This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/jLLoS47eUJae3t8FVyX8FnvYXxQ.roa File: jLLoS47eUJae3t8FVyX8FnvYXxQ.roa (raw, json) Hash identifier: eB5bNmdIRB0ZExtd92+X58k6GBDD7TYAVG7aUaPQUe4= Subject key identifier: 8C:B2:E8:4B:8E:DE:50:96:9E:DE:DF:05:57:25:FC:16:7B:D8:5F:14 Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Certificate serial: 019B76EB4CDAEDF766A389971270F1212857 Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/jLLoS47eUJae3t8FVyX8FnvYXxQ.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 37.0.72.0/21 maxlen: 24 46.21.192.0/20 maxlen: 24 62.100.128.0/19 maxlen: 24 78.41.232.0/21 maxlen: 24 81.93.240.0/20 maxlen: 24 91.191.144.0/20 maxlen: 24 94.247.176.0/21 maxlen: 24 185.67.152.0/22 maxlen: 24 188.130.0.0/17 maxlen: 24 193.47.184.0/24 maxlen: 24 195.14.0.0/24 maxlen: 24 195.114.18.0/23 maxlen: 24 2001:758::/32 maxlen: 48 2001:900::/32 maxlen: 48 2a00:cb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4c:da:ed:f7:66:a3:89:97:12:70:f1:21:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cb2e84b8ede50969ededf055725fc167bd85f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:88:41:73:ec:bd:a1:c6:75:c3:a8:da:aa: 04:80:23:0c:cd:c2:a0:62:8e:11:f1:4b:2d:c6:13: f0:16:70:2d:fc:12:63:27:52:2d:01:e0:75:e6:f4: 3a:70:ba:b8:2d:e4:7d:4f:cf:62:f1:b1:46:f4:db: 46:e4:7d:50:fe:a4:b1:3d:36:41:28:ff:29:1c:63: 8f:ba:c5:7a:c4:e6:93:a9:97:4a:4a:65:71:3f:78: d8:fd:63:d0:c4:b4:0a:8c:29:cb:27:fa:14:a9:7e: 1d:34:cc:72:a3:f3:04:70:38:80:92:e0:b5:15:f9: 95:8f:31:03:85:e5:d5:10:3b:c6:7e:d0:d4:1a:23: e2:9a:94:46:39:86:65:51:e0:74:ad:11:5a:9d:3e: 84:c6:7f:f4:08:d7:0f:30:89:5a:10:06:25:01:56: 43:9b:e7:7c:61:db:cc:89:7e:ee:8b:d9:2c:94:6e: ec:2a:d4:20:d3:d6:40:3b:1a:92:3d:e2:f7:24:ee: de:38:2a:c8:3c:13:4b:cb:22:08:17:05:0e:22:29: a8:f9:ed:b1:d3:6a:51:c2:01:91:20:be:9f:28:f8: f5:61:b9:0a:36:ae:1e:77:af:9b:bc:d9:db:c2:b3: b8:91:14:f2:2a:af:9a:df:88:92:6d:20:41:c3:8d: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:E8:4B:8E:DE:50:96:9E:DE:DF:05:57:25:FC:16:7B:D8:5F:14 X509v3 Authority Key Identifier: keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/jLLoS47eUJae3t8FVyX8FnvYXxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.72.0/21 46.21.192.0/20 62.100.128.0/19 78.41.232.0/21 81.93.240.0/20 91.191.144.0/20 94.247.176.0/21 185.67.152.0/22 188.130.0.0/17 193.47.184.0/24 195.14.0.0/24 195.114.18.0/23 IPv6: 2001:758::/32 2001:900::/32 2a00:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 