This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/JC-QBPU6pzGu7bP_axgEOl4qz7o.roa File: JC-QBPU6pzGu7bP_axgEOl4qz7o.roa (raw, json) Hash identifier: WtXbDeqkKLxpoU7NwhEzUOcIA9wmuY4iaGvGsF2UVDE= Subject key identifier: 24:2F:90:04:F5:3A:A7:31:AE:ED:B3:FF:6B:18:04:3A:5E:2A:CF:BA Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B2B55EB3EA0C7BC9820AFD2F4BC4D9C74 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/JC-QBPU6pzGu7bP_axgEOl4qz7o.roa Signing time: Wed 17 Dec 2025 08:03:29 +0000 ROA not before: Wed 17 Dec 2025 08:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9021 IP address blocks: 90.158.0.0/16 maxlen: 16 90.158.0.0/18 maxlen: 18 90.158.0.0/22 maxlen: 22 90.158.0.0/23 maxlen: 23 90.158.3.0/24 maxlen: 24 90.158.8.0/24 maxlen: 24 90.158.15.0/24 maxlen: 24 90.158.16.0/24 maxlen: 24 90.158.18.0/24 maxlen: 24 90.158.19.0/24 maxlen: 24 90.158.24.0/24 maxlen: 24 90.158.26.0/24 maxlen: 24 90.158.27.0/24 maxlen: 24 90.158.28.0/24 maxlen: 24 90.158.29.0/24 maxlen: 24 90.158.30.0/24 maxlen: 24 90.158.31.0/24 maxlen: 24 90.158.32.0/24 maxlen: 24 90.158.33.0/24 maxlen: 24 90.158.36.0/24 maxlen: 24 90.158.37.0/24 maxlen: 24 90.158.39.0/24 maxlen: 24 90.158.41.0/24 maxlen: 24 90.158.43.0/24 maxlen: 24 90.158.44.0/24 maxlen: 24 90.158.45.0/24 maxlen: 24 90.158.46.0/24 maxlen: 24 90.158.47.0/24 maxlen: 24 90.158.48.0/20 maxlen: 20 90.158.48.0/24 maxlen: 24 90.158.50.0/23 maxlen: 23 90.158.51.0/24 maxlen: 24 90.158.52.0/23 maxlen: 23 90.158.52.0/24 maxlen: 24 90.158.53.0/24 maxlen: 24 90.158.54.0/23 maxlen: 23 90.158.55.0/24 maxlen: 24 90.158.56.0/24 maxlen: 24 90.158.60.0/24 maxlen: 24 90.158.61.0/24 maxlen: 24 90.158.62.0/24 maxlen: 24 90.158.64.0/21 maxlen: 21 90.158.64.0/24 maxlen: 24 90.158.65.0/24 maxlen: 24 90.158.66.0/24 maxlen: 24 90.158.67.0/24 maxlen: 24 90.158.68.0/24 maxlen: 24 90.158.72.0/22 maxlen: 22 90.158.72.0/24 maxlen: 24 90.158.73.0/24 maxlen: 24 90.158.74.0/24 maxlen: 24 90.158.75.0/24 maxlen: 24 90.158.96.0/22 maxlen: 22 90.158.100.0/24 maxlen: 24 90.158.101.0/24 maxlen: 24 90.158.102.0/23 maxlen: 23 90.158.104.0/24 maxlen: 24 90.158.105.0/24 maxlen: 24 90.158.106.0/24 maxlen: 24 90.158.108.0/24 maxlen: 24 90.158.109.0/24 maxlen: 24 90.158.110.0/24 maxlen: 24 90.158.111.0/24 maxlen: 24 90.158.112.0/20 maxlen: 20 90.158.113.0/24 maxlen: 24 90.158.114.0/24 maxlen: 24 90.158.115.0/24 maxlen: 24 90.158.116.0/24 maxlen: 24 90.158.117.0/24 maxlen: 24 90.158.119.0/24 maxlen: 24 90.158.120.0/24 maxlen: 24 90.158.121.0/24 maxlen: 24 90.158.122.0/24 maxlen: 24 90.158.123.0/24 maxlen: 24 90.158.125.0/24 maxlen: 24 90.158.126.0/24 maxlen: 24 90.158.127.0/24 maxlen: 24 90.158.128.0/17 maxlen: 17 90.158.128.0/21 maxlen: 21 90.158.136.0/21 maxlen: 21 90.158.137.0/24 maxlen: 24 90.158.138.0/24 maxlen: 24 90.158.139.0/24 maxlen: 24 90.158.152.0/24 maxlen: 24 90.158.160.0/24 maxlen: 24 90.158.161.0/24 maxlen: 24 90.158.200.0/23 maxlen: 23 90.158.224.0/22 maxlen: 22 90.158.240.0/21 maxlen: 21 90.158.244.0/22 maxlen: 22 90.158.248.0/21 maxlen: 21 