This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/JAPut0UfxbemMj59AxqmwrRJ0Ls.roa File: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (raw, json) Hash identifier: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4= Subject key identifier: 24:03:EE:B7:45:1F:C5:B7:A6:32:3E:7D:03:1A:A6:C2:B4:49:D0:BB Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B7F82510CC626041777BCE60E88ECF3A3 Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/JAPut0UfxbemMj59AxqmwrRJ0Ls.roa Signing time: Fri 02 Jan 2026 16:20:05 +0000 ROA not before: Fri 02 Jan 2026 16:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42248 IP address blocks: 89.106.96.0/24 maxlen: 24 89.106.97.0/24 maxlen: 24 89.106.98.0/24 maxlen: 24 89.106.99.0/24 maxlen: 24 89.106.100.0/24 maxlen: 24 89.106.106.0/24 maxlen: 24 89.106.110.0/23 maxlen: 23 89.106.112.0/23 maxlen: 23 89.106.114.0/23 maxlen: 23 89.106.116.0/23 maxlen: 23 89.106.118.0/23 maxlen: 23 89.106.120.0/23 maxlen: 23 89.106.122.0/23 maxlen: 23 89.106.124.0/23 maxlen: 23 89.106.126.0/24 maxlen: 24 94.139.216.0/21 maxlen: 21 178.75.224.0/21 maxlen: 21 178.75.232.0/21 maxlen: 21 178.239.224.0/20 maxlen: 20 185.44.124.0/22 maxlen: 22 185.52.50.0/24 maxlen: 24 185.52.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:51:0c:c6:26:04:17:77:bc:e6:0e:88:ec:f3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 2 16:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2403eeb7451fc5b7a6323e7d031aa6c2b449d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:48:04:45:1d:80:09:8e:66:8c:25:98:49: ea:4f:3f:2e:0a:d9:cd:17:74:c2:25:1d:19:5d:d7: 62:7f:69:39:1b:9b:88:64:6e:b7:56:f0:70:b2:2a: 07:34:72:72:1b:ed:2c:62:92:2c:e5:17:40:02:3c: bc:5d:0a:f7:8a:08:f3:6a:b3:25:24:fb:34:00:96: 5c:8a:e1:21:33:8a:fb:3f:42:b9:3a:a2:9f:53:3e: b2:a5:df:3c:ef:86:40:27:8b:34:19:53:a6:d6:a3: af:62:44:c1:b0:b0:03:f1:7a:c3:77:06:3f:75:9f: 2e:06:90:b1:2c:d0:9b:96:63:37:c9:3a:94:eb:63: 1a:e2:f8:a7:f4:a5:aa:65:eb:c8:84:ac:62:6b:4c: 2c:9b:cc:a1:e1:63:ab:66:e7:40:d5:06:f6:99:72: 32:26:01:06:61:f8:bc:55:4a:d0:e3:d6:4a:6e:c2: 71:dd:9d:9b:8c:e0:f3:18:67:d9:d9:98:38:21:58: 18:17:00:0a:00:f6:71:12:6a:87:13:36:e8:40:0e: 52:54:f7:47:12:f3:47:7d:26:46:a0:87:f8:27:b2: 7f:66:49:34:4d:36:4a:be:cc:53:15:72:3a:02:26: 54:1b:ef:52:2c:3c:64:ce:4f:ce:e1:e5:6f:05:14: 5a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:03:EE:B7:45:1F:C5:B7:A6:32:3E:7D:03:1A:A6:C2:B4:49:D0:BB X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/JAPut0UfxbemMj59AxqmwrRJ0Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.96.0-89.106.100.255 89.106.106.0/24 89.106.110.0-89.106.126.255 94.139.216.0/21 178.75.224.0/20 178.239.224.0/20 185.44.124.0/22 185.52.50.