This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/JdqN2WjbVmZSKug3o11pYs17ADY.roa File: JdqN2WjbVmZSKug3o11pYs17ADY.roa (raw, json) Hash identifier: Zp8UwYZbudARKqe5q46PTE7sayPiCfOzSFSseBsc1yM= Subject key identifier: 25:DA:8D:D9:68:DB:56:66:52:2A:E8:37:A3:5D:69:62:CD:7B:00:36 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA0D860A80806C540F367A0F5C4D3 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/JdqN2WjbVmZSKug3o11pYs17ADY.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5377 IP address blocks: 77.70.128.0/17 maxlen: 17 77.70.128.0/19 maxlen: 19 77.70.144.0/20 maxlen: 20 77.70.160.0/20 maxlen: 20 77.70.176.0/22 maxlen: 24 77.70.181.0/24 maxlen: 24 77.70.184.0/21 maxlen: 24 77.70.191.0/24 maxlen: 24 77.70.192.0/19 maxlen: 19 77.70.207.0/24 maxlen: 24 77.70.240.0/20 maxlen: 20 77.70.254.0/24 maxlen: 24 77.70.255.0/24 maxlen: 24 193.219.192.0/18 maxlen: 18 193.219.196.0/24 maxlen: 24 193.220.0.0/16 maxlen: 16 193.220.88.0/21 maxlen: 21 193.220.94.0/24 maxlen: 24 193.220.165.0/24 maxlen: 24 193.220.174.0/23 maxlen: 24 193.220.220.0/22 maxlen: 22 193.220.224.0/20 maxlen: 20 193.220.230.0/24 maxlen: 24 193.220.240.0/20 maxlen: 24 2a02:6600::/29 maxlen: 32 2a02:6600:f000::/48 maxlen: 48 2a02:6600:f001::/48 maxlen: 48 2a02:6601::/32 maxlen: 32 2a02:6601:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a0:d8:60:a8:08:06:c5:40:f3:67:a0:f5:c4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25da8dd968db5666522ae837a35d6962cd7b0036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:e6:74:7b:50:d6:48:ed:f5:f3:02:f0:e1: 66:0e:df:9b:c1:79:5d:d7:cc:d2:8e:00:f2:5c:a2: 39:ff:c4:b8:7c:ea:ae:10:4d:10:80:32:6a:c6:51: 0b:4b:9e:9f:86:bc:d4:dd:c6:de:e5:02:e6:65:ce: 30:6f:d3:1e:6f:4e:9e:77:80:f4:a0:51:83:d4:83: 67:2f:12:e3:ef:d2:6f:12:e3:ae:31:d8:73:84:3d: 50:d1:97:20:f8:73:be:1f:b5:f8:ff:e0:66:ac:52: 6b:21:67:22:a8:98:b9:9d:6f:29:96:a5:a9:87:50: 29:7f:56:12:79:17:70:3c:b7:61:71:97:bc:74:d5: 8e:97:3b:07:76:cd:f5:0d:b1:67:1c:18:fe:2e:76: c1:08:f2:42:fd:9f:98:ed:3e:68:91:67:16:43:4f: 98:05:a2:55:a5:95:99:ce:74:dd:14:a0:3b:98:7b: ee:e0:a1:13:b2:4a:05:81:9f:5d:cb:aa:1e:39:f6: 2b:fb:94:ff:7a:ad:dd:a1:74:14:57:fb:a3:3f:f6: 5b:1c:f8:aa:59:1f:4c:a0:a9:7a:ef:9f:26:17:e0: a3:6c:47:73:22:55:46:5a:2c:ed:4e:5b:4a:99:1b: 9e:1d:87:6b:47:47:3e:f0:27:ff:31:a2:e3:7a:76: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:8D:D9:68:DB:56:66:52:2A:E8:37:A3:5D:69:62:CD:7B:00:36 