90.158.249.0/24 maxlen: 24 90.158.251.0/24 maxlen: 24 90.158.252.0/22 maxlen: 22 90.159.0.0/16 maxlen: 16 90.159.0.0/22 maxlen: 22 90.159.0.0/24 maxlen: 24 90.159.1.0/24 maxlen: 24 90.159.2.0/24 maxlen: 24 90.159.3.0/24 maxlen: 24 90.159.4.0/23 maxlen: 23 90.159.10.0/24 maxlen: 24 90.159.15.0/24 maxlen: 24 90.159.20.0/24 maxlen: 24 90.159.26.0/24 maxlen: 24 90.159.27.0/24 maxlen: 24 90.159.29.0/24 maxlen: 24 90.159.31.0/24 maxlen: 24 90.159.33.0/24 maxlen: 24 90.159.34.0/24 maxlen: 24 90.159.36.0/24 maxlen: 24 90.159.37.0/24 maxlen: 24 90.159.38.0/24 maxlen: 24 90.159.44.0/22 maxlen: 22 90.159.50.0/24 maxlen: 24 90.159.51.0/24 maxlen: 24 90.159.58.0/24 maxlen: 24 90.159.59.0/24 maxlen: 24 90.159.60.0/24 maxlen: 24 90.159.61.0/24 maxlen: 24 90.159.64.0/18 maxlen: 18 90.159.64.0/24 maxlen: 24 90.159.68.0/24 maxlen: 24 90.159.128.0/20 maxlen: 20 90.159.136.0/21 maxlen: 21 90.159.136.0/24 maxlen: 24 90.159.240.0/20 maxlen: 20 90.159.246.0/24 maxlen: 24 212.98.0.0/19 maxlen: 19 212.98.0.0/20 maxlen: 20 212.98.1.0/24 maxlen: 24 212.98.2.0/24 maxlen: 24 212.98.8.0/21 maxlen: 21 212.98.9.0/24 maxlen: 24 212.98.16.0/21 maxlen: 21 212.98.16.0/24 maxlen: 24 212.98.28.0/22 maxlen: 22 212.98.31.0/24 maxlen: 24 213.143.224.0/20 maxlen: 20 213.143.226.0/23 maxlen: 23 213.143.226.0/24 maxlen: 24 213.143.227.0/24 maxlen: 24 213.143.228.0/24 maxlen: 24 213.143.229.0/24 maxlen: 24 213.143.230.0/24 maxlen: 24 213.143.231.0/24 maxlen: 24 213.143.233.0/24 maxlen: 24 213.143.234.0/24 maxlen: 24 213.143.235.0/24 maxlen: 24 213.143.236.0/22 maxlen: 22 213.143.236.0/24 maxlen: 24 213.143.237.0/24 maxlen: 24 213.143.238.0/24 maxlen: 24 213.143.239.0/24 maxlen: 24 213.143.240.0/20 maxlen: 20 213.143.240.0/22 maxlen: 22 213.143.240.0/24 maxlen: 24 213.143.241.0/24 maxlen: 24 213.143.243.0/24 maxlen: 24 213.143.244.0/22 maxlen: 22 213.143.250.0/24 maxlen: 24 213.143.251.0/24 maxlen: 24 213.143.252.0/24 maxlen: 24 213.143.253.0/24 maxlen: 24 213.143.254.0/24 maxlen: 24 213.143.255.0/24 maxlen: 24 213.161.128.0/19 maxlen: 19 213.161.128.0/21 maxlen: 21 213.161.135.0/24 maxlen: 24 213.161.136.0/21 maxlen: 21 213.161.136.0/22 maxlen: 22 213.161.144.0/23 maxlen: 23 213.161.144.0/24 maxlen: 24 213.161.145.0/24 maxlen: 24 213.161.146.0/24 maxlen: 24 213.161.148.0/23 maxlen: 23 213.161.148.0/24 maxlen: 24 213.161.149.0/24 maxlen: 24 213.161.150.0/24 maxlen: 24 213.161.151.0/24 maxlen: 24 213.161.152.0/21 maxlen: 21 213.161.152.0/24 maxlen: 24 2a00:1f90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:55:eb:3e:a0:c7:bc:98:20:af:d2:f4:bc:4d:9c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Dec 17 08:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=242f9004f53aa731aeedb3ff6b18043a5e2acfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:8c:bd:28:44:9f:02:46:2d:7f:d9:74:4b: 29:85:91:12:20:5a:cc:02:3a:44:90:cd:03:0a:5a: 58:20:9a:68:dc:b0:e4:5d:82:0d:da:fc:14:1d:bd: 06:6d:5c:91:d8:51:b8:33:77:3f:65:ea:5a:17:a1: b3:36:9d:ed:5d:0c:e3:48:0e:80:ad:e3:99:9a:4c: 8b:c1:69:07:9f:f7:d6:37:39:40:1f:a7:80:c8:b7: 