This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/jj7lrd4ums4XXEu1B-RIch-GVLs.roa File: jj7lrd4ums4XXEu1B-RIch-GVLs.roa (raw, json) Hash identifier: 6xBXfxQkdwUKWq6SGCwdJclZp2IkiTGHVyy092oPilA= Subject key identifier: 8E:3E:E5:AD:DE:2E:9A:CE:17:5C:4B:B5:07:E4:48:72:1F:86:54:BB Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B4862C0A5CEBA98441728E8F26FD01183 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/jj7lrd4ums4XXEu1B-RIch-GVLs.roa Signing time: Mon 22 Dec 2025 23:26:29 +0000 ROA not before: Mon 22 Dec 2025 23:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 22616 IP address blocks: 147.161.128.0/23 maxlen: 24 159.254.58.0/23 maxlen: 24 159.254.60.0/23 maxlen: 24 159.254.64.0/23 maxlen: 24 159.254.66.0/23 maxlen: 24 159.254.69.0/24 maxlen: 24 159.254.84.0/24 maxlen: 24 159.254.85.0/24 maxlen: 24 159.254.86.0/24 maxlen: 24 159.254.92.0/24 maxlen: 24 159.254.93.0/24 maxlen: 24 159.254.94.0/24 maxlen: 24 159.254.95.0/24 maxlen: 24 159.254.96.0/24 maxlen: 24 159.254.97.0/24 maxlen: 24 159.254.99.0/24 maxlen: 24 159.254.100.0/24 maxlen: 24 159.254.182.0/23 maxlen: 24 159.254.184.0/23 maxlen: 24 159.254.202.0/24 maxlen: 24 164.137.4.0/24 maxlen: 24 164.137.5.0/24 maxlen: 24 164.137.6.0/24 maxlen: 24 164.137.7.0/24 maxlen: 24 164.137.8.0/24 maxlen: 24 164.137.9.0/24 maxlen: 24 164.137.10.0/24 maxlen: 24 164.137.11.0/24 maxlen: 24 164.137.12.0/24 maxlen: 24 164.137.13.0/24 maxlen: 24 164.137.14.0/24 maxlen: 24 164.137.15.0/24 maxlen: 24 164.137.16.0/24 maxlen: 24 164.137.17.0/24 maxlen: 24 164.137.18.0/24 maxlen: 24 164.137.19.0/24 maxlen: 24 164.137.20.0/24 maxlen: 24 164.137.21.0/24 maxlen: 24 164.137.22.0/24 maxlen: 24 164.137.23.0/24 maxlen: 24 164.137.24.0/24 maxlen: 24 164.137.25.0/24 maxlen: 24 164.137.26.0/24 maxlen: 24 164.137.27.0/24 maxlen: 24 164.137.28.0/24 maxlen: 24 164.137.29.0/24 maxlen: 24 164.137.30.0/24 maxlen: 24 164.137.31.0/24 maxlen: 24 164.137.32.0/24 maxlen: 24 164.137.33.0/24 maxlen: 24 164.137.34.0/24 maxlen: 24 164.137.35.0/24 maxlen: 24 164.137.36.0/24 maxlen: 24 164.137.37.0/24 maxlen: 24 164.137.38.0/24 maxlen: 24 164.137.39.0/24 maxlen: 24 164.137.40.0/24 maxlen: 24 164.137.41.0/24 maxlen: 24 164.137.42.0/24 maxlen: 24 164.137.43.0/24 maxlen: 24 164.137.44.0/24 maxlen: 24 164.137.45.0/24 maxlen: 24 164.137.46.0/24 maxlen: 24 164.137.47.0/24 maxlen: 24 164.137.48.0/24 maxlen: 24 164.137.49.0/24 maxlen: 24 164.137.50.0/24 maxlen: 24 164.137.51.0/24 maxlen: 24 164.137.52.0/24 maxlen: 24 164.137.53.0/24 maxlen: 24 2a03:eec0:3212::/48 maxlen: 48 2a03:eec0:321b::/48 maxlen: 48 2a03:eec0:322b::/48 maxlen: 48 2a03:eec0:322c::/48 maxlen: 48 2a03:eec0:322d::/48 maxlen: 48 2a03:eec0:322e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:62:c0:a5:ce:ba:98:44:17:28:e8:f2:6f:d0:11:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 22 23:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e3ee5adde2e9ace175c4bb507e448721f8654bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:f4:2a:86:b9:c1:d2:9b:b3:bc:42:ed:03: 27:20:6b:ad:c3:8f:51:f0:18:58:db:ba:95:eb:55: 3b:f9:6f:07:29:1f:93:90:c3:e2:e3:75:36:68:41: de:e1:3a:ab:83:a9:74:56:83:a4:dc:f3:e5:43:4c: 28:39:7a:0b:d6:ac:b4:0e:9d:95:ba:48:81:10:a7: 71:b0:43:84:06:06:66:6f:0b:fa:bb:37:02:43:ed: a8:fb:e4:74:b2:f4:75:0e:ec:5a:09:f5:07:7c:60: 00:05:79:78:9d:95:0e:e0:6b:72:90:72:b6:71:85: cd:df:ce:97:fe:b1:92:9d:a5:f2:f5:2c:79:2b:7d: d0:4b:82:92:e5:21:b8:93:cd:ec:e5:90:67:1b:4c: b4:78:6a:a1:b2:f7:4c:99:fd:cc:68:b9:08:38:46: e4:29:d3:ae:6b:7e:13:8b:bd:c2:1c:60:5f:cb:75: 54:41:23:d5:94:40:ab:ef:6c:0b:ff:38:23:46:31: f8:88:4e:26:67:0f:48:fc:41:bd:39:f9:3e:ff:b9: a4:3a:14:fe:e3:73:ae:a0:ac:9c:87:87:c6:69:be: df:1f:66:78:7f:fc:4d:55:ea:4a:26:f1:08:4e:44: 75:7b:bc:d3:d1:10:27:75:0f:5a:44:f3:c5:55:42: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3E:E5:AD:DE:2E:9A:CE:17:5C:4B:B5:07:E4:48:72:1F:86:54:BB X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/jj7lrd4ums4XXEu1B-RIch-GVLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.128.0/23 159.254.58.0-159.254.61.255 159.254.64.0/22 159.254.69.0/24 159.254.84.0-159.254.86.255 159.254.92.0-159.254.97.255 159.254.99.0-159.254.100.255 159.254.182.0-159.254.185.255 159.254.202.0/24 164.137.4.0-164.137.53.255 IPv6: 2a03:eec0:3212::/48 2a03:eec0:321b::/48 2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0b:07:1f:b8:6a:ff:19:05:d2:5a:4a:d4:6e:fe:32:b6:96:db: b4:7e:2f:92:99:6c:59:7e:0f:c7:32:fe:8b:21:dc:b4:fc:ff: d5:18:c9:25:df:05:39:22:db:df:66:7c:b0:cb:d8:97:ae:c8: af:11:3b:87:e0:9f:de:b4:91:c9:b3:2c:fe:f7:89:a6:30:15: 6f:c1:fd:e7:1a:1c:41:aa:d0:e7:d7:60:73:cf:9f:27:52:81: 5f:4a:61:63:14:62:55:06:fd:94:ff:45:19:4e:97:f7:87:52: de:c8:5c:ba:10:bf:25:88:3b:a1:49:60:1c:35:91:9e:e1:5b: 39:6d:4f:0c:9f:07:f3:62:0e:30:73:02:be:08:a6:be:63:0e: e9:cb:ae:a4:1d:55:0e:db:73:ba:e6:8f:c1:d3:49:68:2f:73: ce:e6:40:e8:c4:6f:e3:62:be:a3:c4:c5:c6:68:1b:c7:c3:3b: a9:c0:bc:fd:5b:f9:17:d4:b6:b3:17:00:1d:fa:65:e0:2d:ae: 69:d8:48:1d:b5:61:81:b0:17:eb:bf:94:61:a3:71:f8:31:dc: 3a:a8:6c:1b:3b:88:2c:bf:c2:eb:2f:ab:64:74:ab:fd:58:08: 34:c5:19:ef:b4:9c:b7:2f:d0:5a:de:56:0f:5a:7f:80:84:db: ce:59:56:1d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZtIYsClzrqYRBco6PJv0BGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjIyMjMyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTNlZTVhZGRlMmU5YWNlMTc1YzRiYjUwN2U0NDg3MjFmODY1NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww30Koa5wdKbs7xC7QMnIGutw49R 8BhY27qV61U7+W8HKR+TkMPi43U2aEHe4Tqrg6l0VoOk3PPlQ0woOXoL1qy0Dp2V ukiBEKdxsEOEBgZmbwv6uzcCQ+2o++R0svR1DuxaCfUHfGAABXl4nZUO4GtykHK2 cYXN386X/rGSnaXy9Sx5K33QS4KS5SG4k83s5ZBnG0y0eGqhsvdMmf3MaLkIOEbk KdOua34Ti73CHGBfy3VUQSPVlECr72wL/zgjRjH4iE4mZw9I/EG9Ofk+/7mkOhT+ 43OuoKych4fGab7fH2Z4f/xNVepKJvEITkR1e7zT0RAndQ9aRPPFVUKhGwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI4+5a3eLprOF1xLtQfkSHIfhlS7MB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvamo3bHJkNHVtczRYWEV1MUItUkljaC1HVkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojByBAIAATBsAwQBk6GA MAwDBAGf/joDBAGf/jwDBAKf/kADBACf/kUwDAMEAp/+VAMEAJ/+VjAMAwQCn/5c AwQBn/5gMAwDBACf/mMDBACf/mQwDAMEAZ/+tgMEAZ/+uAMEAJ/+yjAMAwQCpIkE AwQBpIk0MCwEAgACMCYDBwAqA+7AMhIDBwAqA+7AMhswEgMHACoD7sAyKwMHACoD 7sAyLjANBgkqhkiG9w0BAQsFAAOCAQEACwcfuGr/GQXSWkrUbv4ytpbbtH4vkpls WX4PxzL+iyHctPz/1RjJJd8FOSLb32Z8sMvYl67IrxE7h+Cf3rSRybMs/veJpjAV b8H95xocQarQ59dgc8+fJ1KBX0phYxRiVQb9lP9FGU6X94dS3shcuhC/JYg7oUlg HDWRnuFbOW1PDJ8H82IOMHMCvgimvmMO6cuupB1VDttzuuaPwdNJaC9zzuZA6MRv 42K+o8TFxmgbx8M7qcC8/Vv5F9S2sxcAHfpl4C2uadhIHbVhgbAX67+UYaNx+DHc OqhsGzuILL/C6y+rZHSr/VgINMUZ77Scty/QWt5WD1p/gITbzllWHQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:13 2025 by rpki-client