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:74:5f:b2:ee:96:7f:f1:52:0b:dd:df:06:55:01:6a:43:5b: da:2c:15:c2:b3:cc:32:6e:87:53:4b:14:a1:e6:c6:2f:41:4b: 28:9e:a6:20:21:44:69:e9:94:66:6a:a6:c4:e4:61:1c:89:ac: 7d:5d:3e:86:98:fb:a6:eb:f5:a3:c5:de:1b:ea:c4:93:8d:c7: fb:5f:73:7e:7c:7f:ed:c1:91:97:04:b8:fb:ea:5f:89:db:8f: 39:87:33:94:6b:95:21:8e:6a:0b:91:ea:92:dc:34:83:7b:14: 77:6b:12:2a:25:8f:e1:0c:00:6b:06:74:4c:04:78:36:e5:33: e4:68:aa:fb:ab:6a:f3:cc:db:62:e0:3f:86:4e:fc:14:eb:68: 88:f6:aa:05:8e:83:95:3f:4b:9c:d9:ec:0c:37:22:47:43:e9: ad:60:be:8b:a5:da:4d:af:ee:fb:9c:64:e3:ee:5a:5a:0d:54: 05:a4:cc:e8:44:8d:66:2e:c3:04:9a:1e:91:8b:27:6d:27:06: 53:6c:30:3e:31:cf:df:8f:5e:aa:97:60:eb:c3:04:db:5e:f4: da:7e:10:1b:81:66:1f:9a:36:ae:88:56:50:e6:b2:cc:ff:e1: d1:8a:2e:05:83:14:de:ea:80:a9:d6:10:e5:2a:39:b3:82:11: 42:c7:e9:2e -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/glEMxiYEF3e85g6I7POjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTAyMTYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDAzZWViNzQ1MWZjNWI3YTYzMjNlN2QwMzFhYTZjMmI0NDlkMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE9IBEUdgAmOZowlmEnqTz8uCtnN F3TCJR0ZXddif2k5G5uIZG63VvBwsioHNHJyG+0sYpIs5RdAAjy8XQr3igjzarMl JPs0AJZciuEhM4r7P0K5OqKfUz6ypd8874ZAJ4s0GVOm1qOvYkTBsLAD8XrDdwY/ dZ8uBpCxLNCblmM3yTqU62Ma4vin9KWqZevIhKxia0wsm8yh4WOrZudA1Qb2mXIy JgEGYfi8VUrQ49ZKbsJx3Z2bjODzGGfZ2Zg4IVgYFwAKAPZxEmqHEzboQA5SVPdH EvNHfSZGoIf4J7J/Zkk0TTZKvsxTFXI6AiZUG+9SLDxkzk/O4eVvBRRaTwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFCQD7rdFH8W3pjI+fQMapsK0SdC7MB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvSkFQdXQwVWZ4YmVtTWo1OUF4cW13clJKMExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAVZamAD BABZamQDBABZamowDAMEAVlqbgMEAFlqfgMEA16L2AMEBLJL4AMEBLLv4AMEArks fAMEAbk0MjANBgkqhkiG9w0BAQsFAAOCAQEAm3Rfsu6Wf/FSC93fBlUBakNb2iwV wrPMMm6HU0sUoebGL0FLKJ6mICFEaemUZmqmxORhHImsfV0+hpj7puv1o8XeG+rE k43H+19zfnx/7cGRlwS4++pfiduPOYczlGuVIY5qC5Hqktw0g3sUd2sSKiWP4QwA awZ0TAR4NuUz5Giq+6tq88zbYuA/hk78FOtoiPaqBY6DlT9LnNnsDDciR0PprWC+ i6XaTa/u+5xk4+5aWg1UBaTM6ESNZi7DBJoekYsnbScGU2wwPjHP349eqpdg68ME 21702n4QG4FmH5o2rohWUOayzP/h0YouBYMU3uqAqdYQ5So5s4IRQsfpLg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:10 2026 by rpki-client