This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/JlOAjttYipL0TGtbfBsFFvLjAR8.roa File: JlOAjttYipL0TGtbfBsFFvLjAR8.roa (raw, json) Hash identifier: TVmfCw1v4XJ8nqxuPkYqDh+JoZDFJOLgqdhk5gRKV6o= Subject key identifier: 26:53:80:8E:DB:58:8A:92:F4:4C:6B:5B:7C:1B:05:16:F2:E3:01:1F Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Certificate serial: 019B7F13BD17EE24229ECE613E0979621295 Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/JlOAjttYipL0TGtbfBsFFvLjAR8.roa Signing time: Fri 02 Jan 2026 14:19:18 +0000 ROA not before: Fri 02 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60175 IP address blocks: 89.63.0.0/18 maxlen: 18 89.63.0.0/20 maxlen: 20 89.63.16.0/20 maxlen: 20 89.63.20.0/24 maxlen: 24 89.63.32.0/19 maxlen: 19 89.63.32.0/20 maxlen: 20 89.63.32.0/24 maxlen: 24 89.63.240.0/20 maxlen: 20 185.35.12.0/22 maxlen: 24 185.35.12.0/24 maxlen: 24 185.35.14.0/23 maxlen: 23 195.4.128.0/19 maxlen: 19 195.4.145.0/24 maxlen: 24 195.4.160.0/20 maxlen: 20 195.4.184.0/21 maxlen: 21 195.4.192.0/20 maxlen: 20 195.4.199.0/24 maxlen: 24 195.4.208.0/21 maxlen: 21 2a00:dca0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:bd:17:ee:24:22:9e:ce:61:3e:09:79:62:12:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Validity Not Before: Jan 2 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2653808edb588a92f44c6b5b7c1b0516f2e3011f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:de:23:f2:59:5d:65:e4:7f:c5:7b:7a:ec: 50:77:bc:bd:c1:83:e6:13:e7:e0:ef:16:7f:bb:62: 9c:7e:eb:bd:0c:a8:18:22:e0:41:41:b5:b2:1e:f1: d1:9f:a0:5f:ad:a1:06:4d:32:d8:95:a1:33:8e:79: 54:66:c1:91:a5:ca:c6:ad:53:3b:61:d8:fd:d8:6e: 74:08:d6:e3:69:7d:91:ad:32:47:8c:ed:11:b4:0e: e6:11:a7:fb:74:67:a8:dc:38:78:46:1b:d7:43:a7: 48:11:98:52:e9:43:1a:42:fb:19:da:d3:64:b8:4c: 78:f3:37:96:bd:d6:40:d3:fa:13:ca:30:e0:62:55: b8:0e:0f:c2:fa:19:9a:cc:87:15:1e:41:34:0f:b3: 21:e8:1a:81:e7:40:14:39:ae:d3:82:2d:82:8b:54: fa:92:c4:9e:d1:29:3c:52:33:cb:ed:03:a3:c9:30: 6b:d5:39:8b:e6:75:b7:e5:31:67:ee:56:fa:92:66: e7:ca:95:b2:8f:06:6a:a1:c2:61:8e:f4:b5:4e:38: 72:68:fc:de:b5:9d:0d:7b:69:17:19:3a:80:f7:13: bf:6c:25:cc:40:02:4b:74:ab:e0:a4:e2:fd:ac:cb: 59:c3:f3:00:47:26:50:06:73:7a:e3:84:69:4a:5c: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:53:80:8E:DB:58:8A:92:F4:4C:6B:5B:7C:1B:05:16:F2:E3:01:1F X509v3 Authority Key Identifier: keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/JlOAjttYipL0TGtbfBsFFvLjAR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.63.0.0/18 