This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa File: J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa (raw, json) Hash identifier: rYNYIygzVLxsYiz9/QpiUL2isg45v/iPFE29a+xdhpw= Subject key identifier: 27:F6:8C:07:5B:9F:3D:C6:D5:C6:FA:8D:A9:6D:03:25:A8:2D:F5:2B Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C808436AD72565DC47E45F8E3A22F22 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 5.157.136.0/24 maxlen: 24 5.157.139.0/24 maxlen: 24 5.157.160.0/22 maxlen: 22 37.35.36.0/24 maxlen: 24 37.35.37.0/24 maxlen: 24 37.35.39.0/24 maxlen: 24 62.216.72.0/24 maxlen: 24 62.216.73.0/24 maxlen: 24 62.216.74.0/24 maxlen: 24 62.216.75.0/24 maxlen: 24 62.216.80.0/24 maxlen: 24 62.216.81.0/24 maxlen: 24 62.216.82.0/24 maxlen: 24 62.216.83.0/24 maxlen: 24 62.216.92.0/24 maxlen: 24 62.216.93.0/24 maxlen: 24 62.216.94.0/24 maxlen: 24 62.216.95.0/24 maxlen: 24 91.225.14.0/24 maxlen: 24 91.225.15.0/24 maxlen: 24 91.235.123.0/24 maxlen: 24 146.66.208.0/24 maxlen: 24 146.66.209.0/24 maxlen: 24 146.66.212.0/22 maxlen: 22 146.66.212.0/23 maxlen: 23 146.66.212.0/24 maxlen: 24 146.66.213.0/24 maxlen: 24 146.66.214.0/24 maxlen: 24 146.66.215.0/24 maxlen: 24 146.66.220.0/24 maxlen: 24 146.66.221.0/24 maxlen: 24 146.66.222.0/24 maxlen: 24 146.66.223.0/24 maxlen: 24 178.157.76.0/24 maxlen: 24 178.157.94.0/24 maxlen: 24 178.157.108.0/24 maxlen: 24 178.157.110.0/24 maxlen: 24 178.157.124.0/24 maxlen: 24 178.157.126.0/24 maxlen: 24 185.76.60.0/24 maxlen: 24 185.76.62.0/24 maxlen: 24 188.74.130.0/24 maxlen: 24 188.74.152.0/24 maxlen: 24 188.74.155.0/24 maxlen: 24 188.74.171.0/24 maxlen: 24 188.74.181.0/24 maxlen: 24 188.74.190.0/24 maxlen: 24 188.74.208.0/24 maxlen: 24 188.74.209.0/24 maxlen: 24 188.74.212.0/22 maxlen: 22 188.74.245.0/24 maxlen: 24 188.119.165.0/24 maxlen: 24 188.119.166.0/24 maxlen: 24 188.119.181.0/24 maxlen: 24 188.119.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:84:36:ad:72:56:5d:c4:7e:45:f8:e3:a2:2f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f68c075b9f3dc6d5c6fa8da96d0325a82df52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:6a:6d:16:f6:ac:56:b2:ba:17:1f:24:06: 49:8a:0c:da:ad:c1:b0:66:75:7b:40:ca:38:7a:3b: 03:49:e4:61:b4:f3:e2:b6:37:17:4e:13:b4:7c:5d: 16:5d:bb:d0:59:27:80:54:07:08:39:0b:13:23:6c: e1:50:05:9a:a3:72:ec:b7:ab:5b:89:70:e4:d8:28: ab:6c:fc:62:36:5a:b8:6b:70:5b:ce:9f:7b:d2:42: cb:80:b8:0a:ad:3e:c4:16:b7:fc:01:c1:a6:bd:76: 99:fa:50:06:ee:3b:4e:a5:7c:e6:9f:0a:2e:1e:5d: e2:c3:e2:5d:6e:74:98:21:ee:5e:04:77:07:9d:ed: d8:f4:08:34:13:b2:62:11:44:04:07:0a:5f:1b:23: e1:09:41:96:dc:09:1f:a3:61:e0:67:b1:12:04:c2: 32:69:2f:ed:01:f1:13:2f:e8:6d:f4:aa:4c:e0:2b: 18:5b:99:4d:55:98:2e:c1:e2:10:87:aa:1e:7f:59: 3e:7b:73:da:63:b3:af:12:ea:34:9a:c7:e8:58:77: 43:a6:9c:5e:f9:e7:77:77:ce:c0:a9:bd:08:69:67: 1a:ee:e7:08:6d:9a:fe:28:07:9f:71:80:8e:c5:78: cc:a8:0f:25:68:33:88:78:32:29:c4:0d:33:ba:38: 61:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F6:8C:07:5B:9F:3D:C6:D5:C6:FA:8D:A9:6D:03:25:A8:2D:F5:2B