This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JJR7t3SOaehud6UemiYdHhnAj6E.roa File: JJR7t3SOaehud6UemiYdHhnAj6E.roa (raw, json) Hash identifier: IYFZ649aZkPs/CpPLi0MvQ8g4ho4uA+35m4HpQxYyhI= Subject key identifier: 24:94:7B:B7:74:8E:69:E8:6E:77:A5:1E:9A:26:1D:1E:19:C0:8F:A1 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B29B29BEF40E5C8C1E260CBAA31ED0FD4 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JJR7t3SOaehud6UemiYdHhnAj6E.roa Signing time: Wed 17 Dec 2025 00:25:29 +0000 ROA not before: Wed 17 Dec 2025 00:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33667 IP address blocks: 5.182.186.0/24 maxlen: 24 5.182.193.0/24 maxlen: 24 5.182.194.0/24 maxlen: 24 5.182.195.0/24 maxlen: 24 36.255.215.0/24 maxlen: 24 45.67.141.0/24 maxlen: 24 63.246.129.0/24 maxlen: 24 63.246.148.0/24 maxlen: 24 63.246.152.0/24 maxlen: 24 63.246.159.0/24 maxlen: 24 78.31.206.0/24 maxlen: 24 103.216.197.0/24 maxlen: 24 149.126.13.0/24 maxlen: 24 162.218.89.0/24 maxlen: 24 185.201.41.0/24 maxlen: 24 185.201.43.0/24 maxlen: 24 2a0c:1900::/29 maxlen: 29 2a0c:1902:a7b3::/48 maxlen: 48 2a0c:1904:3f82::/48 maxlen: 48 2a0c:1905:c491::/48 maxlen: 48 2a0c:1907:6d2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:b2:9b:ef:40:e5:c8:c1:e2:60:cb:aa:31:ed:0f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Dec 17 00:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24947bb7748e69e86e77a51e9a261d1e19c08fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:cd:55:85:3b:cf:f5:f4:38:4c:12:f1:eb: 82:a0:6d:b3:fb:51:c6:40:77:64:4a:51:b0:1f:3f: 48:57:df:d7:10:02:73:45:6b:63:ac:4b:04:7d:6a: 38:40:09:25:72:ec:54:1c:7b:da:ee:48:73:0c:b1: 9f:b1:fe:ee:08:63:43:d0:1e:dd:84:85:92:3f:63: e3:dc:ca:a1:d4:e6:1a:fe:56:c3:4e:e1:10:ae:ad: 98:31:3b:3e:54:08:a5:e0:16:ae:be:60:dc:ce:5e: 03:94:c1:c3:f6:98:25:ad:0b:c8:39:03:98:a3:e0: 34:a9:9f:fb:98:f5:bd:6c:85:b1:68:de:2f:72:74: ee:0b:84:a7:40:3d:1b:92:bc:e0:e0:02:85:5f:ba: 3b:5d:34:94:71:29:b9:b0:4d:eb:2e:98:82:41:ba: 53:bd:22:25:83:4b:da:ed:52:44:5d:77:68:a5:ec: 01:0d:24:48:bd:f3:55:c6:38:92:b9:aa:e5:e5:91: 0f:f2:f5:69:e1:ea:43:6f:85:bd:0f:92:65:ff:a0: 4e:3f:db:c2:b6:ea:fa:e2:9f:dc:c5:e9:37:11:99: b6:08:45:97:fd:bc:8a:a2:5e:85:18:44:60:19:92: 1f:b5:26:fb:55:5f:84:83:c8:45:2b:a6:99:4f:fc: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:7B:B7:74:8E:69:E8:6E:77:A5:1E:9A:26:1D:1E:19:C0:8F:A1 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JJR7t3SOaehud6UemiYdHhnAj6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.186.0/24 