This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jksHLXQsL8kIaSdyy1KKgItGkLM.roa File: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (raw, json) Hash identifier: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU= Subject key identifier: 8E:4B:07:2D:74:2C:2F:C9:08:69:27:72:CB:52:8A:80:8B:46:90:B3 Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d Certificate serial: 019B7B35D43D574264083870B52E77727D8C Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jksHLXQsL8kIaSdyy1KKgItGkLM.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35444 IP address blocks: 45.93.220.0/22 maxlen: 22 80.90.80.0/20 maxlen: 20 80.90.80.0/24 maxlen: 24 80.90.83.0/24 maxlen: 24 80.90.87.0/24 maxlen: 24 80.90.89.0/24 maxlen: 24 80.90.90.0/24 maxlen: 24 80.90.91.0/24 maxlen: 24 80.90.92.0/24 maxlen: 24 81.26.200.0/21 maxlen: 21 81.26.200.0/24 maxlen: 24 81.26.201.0/24 maxlen: 24 81.26.202.0/24 maxlen: 24 81.26.203.0/24 maxlen: 24 81.26.204.0/24 maxlen: 24 81.26.205.0/24 maxlen: 24 81.26.206.0/23 maxlen: 24 93.93.168.0/22 maxlen: 22 93.93.168.0/23 maxlen: 23 93.93.168.0/24 maxlen: 24 93.93.169.0/24 maxlen: 24 93.93.170.0/23 maxlen: 23 93.93.170.0/24 maxlen: 24 93.93.171.0/24 maxlen: 24 185.132.92.0/23 maxlen: 23 185.132.92.0/24 maxlen: 24 185.132.93.0/24 maxlen: 24 185.132.94.0/24 maxlen: 24 185.132.95.0/24 maxlen: 24 185.158.0.0/22 maxlen: 22 185.158.0.0/23 maxlen: 23 185.158.0.0/24 maxlen: 24 185.158.1.0/24 maxlen: 24 185.158.2.0/23 maxlen: 23 185.158.2.0/24 maxlen: 24 185.158.3.0/24 maxlen: 24 185.175.252.0/22 maxlen: 22 185.175.254.0/24 maxlen: 24 185.187.0.0/22 maxlen: 23 185.187.0.0/23 maxlen: 23 185.187.0.0/24 maxlen: 24 185.187.1.0/24 maxlen: 24 185.187.2.0/23 maxlen: 23 185.187.2.0/24 maxlen: 24 185.187.3.0/24 maxlen: 24 185.212.188.0/22 maxlen: 22 185.212.188.0/23 maxlen: 23 185.212.188.0/24 maxlen: 24 185.212.189.0/24 maxlen: 24 185.212.190.0/23 maxlen: 23 185.212.190.0/24 maxlen: 24 185.212.191.0/24 maxlen: 24 185.239.8.0/22 maxlen: 22 185.239.8.0/23 maxlen: 23 185.239.8.0/24 maxlen: 24 185.239.9.0/24 maxlen: 24 185.239.10.0/23 maxlen: 23 185.239.10.0/24 maxlen: 24 185.239.11.0/24 maxlen: 24 2a03:2de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d4:3d:57:42:64:08:38:70:b5:2e:77:72:7d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4b072d742c2fc908692772cb528a808b4690b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:b3:40:f9:b8:ea:4d:76:55:3b:69:42:eb: 27:f8:16:97:41:6b:9c:f8:81:c3:64:1a:0d:cd:2c: be:8b:10:f1:09:74:ec:67:8d:6c:2b:bd:d0:ce:43: 87:92:cb:07:a3:54:1d:38:2f:bf:9d:0d:71:db:64: e1:58:c4:b8:2f:c0:09:da:01:6f:92:a3:e7:28:f3: 12:1e:a2:df:6c:7f:64:94:d2:c0:de:db:d8:d1:6f: f4:c5:51:6f:32:98:22:8f:1f:bb:db:fc:42:5e:fe: ad:be:1b:3f:cb:2f:2c:2c:af:25:c1:40:02:73:d8: a4:7e:65:14:ff:74:d4:df:52:22:6c:50:fc:5d:12: 9f:09:67:d9:69:6e:d8:f4:eb:3e:3f:58:91:1a:f8: f5:2e:3b:98:8f:15:88:fb:19:f7:8f:38:48:4a:44: cf:05:93:74:97:1d:6e:e6:f5:e9:1e:56:f5:24:e1: 