This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JwV12ke1z2HnjEEfvCOi-nTwqXo.roa File: JwV12ke1z2HnjEEfvCOi-nTwqXo.roa (raw, json) Hash identifier: Lyvzn8IGTkGHHMO+NUZId5NGLbb4tc1/Xc8OQP4/eo0= Subject key identifier: 27:05:75:DA:47:B5:CF:61:E7:8C:41:1F:BC:23:A2:FA:74:F0:A9:7A Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B4A43694A80EE88DCD5859147922FC6FB Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JwV12ke1z2HnjEEfvCOi-nTwqXo.roa Signing time: Tue 23 Dec 2025 08:11:30 +0000 ROA not before: Tue 23 Dec 2025 08:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3257 IP address blocks: 46.33.64.0/19 maxlen: 24 62.41.0.0/20 maxlen: 24 62.41.16.0/21 maxlen: 24 62.41.24.0/22 maxlen: 24 62.41.32.0/24 maxlen: 24 62.41.37.0/24 maxlen: 24 62.41.56.0/21 maxlen: 24 62.41.64.0/20 maxlen: 24 62.41.80.0/22 maxlen: 24 62.41.84.0/23 maxlen: 24 62.41.102.0/24 maxlen: 24 62.41.160.0/24 maxlen: 24 62.50.128.0/19 maxlen: 19 62.132.0.0/22 maxlen: 22 62.132.16.0/22 maxlen: 22 62.132.24.0/23 maxlen: 23 62.132.28.0/24 maxlen: 24 62.132.42.0/23 maxlen: 23 62.132.114.0/23 maxlen: 23 62.132.116.0/23 maxlen: 23 62.132.132.0/23 maxlen: 23 77.67.0.0/17 maxlen: 24 77.77.128.0/18 maxlen: 24 87.119.64.0/18 maxlen: 24 89.149.128.0/18 maxlen: 24 92.71.0.0/17 maxlen: 17 92.71.128.0/18 maxlen: 18 134.222.0.0/16 maxlen: 16 135.196.48.0/21 maxlen: 24 135.196.228.0/23 maxlen: 24 135.196.232.0/23 maxlen: 24 135.196.238.0/23 maxlen: 24 141.136.96.0/20 maxlen: 20 185.160.40.0/22 maxlen: 22 192.16.202.0/24 maxlen: 24 192.54.104.0/24 maxlen: 24 192.67.190.0/23 maxlen: 23 192.67.192.0/22 maxlen: 22 192.67.196.0/24 maxlen: 24 192.129.32.0/23 maxlen: 23 192.129.36.0/24 maxlen: 24 192.129.43.0/24 maxlen: 24 192.129.44.0/24 maxlen: 24 192.129.46.0/23 maxlen: 23 192.129.48.0/23 maxlen: 23 192.129.54.0/24 maxlen: 24 192.129.56.0/23 maxlen: 24 193.141.0.0/23 maxlen: 23 193.141.2.0/24 maxlen: 24 193.141.40.0/22 maxlen: 22 193.141.44.0/23 maxlen: 23 193.141.140.0/23 maxlen: 23 193.242.80.0/20 maxlen: 20 194.41.62.0/24 maxlen: 24 194.45.4.0/23 maxlen: 23 194.45.12.0/23 maxlen: 23 194.45.47.0/24 maxlen: 24 194.45.98.0/23 maxlen: 23 194.45.182.0/23 maxlen: 23 194.120.0.0/24 maxlen: 24 194.120.43.0/24 maxlen: 24 194.120.112.0/22 maxlen: 22 194.120.120.0/22 maxlen: 22 194.121.52.0/22 maxlen: 22 194.121.104.0/23 maxlen: 23 194.121.123.0/24 