This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpUG90zwbRX-ZaW4yj_IarHUsgI.roa File: jpUG90zwbRX-ZaW4yj_IarHUsgI.roa (raw, json) Hash identifier: +/QXDVNdSFpNX1u74+iL+3hF8elQ2N481hJwr3n5ha8= Subject key identifier: 8E:95:06:F7:4C:F0:6D:15:FE:65:A5:B8:CA:3F:C8:6A:B1:D4:B2:02 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D43BD4D0AB5BD8A8BAD8D177F14E2 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpUG90zwbRX-ZaW4yj_IarHUsgI.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 5.10.193.0/24 maxlen: 24 5.10.195.0/24 maxlen: 24 5.10.197.0/24 maxlen: 24 5.10.199.0/24 maxlen: 24 45.134.129.0/24 maxlen: 24 45.134.131.0/24 maxlen: 24 62.197.129.0/24 maxlen: 24 89.31.218.0/24 maxlen: 24 89.35.154.0/23 maxlen: 24 89.40.76.0/24 maxlen: 24 93.115.109.0/24 maxlen: 24 178.239.197.0/24 maxlen: 24 185.67.137.0/24 maxlen: 24 185.67.139.0/24 maxlen: 24 185.163.208.0/22 maxlen: 22 185.216.1.0/24 maxlen: 24 185.216.3.0/24 maxlen: 24 185.244.220.0/24 maxlen: 24 188.240.230.0/24 maxlen: 24 188.240.232.0/23 maxlen: 24 188.241.110.0/24 maxlen: 24 188.241.242.0/23 maxlen: 24 193.26.112.0/23 maxlen: 24 193.84.134.0/24 maxlen: 24 194.76.132.0/23 maxlen: 24 203.159.85.0/24 maxlen: 24 203.159.87.0/24 maxlen: 24 203.159.89.0/24 maxlen: 24 203.159.91.0/24 maxlen: 24 223.27.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:43:bd:4d:0a:b5:bd:8a:8b:ad:8d:17:7f:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9506f74cf06d15fe65a5b8ca3fc86ab1d4b202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:2c:74:e3:8c:80:47:32:1d:7d:a9:76:8d: dc:52:25:eb:f7:4c:cc:92:56:df:76:d5:0a:5f:76: 40:4b:1a:ac:20:85:db:19:8f:f0:28:3e:f7:45:5e: 23:4c:5c:cd:dc:5e:e0:2c:18:24:e0:a1:b9:01:9b: 6a:44:ad:a0:e2:be:27:3f:90:85:81:61:b7:67:3b: 3d:c1:45:05:7f:80:c7:a5:17:14:66:91:b1:fb:9a: db:99:bb:88:90:cf:ea:e1:5c:1b:9c:42:ce:e8:00: 5d:23:aa:d3:b2:3b:a4:da:41:d2:f4:3d:7a:e4:ca: 44:08:9c:93:be:97:05:18:8b:27:78:c3:85:3a:b8: 60:81:39:30:5b:b4:60:0a:01:d4:b3:16:d2:47:e7: be:e8:3b:b5:99:36:77:32:e3:18:9d:78:fa:cb:6f: e9:63:87:3c:9e:fe:dd:1d:ae:59:12:2d:84:5f:cf: 46:83:a6:20:ab:37:4e:b0:6a:ab:e6:a3:81:8b:df: 5c:c8:c2:64:07:47:1a:bf:ca:56:53:a5:92:4b:4c: fc:16:21:cf:17:7e:e8:5f:23:10:49:6b:bd:cf:4e: 9b:af:24:f9:4e:20:72:08:91:01:a6:81:39:f5:b7: a5:ca:23:70:4a:11:79:ce:a1:1d:fc:9e:26:31:bb: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:06:F7:4C:F0:6D:15:FE:65:A5:B8:CA:3F:C8:6A:B1:D4:B2:02 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpUG90zwbRX-ZaW4yj_IarHUsgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.193.0/24 5.10.195.0/24 5.10.197.0/24 5.10.199.0/24 45.134.129.0/24 45.134.131.0/24 62.197.129.0/24 89.31.218.0/24 89.35.154.0/23 89.40.76.0/24 93.115.109.0/24 178.239.197.0/24 185.67.137.0/24 185.67.139.0/24 185.163.208.0/22 185.216.1.0/24 185.216.3.0/24 185.244.220.0/24 188.240.230.0/24 188.240.232.0/23 188.241.110.0/24 188.241.242.0/23 193.26.112.0/23 193.84.134.0/24 194.76.132.0/23 203.159.85.0/24 203.159.87.0/24 203.159.89.0/24 203.159.91.0/24 223.27.114.