This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JKpz1B5PaiNl5FatHhH-GyA-a4M.roa File: JKpz1B5PaiNl5FatHhH-GyA-a4M.roa (raw, json) Hash identifier: s35NkBCYbnP8XnyFu9AtYZFaOabG7Q3QeZKbgBBqvLI= Subject key identifier: 24:AA:73:D4:1E:4F:6A:23:65:E4:56:AD:1E:11:FE:1B:20:3E:6B:83 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BE61D322D2D9397673EF9962C02B5A612 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JKpz1B5PaiNl5FatHhH-GyA-a4M.roa Signing time: Thu 22 Jan 2026 14:30:31 +0000 ROA not before: Thu 22 Jan 2026 14:30:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.179.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.8.0/22 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 217.60.244.0/23 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:1d:32:2d:2d:93:97:67:3e:f9:96:2c:02:b5:a6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 22 14:30:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24aa73d41e4f6a2365e456ad1e11fe1b203e6b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5f:06:10:9a:58:f6:90:e7:ba:4f:c9:24:dd: f6:39:cb:fd:cf:a0:73:c2:25:2b:97:fd:fb:f5:26: a6:aa:08:c8:12:55:3a:af:38:27:d4:bd:75:16:ec: 6d:1d:9b:b4:cb:03:6f:78:2a:71:06:6d:fc:7c:4e: 8b:5b:7c:b8:b6:73:12:59:79:20:b1:88:30:df:ff: 03:8f:bb:e7:fb:39:5b:26:c0:3a:7a:0b:98:06:59: 30:c0:7a:a1:8e:d7:ec:d1:f4:47:fb:cd:cc:f7:2d: ec:8e:19:af:96:be:cb:0f:6d:a5:ee:b2:d4:84:76: 08:fb:69:55:f4:dd:b1:06:58:1d:6e:ca:c0:0c:ec: 38:a5:51:3c:45:47:dc:7d:36:b2:b3:f5:ea:6c:24: 0f:f7:8c:3c:ac:4c:d8:16:f2:8a:fc:22:63:b3:cc: 03:d1:d2:f1:9f:b9:a7:69:63:6c:1b:83:f4:f9:01: 91:2d:bc:da:ae:df:dd:b8:63:ec:8e:1c:4e:b2:e0: aa:b4:70:35:75:1a:af:bf:9c:f3:38:97:73:16:6c: 5d:1a:98:f6:a0:f3:06:33:93:79:13:ce:64:cf:dc: fd:47:49:b5:a0:16:73:9f:1c:05:dd:64:22:71:ab: ad:93:27:04:fc:2a:79:4b:a9:42:05:41:54:a9:98: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:73:D4:1E:4F:6A:23:65:E4:56:AD:1E:11:FE:1B:20:3E:6B:83 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JKpz1B5PaiNl5FatHhH-GyA-a4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.36.0/23 31.57.168.0/23 31.57.184.0/23 31.57.200.0/24 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.180.0-31.58.199.255 31.58.204.0-31.58.209.255 31.58.232.0/23 31.58.239.0/24 31.59.36.0/22 31.59.44.0/22 31.59.84.0/22 31.59.90.0/23 31.59.140.0/22 31.59.148.0-31.59.165.255 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.179.0-94.183.181.255 217.60.8.0/22 217.60.15.0-217.60.23.255 217.60.25.0/24 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.196.0/23 217.60.208.0-217.60.235.255 217.60.237.0/24 217.60.244.0/23 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 