This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/i9JuOf_lil0vGpP_qnq87ScuDA8.roa File: i9JuOf_lil0vGpP_qnq87ScuDA8.roa (raw, json) Hash identifier: 37O6D5o8eMGGFdDLmGcDaN3OTpRDH6Fu/HOaTp1mFTQ= Subject key identifier: 8B:D2:6E:39:FF:E5:8A:5D:2F:1A:93:FF:AA:7A:BC:ED:27:2E:0C:0F Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60 Certificate serial: 019B7DCAE726F71B57EBA95ABF0803200E76 Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/i9JuOf_lil0vGpP_qnq87ScuDA8.roa Signing time: Fri 02 Jan 2026 08:20:08 +0000 ROA not before: Fri 02 Jan 2026 08:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 80.90.0.0/19 maxlen: 24 91.236.122.0/24 maxlen: 24 185.5.80.0/24 maxlen: 24 185.5.81.0/24 maxlen: 24 185.5.82.0/24 maxlen: 24 185.5.83.0/24 maxlen: 24 2a02:cb40::/32 maxlen: 32 2a02:cb41::/32 maxlen: 32 2a02:cb42::/32 maxlen: 32 2a02:cb43::/32 maxlen: 48 2a02:cb43:e::/48 maxlen: 48 2a02:cb43:f::/48 maxlen: 48 2a02:cb43:4007::/48 maxlen: 48 2a02:cb43:4009::/48 maxlen: 48 2a02:cb44::/32 maxlen: 32 2a02:cb45::/32 maxlen: 32 2a02:cb45:101::/48 maxlen: 48 2a02:cb45:102::/48 maxlen: 48 2a02:cb45:103::/48 maxlen: 48 2a02:cb45:104::/48 maxlen: 48 2a02:cb45:105::/48 maxlen: 48 2a02:cb46::/32 maxlen: 32 2a02:cb46:0:2::/64 maxlen: 64 2a02:cb46:0:3::/64 maxlen: 64 2a02:cb46:0:4::/64 maxlen: 64 2a02:cb46:0:5::/64 maxlen: 64 2a02:cb46:0:6::/64 maxlen: 64 2a02:cb46:0:203::/64 maxlen: 64 2a02:cb46:0:204::/64 maxlen: 64 2a02:cb46:0:205::/64 maxlen: 64 2a02:cb47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e7:26:f7:1b:57:eb:a9:5a:bf:08:03:20:0e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd26e39ffe58a5d2f1a93ffaa7abced272e0c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:32:e0:06:c2:4f:7b:6b:68:e0:34:ec:d1: 81:04:d6:8a:48:db:18:ef:2d:84:d9:4b:9c:57:d1: f1:d9:75:52:8c:1a:15:1c:a3:78:9b:64:e2:f9:be: 31:9a:4e:ec:d9:5d:f6:04:96:aa:ac:3c:a2:32:8b: b8:8a:74:05:e8:74:f6:52:88:aa:e8:17:51:fc:2f: de:2b:39:a0:37:ed:20:d2:34:8e:8d:5d:88:be:a2: 77:eb:13:04:99:e8:ee:ca:31:b2:4d:6e:61:d5:eb: 2c:0c:ff:cb:8d:ad:11:99:13:5c:7a:05:18:b2:da: c3:a9:e9:24:b9:3d:33:cd:14:c8:bb:99:90:53:9e: 12:c0:c5:12:56:bd:06:b2:71:3b:77:1e:47:5a:e4: 54:0c:52:b4:b9:f5:ab:0b:15:15:cd:83:6a:1a:a7: 8d:a5:1b:b2:36:73:78:a2:d1:6a:1a:9d:f5:31:94: d1:1e:62:e9:1b:a2:b5:2c:8d:fc:b4:0d:15:b0:9b: 48:93:d8:30:75:18:e3:30:82:51:dc:0a:a8:6d:eb: 08:60:d0:78:a2:a1:b4:38:9c:51:48:91:46:3b:e6: 11:6b:47:98:38:8d:5e:86:44:e6:7d:8f:f7:6c:f1: d0:9f:a2:52:43:9d:17:6b:1b:a9:71:4b:f6:40:d5: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:6E:39:FF:E5:8A:5D:2F:1A:93:FF:AA:7A:BC:ED:27:2E:0C:0F