This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jHMn4Op42EKx8msOSYJgXNiMbQA.roa File: jHMn4Op42EKx8msOSYJgXNiMbQA.roa (raw, json) Hash identifier: TwPwEEeweh56vXLUHVkkrWZ0UzHFH7mLGGO4tyr3+mM= Subject key identifier: 8C:73:27:E0:EA:78:D8:42:B1:F2:6B:0E:49:82:60:5C:D8:8C:6D:00 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED24E1DCEDE9737CBEF7DF8F28D7C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jHMn4Op42EKx8msOSYJgXNiMbQA.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198961 IP address blocks: 37.221.176.0/24 maxlen: 24 37.221.177.0/24 maxlen: 24 37.221.178.0/24 maxlen: 24 37.221.179.0/24 maxlen: 24 37.221.181.0/24 maxlen: 24 37.221.182.0/24 maxlen: 24 37.221.183.0/24 maxlen: 24 188.255.131.0/24 maxlen: 24 188.255.132.0/24 maxlen: 24 188.255.237.0/24 maxlen: 24 212.69.22.0/23 maxlen: 23 212.69.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:4e:1d:ce:de:97:37:cb:ef:7d:f8:f2:8d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7327e0ea78d842b1f26b0e4982605cd88c6d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:0e:a7:09:fe:60:39:61:9a:f3:42:c3:5c: e0:7a:10:4a:a2:39:d6:1e:84:61:fc:7b:f2:3f:f3: 87:de:78:8a:d8:65:42:65:a1:20:29:3b:08:23:cf: ca:de:ac:00:26:00:1c:6b:89:e2:84:71:96:8d:04: 1e:98:a8:32:ae:73:d1:03:0b:13:a2:28:64:de:c0: a7:61:66:6d:b5:36:33:24:a5:6b:db:8c:75:d8:f5: 03:89:87:81:9f:ce:66:2f:70:42:7f:ea:b3:69:51: da:2b:d6:5b:8b:0f:ef:09:d8:d3:0f:9d:bc:5a:28: f2:66:bd:4c:65:6a:bc:9f:4b:03:0c:ce:2c:fc:ed: 6d:a5:b7:e9:50:5f:a2:56:68:a4:35:ec:fb:13:38: ff:e0:07:98:f7:f4:7b:df:80:c9:09:a9:6c:74:7c: 95:74:a9:5f:86:31:27:c6:bc:2e:70:4d:97:24:8e: 83:ec:9b:83:f6:65:5e:6d:8c:d2:48:33:d1:20:9a: cc:89:fa:13:b4:16:c4:c3:d0:01:51:1b:e4:b9:0e: fa:4b:a4:51:41:9a:e1:d6:62:31:bb:e8:f5:58:1e: 0b:e3:87:a1:50:c8:e4:bd:99:83:bb:db:13:9f:e4: d1:81:1d:b4:f4:6a:db:49:50:8f:71:25:91:2a:40: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:73:27:E0:EA:78:D8:42:B1:F2:6B:0E:49:82:60:5C:D8:8C:6D:00 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jHMn4Op42EKx8msOSYJgXNiMbQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.176.0/22 37.221.181.0-37.221.183.255 188.255.131.0-188.255.132.255 188.255.237.0/24 212.69.22.0-212.69.27.255 Signature Algorithm: sha256WithRSAEncryption 82:08:e2:10:57:1b:03:67:60:64:c2:c9:62:bc:24:27:90:d3: dd:99:62:44:40:f3:87:be:33:56:da:bb:65:ce:90:1b:b6:f9: 0b:e2:61:13:84:81:b0:26:92:b5:44:15:c8:4e:7c:7e:c7:6c: 5a:52:30:dc:0f:29:21:e4:73:68:dd:ba:3f:71:b2:f6:65:c1: 0c:72:45:bc:df:01:33:cd:e8:b9:5b:dc:1d:26:f3:2a:10:35: c1:6e:03:88:60:3f:63:b2:57:74:4e:9d:07:ce:34:7a:b0:28: 0e:3c:4c:d7:3a:e9:29:8a:f5:06:a2:c4:c4:00:87:63:02:70: 1a:0b:98:65:08:a4:5c:bc:67:7a:c3:42:3f:8b:c6:ae:c8:f8: ec:54:8f:4f:81:ab:56:26:e4:1e:1c:d1:9e:27:ee:0b:4b:56: 36:66:62:55:46:4a:54:51:b5:85:68:fc:40:92:af:9f:4b:5e: d5:53:09:9f:f6:74:65:6a:0d:92:0a:45:a0:d2:f1:e5:45:02: c6:d8:77:1b:e9:bc:a8:4e:55:6f:81:08:7f:18:44:f5:88:5d: eb:9a:6d:cc:68:23:54:9d:16:7f:c4:18:82:51:39:e8:6e:88: fd:ad:a0:fb:99:3e:0f:39:de:70:a3:dd:2c:aa:23:08:bc:b3: 90:c3:52:85 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt5ftJOHc7elzfL73348o18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzczMjdlMGVhNzhkODQyYjFmMjZiMGU0OTgyNjA1Y2Q4OGM2ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9gOpwn+YDlhmvNCw1zgehBKojnW HoRh/HvyP/OH3niK2GVCZaEgKTsII8/K3qwAJgAca4nihHGWjQQemKgyrnPRAwsT oihk3sCnYWZttTYzJKVr24x12PUDiYeBn85mL3BCf+qzaVHaK9Zbiw/vCdjTD528 WijyZr1MZWq8n0sDDM4s/O1tpbfpUF+iVmikNez7Ezj/4AeY9/R734DJCalsdHyV dKlfhjEnxrwucE2XJI6D7JuD9mVebYzSSDPRIJrMifoTtBbEw9ABURvkuQ76S6RR QZrh1mIxu+j1WB4L44ehUMjkvZmDu9sTn+TRgR209GrbSVCPcSWRKkCUaQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIxzJ+DqeNhCsfJrDkmCYFzYjG0AMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvakhNbjRPcDQyRUt4OG1zT1NZSmdYTmlNYlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCJd2wMAwD BAAl3bUDBAMl3bAwDAMEALz/gwMEALz/hAMEALz/7TAMAwQB1EUWAwQC1EUYMA0G CSqGSIb3DQEBCwUAA4IBAQCCCOIQVxsDZ2BkwslivCQnkNPdmWJEQPOHvjNW2rtl zpAbtvkL4mEThIGwJpK1RBXITnx+x2xaUjDcDykh5HNo3bo/cbL2ZcEMckW83wEz zei5W9wdJvMqEDXBbgOIYD9jsld0Tp0HzjR6sCgOPEzXOukpivUGosTEAIdjAnAa C5hlCKRcvGd6w0I/i8auyPjsVI9PgatWJuQeHNGeJ+4LS1Y2ZmJVRkpUUbWFaPxA kq+fS17VUwmf9nRlag2SCkWg0vHlRQLG2Hcb6byoTlVvgQh/GET1iF3rmm3MaCNU nRZ/xBiCUTnoboj9raD7mT4POd5wo90sqiMIvLOQw1KF -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:32 2026 by rpki-client