94:17:92:56:54:35:dd:c7:06:06:a2:b5:ac:af:f2: 93:cc:ac:62:00:52:70:de:04:aa:f6:64:b9:e8:e1: a3:48:f2:e2:34:46:6c:36:2e:0b:ee:a2:9b:fc:36: 9a:90:6c:d8:03:ea:76:45:bd:73:00:15:7f:be:29: f1:11:19:e7:da:45:70:8e:14:40:fe:a7:1b:f5:ed: f1:09:e1:ab:bb:f7:e1:84:e2:63:a6:e5:5d:69:52: 09:5b:39:09:b1:c1:9d:ea:54:e0:2f:5f:51:02:03: a6:d7:59:28:91:98:ed:7c:78:5d:d1:17:ee:83:37: 4b:74:a8:69:65:11:a9:a6:ae:34:5c:98:96:89:41: dc:f8:62:f8:20:27:98:e2:49:79:a6:a0:fd:20:31: 7f:6e:4a:7b:d8:27:8a:6f:a2:5f:30:86:9a:c2:62: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:90:04:F5:3A:A7:31:AE:ED:B3:FF:6B:18:04:3A:5E:2A:CF:BA X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/JC-QBPU6pzGu7bP_axgEOl4qz7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.158.0.0/15 212.98.0.0/19 213.143.224.0/19 213.161.128.0/19 IPv6: 2a00:1f90::/32 Signature Algorithm: sha256WithRSAEncryption 06:6e:03:9c:ef:79:9a:99:6d:dc:a2:c6:6f:35:28:5b:83:1a: 79:86:cf:69:8f:30:ad:ee:f3:6f:ff:36:75:89:0c:26:bb:1f: 6e:29:df:4a:f7:78:06:0b:c9:20:7a:ed:5a:86:11:3e:7c:6c: 5a:df:c4:d2:49:53:1e:c2:2c:c0:60:92:1e:88:cd:1e:01:a0: c6:82:8e:c8:01:6a:82:a1:88:ae:4e:8b:3c:39:ef:65:43:76: 5f:35:d2:6f:d2:fa:f3:07:73:2c:4a:a0:df:64:f0:f3:12:16: 42:92:f5:53:4f:76:b5:1e:eb:93:c5:99:0b:37:ef:e9:bf:30: 7a:d2:06:1c:56:f0:42:0a:0b:da:a4:a8:69:da:39:64:aa:29: 96:82:93:79:2a:26:c8:53:b0:ff:92:91:6c:f5:97:c3:9f:3a: a6:a1:f5:a7:fb:83:99:a3:c7:1b:19:8f:5a:eb:0e:07:a4:25: fe:82:93:4c:73:0b:8f:8f:84:56:03:04:95:2b:31:a0:76:8e: d9:3b:b3:7f:88:10:74:16:5b:4c:f8:2d:2c:80:c4:51:e2:77: 66:ea:1b:f7:c2:ec:e6:8f:3e:95:0e:65:3c:23:24:5d:49:48: 41:b9:a1:41:25:44:7e:c7:92:a6:75:fa:76:5d:06:0e:3c:48: 5f:c4:f8:85 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZsrVes+oMe8mCCv0vS8TZx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUxMjE3MDgwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDJmOTAwNGY1M2FhNzMxYWVlZGIzZmY2YjE4MDQzYTVlMmFjZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXaMvShEnwJGLX/ZdEsphZESIFrM AjpEkM0DClpYIJpo3LDkXYIN2vwUHb0GbVyR2FG4M3c/ZepaF6GzNp3tXQzjSA6A reOZmkyLwWkHn/fWNzlAH6eAyLeUF5JWVDXdxwYGorWsr/KTzKxiAFJw3gSq9mS5 6OGjSPLiNEZsNi4L7qKb/DaakGzYA+p2Rb1zABV/vinxERnn2kVwjhRA/qcb9e3x CeGru/fhhOJjpuVdaVIJWzkJscGd6lTgL19RAgOm11kokZjtfHhd0RfugzdLdKhp ZRGppq40XJiWiUHc+GL4ICeY4kl5pqD9IDF/bkp72CeKb6JfMIaawmL+xQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCQvkAT1Oqcxru2z/2sYBDpeKs+6MB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvSkMtUUJQVTZwekd1N2JQX2F4Z0VPbDRxejdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBWp4DBAXU YgADBAXVj+ADBAXVoYAwDQQCAAIwBwMFACoAH5AwDQYJKoZIhvcNAQELBQADggEB AAZuA5zveZqZbdyixm81KFuDGnmGz2mPMK3u82//NnWJDCa7H24p30r3eAYLySB6 7VqGET58bFrfxNJJUx7CLMBgkh6IzR4BoMaCjsgBaoKhiK5Oizw572VDdl810m/S +vMHcyxKoN9k8PMSFkKS9VNPdrUe65PFmQs37+m/MHrSBhxW8EIKC9qkqGnaOWSq KZaCk3kqJshTsP+SkWz1l8OfOqah9af7g5mjxxsZj1rrDgekJf6Ck0xzC4+PhFYD BJUrMaB2jtk7s3+IEHQWW0z4LSyAxFHid2bqG/fC7OaPPpUOZTwjJF1JSEG5oUEl RH7HkqZ1+nZdBg48SF/E+IU= -----END CERTIFICATE-----Generated at Sat Dec 20 13:11:25 2025 by rpki-client