maxlen: 24 194.121.203.0/24 maxlen: 24 194.121.220.0/22 maxlen: 22 194.122.76.0/22 maxlen: 22 194.122.80.0/21 maxlen: 21 194.122.120.0/21 maxlen: 21 194.122.224.0/20 maxlen: 20 194.122.248.0/22 maxlen: 22 194.123.122.0/24 maxlen: 24 194.123.164.0/24 maxlen: 24 195.86.28.0/22 maxlen: 24 195.86.32.0/22 maxlen: 24 195.86.44.0/22 maxlen: 24 195.86.52.0/22 maxlen: 24 195.86.164.0/22 maxlen: 24 195.86.176.0/20 maxlen: 24 195.86.224.0/21 maxlen: 24 195.86.236.0/23 maxlen: 24 195.143.0.0/16 maxlen: 24 195.162.240.0/20 maxlen: 20 212.0.224.0/19 maxlen: 19 212.1.0.0/19 maxlen: 19 212.14.64.0/19 maxlen: 19 212.27.160.0/19 maxlen: 19 212.56.0.0/19 maxlen: 19 212.81.64.0/18 maxlen: 18 212.115.128.0/18 maxlen: 24 212.189.0.0/17 maxlen: 17 212.221.0.0/17 maxlen: 24 212.222.0.0/16 maxlen: 24 213.200.64.0/18 maxlen: 18 213.251.0.0/18 maxlen: 24 213.254.192.0/18 maxlen: 24 217.114.112.0/20 maxlen: 20 217.117.160.0/20 maxlen: 20 217.118.112.0/20 maxlen: 20 217.195.224.0/19 maxlen: 19 2001:668::/29 maxlen: 64 2001:680::/32 maxlen: 32 2001:680:12::/48 maxlen: 48 2001:680:16::/48 maxlen: 48 2001:680:19::/48 maxlen: 48 2001:680:20::/48 maxlen: 48 2a00:1750::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:43:69:4a:80:ee:88:dc:d5:85:91:47:92:2f:c6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 23 08:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=270575da47b5cf61e78c411fbc23a2fa74f0a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:83:81:6d:fe:bf:98:6d:c6:c1:78:20:e6: d1:35:b4:62:2b:8d:9b:bf:58:07:9e:7a:26:f0:b6: a3:13:4f:6d:2a:0d:c1:b1:e3:a5:3c:ec:a7:ee:a2: 31:84:df:86:1a:72:4d:eb:cb:6a:fc:29:1b:b0:de: f4:1c:97:28:de:3c:64:a2:e9:aa:59:0c:28:e5:eb: 67:f1:dc:78:a5:c3:6a:0b:a8:7f:b4:3e:7b:df:aa: a1:ff:4a:6b:90:62:9b:3e:21:8a:df:38:79:09:57: bc:d6:80:83:c0:16:ca:59:78:6d:0a:11:49:95:d4: e7:2f:f8:54:77:58:15:b6:07:79:f9:c7:5e:80:e1: ce:56:93:f0:4a:70:18:77:52:6e:67:39:fe:50:e3: 65:19:bf:73:5c:92:4d:05:ff:f2:14:c0:f1:9f:c9: dc:ae:06:ad:9e:fe:ec:6f:18:b7:34:56:67:26:36: 5d:19:91:63:39:83:68:ce:83:6d:e7:e1:30:ae:ed: f8:fa:28:d1:56:42:4d:9f:95:2e:4f:0e:31:d1:c3: bd:ad:6e:ff:5f:8c:d9:2c:7f:1f:8a:a7:92:f0:a2: 3e:d3:a1:f5:0a:45:92:26:7e:35:60:76:5b:f5:a7: 50:a8:0b:e6:3b:e6:cd:0d:18:a7:6f:56:47:0d:15: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:75:DA:47:B5:CF:61:E7:8C:41:1F:BC:23:A2:FA:74:F0:A9:7A