80:47:b8:96:dc:cf:cc:3d:35:52:b5:a1:c9:a2:4c: c5:5a:3e:1d:69:28:f7:2a:56:ca:37:73:de:42:93: d6:6a:62:22:09:7e:9c:a5:ee:23:c4:04:1f:29:dc: 07:cf:68:9e:30:f2:ab:72:32:14:93:a2:6f:ef:47: 9c:ed:45:01:1b:23:38:a0:1b:8c:95:07:36:7e:4a: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4B:07:2D:74:2C:2F:C9:08:69:27:72:CB:52:8A:80:8B:46:90:B3 X509v3 Authority Key Identifier: keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jksHLXQsL8kIaSdyy1KKgItGkLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.220.0/22 80.90.80.0/20 81.26.200.0/21 93.93.168.0/22 185.132.92.0/22 185.158.0.0/22 185.175.252.0/22 185.187.0.0/22 185.212.188.0/22 185.239.8.0/22 IPv6: 2a03:2de0::/32 Signature Algorithm: sha256WithRSAEncryption 83:89:30:ee:29:aa:86:b5:2a:05:db:dd:59:ab:9a:b3:71:1f: e7:e8:1c:ea:f9:bb:f9:2c:41:e3:b2:2f:ba:24:66:59:d4:05: e9:fb:10:c1:f8:05:0d:6b:06:89:58:0a:97:e1:00:9a:4d:ca: db:23:33:2b:3f:bd:0e:13:0b:01:37:92:c1:a3:b8:85:a0:ca: 6d:cc:92:f2:2c:fc:78:8d:c6:f5:b0:e4:83:f6:14:41:6f:7d: ea:20:93:4d:0b:2c:f8:d6:7d:fd:12:d4:67:e1:8a:31:7b:4c: b4:93:2b:ef:c0:25:e2:c6:c5:a5:86:50:42:d9:60:2e:bf:bc: cd:f4:70:dc:f5:c2:3e:31:d3:75:89:48:1b:bc:d0:10:f1:4b: 00:c0:bd:d9:e7:a0:3f:4a:a5:dc:0e:bb:a5:e4:68:46:37:93: 80:7f:32:3d:65:97:d6:c9:3f:5f:8b:77:47:d6:9b:e9:dd:67: 96:02:15:9a:34:9e:31:74:a4:26:e4:3e:4a:90:6a:d0:72:60: c6:e0:91:8e:55:4c:0d:db:b3:d8:30:67:8c:37:79:7b:3c:b7: 70:cb:c7:9c:58:a6:65:27:f9:3a:6a:75:b6:f6:bf:ff:00:ff: 3f:0d:f2:09:9d:64:64:e0:21:d8:ee:c4:59:67:17:c3:dc:79: f1:92:9a:cf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt7NdQ9V0JkCDhwtS53cn2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh OWY0OGQwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTRiMDcyZDc0MmMyZmM5MDg2OTI3NzJjYjUyOGE4MDhiNDY5MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7CzQPm46k12VTtpQusn+BaXQWuc +IHDZBoNzSy+ixDxCXTsZ41sK73QzkOHkssHo1QdOC+/nQ1x22ThWMS4L8AJ2gFv kqPnKPMSHqLfbH9klNLA3tvY0W/0xVFvMpgijx+72/xCXv6tvhs/yy8sLK8lwUAC c9ikfmUU/3TU31IibFD8XRKfCWfZaW7Y9Os+P1iRGvj1LjuYjxWI+xn3jzhISkTP BZN0lx1u5vXpHlb1JOGAR7iW3M/MPTVStaHJokzFWj4daSj3KlbKN3PeQpPWamIi CX6cpe4jxAQfKdwHz2ieMPKrcjIUk6Jv70ec7UUBGyM4oBuMlQc2fkpijwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFI5LBy10LC/JCGkncstSioCLRpCzMB8GA1UdIwQY MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt MTY5NmIyNDZjZDUwLzEvamtzSExYUXNMOGtJYVNkeXkxS0tnSXRHa0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLV3cAwQE UFpQAwQDURrIAwQCXV2oAwQCuYRcAwQCuZ4AAwQCua/8AwQCubsAAwQCudS8AwQC ue8IMA0EAgACMAcDBQAqAy3gMA0GCSqGSIb3DQEBCwUAA4IBAQCDiTDuKaqGtSoF 291Zq5qzcR/n6Bzq+bv5LEHjsi+6JGZZ1AXp+xDB+AUNawaJWAqX4QCaTcrbIzMr P70OEwsBN5LBo7iFoMptzJLyLPx4jcb1sOSD9hRBb33qIJNNCyz41n39EtRn4Yox e0y0kyvvwCXixsWlhlBC2WAuv7zN9HDc9cI+MdN1iUgbvNAQ8UsAwL3Z56A/SqXc Drul5GhGN5OAfzI9ZZfWyT9fi3dH1pvp3WeWAhWaNJ4xdKQm5D5KkGrQcmDG4JGO VUwN27PYMGeMN3l7PLdwy8ecWKZlJ/k6anW29r//AP8/DfIJnWRk4CHY7sRZZxfD 3HnxkprP -----END CERTIFICATE-----Generated at Tue Jan 27 03:25:26 2026 by rpki-client