5.182.193.0-5.182.195.255 36.255.215.0/24 45.67.141.0/24 63.246.129.0/24 63.246.148.0/24 63.246.152.0/24 63.246.159.0/24 78.31.206.0/24 103.216.197.0/24 149.126.13.0/24 162.218.89.0/24 185.201.41.0/24 185.201.43.0/24 IPv6: 2a0c:1900::/29 Signature Algorithm: sha256WithRSAEncryption 3a:21:5a:fa:13:cc:c6:ec:b6:8f:97:f0:fb:df:fd:97:b2:02: 5a:07:50:ed:79:b5:86:d3:9d:28:f5:34:03:8f:33:46:43:da: 5d:ff:e0:71:24:5e:42:61:d3:11:ef:3f:c1:90:7a:fe:43:db: 05:65:63:1b:54:d8:5b:3e:c6:85:87:47:52:08:d0:3d:5e:df: a4:67:2b:0f:e4:43:5a:01:03:5b:34:ef:27:75:c3:34:ff:27: 86:43:e3:65:2e:57:ca:b7:91:e8:99:aa:14:c9:d6:43:79:8d: 7e:e8:df:1a:96:07:6a:dd:91:20:26:dd:54:ea:b8:81:c0:06: f0:38:3f:5c:a7:8f:da:16:ad:db:0e:5e:6a:3e:51:36:04:ac: e0:54:fa:53:f3:ee:2b:91:16:a2:4d:28:5c:9a:86:5f:8f:d8: 2a:c7:c7:e3:e9:df:8c:b3:e3:e3:92:90:03:54:82:25:b3:05: 48:d3:e4:0e:e2:34:59:5b:ea:e1:3f:af:90:3b:d6:a6:ed:1d: 4f:26:e4:bc:1d:5e:20:e9:9e:03:79:bd:b7:7c:0d:b3:02:5f: 07:ef:9c:09:b4:2d:77:46:bd:1d:40:38:b0:3f:64:df:74:5f: bf:ba:6e:6a:90:57:e9:34:b3:41:c7:39:66:f0:a6:f6:1d:fc: 19:7b:c7:80 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZspspvvQOXIweJgy6ox7Q/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMjE3MDAyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDk0N2JiNzc0OGU2OWU4NmU3N2E1MWU5YTI2MWQxZTE5YzA4ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFPNVYU7z/X0OEwS8euCoG2z+1HG QHdkSlGwHz9IV9/XEAJzRWtjrEsEfWo4QAklcuxUHHva7khzDLGfsf7uCGND0B7d hIWSP2Pj3Mqh1OYa/lbDTuEQrq2YMTs+VAil4BauvmDczl4DlMHD9pglrQvIOQOY o+A0qZ/7mPW9bIWxaN4vcnTuC4SnQD0bkrzg4AKFX7o7XTSUcSm5sE3rLpiCQbpT vSIlg0va7VJEXXdopewBDSRIvfNVxjiSuarl5ZEP8vVp4epDb4W9D5Jl/6BOP9vC tur64p/cxek3EZm2CEWX/byKol6FGERgGZIftSb7VV+Eg8hFK6aZT/w6QwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFCSUe7d0jmnobnelHpomHR4ZwI+hMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvSkpSN3QzU09hZWh1ZDZVZW1pWWRIaG5BajZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAAW2ujAM AwQABbbBAwQCBbbAAwQAJP/XAwQALUONAwQAP/aBAwQAP/aUAwQAP/aYAwQAP/af AwQATh/OAwQAZ9jFAwQAlX4NAwQAotpZAwQAuckpAwQAuckrMA0EAgACMAcDBQMq DBkAMA0GCSqGSIb3DQEBCwUAA4IBAQA6IVr6E8zG7LaPl/D73/2XsgJaB1DtebWG 050o9TQDjzNGQ9pd/+BxJF5CYdMR7z/BkHr+Q9sFZWMbVNhbPsaFh0dSCNA9Xt+k ZysP5ENaAQNbNO8ndcM0/yeGQ+NlLlfKt5HomaoUydZDeY1+6N8algdq3ZEgJt1U 6riBwAbwOD9cp4/aFq3bDl5qPlE2BKzgVPpT8+4rkRaiTShcmoZfj9gqx8fj6d+M s+PjkpADVIIlswVI0+QO4jRZW+rhP6+QO9am7R1PJuS8HV4g6Z4Deb23fA2zAl8H 75wJtC13Rr0dQDiwP2TfdF+/um5qkFfpNLNBxzlm8Kb2HfwZe8eA -----END CERTIFICATE-----Generated at Thu Dec 18 02:51:12 2025 by rpki-client