This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/jRnezGVaOi1QOyrXxlfgxiep6nE.roa File: jRnezGVaOi1QOyrXxlfgxiep6nE.roa (raw, json) Hash identifier: DjVR+ZhkBN5Nk+jdaTuiMYjRv07SOyCMcvKgx8Rd+VI= Subject key identifier: 8D:19:DE:CC:65:5A:3A:2D:50:3B:2A:D7:C6:57:E0:C6:27:A9:EA:71 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B27382658D053134817644D670B02B389 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/jRnezGVaOi1QOyrXxlfgxiep6nE.roa Signing time: Tue 16 Dec 2025 12:52:29 +0000 ROA not before: Tue 16 Dec 2025 12:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6718 IP address blocks: 5.154.171.0/24 maxlen: 24 5.154.224.0/24 maxlen: 24 37.156.37.0/24 maxlen: 24 89.35.4.0/24 maxlen: 24 89.35.5.0/24 maxlen: 24 89.37.186.0/24 maxlen: 24 89.37.187.0/24 maxlen: 24 89.40.133.0/24 maxlen: 24 89.43.240.0/24 maxlen: 24 89.43.241.0/24 maxlen: 24 89.43.242.0/24 maxlen: 24 89.43.243.0/24 maxlen: 24 89.43.244.0/24 maxlen: 24 89.43.245.0/24 maxlen: 24 89.43.246.0/24 maxlen: 24 89.43.247.0/24 maxlen: 24 89.46.24.0/24 maxlen: 24 89.46.25.0/24 maxlen: 24 89.46.26.0/24 maxlen: 24 89.46.27.0/24 maxlen: 24 89.46.28.0/24 maxlen: 24 89.46.29.0/24 maxlen: 24 89.46.30.0/24 maxlen: 24 89.46.31.0/24 maxlen: 24 91.208.75.0/24 maxlen: 24 91.239.230.0/24 maxlen: 24 92.114.88.0/24 maxlen: 24 92.114.89.0/24 maxlen: 24 92.114.90.0/24 maxlen: 24 92.114.91.0/24 maxlen: 24 94.176.186.0/24 maxlen: 24 94.176.187.0/24 maxlen: 24 128.0.34.0/24 maxlen: 24 128.0.36.0/24 maxlen: 24 185.36.252.0/24 maxlen: 24 188.241.111.0/24 maxlen: 24 188.241.121.0/24 maxlen: 24 193.93.142.0/23 maxlen: 23 193.162.136.0/24 maxlen: 24 195.206.164.0/24 maxlen: 24 2a00:ece0::/32 maxlen: 32 2a04:6c80::/48 maxlen: 48 2a05:1c00::/32 maxlen: 32 2a05:1c01::/32 maxlen: 32 2a05:1c02::/32 maxlen: 32 2a05:1c03::/32 maxlen: 32 2a05:1c04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:38:26:58:d0:53:13:48:17:64:4d:67:0b:02:b3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Dec 16 12:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d19decc655a3a2d503b2ad7c657e0c627a9ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:50:81:dd:36:a9:96:71:e9:49:47:4b:a8: 89:8b:53:56:b9:07:55:30:9f:62:98:5d:3b:3e:54: 1e:16:8f:85:5a:7d:f4:ab:81:5f:f2:00:f1:d8:99: c5:9f:4d:82:77:c2:a3:7b:73:79:5f:76:97:df:0c: 64:7b:dd:2b:ff:6c:fe:3c:9a:87:ae:cd:36:d9:10: 24:ca:df:ff:ee:d4:54:b6:1e:59:83:09:0d:e1:c6: 51:18:5d:6e:9d:37:c1:c5:98:9b:9b:5e:26:28:d9: 66:4d:7c:80:95:94:ad:7e:9c:86:79:19:c8:1b:46: ec:b6:9f:af:d2:9d:2a:c5:e7:23:01:ef:d3:62:38: 38:2e:b9:b3:de:a9:70:96:fe:eb:3d:e7:c3:af:f2: b3:e6:bc:cd:cb:43:26:f8:13:90:58:20:3c:8b:06: 5c:4b:f7:e4:a5:ca:ac:f9:b8:f3:69:24:40:50:13: ff:0d:ac:a7:15:1d:12:d5:18:e1:02:f2:83:2d:a2: 99:b1:8d:05:99:af:6b:b1:32:e0:68:32:fd:1c:d6: cf:29:ac:83:52:ec:a5:67:ef:53:41:3c:c5:18:67: de:65:fd:75:54:cd:8c:d3:e8:76:80:c4:7c:b9:db: 