maxlen: 24 195.64.112.0/24 maxlen: 24 195.64.114.0/24 maxlen: 24 195.93.249.0/24 maxlen: 24 195.96.136.0/24 maxlen: 24 195.96.148.0/24 maxlen: 24 195.96.157.0/24 maxlen: 24 212.18.96.0/24 maxlen: 24 212.52.5.0/24 maxlen: 24 217.114.32.0/24 maxlen: 24 217.119.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:41:47:ae:b1:5b:c1:26:6c:0e:80:b9:69:60:ec:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Feb 5 19:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241b2b996f23a21aefa370cabc24dec4c8142504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:f4:75:1c:9b:7e:e2:b9:28:14:dc:09:52: 1f:e9:fb:02:96:70:53:90:ec:b0:ef:86:9f:ca:77: 39:c5:4f:82:21:8e:55:b9:ba:a1:5a:9e:f6:77:30: 36:b9:42:81:af:0c:a3:19:aa:40:d0:19:31:53:c7: ba:88:59:86:ea:f9:3b:d0:fa:2c:e8:3f:7c:58:56: ea:a0:8e:93:f3:4e:69:97:5b:62:05:4b:56:fa:7b: 4a:e8:d2:c7:32:57:1e:f5:8d:fa:58:a9:90:63:6c: 4a:a6:cc:bd:29:28:af:8e:0d:43:3d:03:53:74:4f: 18:42:cb:37:f1:b7:ed:92:00:9a:26:90:6f:c2:69: 26:0b:3a:c0:53:4a:d3:aa:f6:79:08:d9:10:78:6b: e5:3f:bc:89:33:bb:af:0d:4b:a0:67:2e:2f:29:cb: 68:9e:7b:a6:d6:14:a2:09:90:57:65:e1:42:28:3f: 5d:6b:11:d8:0e:75:76:a1:6d:06:ff:3f:0c:ee:a0: 95:67:a7:76:e4:b9:8f:bf:f9:f4:a1:fc:77:ca:df: 69:b2:91:62:4c:31:bd:3b:1a:f3:53:16:29:86:b8: c3:aa:eb:76:b3:41:38:27:5d:d8:c9:e0:38:de:08: 5c:2d:e5:2f:7c:33:5d:1d:6b:a3:d0:6b:7d:6e:95: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1B:2B:99:6F:23:A2:1A:EF:A3:70:CA:BC:24:DE:C4:C8:14:25:04 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JBsrmW8johrvo3DKvCTexMgUJQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.112.0/23 5.183.128.0/24 45.132.48.0/24 45.157.136.0/24 62.68.83.0/24 62.68.86.0/23 62.204.36.0/24 62.204.57.0/24 62.233.35.0/24 62.233.45.0/24 62.233.49.0/24 62.233.56.0/24 62.233.60.0/24 80.68.145.0/24 80.68.158.0/24 80.91.209.0-80.91.210.255 91.213.117.0/24 91.226.247.0/24 91.242.236.0/24 93.177.104.0/24 93.177.107.0/24 94.143.226.0/24 94.158.191.0/24 130.193.79.0/24 130.255.169.0/24 146.19.108.0/24 146.19.137.0/24 146.19.148.0/24 146.19.150.0/24 146.19.152.0/24 146.19.187.0/24 146.19.190.0/24 146.19.194.0/24 176.56.38.0/24 185.122.206.0/24 185.155.101.0/24 185.218.1.0/24 185.232.47.0/24 193.3.22.0/24 193.141.53.0/24 193.239.209.0/24 194.26.221.0/24 195.64.112.0/24 195.64.114.0/24 195.93.249.0/24 195.96.136.0/24 195.96.148.0/24 195.96.157.0/24 212.18.96.0/24 212.52.5.0/24 217.114.32.0/24 217.119.130.