89.63.240.0/20 185.35.12.0/22 195.4.128.0-195.4.175.255 195.4.184.0-195.4.215.255 IPv6: 2a00:dca0::/29 Signature Algorithm: sha256WithRSAEncryption 8e:95:0d:10:03:cf:5b:33:96:48:a1:6b:e0:2b:75:ba:81:d0: a2:31:2f:3b:09:60:82:71:2b:d4:e2:e7:26:b1:c1:6c:1f:0d: 7d:cf:a6:40:c1:ac:06:8c:a6:bf:2d:88:7d:4d:07:29:bc:ae: d6:27:15:be:fc:5d:d7:2c:2e:fa:99:e7:11:cc:cc:9d:ff:bf: 5f:ed:31:27:4e:c7:02:b6:6d:26:57:7f:0e:b1:ce:0b:21:30: 09:12:c7:b3:a7:da:f9:75:b7:84:88:7e:60:28:66:66:3e:34: d0:48:31:87:e9:d8:a6:64:20:44:17:8d:ac:dc:f4:76:4c:6c: 1f:ce:25:bc:46:31:51:4b:da:98:fd:8e:7e:b0:69:3d:b0:1c: c3:ca:f2:79:4a:b1:88:83:d8:ef:8d:a0:df:44:83:1e:ef:cb: 0e:9f:17:d5:8e:e1:aa:19:a8:da:2f:03:dd:b3:86:38:1c:4b: 64:ca:cc:56:a9:c0:ed:6d:41:20:7a:26:d9:f3:68:65:21:60: 37:37:2f:59:d9:89:c2:5a:8a:d4:f3:a7:b3:60:b9:7e:c1:3e: d0:e5:71:13:11:7c:2a:ae:fa:48:ea:d7:36:33:23:04:e2:79: 81:c6:6c:a3:75:f9:2d:e1:c3:5b:52:86:95:95:30:fa:1f:9b: dd:f4:ed:0e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/E70X7iQins5hPgl5YhKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl ZmNlZWMwHhcNMjYwMTAyMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjUzODA4ZWRiNTg4YTkyZjQ0YzZiNWI3YzFiMDUxNmYyZTMwMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB7eI/JZXWXkf8V7euxQd7y9wYPm E+fg7xZ/u2Kcfuu9DKgYIuBBQbWyHvHRn6BfraEGTTLYlaEzjnlUZsGRpcrGrVM7 Ydj92G50CNbjaX2RrTJHjO0RtA7mEaf7dGeo3Dh4RhvXQ6dIEZhS6UMaQvsZ2tNk uEx48zeWvdZA0/oTyjDgYlW4Dg/C+hmazIcVHkE0D7Mh6BqB50AUOa7Tgi2Ci1T6 ksSe0Sk8UjPL7QOjyTBr1TmL5nW35TFn7lb6kmbnypWyjwZqocJhjvS1TjhyaPze tZ0Ne2kXGTqA9xO/bCXMQAJLdKvgpOL9rMtZw/MARyZQBnN644RpSlyhgwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFCZTgI7bWIqS9ExrW3wbBRby4wEfMB8GA1UdIwQY MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt ZjAxNmNhNWRhMjE5LzEvSmxPQWp0dFlpcEwwVEd0YmZCc0ZGdkxqQVI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5 LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQGWT8AAwQE WT/wAwQCuSMMMAwDBAfDBIADBATDBKAwDAMEA8MEuAMEA8ME0DANBAIAAjAHAwUD KgDcoDANBgkqhkiG9w0BAQsFAAOCAQEAjpUNEAPPWzOWSKFr4Ct1uoHQojEvOwlg gnEr1OLnJrHBbB8Nfc+mQMGsBoymvy2IfU0HKbyu1icVvvxd1ywu+pnnEczMnf+/ X+0xJ07HArZtJld/DrHOCyEwCRLHs6fa+XW3hIh+YChmZj400Egxh+nYpmQgRBeN rNz0dkxsH84lvEYxUUvamP2OfrBpPbAcw8ryeUqxiIPY742g30SDHu/LDp8X1Y7h qhmo2i8D3bOGOBxLZMrMVqnA7W1BIHom2fNoZSFgNzcvWdmJwlqK1POns2C5fsE+ 0OVxExF8Kq76SOrXNjMjBOJ5gcZso3X5LeHDW1KGlZUw+h+b3fTtDg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:38 2026 by rpki-client