7f:04:bb:59:1a:2a:6b:ac:51:e6:fc:e7:ff:74:a3: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:19:DE:CC:65:5A:3A:2D:50:3B:2A:D7:C6:57:E0:C6:27:A9:EA:71 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/jRnezGVaOi1QOyrXxlfgxiep6nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.171.0/24 5.154.224.0/24 37.156.37.0/24 89.35.4.0/23 89.37.186.0/23 89.40.133.0/24 89.43.240.0/21 89.46.24.0/21 91.208.75.0/24 91.239.230.0/24 92.114.88.0/22 94.176.186.0/23 128.0.34.0/24 128.0.36.0/24 185.36.252.0/24 188.241.111.0/24 188.241.121.0/24 193.93.142.0/23 193.162.136.0/24 195.206.164.0/24 IPv6: 2a00:ece0::/32 2a04:6c80::/48 2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 71:fb:e7:90:74:f0:c9:dc:95:7e:13:44:a0:15:97:82:31:69: 5f:29:be:2f:f4:2e:c6:6c:71:dd:eb:97:a6:78:39:11:42:09: 92:c4:e2:1c:ab:08:1a:42:0b:60:b1:a6:b9:96:d3:99:cf:e7: 0d:2f:a3:b9:a6:d8:8e:fa:05:b1:ff:72:30:92:10:5f:fb:e4: b4:2c:b6:ab:4e:05:42:0a:27:a3:6a:df:d5:e7:78:9d:8b:e4: 34:8b:ef:26:9f:4b:be:3b:70:e7:54:0f:06:d6:48:2c:22:ac: ef:fc:9d:58:8b:da:0e:7a:bd:bb:2a:17:9a:df:9f:9e:ab:70: fc:09:37:31:26:8c:35:a2:19:f9:99:53:09:70:b0:e1:f7:ca: 61:41:6b:a9:8e:ab:37:56:d7:3e:5b:5d:95:43:8a:f7:7b:f8: 5c:3e:a0:cc:13:20:a8:c2:e1:79:af:11:18:f9:59:66:d8:3e: 38:61:ea:fa:d8:14:e5:58:2a:31:f3:66:c6:26:c0:b8:88:03: 09:26:63:97:fe:11:41:dc:db:65:46:4f:ef:a0:dd:94:7f:84: 90:f4:eb:4a:69:89:bd:db:05:5a:a9:76:c0:da:f0:e5:b7:90: 4b:ad:89:30:36:5e:a2:80:8f:17:48:c2:95:4e:52:a1:03:a7: 6a:bb:cf:d3 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZsnOCZY0FMTSBdkTWcLArOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUxMjE2MTI1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDE5ZGVjYzY1NWEzYTJkNTAzYjJhZDdjNjU3ZTBjNjI3YTllYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpQgd02qZZx6UlHS6iJi1NWuQdV MJ9imF07PlQeFo+FWn30q4Ff8gDx2JnFn02Cd8Kje3N5X3aX3wxke90r/2z+PJqH rs022RAkyt//7tRUth5ZgwkN4cZRGF1unTfBxZibm14mKNlmTXyAlZStfpyGeRnI G0bstp+v0p0qxecjAe/TYjg4Lrmz3qlwlv7rPefDr/Kz5rzNy0Mm+BOQWCA8iwZc S/fkpcqs+bjzaSRAUBP/DaynFR0S1RjhAvKDLaKZsY0Fma9rsTLgaDL9HNbPKayD UuylZ+9TQTzFGGfeZf11VM2M0+h2gMR8udt/BLtZGiprrFHm/Of/dKN1wQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFI0Z3sxlWjotUDsq18ZX4MYnqepxMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvalJuZXpHVmFPaTFRT3lyWHhsZmd4aWVwNm5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzB+BAIAATB4AwQABZqr AwQABZrgAwQAJZwlAwQBWSMEAwQBWSW6AwQAWSiFAwQDWSvwAwQDWS4YAwQAW9BL AwQAW+/mAwQCXHJYAwQBXrC6AwQAgAAiAwQAgAAkAwQAuST8AwQAvPFvAwQAvPF5 AwQBwV2OAwQAwaKIAwQAw86kMCUEAgACMB8DBQAqAOzgAwcAKgRsgAAAMA0DBAIq BRwDBQAqBRwEMA0GCSqGSIb3DQEBCwUAA4IBAQBx++eQdPDJ3JV+E0SgFZeCMWlf Kb4v9C7GbHHd65emeDkRQgmSxOIcqwgaQgtgsaa5ltOZz+cNL6O5ptiO+gWx/3Iw khBf++S0LLarTgVCCiejat/V53idi+Q0i+8mn0u+O3DnVA8G1kgsIqzv/J1Yi9oO er27Khea35+eq3D8CTcxJow1ohn5mVMJcLDh98phQWupjqs3Vtc+W12VQ4r3e/hc PqDMEyCowuF5rxEY+Vlm2D44Yer62BTlWCox82bGJsC4iAMJJmOX/hFB3NtlRk/v oN2Uf4SQ9OtKaYm92wVaqXbA2vDlt5BLrYkwNl6igI8XSMKVTlKhA6dqu8/T -----END CERTIFICATE-----Generated at Fri Dec 19 13:45:28 2025 by rpki-client