This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/jr55ySGNHSD10H2_OXt21Ktunw0.roa File: jr55ySGNHSD10H2_OXt21Ktunw0.roa (raw, json) Hash identifier: vxN6j3jPaPKjT/LRmQlMKBnzVqHbofA00iJqGae0vWo= Subject key identifier: 8E:BE:79:C9:21:8D:1D:20:F5:D0:7D:BF:39:7B:76:D4:AB:6E:9F:0D Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755 Certificate serial: 019B7EA71095B992F39D5F45C9601F320BCD Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/jr55ySGNHSD10H2_OXt21Ktunw0.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 5.179.32.0/19 maxlen: 19 5.179.32.0/20 maxlen: 20 5.179.48.0/20 maxlen: 20 5.179.64.0/21 maxlen: 21 5.179.64.0/22 maxlen: 22 5.179.68.0/22 maxlen: 22 37.228.192.0/18 maxlen: 18 37.228.192.0/19 maxlen: 19 37.228.224.0/19 maxlen: 19 46.7.0.0/16 maxlen: 16 46.7.0.0/17 maxlen: 17 46.7.128.0/17 maxlen: 17 46.255.152.0/21 maxlen: 21 46.255.152.0/22 maxlen: 22 46.255.156.0/22 maxlen: 22 78.24.16.0/21 maxlen: 21 78.24.16.0/22 maxlen: 22 78.24.20.0/22 maxlen: 22 79.97.0.0/16 maxlen: 16 79.97.0.0/17 maxlen: 17 79.97.128.0/17 maxlen: 17 89.100.0.0/15 maxlen: 15 89.100.0.0/16 maxlen: 16 89.101.0.0/16 maxlen: 16 109.255.0.0/16 maxlen: 16 109.255.0.0/17 maxlen: 17 109.255.128.0/17 maxlen: 17 176.61.0.0/17 maxlen: 17 176.61.0.0/18 maxlen: 18 176.61.64.0/18 maxlen: 18 185.54.224.0/22 maxlen: 22 185.54.224.0/23 maxlen: 23 185.54.226.0/23 maxlen: 23 188.141.0.0/17 maxlen: 17 188.141.0.0/18 maxlen: 18 188.141.64.0/18 maxlen: 18 2a02:8080::/29 maxlen: 29 2a02:8080::/30 maxlen: 30 2a02:8084::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:95:b9:92:f3:9d:5f:45:c9:60:1f:32:0b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebe79c9218d1d20f5d07dbf397b76d4ab6e9f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:ea:92:36:80:fc:36:8c:19:3b:c5:76:10: 21:1b:f9:62:50:12:62:e9:9b:ae:5c:98:9f:87:14: cb:40:54:80:e5:79:1c:1f:19:32:3b:7f:bc:18:13: 1f:ba:18:79:30:02:3e:32:15:14:9a:dc:ad:43:fb: 92:f5:0e:02:c7:45:fe:8b:5d:df:86:d8:09:51:97: e3:27:53:1a:56:12:7a:f2:af:57:a7:2d:f5:aa:19: 98:58:fe:94:a6:15:1f:ba:07:88:7e:0f:da:59:c6: 1d:d7:5c:d5:5b:d2:e6:15:ed:7d:cc:b0:62:62:9c: 66:a8:42:33:c2:4a:22:19:75:1a:19:64:3b:70:6b: 4a:49:fc:bc:99:ed:05:01:0f:9f:19:5f:f0:06:6b: 86:0e:e2:d1:68:47:be:f9:9d:c0:5c:94:65:68:fc: 68:0d:d6:c6:a3:6c:e4:fb:d7:55:9a:90:82:dc:53: 2f:51:cb:aa:e4:38:48:98:8c:a1:6f:16:69:1c:62: fc:72:54:0f:0e:f0:46:6a:ad:f4:59:1d:b5:7e:ca: 6d:26:c5:d1:df:ba:fb:a4:f3:fa:44:41:f3:b6:98: d5:01:fc:5e:85:b6:1d:aa:a3:2b:9b:32:df:68:62: 01:47:19:03:7c:4e:30:f0:43:78:a2:5f:bd:9a:e0: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:79:C9:21:8D:1D:20:F5:D0:7D:BF:39:7B:76:D4:AB:6E:9F:0D X509v3 Authority Key Identifier: keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/jr55ySGNHSD10H2_OXt21Ktunw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.32.0-5.179.71.255 37.228.192.0/18 46.7.0.0/16 46.255.152.0/21 78.24.16.0/21 79.97.0.0/16 89.100.0.0/15 109.255.0.0/16 176.61.0.0/17 185.54.224.0/22 188.141.0.0/17 IPv6: 2a02:8080::/29 Signature Algorithm: sha256WithRSAEncryption 35:7d:13:6e:73:c0:65:73:15:bf:97:f7:17:df:5b:d3:72:df: 44:ee:25:70:a7:a6:15:7d:03:fd:88:24:a2:19:17:56:0f:26: a1:c4:e3:58:28:32:3e:6f:8c:3c:59:5a:41:22:69:57:f0:ed: b8:59:9e:e3:7d:06:59:4e:9c:04:b4:cf:bd:64:af:fb:2b:33: 35:d8:cd:9c:85:88:46:04:f0:21:de:e4:f0:64:65:b9:bb:13: f0:9e:f7:b1:ad:06:8b:05:e4:c0:22:58:ee:0c:ad:80:eb:7d: be:c8:b3:ba:78:ef:24:c9:c5:51:51:b3:81:81:a4:b9:e0:1a: 00:b6:84:1a:35:60:de:75:fe:61:b5:16:d5:d2:d1:b4:a2:08: 34:9d:7b:0b:80:d7:63:38:45:2f:e1:2a:44:9c:ce:04:b5:07: 62:63:a5:e9:be:ec:35:5a:45:62:8b:d2:8b:87:35:52:9f:0b: a1:c7:7a:c3:75:ef:42:4d:a2:7a:87:7a:f7:67:f9:c8:fc:3d: 7f:39:28:56:bd:90:32:14:59:07:05:cd:93:fc:2d:41:fd:5f: d9:10:5f:02:db:62:eb:29:57:39:cb:85:fc:41:51:eb:07:87: 6f:02:ad:a9:20:78:58:51:35:1e:cb:ae:d5:73:d2:84:15:9f: fb:82:12:ca -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt+pxCVuZLznV9FyWAfMgvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YWY0ODEzMWVjZDlkY2EzZGVmMmIyZGU3ODhmMTUwNjA2 Mjc3NTUwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJlNzljOTIxOGQxZDIwZjVkMDdkYmYzOTdiNzZkNGFiNmU5ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL7qkjaA/DaMGTvFdhAhG/liUBJi 6ZuuXJifhxTLQFSA5XkcHxkyO3+8GBMfuhh5MAI+MhUUmtytQ/uS9Q4Cx0X+i13f htgJUZfjJ1MaVhJ68q9Xpy31qhmYWP6UphUfugeIfg/aWcYd11zVW9LmFe19zLBi YpxmqEIzwkoiGXUaGWQ7cGtKSfy8me0FAQ+fGV/wBmuGDuLRaEe++Z3AXJRlaPxo DdbGo2zk+9dVmpCC3FMvUcuq5DhImIyhbxZpHGL8clQPDvBGaq30WR21fsptJsXR 37r7pPP6REHztpjVAfxehbYdqqMrmzLfaGIBRxkDfE4w8EN4ol+9muCbIQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFI6+eckhjR0g9dB9vzl7dtSrbp8NMB8GA1UdIwQY MBaAFDevSBMezZ3KPe8rLeeI8VBgYndVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUt ZGY2ZjIwZGNiOTRiLzEvanI1NXlTR05IU0QxMEgyX09YdDIxS3R1bncwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUtZGY2ZjIwZGNiOTRi LzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGMAwDBAUFsyAD BAMFs0ADBAYl5MADAwAuBwMEAy7/mAMEA04YEAMDAE9hAwMBWWQDAwBt/wMEB7A9 AAMEArk24AMEB7yNADANBAIAAjAHAwUDKgKAgDANBgkqhkiG9w0BAQsFAAOCAQEA NX0TbnPAZXMVv5f3F99b03LfRO4lcKemFX0D/YgkohkXVg8mocTjWCgyPm+MPFla QSJpV/DtuFme430GWU6cBLTPvWSv+yszNdjNnIWIRgTwId7k8GRlubsT8J73sa0G iwXkwCJY7gytgOt9vsizunjvJMnFUVGzgYGkueAaALaEGjVg3nX+YbUW1dLRtKII NJ17C4DXYzhFL+EqRJzOBLUHYmOl6b7sNVpFYovSi4c1Up8Locd6w3XvQk2ieod6 92f5yPw9fzkoVr2QMhRZBwXNk/wtQf1f2RBfAtti6ylXOcuF/EFR6weHbwKtqSB4 WFE1Hsuu1XPShBWf+4ISyg== -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:45 2026 by rpki-client