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6c:1d:79:73:d3:d5:b5:5a:1d:87:d0:56:c1:08:15:75:9b: 7d:5e:79:06:25:59:00:de:84:70:6f:33:96:b5:cd:cf:b3:fd: 09:53:5d:41:c8:2a:b9:64:0b:fe:7f:6c:85:85:ab:24:62:bc: f4:2c:4b:44:c5:f7:dd:79:3b:92:5c:83:28:26:84:c2:09:42: 7b:f8:f2:72:6b:72:21:b7:3d:74:2a:86:96:00:4c:ea:b4:81: a7:d5:4a:2b:3e:c8:de:ba:c8:9b:91:a5:00:75:19:10:9a:9c: 6d:f7:08:48:4f:f4:3d:17:8e:8a:86:86:08:9f:35:d8:96:d0: 84:dc:f5:3d:ee:09:49:38:f1:51:c1:a6:5d:d7:7c:7e:be:cc: ff:97:55:7b:df:68:b5:20:c4:bc:fd:48:06:05:64:96:aa:00: 28:64:2a:7b:d7:e1:5a:3e:c8:f3:44:9d:23:99:d1:e1:01:8a: c5:b8:2a:ce:a3:cc:ec:75:8e:c3:c4:9f:f0:03:a7:78:ca:1d: 00:e3:6a:5e:7c:d8:e8:03:a1:50:48:97:08:71:f4:88:f3:10: 0a:0e:f4:de:0f:2a:e2:79:98:32:60:74:d4:c8:bf:30:94:fb: 2d:7c:76:3c:02:be:aa:1f:d4:ba:35:62:08:05:f8:76:56:a6: 3e:26:d0:bd -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgISAZwvQUeusVvBJmwOgLlpYOzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMjA1MTkyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFiMmI5OTZmMjNhMjFhZWZhMzcwY2FiYzI0ZGVjNGM4MTQyNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKz0dRybfuK5KBTcCVIf6fsClnBT kOyw74afync5xU+CIY5VubqhWp72dzA2uUKBrwyjGapA0BkxU8e6iFmG6vk70Pos 6D98WFbqoI6T805pl1tiBUtW+ntK6NLHMlce9Y36WKmQY2xKpsy9KSivjg1DPQNT dE8YQss38bftkgCaJpBvwmkmCzrAU0rTqvZ5CNkQeGvlP7yJM7uvDUugZy4vKcto nnum1hSiCZBXZeFCKD9daxHYDnV2oW0G/z8M7qCVZ6d25LmPv/n0ofx3yt9pspFi TDG9OxrzUxYphrjDqut2s0E4J13YyeA43ghcLeUvfDNdHWuj0Gt9bpXNmQIDAQAB o4IDTTCCA0kwHQYDVR0OBBYEFCQbK5lvI6Ia76Nwyrwk3sTIFCUEMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvSkJzcm1XOGpvaHJ2bzNES3ZDVGV4TWdVSlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDCCAUgEAgABMIIB QAMEAQI4cAMEAAW3gAMEAC2EMAMEAC2diAMEAD5EUwMEAT5EVgMEAD7MJAMEAD7M OQMEAD7pIwMEAD7pLQMEAD7pMQMEAD7pOAMEAD7pPAMEAFBEkQMEAFBEnjAMAwQA UFvRAwQAUFvSAwQAW9V1AwQAW+L3AwQAW/LsAwQAXbFoAwQAXbFrAwQAXo/iAwQA Xp6/AwQAgsFPAwQAgv+pAwQAkhNsAwQAkhOJAwQAkhOUAwQAkhOWAwQAkhOYAwQA khO7AwQAkhO+AwQAkhPCAwQAsDgmAwQAuXrOAwQAuZtlAwQAudoBAwQAuegvAwQA wQMWAwQAwY01AwQAwe/RAwQAwhrdAwQAw0BwAwQAw0ByAwQAw135AwQAw2CIAwQA w2CUAwQAw2CdAwQA1BJgAwQA1DQFAwQA2XIgAwQA2XeCMA0GCSqGSIb3DQEBCwUA A4IBAQChbB15c9PVtVodh9BWwQgVdZt9XnkGJVkA3oRwbzOWtc3Ps/0JU11ByCq5 ZAv+f2yFhaskYrz0LEtExffdeTuSXIMoJoTCCUJ7+PJya3Ihtz10KoaWAEzqtIGn 1UorPsjeusibkaUAdRkQmpxt9whIT/Q9F46KhoYInzXYltCE3PU97glJOPFRwaZd 13x+vsz/l1V732i1IMS8/UgGBWSWqgAoZCp71+FaPsjzRJ0jmdHhAYrFuCrOo8zs dY7DxJ/wA6d4yh0A42pefNjoA6FQSJcIcfSI8xAKDvTeDyrieZgyYHTUyL8wlPst fHY8Ar6qH9S6NWIIBfh2VqY+JtC9 -----END CERTIFICATE-----Generated at Fri Feb 6 22:08:25 2026 by rpki-client