X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JwV12ke1z2HnjEEfvCOi-nTwqXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.64.0/19 62.41.0.0-62.41.27.255 62.41.32.0/24 62.41.37.0/24 62.41.56.0-62.41.85.255 62.41.102.0/24 62.41.160.0/24 62.50.128.0/19 62.132.0.0/22 62.132.16.0/22 62.132.24.0/23 62.132.28.0/24 62.132.42.0/23 62.132.114.0-62.132.117.255 62.132.132.0/23 77.67.0.0/17 77.77.128.0/18 87.119.64.0/18 89.149.128.0/18 92.71.0.0-92.71.191.255 134.222.0.0/16 135.196.48.0/21 135.196.228.0/23 135.196.232.0/23 135.196.238.0/23 141.136.96.0/20 185.160.40.0/22 192.16.202.0/24 192.54.104.0/24 192.67.190.0-192.67.196.255 192.129.32.0/23 192.129.36.0/24 192.129.43.0-192.129.44.255 192.129.46.0-192.129.49.255 192.129.54.0/24 192.129.56.0/23 193.141.0.0-193.141.2.255 193.141.40.0-193.141.45.255 193.141.140.0/23 193.242.80.0/20 194.41.62.0/24 194.45.4.0/23 194.45.12.0/23 194.45.47.0/24 194.45.98.0/23 194.45.182.0/23 194.120.0.0/24 194.120.43.0/24 194.120.112.0/22 194.120.120.0/22 194.121.52.0/22 194.121.104.0/23 194.121.123.0/24 194.121.203.0/24 194.121.220.0/22 194.122.76.0-194.122.87.255 194.122.120.0/21 194.122.224.0/20 194.122.248.0/22 194.123.122.0/24 194.123.164.0/24 195.86.28.0-195.86.35.255 195.86.44.0/22 195.86.52.0/22 195.86.164.0/22 195.86.176.0/20 195.86.224.0/21 195.86.236.0/23 195.143.0.0/16 195.162.240.0/20 212.0.224.0-212.1.31.255 212.14.64.0/19 212.27.160.0/19 212.56.0.0/19 212.81.64.0/18 212.115.128.0/18 212.189.0.0/17 212.221.0.0/17 212.222.0.0/16 213.200.64.0/18 213.251.0.0/18 213.254.192.0/18 217.114.112.0/20 217.117.160.0/20 217.118.112.0/20 217.195.224.0/19 IPv6: 2001:668::/29 2001:680::/32 2a00:1750::/32 Signature Algorithm: sha256WithRSAEncryption 95:08:40:6b:55:91:f6:73:82:2b:c1:d4:12:2b:31:81:ca:28: 21:e7:c5:0f:e7:57:eb:93:ba:95:31:c7:69:a2:12:a8:a7:22: e1:6f:06:2e:a7:71:66:85:b2:a4:80:a7:99:55:61:32:88:57: f5:95:bc:ac:37:05:05:2d:5c:62:07:9a:2f:37:f0:ab:84:0d: 44:a8:ed:55:43:65:6f:68:45:d5:cf:1f:e4:57:97:17:2c:fe: 8a:72:73:b7:f2:df:92:d7:9c:39:bb:25:6a:83:49:22:9b:6e: d7:51:0a:00:22:d5:e0:3d:a7:6b:1f:20:08:d6:2f:15:9a:c9: 5f:b4:13:29:bd:86:c1:b7:f9:23:42:0f:02:f6:8e:e6:3d:22: fe:d1:1e:32:ad:12:fb:74:9a:fe:aa:f7:72:25:86:fd:4e:be: f3:89:d7:72:b9:79:8a:88:d4:26:c7:67:b4:e9:9b:88:f6:04: 3e:66:16:c2:b9:68:88:27:70:d7:4a:5b:2c:a1:74:8d:4f:f6: ed:21:94:81:85:d6:df:e7:ac:6f:ed:63:b8:56:fd:a4:0b:28: 