This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/0mDwy4DKdVs5iksvVK2u0fmE0VM.roa File: 0mDwy4DKdVs5iksvVK2u0fmE0VM.roa (raw, json) Hash identifier: 42ochTPPLElp6JzoHsOU9NRyygx3w8EW8T3u57lomWM= Subject key identifier: D2:60:F0:CB:80:CA:75:5B:39:8A:4B:2F:54:AD:AE:D1:F9:84:D1:53 Certificate issuer: /CN=241455f852c6ad4a0412e5ea308aa66172d1d147 Certificate serial: 019B7F15F94ABB7F39817AAA7DA7470404B5 Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/0mDwy4DKdVs5iksvVK2u0fmE0VM.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51569 IP address blocks: 46.20.80.0/20 maxlen: 20 46.20.80.0/24 maxlen: 24 46.20.81.0/24 maxlen: 24 46.20.82.0/24 maxlen: 24 46.20.83.0/24 maxlen: 24 46.20.84.0/24 maxlen: 24 46.20.85.0/24 maxlen: 24 46.20.86.0/24 maxlen: 24 46.20.87.0/24 maxlen: 24 46.20.88.0/24 maxlen: 24 46.20.89.0/24 maxlen: 24 46.20.90.0/24 maxlen: 24 46.20.91.0/24 maxlen: 24 46.20.92.0/24 maxlen: 24 46.20.93.0/24 maxlen: 24 46.20.94.0/24 maxlen: 24 46.20.95.0/24 maxlen: 24 185.159.52.0/22 maxlen: 22 185.159.52.0/24 maxlen: 24 185.159.53.0/24 maxlen: 24 185.159.54.0/24 maxlen: 24 185.159.55.0/24 maxlen: 24 2a05:b580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f9:4a:bb:7f:39:81:7a:aa:7d:a7:47:04:04:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d260f0cb80ca755b398a4b2f54adaed1f984d153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:06:f9:e8:9d:9e:da:52:f8:bc:1c:b1:86: b7:d8:67:fb:a6:be:85:51:e8:7e:9e:00:e9:48:9f: a7:bf:6d:96:17:1f:b4:5e:66:7b:24:cd:9a:15:c3: a7:e0:ff:06:24:62:50:53:2f:18:33:cd:71:09:a6: e5:b7:ed:f2:1c:7a:7b:88:fc:ad:7b:c2:e7:b4:8a: e8:ee:d8:92:9d:34:52:d6:5a:51:c1:d0:b3:44:16: 4e:1f:73:df:f3:0b:8d:79:e0:e1:0d:4d:d5:c3:bf: 7d:4d:f0:02:53:d0:90:bf:68:14:f2:4f:48:e5:2b: d6:ee:28:2a:d0:92:c4:19:ca:59:44:cf:b2:e2:33: 04:17:17:c6:3d:89:cd:08:68:81:25:d8:c4:ed:f0: f7:12:82:9c:c8:2b:e0:e4:52:d5:99:20:2c:10:63: d4:ca:96:6e:a3:d6:77:0c:6f:dd:81:d6:e3:8c:16: fa:92:0a:22:e5:0e:36:74:58:b0:7f:6f:a5:df:01: 1f:d3:ed:d1:84:db:c4:4b:2d:d5:67:11:b2:90:50: ab:d0:fd:2d:d9:b1:3f:ec:d6:b3:6f:7b:0c:44:ab: 4c:24:33:d8:d8:67:db:78:0a:78:2b:50:e2:77:90: 29:02:3e:3b:4b:71:98:98:8d:83:6c:6a:b2:4d:d2: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:F0:CB:80:CA:75:5B:39:8A:4B:2F:54:AD:AE:D1:F9:84:D1:53 X509v3 Authority Key Identifier: keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/0mDwy4DKdVs5iksvVK2u0fmE0VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.80.0/20 