This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JXnrULMb6DsHyM2cbpC7FtDo9UY.roa File: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (raw, json) Hash identifier: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ= Subject key identifier: 25:79:EB:50:B3:1B:E8:3B:07:C8:CD:9C:6E:90:BB:16:D0:E8:F5:46 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019BB76E3F1D3A688B644539479D63AC33A6 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JXnrULMb6DsHyM2cbpC7FtDo9UY.roa Signing time: Tue 13 Jan 2026 12:56:54 +0000 ROA not before: Tue 13 Jan 2026 12:56:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213455 IP address blocks: 82.141.160.0/23 maxlen: 23 91.82.48.0/23 maxlen: 23 91.82.62.0/23 maxlen: 23 91.82.225.0/24 maxlen: 24 91.83.160.0/22 maxlen: 22 194.143.239.0/24 maxlen: 24 213.16.110.0/24 maxlen: 24 2001:1aa1:8::/48 maxlen: 48 2001:1aa1:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:6e:3f:1d:3a:68:8b:64:45:39:47:9d:63:ac:33:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 13 12:56:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2579eb50b31be83b07c8cd9c6e90bb16d0e8f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5e:dd:12:0d:65:e5:6f:1a:88:67:d2:6e:77: ce:ce:a9:28:fc:79:2c:3c:00:31:6e:b6:b7:e5:d7: 02:6e:7a:a6:cb:ed:f8:bc:e9:85:2d:7a:d6:d4:01: 33:bf:80:23:f3:b7:f9:85:b5:bd:fd:e1:14:9a:b3: 2b:58:87:c4:77:20:43:8f:d4:69:9c:b4:c5:9d:08: f8:46:db:29:c0:5a:e8:40:64:6a:e0:90:ba:63:4e: ed:e7:a1:46:5f:4d:82:e0:b6:81:1b:b0:b9:5a:49: 64:e4:6e:ee:b6:93:af:3c:45:e0:21:98:00:d2:4a: b3:87:61:d3:73:54:6a:8c:70:48:f6:2e:9a:cd:d1: 44:2a:38:00:65:fa:57:ec:db:a1:5b:d1:30:32:22: 12:a3:09:71:e3:2e:86:ce:1d:5f:2f:4a:5a:fc:08: 7b:70:d0:05:d4:1d:a7:04:fb:ea:82:18:cc:90:80: 42:97:44:9f:b1:be:ab:29:b7:70:88:10:20:16:26: b8:bc:73:0c:fa:b2:5c:d2:c6:59:85:cc:5f:8f:5d: 58:9e:62:ae:60:9c:bb:06:8e:85:ae:46:a3:9a:5e: 79:c3:7c:de:9f:fc:72:ef:ab:20:bf:3b:76:00:cd: 90:15:a4:59:50:96:5b:38:f1:35:3a:8b:0c:b6:b2: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:EB:50:B3:1B:E8:3B:07:C8:CD:9C:6E:90:BB:16:D0:E8:F5:46 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JXnrULMb6DsHyM2cbpC7FtDo9UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.141.160.0/23 91.82.48.0/23 91.82.62.0/23 91.82.225.0/24 91.83.160.0/22 194.143.239.0/24 213.16.110.0/24 IPv6: 2001:1aa1:8::/48 2001:1aa1:18::/48 Signature Algorithm: sha256WithRSAEncryption 6d:1e:2f:6e:65:1b:a3:08:9b:da:15:30:60:f7:2e:28:e9:eb: b1:97:c9:35:09:7e:8b:70:a8:e3:46:7c:d9:48:94:f5:01:a0: 93:65:c6:76:14:dc:f1:74:1b:dc:82:45:4b:81:85:76:47:b2: 77:d8:23:5b:31:39:67:42:67:cc:13:68:de:ec:1e:dd:6c:5b: b7:12:d2:8f:e0:36:e1:5e:f2:d2:be:1f:cc:ed:c6:b1:96:08: 3e:07:4d:b2:6f:2e:f0:27:e4:b6:25:88:2c:e3:ad:15:49:0c: d6:d6:cb:17:11:ff:32:31:79:5c:72:8f:4b:ed:a9:24:c7:b8: 64:56:99:03:84:83:7a:fd:d8:e0:ae:96:b5:aa:28:a5:fc:8f: d5:ea:0e:1e:b5:ef:62:01:9a:03:54:5d:f4:ad:5e:2f:8d:81: a7:76:90:24:19:6b:ef:ad:6a:6e:8e:a0:cb:c3:89:25:a2:8a: ae:68:71:12:3e:7d:8e:0f:d4:72:ac:96:bd:e9:c7:83:8b:4e: 5b:8a:f4:a8:a6:43:64:e7:4a:29:f1:ab:e5:4e:bc:c7:07:73: 13:e8:85:5d:eb:ba:78:a2:f1:91:70:20:e1:da:54:ee:db:a0: a6:57:f4:46:50:38:87:34:35:52:c8:25:91:c4:6a:12:33:ac: 27:a4:bd:9e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZu3bj8dOmiLZEU5R51jrDOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTEzMTI1NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTc5ZWI1MGIzMWJlODNiMDdjOGNkOWM2ZTkwYmIxNmQwZThmNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj17dEg1l5W8aiGfSbnfOzqko/Hks PAAxbra35dcCbnqmy+34vOmFLXrW1AEzv4Aj87f5hbW9/eEUmrMrWIfEdyBDj9Rp nLTFnQj4RtspwFroQGRq4JC6Y07t56FGX02C4LaBG7C5Wklk5G7utpOvPEXgIZgA 0kqzh2HTc1RqjHBI9i6azdFEKjgAZfpX7NuhW9EwMiISowlx4y6Gzh1fL0pa/Ah7 cNAF1B2nBPvqghjMkIBCl0Sfsb6rKbdwiBAgFia4vHMM+rJc0sZZhcxfj11YnmKu YJy7Bo6Frkajml55w3zen/xy76sgvzt2AM2QFaRZUJZbOPE1OosMtrK5RwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFCV561CzG+g7B8jNnG6QuxbQ6PVGMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvSlhuclVMTWI2RHNIeU0yY2JwQzdGdERvOVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAwBAIAATAqAwQBUo2gAwQB W1IwAwQBW1I+AwQAW1LhAwQCW1OgAwQAwo/vAwQA1RBuMBgEAgACMBIDBwAgARqh AAgDBwAgARqhABgwDQYJKoZIhvcNAQELBQADggEBAG0eL25lG6MIm9oVMGD3Lijp 67GXyTUJfotwqONGfNlIlPUBoJNlxnYU3PF0G9yCRUuBhXZHsnfYI1sxOWdCZ8wT aN7sHt1sW7cS0o/gNuFe8tK+H8ztxrGWCD4HTbJvLvAn5LYliCzjrRVJDNbWyxcR /zIxeVxyj0vtqSTHuGRWmQOEg3r92OCulrWqKKX8j9XqDh6172IBmgNUXfStXi+N gad2kCQZa++tam6OoMvDiSWiiq5ocRI+fY4P1HKslr3px4OLTluK9KimQ2TnSinx q+VOvMcHcxPohV3runii8ZFwIOHaVO7boKZX9EZQOIc0NVLIJZHEahIzrCekvZ4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:24 2026 by rpki-client