X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.136.0/24 5.157.139.0/24 5.157.160.0/22 37.35.36.0/23 37.35.39.0/24 62.216.72.0/22 62.216.80.0/22 62.216.92.0/22 91.225.14.0/23 91.235.123.0/24 146.66.208.0/23 146.66.212.0/22 146.66.220.0/22 178.157.76.0/24 178.157.94.0/24 178.157.108.0/24 178.157.110.0/24 178.157.124.0/24 178.157.126.0/24 185.76.60.0/24 185.76.62.0/24 188.74.130.0/24 188.74.152.0/24 188.74.155.0/24 188.74.171.0/24 188.74.181.0/24 188.74.190.0/24 188.74.208.0/23 188.74.212.0/22 188.74.245.0/24 188.119.165.0-188.119.166.255 188.119.181.0/24 188.119.190.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f7:64:4a:f5:93:c2:ae:11:e3:25:63:f9:73:5b:d8:ec:a7: bd:7f:34:08:57:fb:fc:32:7d:02:fe:a8:f8:08:b0:58:60:0f: fa:c8:d4:be:ba:0b:d9:bb:e7:ef:6a:16:58:a7:fe:9a:64:ae: 23:15:1b:4f:9e:ef:72:98:9c:b5:cf:1b:c5:33:29:80:83:0d: 68:94:73:7b:3e:3b:35:80:cc:47:a1:97:22:34:3f:70:82:ee: 02:4f:df:3c:c5:ad:b4:5a:ed:aa:4d:a9:9e:f7:ec:43:b4:3b: de:fd:ab:5a:b8:03:33:f1:40:bc:c2:ab:87:07:1a:a9:19:fa: b3:02:9e:9c:e6:d6:4d:b9:d7:ee:18:75:19:e5:4b:e8:8b:fb: 85:93:96:f2:64:dd:ad:ce:3e:d4:c0:17:84:fe:86:f6:08:e7: b7:54:b1:84:17:bb:38:af:7d:08:32:f0:f4:99:41:4d:11:84: a6:6b:42:62:63:0f:58:99:95:b3:83:1a:5c:67:cd:c1:ee:de: 2c:8c:da:74:86:f7:79:8b:d1:ec:fa:b7:7c:af:ba:ac:f1:b3: 97:a3:61:7d:98:fd:f8:4f:36:30:12:03:ff:3d:33:ad:51:7d: f5:92:60:af:82:c9:98:ed:47:33:dc:3d:13:ef:e4:fd:10:a0: b3:d7:3c:4c -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt8gIQ2rXJWXcR+Rfjjoi8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Y2OGMwNzViOWYzZGM2ZDVjNmZhOGRhOTZkMDMyNWE4MmRmNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFpqbRb2rFayuhcfJAZJigzarcGw ZnV7QMo4ejsDSeRhtPPitjcXThO0fF0WXbvQWSeAVAcIOQsTI2zhUAWao3Lst6tb iXDk2CirbPxiNlq4a3Bbzp970kLLgLgKrT7EFrf8AcGmvXaZ+lAG7jtOpXzmnwou Hl3iw+JdbnSYIe5eBHcHne3Y9Ag0E7JiEUQEBwpfGyPhCUGW3Akfo2HgZ7ESBMIy aS/tAfETL+ht9KpM4CsYW5lNVZguweIQh6oef1k+e3PaY7OvEuo0msfoWHdDppxe +ed3d87Aqb0IaWca7ucIbZr+KAefcYCOxXjMqA8laDOIeDIpxA0zujhhyQIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFCf2jAdbnz3G1cb6jaltAyWoLfUrMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvSl9hTUIxdWZQY2JWeHZxTnFXMERKYWd0OVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBAAF nYgDBAAFnYsDBAIFnaADBAElIyQDBAAlIycDBAI+2EgDBAI+2FADBAI+2FwDBAFb 4Q4DBABb63sDBAGSQtADBAKSQtQDBAKSQtwDBACynUwDBACynV4DBACynWwDBACy nW4DBACynXwDBACynX4DBAC5TDwDBAC5TD4DBAC8SoIDBAC8SpgDBAC8SpsDBAC8 SqsDBAC8SrUDBAC8Sr4DBAG8StADBAK8StQDBAC8SvUwDAMEALx3pQMEALx3pgME ALx3tQMEALx3vjANBgkqhkiG9w0BAQsFAAOCAQEAUPdkSvWTwq4R4yVj+XNb2Oyn vX80CFf7/DJ9Av6o+AiwWGAP+sjUvroL2bvn72oWWKf+mmSuIxUbT57vcpictc8b xTMpgIMNaJRzez47NYDMR6GXIjQ/cILuAk/fPMWttFrtqk2pnvfsQ7Q73v2rWrgD M/FAvMKrhwcaqRn6swKenObWTbnX7hh1GeVL6Iv7hZOW8mTdrc4+1MAXhP6G9gjn t1SxhBe7OK99CDLw9JlBTRGEpmtCYmMPWJmVs4MaXGfNwe7eLIzadIb3eYvR7Pq3 fK+6rPGzl6NhfZj9+E82MBID/z0zrVF99ZJgr4LJmO1HM9w9E+/k/RCgs9c8TA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:06 2026 by rpki-client