This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jx39CZju6oz5EdxmVo9sLapxfIg.roa File: jx39CZju6oz5EdxmVo9sLapxfIg.roa (raw, json) Hash identifier: QNy1YYKEXuqgmU239a7e2zcp94EgczvVPOUFMRyneNY= Subject key identifier: 8F:1D:FD:09:98:EE:EA:8C:F9:11:DC:66:56:8F:6C:2D:AA:71:7C:88 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B3155DE2AB6EED404E3BFF44FA0CCE168 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jx39CZju6oz5EdxmVo9sLapxfIg.roa Signing time: Thu 18 Dec 2025 12:01:09 +0000 ROA not before: Thu 18 Dec 2025 12:01:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 147.45.96.0/24 maxlen: 24 147.45.97.0/24 maxlen: 24 147.45.98.0/24 maxlen: 24 147.45.99.0/24 maxlen: 24 147.45.100.0/24 maxlen: 24 147.45.102.0/24 maxlen: 24 147.45.103.0/24 maxlen: 24 147.45.104.0/24 maxlen: 24 147.45.105.0/24 maxlen: 24 147.45.106.0/24 maxlen: 24 147.45.107.0/24 maxlen: 24 147.45.108.0/24 maxlen: 24 147.45.109.0/24 maxlen: 24 147.45.110.0/24 maxlen: 24 147.45.138.0/24 maxlen: 24 147.45.140.0/24 maxlen: 24 147.45.141.0/24 maxlen: 24 147.45.143.0/24 maxlen: 24 147.45.144.0/24 maxlen: 24 147.45.146.0/24 maxlen: 24 147.45.148.0/24 maxlen: 24 147.45.150.0/24 maxlen: 24 147.45.151.0/24 maxlen: 24 147.45.153.0/24 maxlen: 24 147.45.154.0/24 maxlen: 24 147.45.155.0/24 maxlen: 24 147.45.157.0/24 maxlen: 24 147.45.159.0/24 maxlen: 24 147.45.160.0/24 maxlen: 24 147.45.163.0/24 maxlen: 24 147.45.164.0/24 maxlen: 24 147.45.168.0/24 maxlen: 24 147.45.172.0/24 maxlen: 24 147.45.175.0/24 maxlen: 24 147.45.182.0/24 maxlen: 24 147.45.183.0/24 maxlen: 24 147.45.184.0/24 maxlen: 24 147.45.185.0/24 maxlen: 24 147.45.189.0/24 maxlen: 24 147.45.190.0/24 maxlen: 24 147.45.191.0/24 maxlen: 24 147.45.212.0/24 maxlen: 24 147.45.213.0/24 maxlen: 24 147.45.214.0/24 maxlen: 24 147.45.215.0/24 maxlen: 24 147.45.235.0/24 maxlen: 24 147.45.236.0/24 maxlen: 24 147.45.237.0/24 maxlen: 24 147.45.239.0/24 maxlen: 24 147.45.245.0/24 maxlen: 24 147.45.246.0/24 maxlen: 24 147.45.247.0/24 maxlen: 24 147.45.249.0/24 maxlen: 24 147.45.250.0/24 maxlen: 24 147.45.251.0/24 maxlen: 24 147.45.253.0/24 maxlen: 24 147.45.254.0/24 maxlen: 24 193.233.102.0/24 maxlen: 24 193.233.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:de:2a:b6:ee:d4:04:e3:bf:f4:4f:a0:cc:e1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Dec 18 12:01:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f1dfd0998eeea8cf911dc66568f6c2daa717c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:bf:2e:86:3a:d8:0a:a5:15:2e:ba:fd:b0: 01:c2:c5:03:df:2b:de:56:22:e4:f9:e4:c9:3f:72: 75:c4:04:fc:ef:30:15:0b:b2:41:41:c2:ff:08:a3: b5:55:28:0c:a1:9e:7c:7c:6f:c9:7b:81:1b:e9:6c: 69:3c:e1:cf:ea:c0:3e:d8:49:3b:7b:af:30:4a:5d: e3:37:52:46:39:f3:7b:b6:03:f9:5c:03:d0:89:25: a9:33:df:c0:2d:82:fe:5a:bf:3f:d1:cd:18:1d:25: d4:17:16:23:c1:b0:8c:15:2b:b2:7c:77:d3:2c:d7: ba:94:b7:b1:51:41:50:09:0b:b9:61:5f:da:48:a2: b1:8c:32:0a:23:93:f4:53:98:22:52:05:5b:be:3f: b6:3a:fb:70:61:ea:a7:d7:b2:f3:91:bf:af:ed:20: a0:ff:07:8d:76:d1:0c:5a:55:49:39:d5:6f:f3:b1: 04:60:8a:c2:c3:b4:6c:a6:02:bf:07:5d:81:aa:88: bc:6e:31:64:91:83:f3:54:d1:b4:66:91:5c:a1:f4: e4:b4:fd:2d:ed:b7:3b:03:f2:ee:a1:c0:88:ba:53: fa:11:45:d0:38:59:d0:38:aa:5a:58:78:4f:df:34: 