This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jeRn-UMwpHYBIAJNrJ8Z2jfAJQo.roa File: jeRn-UMwpHYBIAJNrJ8Z2jfAJQo.roa (raw, json) Hash identifier: IzzsGdMjnA5q3JTiQEePiCg5EF2JTiZATJIetqcbeSI= Subject key identifier: 8D:E4:67:F9:43:30:A4:76:01:20:02:4D:AC:9F:19:DA:37:C0:25:0A Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019BEED625FD78268363E8252EB43183729A Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jeRn-UMwpHYBIAJNrJ8Z2jfAJQo.roa Signing time: Sat 24 Jan 2026 07:09:30 +0000 ROA not before: Sat 24 Jan 2026 07:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.139.6.0/23 maxlen: 24 82.115.9.0/24 maxlen: 24 89.251.10.0/24 maxlen: 24 159.255.32.0/22 maxlen: 22 159.255.36.0/22 maxlen: 22 185.231.172.0/24 maxlen: 24 188.209.156.0/22 maxlen: 24 195.96.135.0/24 maxlen: 24 202.133.90.0/23 maxlen: 24 212.90.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:d6:25:fd:78:26:83:63:e8:25:2e:b4:31:83:72:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 24 07:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8de467f94330a4760120024dac9f19da37c0250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:d3:b8:d0:57:d5:1a:ef:79:1c:bf:9e:0a: 6b:20:cd:1d:ae:59:77:f8:f2:0d:a6:dc:12:e5:16: 09:44:78:d6:00:1e:fd:8c:b5:18:c6:a5:f6:c8:d8: 79:5d:f2:8b:be:54:ca:23:ab:09:da:b3:27:97:44: 61:bd:f9:f8:e0:57:84:c3:8c:39:d1:79:4d:a4:33: 11:16:2f:73:2f:84:6f:a4:79:c0:2c:0a:39:48:62: 2a:80:45:8d:18:a6:e4:40:b0:7d:c5:02:ca:78:e8: c4:19:a1:88:99:3a:cd:5a:24:45:52:93:80:09:81: ab:10:ab:09:0f:7d:a3:9c:da:75:f1:00:14:f4:a2: cf:c3:a2:4e:98:df:94:f9:79:0f:c8:a6:41:01:d9: bd:86:38:02:a9:81:55:96:76:d4:99:0b:5f:f3:ee: aa:5b:15:16:d6:ae:ab:45:3f:13:78:2b:48:11:08: 64:f1:7c:88:5f:99:e3:98:96:57:1c:d2:0a:02:61: 37:f8:06:d0:fa:49:07:39:50:e0:c2:82:ed:6e:94: 94:6e:ba:1f:29:a8:e3:e5:69:f0:4b:6a:25:de:5c: 9e:b1:fc:76:6e:27:34:e5:0a:72:0a:f8:83:c4:96: af:c5:f9:58:e1:d3:c3:d7:4e:00:25:dd:1e:d7:07: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E4:67:F9:43:30:A4:76:01:20:02:4D:AC:9F:19:DA:37:C0:25:0A X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jeRn-UMwpHYBIAJNrJ8Z2jfAJQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.6.0/23 82.115.9.0/24 89.251.10.0/24 159.255.32.0/21 185.231.172.0/24 188.209.156.0/22 195.96.135.0/24 202.133.90.0/23 212.90.100.0/22 Signature Algorithm: sha256WithRSAEncryption 23:d6:65:b8:a2:d2:0d:02:33:25:72:f5:e8:a7:9b:b0:00:7f: b1:4a:e8:4f:be:71:04:d9:0c:06:a5:0f:13:d8:bc:a2:57:37: ad:1b:19:74:e8:c3:80:ed:64:18:97:8e:92:82:9e:a5:75:c8: bb:3c:5c:03:b7:3c:c3:ee:5a:61:56:b2:3a:21:0b:e7:fe:de: ca:b4:c5:2b:f4:e8:2f:b7:27:5c:35:65:49:2a:de:b7:0f:1b: ca:6d:84:eb:7a:09:15:81:49:37:e8:16:ff:0f:8a:78:44:50: f0:d4:e4:e0:84:3f:53:11:9c:8a:f1:9b:2a:df:c3:ee:f2:1f: fd:e6:60:d9:71:13:73:70:4e:50:d3:25:7b:f6:35:4c:ad:e2: 89:d1:99:b0:74:da:40:a4:3e:20:33:dd:70:35:2a:63:ad:18: 1d:55:f0:d8:22:96:fe:c3:9b:9c:1d:9a:9c:4e:4a:77:45:d7: 20:4a:ba:a9:ae:d0:44:04:3e:14:70:fa:65:db:89:dc:25:ad: 6e:0f:0e:95:c1:30:7a:ae:53:a6:93:96:cb:32:3e:9e:c1:d7: 15:68:0f:69:50:5b:86:92:87:cb:ae:05:bc:ff:05:9b:83:cd: f4:ea:9c:54:68:37:59:bb:b9:58:68:d9:60:23:bc:8d:56:e4: 69:a4:cb:f3 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvu1iX9eCaDY+glLrQxg3KaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTI0MDcwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGU0NjdmOTQzMzBhNDc2MDEyMDAyNGRhYzlmMTlkYTM3YzAyNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDPTuNBX1RrveRy/ngprIM0drll3 +PINptwS5RYJRHjWAB79jLUYxqX2yNh5XfKLvlTKI6sJ2rMnl0Rhvfn44FeEw4w5 0XlNpDMRFi9zL4RvpHnALAo5SGIqgEWNGKbkQLB9xQLKeOjEGaGImTrNWiRFUpOA CYGrEKsJD32jnNp18QAU9KLPw6JOmN+U+XkPyKZBAdm9hjgCqYFVlnbUmQtf8+6q WxUW1q6rRT8TeCtIEQhk8XyIX5njmJZXHNIKAmE3+AbQ+kkHOVDgwoLtbpSUbrof Kajj5WnwS2ol3lyesfx2bic05QpyCviDxJavxflY4dPD104AJd0e1wezPwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFI3kZ/lDMKR2ASACTayfGdo3wCUKMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvamVSbi1VTXdwSFlCSUFKTnJKOFoyamZBSlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLYsGAwQA UnMJAwQAWfsKAwQDn/8gAwQAueesAwQCvNGcAwQAw2CHAwQByoVaAwQC1FpkMA0G CSqGSIb3DQEBCwUAA4IBAQAj1mW4otINAjMlcvXop5uwAH+xSuhPvnEE2QwGpQ8T 2LyiVzetGxl06MOA7WQYl46Sgp6ldci7PFwDtzzD7lphVrI6IQvn/t7KtMUr9Ogv tydcNWVJKt63DxvKbYTregkVgUk36Bb/D4p4RFDw1OTghD9TEZyK8Zsq38Pu8h/9 5mDZcRNzcE5Q0yV79jVMreKJ0ZmwdNpApD4gM91wNSpjrRgdVfDYIpb+w5ucHZqc Tkp3RdcgSrqprtBEBD4UcPpl24ncJa1uDw6VwTB6rlOmk5bLMj6ewdcVaA9pUFuG kofLrgW8/wWbg8306pxUaDdZu7lYaNlgI7yNVuRppMvz -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:22 2026 by rpki-client