185.159.52.0/22 IPv6: 2a05:b580::/29 Signature Algorithm: sha256WithRSAEncryption 45:5b:87:03:9d:bf:13:d6:ae:3a:76:14:5e:38:91:d5:fd:91: 44:17:17:c8:94:9b:00:08:89:82:23:3f:4f:e3:a4:45:49:3f: 5a:71:d0:3f:5f:21:e4:4c:6a:9c:5c:1c:c2:b7:6f:d1:96:a0: 7e:9e:46:d9:8b:15:cc:ce:a7:fd:1a:e0:6d:1b:9b:d1:c4:82: be:67:9b:24:99:ac:23:05:48:0e:1d:33:66:70:73:5c:fc:d9: c0:a4:d5:1d:e4:94:c0:dc:6a:42:3c:c1:e4:cd:f0:78:9f:01: e3:41:a3:84:03:73:d3:ec:6c:4b:0c:78:b5:43:28:73:04:e1: 4d:8d:24:77:97:e3:42:a9:c6:2e:28:f3:f7:97:53:1f:ec:f8: 88:a3:01:67:3a:af:c1:9a:f0:91:46:a9:3e:0c:e9:ca:4a:b7: f5:58:3f:81:e6:1e:f2:1d:27:73:0a:2d:0e:d2:bc:76:91:f0: 7b:ff:ea:de:f7:59:da:c1:96:c1:eb:4c:ab:11:ea:bd:5d:b2: 61:f0:02:6d:46:5a:e1:bb:b8:f9:39:67:7c:8c:03:ff:ba:8c: 07:f3:b5:b1:47:06:3e:40:5f:00:68:24:a5:2b:f3:fa:9a:71: b3:d6:31:09:24:1a:8c:7a:77:21:6b:b7:d5:33:0e:00:16:f7: ee:0f:4a:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FflKu385gXqqfadHBAS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTQ1NWY4NTJjNmFkNGEwNDEyZTVlYTMwOGFhNjYxNzJk MWQxNDcwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjYwZjBjYjgwY2E3NTViMzk4YTRiMmY1NGFkYWVkMWY5ODRkMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsggG+eidntpS+LwcsYa32Gf7pr6F Ueh+ngDpSJ+nv22WFx+0XmZ7JM2aFcOn4P8GJGJQUy8YM81xCablt+3yHHp7iPyt e8LntIro7tiSnTRS1lpRwdCzRBZOH3Pf8wuNeeDhDU3Vw799TfACU9CQv2gU8k9I 5SvW7igq0JLEGcpZRM+y4jMEFxfGPYnNCGiBJdjE7fD3EoKcyCvg5FLVmSAsEGPU ypZuo9Z3DG/dgdbjjBb6kgoi5Q42dFiwf2+l3wEf0+3RhNvESy3VZxGykFCr0P0t 2bE/7Nazb3sMRKtMJDPY2GfbeAp4K1Did5ApAj47S3GYmI2DbGqyTdL6VQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNJg8MuAynVbOYpLL1StrtH5hNFTMB8GA1UdIwQY MBaAFCQUVfhSxq1KBBLl6jCKpmFy0dFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTIt M2IzMmMxOWY2Mzg1LzEvMG1Ed3k0REtkVnM1aWtzdlZLMnUwZm1FMFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTItM2IzMmMxOWY2Mzg1 LzEvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQELhRQAwQC uZ80MA0EAgACMAcDBQMqBbWAMA0GCSqGSIb3DQEBCwUAA4IBAQBFW4cDnb8T1q46 dhReOJHV/ZFEFxfIlJsACImCIz9P46RFST9acdA/XyHkTGqcXBzCt2/RlqB+nkbZ ixXMzqf9GuBtG5vRxIK+Z5skmawjBUgOHTNmcHNc/NnApNUd5JTA3GpCPMHkzfB4 nwHjQaOEA3PT7GxLDHi1QyhzBOFNjSR3l+NCqcYuKPP3l1Mf7PiIowFnOq/BmvCR Rqk+DOnKSrf1WD+B5h7yHSdzCi0O0rx2kfB7/+re91nawZbB60yrEeq9XbJh8AJt Rlrhu7j5OWd8jAP/uowH87WxRwY+QF8AaCSlK/P6mnGz1jEJJBqMencha7fVMw4A FvfuD0pl -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:28 2026 by rpki-client