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/JdqN2WjbVmZSKug3o11pYs17ADY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.70.128.0/17 193.219.192.0-193.220.255.255 IPv6: 2a02:6600::/29 Signature Algorithm: sha256WithRSAEncryption b7:8a:59:25:07:33:c5:c5:f1:fc:2a:61:7c:c6:e8:64:1c:86: ef:66:3e:bc:a9:78:a1:37:e6:67:6f:69:87:e1:d3:54:41:b5: f9:3c:a3:84:52:67:7f:06:9f:f5:ec:71:4e:46:d3:08:31:26: 48:17:61:09:c1:b4:7a:14:1f:0f:90:2b:a6:58:d7:9c:ff:68: db:d2:75:61:28:29:57:4f:c9:c3:ae:46:aa:a6:78:ab:7e:92: 0f:41:00:9c:87:86:1d:05:18:9f:e6:9f:4a:ef:23:87:37:de: 13:4b:b8:a6:10:0a:fa:0a:9e:1f:ac:1c:cc:f2:63:31:26:e5: 36:f0:1f:bf:d2:1f:51:4a:ba:d2:1a:c5:09:b1:ca:4e:30:56: eb:d0:b3:ff:e4:04:dc:e3:43:c0:38:fb:df:f8:f6:bd:bf:2a: 3e:b4:5f:a6:57:18:85:5d:66:0d:40:58:40:9d:19:ed:13:4e: 8a:6b:d6:70:6b:22:ef:ce:a5:4b:63:4a:18:54:6c:0f:25:d1: 13:47:09:fe:82:36:2a:61:ec:e1:a5:3d:cb:e4:da:87:d4:68: 7c:2f:e0:8d:7f:2c:7d:18:3b:5b:7b:87:07:16:ab:26:50:b1: 95:a3:20:d4:c9:ca:08:4e:ab:2a:ac:31:1e:a5:65:d1:93:46: 17:73:9c:cf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fqDYYKgIBsVA82eg9cTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWRhOGRkOTY4ZGI1NjY2NTIyYWU4MzdhMzVkNjk2MmNkN2IwMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ/mdHtQ1kjt9fMC8OFmDt+bwXld 18zSjgDyXKI5/8S4fOquEE0QgDJqxlELS56fhrzU3cbe5QLmZc4wb9Meb06ed4D0 oFGD1INnLxLj79JvEuOuMdhzhD1Q0Zcg+HO+H7X4/+BmrFJrIWciqJi5nW8plqWp h1Apf1YSeRdwPLdhcZe8dNWOlzsHds31DbFnHBj+LnbBCPJC/Z+Y7T5okWcWQ0+Y BaJVpZWZznTdFKA7mHvu4KETskoFgZ9dy6oeOfYr+5T/eq3doXQUV/ujP/ZbHPiq WR9MoKl6758mF+CjbEdzIlVGWiztTltKmRueHYdrR0c+8Cf/MaLjenaSJQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCXajdlo21ZmUiroN6NdaWLNewA2MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvSmRxTjJXamJWbVpTS3VnM28xMXBZczE3QURZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATAwQHTUaAMAsD BAbB28ADAwDB3DANBAIAAjAHAwUDKgJmADANBgkqhkiG9w0BAQsFAAOCAQEAt4pZ JQczxcXx/CphfMboZByG72Y+vKl4oTfmZ29ph+HTVEG1+TyjhFJnfwaf9exxTkbT CDEmSBdhCcG0ehQfD5ArpljXnP9o29J1YSgpV0/Jw65GqqZ4q36SD0EAnIeGHQUY n+afSu8jhzfeE0u4phAK+gqeH6wczPJjMSblNvAfv9IfUUq60hrFCbHKTjBW69Cz /+QE3ONDwDj73/j2vb8qPrRfplcYhV1mDUBYQJ0Z7RNOimvWcGsi786lS2NKGFRs DyXRE0cJ/oI2KmHs4aU9y+Tah9RofC/gjX8sfRg7W3uHBxarJlCxlaMg1MnKCE6r KqwxHqVl0ZNGF3Oczw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:32 2026 by rpki-client