28:51:f4:98:70:40:da:5e:c5:86:9f:23:d7:c3:ef: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:FD:09:98:EE:EA:8C:F9:11:DC:66:56:8F:6C:2D:AA:71:7C:88 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jx39CZju6oz5EdxmVo9sLapxfIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.96.0-147.45.100.255 147.45.102.0-147.45.110.255 147.45.138.0/24 147.45.140.0/23 147.45.143.0-147.45.144.255 147.45.146.0/24 147.45.148.0/24 147.45.150.0/23 147.45.153.0-147.45.155.255 147.45.157.0/24 147.45.159.0-147.45.160.255 147.45.163.0-147.45.164.255 147.45.168.0/24 147.45.172.0/24 147.45.175.0/24 147.45.182.0-147.45.185.255 147.45.189.0-147.45.191.255 147.45.212.0/22 147.45.235.0-147.45.237.255 147.45.239.0/24 147.45.245.0-147.45.247.255 147.45.249.0-147.45.251.255 147.45.253.0-147.45.254.255 193.233.102.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:65:18:cb:9a:61:fb:fc:77:6a:31:5c:f9:0b:1f:34:52:47: 5f:53:06:c5:53:cb:2a:82:c9:6a:d4:1f:6f:bf:77:f1:4b:64: 71:22:74:74:a7:7f:bb:0c:9c:29:7a:e5:3a:36:cb:a7:6b:2e: da:c1:20:05:7c:39:03:66:c1:59:37:d5:4e:a6:06:fc:de:a8: 74:41:9f:62:9e:ac:21:5f:d3:40:22:30:06:d4:4a:7b:a5:2c: e5:c5:bf:e8:6b:83:f2:01:e5:4e:b2:67:53:41:2e:dc:0b:70: 0e:73:66:54:12:42:91:ff:90:8b:ef:1a:4c:f9:03:f2:2d:b4: 5c:c2:87:b4:28:3b:27:02:4e:eb:97:c3:74:e0:0d:da:49:f9: 8b:83:d5:dc:18:fb:f4:ff:2a:60:7c:50:1c:66:e6:45:2b:31: ca:7b:1b:8d:b9:fe:e5:9f:73:fb:3e:39:9f:bf:11:84:3b:ca: 83:53:a1:92:4a:31:a3:9d:c1:d0:f2:19:9d:5a:bd:1d:ff:67: ec:91:0d:62:f5:59:4d:33:7d:0a:79:03:94:f4:af:08:94:37: bb:06:44:61:09:93:3a:59:5f:57:8b:05:89:21:4d:c2:bd:8c: 0b:42:9e:7d:f9:58:2e:e7:d6:a2:7e:75:89:8e:ac:b6:69:89: 83:43:70:6b -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZsxVd4qtu7UBOO/9E+gzOFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjUxMjE4MTIwMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjFkZmQwOTk4ZWVlYThjZjkxMWRjNjY1NjhmNmMyZGFhNzE3Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLa/LoY62AqlFS66/bABwsUD3yve ViLk+eTJP3J1xAT87zAVC7JBQcL/CKO1VSgMoZ58fG/Je4Eb6WxpPOHP6sA+2Ek7 e68wSl3jN1JGOfN7tgP5XAPQiSWpM9/ALYL+Wr8/0c0YHSXUFxYjwbCMFSuyfHfT LNe6lLexUUFQCQu5YV/aSKKxjDIKI5P0U5giUgVbvj+2OvtwYeqn17Lzkb+v7SCg /weNdtEMWlVJOdVv87EEYIrCw7RspgK/B12Bqoi8bjFkkYPzVNG0ZpFcofTktP0t 7bc7A/LuocCIulP6EUXQOFnQOKpaWHhP3zQoUfSYcEDaXsWGnyPXw++pFwIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFI8d/QmY7uqM+RHcZlaPbC2qcXyIMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvangzOUNaanU2b3o1RWR4bVZvOXNMYXB4ZklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDQYIKwYBBQUHAQcBAf8Egf0wgfowgfcEAgABMIHwMAwD BAWTLWADBACTLWQwDAMEAZMtZgMEAJMtbgMEAJMtigMEAZMtjDAMAwQAky2PAwQA ky2QAwQAky2SAwQAky2UAwQBky2WMAwDBACTLZkDBAKTLZgDBACTLZ0wDAMEAJMt nwMEAJMtoDAMAwQAky2jAwQAky2kAwQAky2oAwQAky2sAwQAky2vMAwDBAGTLbYD BAGTLbgwDAMEAJMtvQMEBpMtgAMEApMt1DAMAwQAky3rAwQBky3sAwQAky3vMAwD BACTLfUDBAOTLfAwDAMEAJMt+QMEApMt+DAMAwQAky39AwQAky3+AwQBwelmMA0G CSqGSIb3DQEBCwUAA4IBAQAqZRjLmmH7/HdqMVz5Cx80UkdfUwbFU8sqgslq1B9v v3fxS2RxInR0p3+7DJwpeuU6Nsunay7awSAFfDkDZsFZN9VOpgb83qh0QZ9inqwh X9NAIjAG1Ep7pSzlxb/oa4PyAeVOsmdTQS7cC3AOc2ZUEkKR/5CL7xpM+QPyLbRc woe0KDsnAk7rl8N04A3aSfmLg9XcGPv0/ypgfFAcZuZFKzHKexuNuf7ln3P7Pjmf vxGEO8qDU6GSSjGjncHQ8hmdWr0d/2fskQ1i9VlNM30KeQOU9K8IlDe7BkRhCZM6 WV9XiwWJIU3CvYwLQp59+Vgu59aifnWJjqy2aYmDQ3Br -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:32 2025 by rpki-client