X509v3 Authority Key Identifier: keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/i9JuOf_lil0vGpP_qnq87ScuDA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.0.0/19 91.236.122.0/24 185.5.80.0/22 IPv6: 2a02:cb40::/29 Signature Algorithm: sha256WithRSAEncryption 04:d6:3b:39:e9:6b:07:6e:6b:1e:bd:fc:94:f8:ef:89:b2:e5: 9c:07:48:c2:6c:73:e1:7e:2d:cc:98:13:73:85:84:00:54:fa: 87:46:f3:2e:c2:4e:bf:ac:ab:2b:e3:48:c9:5a:ba:61:20:ee: 27:5a:da:39:60:62:7a:a9:d7:9f:80:b7:f7:c7:b1:de:85:7a: f1:6e:78:09:e5:1b:c0:cc:35:d3:25:b9:c8:50:55:92:2a:fe: af:97:30:0a:70:64:5a:6f:30:64:2a:9d:bc:ab:d1:16:0d:7b: b5:85:c1:40:d2:ca:d3:54:86:b2:f4:ef:e5:53:eb:49:67:81: 8c:36:d6:4b:0e:0f:9c:25:ae:3f:cc:9c:d2:7d:b5:87:8c:a6: d2:36:35:58:fc:de:02:fd:c7:58:12:e7:4e:bf:55:ba:3f:16: 65:7d:7b:65:17:a1:a4:4e:ff:7b:9c:32:d9:6d:1a:35:3c:8f: 34:37:65:92:a9:4e:55:bf:d4:ce:b0:c8:b1:4f:7a:ed:84:09: 36:03:4f:51:9b:01:98:89:21:3c:8c:3d:c1:13:2d:62:f3:e0: e1:8b:76:cd:40:b1:07:b3:05:13:1f:49:70:7f:d6:19:2a:c2: fa:1f:35:3b:16:a4:07:27:12:de:68:aa:41:bf:fe:40:b5:3d: ad:27:9a:09 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yucm9xtX66lavwgDIA52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzMyZjVhZGMwNDY5NTMzYmJkZGNmY2U4OTU3ZWFlZTU4 YmZkNjAwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQyNmUzOWZmZTU4YTVkMmYxYTkzZmZhYTdhYmNlZDI3MmUwYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyMy4AbCT3traOA07NGBBNaKSNsY 7y2E2UucV9Hx2XVSjBoVHKN4m2Ti+b4xmk7s2V32BJaqrDyiMou4inQF6HT2Uoiq 6BdR/C/eKzmgN+0g0jSOjV2IvqJ36xMEmejuyjGyTW5h1essDP/Lja0RmRNcegUY strDqekkuT0zzRTIu5mQU54SwMUSVr0GsnE7dx5HWuRUDFK0ufWrCxUVzYNqGqeN pRuyNnN4otFqGp31MZTRHmLpG6K1LI38tA0VsJtIk9gwdRjjMIJR3AqobesIYNB4 oqG0OJxRSJFGO+YRa0eYOI1ehkTmfY/3bPHQn6JSQ50XaxupcUv2QNVomwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIvSbjn/5YpdLxqT/6p6vO0nLgwPMB8GA1UdIwQY MBaAFAozL1rcBGlTO73c/OiVfq7li/1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjct NDEzMGZhNDhiNTU5LzEvaTlKdU9mX2xpbDB2R3BQX3FucTg3U2N1REE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjctNDEzMGZhNDhiNTU5 LzEvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFUFoAAwQA W+x6AwQCuQVQMA0EAgACMAcDBQMqAstAMA0GCSqGSIb3DQEBCwUAA4IBAQAE1js5 6WsHbmsevfyU+O+JsuWcB0jCbHPhfi3MmBNzhYQAVPqHRvMuwk6/rKsr40jJWrph IO4nWto5YGJ6qdefgLf3x7HehXrxbngJ5RvAzDXTJbnIUFWSKv6vlzAKcGRabzBk Kp28q9EWDXu1hcFA0srTVIay9O/lU+tJZ4GMNtZLDg+cJa4/zJzSfbWHjKbSNjVY /N4C/cdYEudOv1W6PxZlfXtlF6GkTv97nDLZbRo1PI80N2WSqU5Vv9TOsMixT3rt hAk2A09RmwGYiSE8jD3BEy1i8+Dhi3bNQLEHswUTH0lwf9YZKsL6HzU7FqQHJxLe aKpBv/5AtT2tJ5oJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:06 2026 by rpki-client