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:83:db:cd:ad:c8:0a:04:28:6e:31:af:91:e1:75:c8:2b:10: ab:a4:7a:32:11:0f:9c:c0:84:98:75:3c:24:4e:a9:5b:39:8e: 04:08:5b:ef:ae:c8:98:88:58:dc:cd:22:41:43:c6:a3:2d:d8: c7:23:e5:7a:fe:e6:fc:ea:72:c9:bc:b4:8b:cc:92:96:23:bf: 55:06:f7:d9:d5:47:6f:c6:9b:35:c7:56:7e:b9:55:01:8e:c7: 0b:48:e5:45:64:98:e4:06:df:83:14:f2:ad:68:b1:99:2b:60: 09:3a:e6:ce:0f:7c:1d:95:5b:75:27:cc:ef:b7:09:10:fe:3b: ec:84:7c:fc:85:a4:63:b3:ba:98:4e:fa:e6:a7:05:b2:61:ef: 3e:4b:56:52:96:3d:83:48:9d:49:bc:c0:f3:4b:1a:aa:e0:82: c0:7a:00:b9:a4:b6:8f:fc:12:ab:05:51:bc:07:c3:dc:ec:b9: 1e:6d:be:40:75:1a:da:d7:96:d4:46:1e:67:53:0b:e3:96:a6: fb:8b:80:7c:f1:d5:36:49:97:38:4f:6b:b9:f1:4e:e7:dc:e4: b0:e4:aa:b7:fb:ca:6e:39:8a:09:d0:d9:a6:f9:95:42:2c:05: 4f:ac:3b:68:76:91:b6:85:4e:96:fd:34:34:43:f0:df:29:fc: 67:d3:ac:d6 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt9XUO9TQq1vYqLrY0XfxTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTk1MDZmNzRjZjA2ZDE1ZmU2NWE1YjhjYTNmYzg2YWIxZDRiMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uAsdOOMgEcyHX2pdo3cUiXr90zM klbfdtUKX3ZASxqsIIXbGY/wKD73RV4jTFzN3F7gLBgk4KG5AZtqRK2g4r4nP5CF gWG3Zzs9wUUFf4DHpRcUZpGx+5rbmbuIkM/q4VwbnELO6ABdI6rTsjuk2kHS9D16 5MpECJyTvpcFGIsneMOFOrhggTkwW7RgCgHUsxbSR+e+6Du1mTZ3MuMYnXj6y2/p Y4c8nv7dHa5ZEi2EX89Gg6YgqzdOsGqr5qOBi99cyMJkB0cav8pWU6WSS0z8FiHP F37oXyMQSWu9z06bryT5TiByCJEBpoE59belyiNwShF5zqEd/J4mMbsVKQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFI6VBvdM8G0V/mWluMo/yGqx1LICMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvanBVRzkwendiUlgtWmFXNHlqX0lhckhVc2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAAF CsEDBAAFCsMDBAAFCsUDBAAFCscDBAAthoEDBAAthoMDBAA+xYEDBABZH9oDBAFZ I5oDBABZKEwDBABdc20DBACy78UDBAC5Q4kDBAC5Q4sDBAK5o9ADBAC52AEDBAC5 2AMDBAC59NwDBAC88OYDBAG88OgDBAC88W4DBAG88fIDBAHBGnADBADBVIYDBAHC TIQDBADLn1UDBADLn1cDBADLn1kDBADLn1sDBADfG3IwDQYJKoZIhvcNAQELBQAD ggEBAH2D282tyAoEKG4xr5HhdcgrEKukejIRD5zAhJh1PCROqVs5jgQIW++uyJiI WNzNIkFDxqMt2Mcj5Xr+5vzqcsm8tIvMkpYjv1UG99nVR2/GmzXHVn65VQGOxwtI 5UVkmOQG34MU8q1osZkrYAk65s4PfB2VW3UnzO+3CRD+O+yEfPyFpGOzuphO+uan BbJh7z5LVlKWPYNInUm8wPNLGqrggsB6ALmkto/8EqsFUbwHw9zsuR5tvkB1GtrX ltRGHmdTC+OWpvuLgHzx1TZJlzhPa7nxTufc5LDkqrf7ym45ignQ2ab5lUIsBU+s O2h2kbaFTpb9NDRD8N8p/GfTrNY= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:19 2026 by rpki-client