07:f1:86:18:b1:2d:7b:05:47:17:d2:13:dc:b3:1f:85:73:22: d0:d9:0d:32:d0:a8:e4:76:09:02:e9:8e:2b:59:12:a6:18:dd: 5e:89:8a:da:88:86:b1:66:3d:af:16:91:b9:8c:a4:83:cf:b1: 84:43:81:a6:99:4f:56:be:aa:8c:a7:f6:65:96:44:f5:5c:9b: 9a:34:28:40:7a:c3:7e:c8:be:aa:88:f6:40:bd:49:7f:c6:70: 93:46:39:ac:a9:4e:f5:40:4f:b5:8b:b6:f6:30:ca:77:59:f0: 73:3a:47:8d:05:c6:b3:57:6c:54:76:c1:b5:b8:88:56:69:eb: e1:8d:53:77:46:c0:bd:11:b1:c1:a4:a5:85:82:28:56:90:59: 63:ff:6e:fd:c8:54:5c:32:de:7c:87:85:69:88:a9:89:c7:a7: cf:0c:da:e8:e8:06:eb:89:72:e2:70:e0:1c:1e:11:4e:d4:1e: 45:bb:1d:f1:a5:c7:ff:47:ae:65:cb:c9:4c:70:b1:af:3b:a0: 8b:92:c1:23:3c:d6:09:4f:06:f6:3f:5a:ce:ba:61:67:ff:b4: d8:71:28:64:1d:ae:48:8a:b2:c2:4f:73:f7:97:55:cd:0b:de: 5d:b4:ee:7a:8b:8e:0a:74:c9:ac:58:7c:aa:12:73:35:9f:33: 91:a1:4a:25 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt260za7fdmo4mXEnDxIShXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzhjMjBlNjVkY2QzM2ZmOGE1ZTNjMzBhNjQ1OTI1YzVj OWY5NWYwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2IyZTg0YjhlZGU1MDk2OWVkZWRmMDU1NzI1ZmMxNjdiZDg1ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cOIQXPsvaHGdcOo2qoEgCMMzcKg Yo4R8UstxhPwFnAt/BJjJ1ItAeB15vQ6cLq4LeR9T89i8bFG9NtG5H1Q/qSxPTZB KP8pHGOPusV6xOaTqZdKSmVxP3jY/WPQxLQKjCnLJ/oUqX4dNMxyo/MEcDiAkuC1 FfmVjzEDheXVEDvGftDUGiPimpRGOYZlUeB0rRFanT6Exn/0CNcPMIlaEAYlAVZD m+d8YdvMiX7ui9kslG7sKtQg09ZAOxqSPeL3JO7eOCrIPBNLyyIIFwUOIimo+e2x 02pRwgGRIL6fKPj1YbkKNq4ed6+bvNnbwrO4kRTyKq+a34iSbSBBw40VXwIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFIyy6EuO3lCWnt7fBVcl/BZ72F8UMB8GA1UdIwQY MBaAFD7Iwg5l3NM/+KXjwwpkWSXFyflfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt ZGZjNWNjNjRhODFlLzEvakxMb1M0N2VVSmFlM3Q4RlZ5WDhGbnZZWHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl LzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBOBAIAATBIAwQDJQBIAwQE LhXAAwQFPmSAAwQDTinoAwQEUV3wAwQEW7+QAwQDXvewAwQCuUOYAwQHvIIAAwQA wS+4AwQAww4AAwQBw3ISMBsEAgACMBUDBQAgAQdYAwUAIAEJAAMFACoAy4AwDQYJ KoZIhvcNAQELBQADggEBAAfxhhixLXsFRxfSE9yzH4VzItDZDTLQqOR2CQLpjitZ EqYY3V6JitqIhrFmPa8WkbmMpIPPsYRDgaaZT1a+qoyn9mWWRPVcm5o0KEB6w37I vqqI9kC9SX/GcJNGOaypTvVAT7WLtvYwyndZ8HM6R40FxrNXbFR2wbW4iFZp6+GN U3dGwL0RscGkpYWCKFaQWWP/bv3IVFwy3nyHhWmIqYnHp88M2ujoBuuJcuJw4Bwe EU7UHkW7HfGlx/9HrmXLyUxwsa87oIuSwSM81glPBvY/Ws66YWf/tNhxKGQdrkiK ssJPc/eXVc0L3l207nqLjgp0yaxYfKoSczWfM5GhSiU= -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:51 2026 by rpki-client