62:53:e1:60:1a:1f:b4:ba:f4:e8:02:d1:c0:e4:24:a7:9f:01: f8:e8:82:9e:bb:7f:a3:d9:37:a4:db:68:56:a0:74:63:10:63: 33:39:7e:ff -----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgISAZtKQ2lKgO6I3NWFkUeSL8b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjIzMDgxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzA1NzVkYTQ3YjVjZjYxZTc4YzQxMWZiYzIzYTJmYTc0ZjBhOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkWDgW3+v5htxsF4IObRNbRiK42b v1gHnnom8LajE09tKg3BseOlPOyn7qIxhN+GGnJN68tq/CkbsN70HJco3jxkoumq WQwo5etn8dx4pcNqC6h/tD5736qh/0prkGKbPiGK3zh5CVe81oCDwBbKWXhtChFJ ldTnL/hUd1gVtgd5+cdegOHOVpPwSnAYd1JuZzn+UONlGb9zXJJNBf/yFMDxn8nc rgatnv7sbxi3NFZnJjZdGZFjOYNozoNt5+Ewru34+ijRVkJNn5UuTw4x0cO9rW7/ X4zZLH8fiqeS8KI+06H1CkWSJn41YHZb9adQqAvmO+bNDRinb1ZHDRWTHwIDAQAB o4IEiDCCBIQwHQYDVR0OBBYEFCcFddpHtc9h54xBH7wjovp08Kl6MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSndWMTJrZTF6MkhuakVFZnZDT2ktblR3cVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICnAYIKwYBBQUHAQcBAf8EggKLMIIChzCCAmYEAgABMIIC XgMEBS4hQDALAwMAPikDBAI+KRgDBAA+KSADBAA+KSUwDAMEAz4pOAMEAT4pVAME AD4pZgMEAD4poAMEBT4ygAMEAj6EAAMEAj6EEAMEAT6EGAMEAD6EHAMEAT6EKjAM AwQBPoRyAwQBPoR0AwQBPoSEAwQHTUMAAwQGTU2AAwQGV3dAAwQGWZWAMAsDAwBc RwMEBlxHgAMDAIbeAwQDh8QwAwQBh8TkAwQBh8ToAwQBh8TuAwQEjYhgAwQCuaAo AwQAwBDKAwQAwDZoMAwDBAHAQ74DBADAQ8QDBAHAgSADBADAgSQwDAMEAMCBKwME AMCBLDAMAwQBwIEuAwQBwIEwAwQAwIE2AwQBwIE4MAsDAwDBjQMEAMGNAjAMAwQD wY0oAwQBwY0sAwQBwY2MAwQEwfJQAwQAwik+AwQBwi0EAwQBwi0MAwQAwi0vAwQB wi1iAwQBwi22AwQAwngAAwQAwngrAwQCwnhwAwQCwnh4AwQCwnk0AwQBwnloAwQA wnl7AwQAwnnLAwQCwnncMAwDBALCekwDBAPCelADBAPCengDBATCeuADBALCevgD BADCe3oDBADCe6QwDAMEAsNWHAMEAsNWIAMEAsNWLAMEAsNWNAMEAsNWpAMEBMNW sAMEA8NW4AMEAcNW7AMDAMOPAwQEw6LwMAwDBAXUAOADBAXUAQADBAXUDkADBAXU G6ADBAXUOAADBAbUUUADBAbUc4ADBAfUvQADBAfU3QADAwDU3gMEBtXIQAMEBtX7 AAMEBtX+wAMEBNlycAMEBNl1oAMEBNl2cAMEBdnD4DAbBAIAAjAVAwUDIAEGaAMF ACABBoADBQAqABdQMA0GCSqGSIb3DQEBCwUAA4IBAQCVCEBrVZH2c4IrwdQSKzGB yigh58UP51frk7qVMcdpohKopyLhbwYup3FmhbKkgKeZVWEyiFf1lbysNwUFLVxi B5ovN/CrhA1EqO1VQ2VvaEXVzx/kV5cXLP6KcnO38t+S15w5uyVqg0kim27XUQoA ItXgPadrHyAI1i8VmslftBMpvYbBt/kjQg8C9o7mPSL+0R4yrRL7dJr+qvdyJYb9 Tr7ziddyuXmKiNQmx2e06ZuI9gQ+ZhbCuWiIJ3DXSlssoXSNT/btIZSBhdbf56xv 7WO4Vv2kCyhiU+FgGh+0uvToAtHA5CSnnwH46IKeu3+j2Tek22hWoHRjEGMzOX7/ -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:13 2025 by rpki-client