8c:51:fc:b1:04:c3:3c:0f:6d:90:37:80:28:63:e6:fa:33:ce: 69:6f:b2:6e:d9:7f:4a:fd:a8:c5:96:df:5b:56:61:a9:74:18: c9:da:82:d1:67:5a:fb:10:21:3e:b0:64:1a:98:43:e1:8a:bb: 33:41:71:99:5b:62:ad:70:81:17:94:3b:cd:2c:4b:81:df:f9: 85:fd:06:71:0a:f9:fd:7d:73:a7:8a:cd:9e:18:b8:5d:df:6c: 18:e7:40:c6:01:bc:e3:ad:64:21:24:29:1d:26:88:fb:cd:4d: e5:14:27:00:e5:52:69:12:01:e5:5e:94:b8:18:45:f2:9e:ad: 27:11:54:78:5e:3f:c1:a3:ee:4e:3f:32:cb:08:7c:51:a7:05: 30:25:d3:f5:ed:8e:8a:6b:51:c9:4c:a8:ac:9a:1f:28:8b:59: 7b:56:6b:d6:a7:56:15:a0:d0:2a:ea:8c:6c:1e:a5:72:30:05: 5d:7f:cd:dd:bc:04:b5:62:64:c6:3f:4a:a4:fc:0f:5d:dd:cf: 85:de:6c:1d:be:5a:58:57:eb:98:91:bd:0a:86:9a:f0:77:cc: cb:cd:fa:ba:4b:ab:20:fc:22:20:85:43:c7:b5:46:fa:05:81: 16:52:e4:ba:fb:4d:59:bb:8e:7f:30:cd:35:a0:0f:d7:d0:0e: 9f:f0:2d:af -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISAZvmHTItLZOXZz75liwCtaYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIyMTQzMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGFhNzNkNDFlNGY2YTIzNjVlNDU2YWQxZTExZmUxYjIwM2U2YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/V8GEJpY9pDnuk/JJN32Ocv9z6Bz wiUrl/379SamqgjIElU6rzgn1L11FuxtHZu0ywNveCpxBm38fE6LW3y4tnMSWXkg sYgw3/8Dj7vn+zlbJsA6eguYBlkwwHqhjtfs0fRH+83M9y3sjhmvlr7LD22l7rLU hHYI+2lV9N2xBlgdbsrADOw4pVE8RUfcfTays/XqbCQP94w8rEzYFvKK/CJjs8wD 0dLxn7mnaWNsG4P0+QGRLbzart/duGPsjhxOsuCqtHA1dRqvv5zzOJdzFmxdGpj2 oPMGM5N5E85kz9z9R0m1oBZznxwF3WQicautkycE/Cp5S6lCBUFUqZiZRQIDAQAB o4IDZjCCA2IwHQYDVR0OBBYEFCSqc9QeT2ojZeRWrR4R/hsgPmuDMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSktwejFCNVBhaU5sNUZhdEhoSC1HeUEtYTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBegYIKwYBBQUHAQcBAf8EggFpMIIBZTCCAVAEAgABMIIB SAMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQBHzkkAwQBHzmoAwQB Hzm4AwQAHznIAwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQCHzpcMAwDBAIfOrQD BAMfOsAwDAMEAh86zAMEAR860AMEAR866AMEAB867wMEAh87JAMEAh87LAMEAh87 VAMEAR87WgMEAh87jDAMAwQCHzuUAwQBHzukAwQAXreXAwQAXreeAwQAXrekAwQA XremMAwDBAFet64DBABet7AwDAMEAF63swMEAV63tAMEAtk8CDAMAwQA2TwPAwQD 2TwQAwQA2TwZMAwDBALZPBwDBALZPCAwDAMEA9k8KAMEAtk8ODAMAwQF2TygAwQD 2TywAwQC2Ty8AwQB2TzEMAwDBATZPNADBALZPOgDBADZPO0DBAHZPPQwDwQCAAIw CQMHACoUbkAAATANBgkqhkiG9w0BAQsFAAOCAQEAjFH8sQTDPA9tkDeAKGPm+jPO aW+ybtl/Sv2oxZbfW1ZhqXQYydqC0Wda+xAhPrBkGphD4Yq7M0FxmVtirXCBF5Q7 zSxLgd/5hf0GcQr5/X1zp4rNnhi4Xd9sGOdAxgG8461kISQpHSaI+81N5RQnAOVS aRIB5V6UuBhF8p6tJxFUeF4/waPuTj8yywh8UacFMCXT9e2OimtRyUyorJofKItZ e1Zr1qdWFaDQKuqMbB6lcjAFXX/N3bwEtWJkxj9KpPwPXd3Phd5sHb5aWFfrmJG9 Coaa8HfMy836ukurIPwiIIVDx7VG+gWBFlLkuvtNWbuOfzDNNaAP19AOn/Atrw== -----END CERTIFICATE-----Generated at Sat Jan 24 03:48:32 2026 by rpki-client