This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/JzhyAViO7IK7RlS2hXx7L9AIs80.roa File: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (raw, json) Hash identifier: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA= Subject key identifier: 27:38:72:01:58:8E:EC:82:BB:46:54:B6:85:7C:7B:2F:D0:08:B3:CD Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72 Certificate serial: 019B79EC9A78DEE97194E6B7B309B89BFA0E Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/JzhyAViO7IK7RlS2hXx7L9AIs80.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22822 IP address blocks: 46.183.88.0/21 maxlen: 24 46.228.144.0/20 maxlen: 24 87.248.192.0/19 maxlen: 24 87.248.210.0/23 maxlen: 23 87.248.212.0/23 maxlen: 23 95.140.224.0/20 maxlen: 24 95.140.224.0/22 maxlen: 22 178.79.192.0/18 maxlen: 24 178.79.196.0/23 maxlen: 23 178.79.203.0/24 maxlen: 24 178.79.214.0/23 maxlen: 23 178.79.228.0/23 maxlen: 23 178.79.230.0/23 maxlen: 23 178.79.232.0/22 maxlen: 22 178.79.236.0/22 maxlen: 22 178.79.240.0/21 maxlen: 21 178.79.248.0/21 maxlen: 21 178.249.104.0/21 maxlen: 24 178.249.105.0/24 maxlen: 24 185.116.100.0/22 maxlen: 22 185.178.52.0/22 maxlen: 22 185.178.52.0/24 maxlen: 24 185.178.53.0/24 maxlen: 24 185.178.54.0/24 maxlen: 24 185.178.55.0/24 maxlen: 24 216.247.120.0/21 maxlen: 24 2a02:3d0::/32 maxlen: 48 2a02:3d0:600::/48 maxlen: 48 2a02:3d0:601::/48 maxlen: 48 2a02:3d0:621::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9a:78:de:e9:71:94:e6:b7:b3:09:b8:9b:fa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27387201588eec82bb4654b6857c7b2fd008b3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:04:4e:1b:fd:4e:30:8f:38:12:35:38:9f: 56:55:9d:8b:fa:95:cc:0e:25:40:73:aa:da:ab:30: 91:16:61:17:9b:5c:a5:cb:56:60:5f:11:98:56:d8: 0d:1c:dd:07:1c:3e:1d:6f:bf:35:84:d1:9c:2f:f7: b0:d4:4a:fa:bf:08:8e:a9:c2:62:35:61:d9:05:15: 17:53:86:58:c2:5b:a6:59:0d:c2:8c:03:3c:2d:d8: 5b:84:f5:bf:e6:5a:a0:89:af:32:66:1f:f3:e9:03: 38:ec:dc:b5:84:50:d4:4e:f5:95:3b:d8:7f:be:ec: 47:84:a0:3c:ab:7f:f4:12:ff:cf:d7:24:42:e0:8f: a5:fe:4e:32:27:f3:ed:60:91:14:5e:0f:2b:09:f9: e3:0d:2e:28:2b:01:12:f3:f2:bc:38:9e:c4:83:0d: 4c:bd:68:55:76:de:a6:2e:bf:34:81:73:58:77:52: 7d:ad:7e:e0:21:db:51:5f:1f:5d:8c:d1:7a:c3:00: 24:75:50:9b:95:06:5c:bc:bb:45:01:c3:61:84:79: ec:56:66:73:b9:2d:67:e3:17:bb:e7:6d:6e:4f:69: ce:05:a1:0b:1b:e1:3b:bb:0e:97:99:53:0e:86:4a: 86:b5:d9:ff:0f:68:eb:3a:e0:0d:c3:ba:bc:2d:81: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:38:72:01:58:8E:EC:82:BB:46:54:B6:85:7C:7B:2F:D0:08:B3:CD X509v3 Authority Key Identifier: keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/JzhyAViO7IK7RlS2hXx7L9AIs80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.88.0/21 46.228.144.0/20 87.248.192.0/19 95.140.224.0/20 178.79.192.0/18 178.249.104.0/21 185.116.100.0/22 185.178.52.0/22 216.247.120.0/21 IPv6: 2a02:3d0::/32 Signature Algorithm: sha256WithRSAEncryption 99:1c:b4:a9:e4:e5:2d:5f:e6:94:30:be:c1:ec:46:41:a5:00: 8e:67:13:e3:fb:94:3e:39:7c:8e:73:8f:89:02:90:92:61:72: 1b:9a:bf:7a:b9:8a:0b:a5:8b:37:f1:de:df:59:8e:23:be:f8: c9:27:ee:2c:99:d6:b8:60:c7:e1:b5:35:6b:61:10:a0:c0:0a: c3:d5:75:5f:31:f6:12:a0:4f:01:7d:22:47:da:42:c6:5c:65: a7:82:9d:74:e7:5e:1d:d3:74:03:36:86:49:73:01:0e:e5:86: 0a:2f:66:9c:12:03:f5:d1:94:a3:b9:0e:3a:ce:19:07:b3:9d: f1:36:ad:b4:76:e2:8c:ef:b0:2a:57:c6:bf:95:77:b3:ad:67: dc:7e:c1:15:8a:22:69:90:68:5f:10:4f:c8:f0:01:76:6a:83: 20:72:05:8e:ad:92:79:9d:3b:20:15:ae:95:45:23:b7:cb:84: aa:b5:3a:65:ea:1d:38:f0:6f:f3:ed:a3:36:27:7e:20:53:a1: 98:d2:19:b9:b4:6a:00:6d:ac:ea:1b:e8:76:d4:48:6e:7e:cc: 40:0e:6a:9b:ef:d4:0d:9b:91:bb:15:e0:ed:31:14:61:e8:90: ae:0f:aa:60:46:18:29:99:5d:7e:08:b6:44:49:e9:77:f7:b6: 7c:67:f7:56 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt57Jp43ulxlOa3swm4m/oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2 NTdlNzIwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM4NzIwMTU4OGVlYzgyYmI0NjU0YjY4NTdjN2IyZmQwMDhiM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC8EThv9TjCPOBI1OJ9WVZ2L+pXM DiVAc6raqzCRFmEXm1yly1ZgXxGYVtgNHN0HHD4db781hNGcL/ew1Er6vwiOqcJi NWHZBRUXU4ZYwlumWQ3CjAM8LdhbhPW/5lqgia8yZh/z6QM47Ny1hFDUTvWVO9h/ vuxHhKA8q3/0Ev/P1yRC4I+l/k4yJ/PtYJEUXg8rCfnjDS4oKwES8/K8OJ7Egw1M vWhVdt6mLr80gXNYd1J9rX7gIdtRXx9djNF6wwAkdVCblQZcvLtFAcNhhHnsVmZz uS1n4xe7521uT2nOBaELG+E7uw6XmVMOhkqGtdn/D2jrOuANw7q8LYFEnwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCc4cgFYjuyCu0ZUtoV8ey/QCLPNMB8GA1UdIwQY MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt ZmE1YWYzOGRlYjVlLzEvSnpoeUFWaU83SUs3UmxTMmhYeDdMOUFJczgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLrdYAwQE LuSQAwQFV/jAAwQEX4zgAwQGsk/AAwQDsvloAwQCuXRkAwQCubI0AwQD2Pd4MA0E AgACMAcDBQAqAgPQMA0GCSqGSIb3DQEBCwUAA4IBAQCZHLSp5OUtX+aUML7B7EZB pQCOZxPj+5Q+OXyOc4+JApCSYXIbmr96uYoLpYs38d7fWY4jvvjJJ+4smda4YMfh tTVrYRCgwArD1XVfMfYSoE8BfSJH2kLGXGWngp10514d03QDNoZJcwEO5YYKL2ac EgP10ZSjuQ46zhkHs53xNq20duKM77AqV8a/lXezrWfcfsEViiJpkGhfEE/I8AF2 aoMgcgWOrZJ5nTsgFa6VRSO3y4SqtTpl6h048G/z7aM2J34gU6GY0hm5tGoAbazq G+h21EhufsxADmqb79QNm5G7FeDtMRRh6JCuD6pgRhgpmV1+CLZESel397Z8Z/dW -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client