This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/17JRT-eliiqD0ZudhQwcd-RHoCY.roa File: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (raw, json) Hash identifier: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4= Subject key identifier: D7:B2:51:4F:E7:A5:8A:2A:83:D1:9B:9D:85:0C:1C:77:E4:47:A0:26 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019B7DCA595997479FF765942B8C60AC8E88 Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/17JRT-eliiqD0ZudhQwcd-RHoCY.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44444 IP address blocks: 85.115.32.0/24 maxlen: 24 85.115.33.0/24 maxlen: 24 85.115.34.0/24 maxlen: 24 85.115.35.0/24 maxlen: 24 85.115.36.0/24 maxlen: 24 85.115.37.0/24 maxlen: 24 85.115.39.0/24 maxlen: 24 85.115.40.0/24 maxlen: 24 85.115.41.0/24 maxlen: 24 85.115.42.0/24 maxlen: 24 85.115.43.0/24 maxlen: 24 85.115.44.0/24 maxlen: 24 85.115.45.0/24 maxlen: 24 85.115.46.0/24 maxlen: 24 85.115.47.0/24 maxlen: 24 85.115.49.0/24 maxlen: 24 85.115.50.0/24 maxlen: 24 85.115.51.0/24 maxlen: 24 85.115.52.0/24 maxlen: 24 85.115.53.0/24 maxlen: 24 85.115.54.0/24 maxlen: 24 85.115.55.0/24 maxlen: 24 85.115.56.0/24 maxlen: 24 85.115.58.0/24 maxlen: 24 85.115.59.0/24 maxlen: 24 85.115.60.0/24 maxlen: 24 85.115.61.0/24 maxlen: 24 85.115.62.0/24 maxlen: 24 85.115.63.0/24 maxlen: 24 86.111.222.0/24 maxlen: 24 157.167.0.0/24 maxlen: 24 157.167.4.0/24 maxlen: 24 157.167.5.0/24 maxlen: 24 157.167.6.0/24 maxlen: 24 157.167.10.0/24 maxlen: 24 157.167.11.0/24 maxlen: 24 157.167.12.0/24 maxlen: 24 157.167.13.0/24 maxlen: 24 157.167.14.0/24 maxlen: 24 157.167.15.0/24 maxlen: 24 157.167.16.0/24 maxlen: 24 157.167.17.0/24 maxlen: 24 157.167.18.0/24 maxlen: 24 157.167.19.0/24 maxlen: 24 157.167.20.0/24 maxlen: 24 157.167.21.0/24 maxlen: 24 157.167.22.0/24 maxlen: 24 157.167.23.0/24 maxlen: 24 157.167.24.0/24 maxlen: 24 157.167.25.0/24 maxlen: 24 157.167.26.0/24 maxlen: 24 157.167.27.0/24 maxlen: 24 157.167.28.0/24 maxlen: 24 157.167.29.0/24 maxlen: 24 157.167.30.0/24 maxlen: 24 157.167.31.0/24 maxlen: 24 157.167.32.0/24 maxlen: 24 157.167.33.0/24 maxlen: 24 157.167.34.0/24 maxlen: 24 157.167.35.0/24 maxlen: 24 157.167.36.0/24 maxlen: 24 157.167.37.0/24 maxlen: 24 157.167.38.0/24 maxlen: 24 157.167.39.0/24 maxlen: 24 157.167.40.0/24 maxlen: 24 157.167.41.0/24 maxlen: 24 157.167.42.0/24 maxlen: 24 157.167.43.0/24 maxlen: 24 157.167.44.0/24 maxlen: 24 157.167.45.0/24 maxlen: 24 157.167.46.0/24 maxlen: 24 157.167.47.0/24 maxlen: 24 157.167.48.0/24 maxlen: 24 157.167.49.0/24 maxlen: 24 157.167.50.0/24 maxlen: 24 157.167.51.0/24 maxlen: 24 157.167.52.0/24 maxlen: 24 157.167.53.0/24 maxlen: 24 157.167.54.0/24 maxlen: 24 157.167.55.0/24 maxlen: 24 157.167.56.0/24 maxlen: 24 157.167.57.0/24 maxlen: 24 157.167.58.0/24 maxlen: 24 157.167.59.0/24 maxlen: 24 157.167.60.0/24 maxlen: 24 157.167.61.0/24 maxlen: 24 157.167.62.0/24 maxlen: 24 157.167.63.0/24 maxlen: 24 157.167.64.0/24 maxlen: 24 157.167.65.0/24 maxlen: 24 157.167.66.0/24 maxlen: 24 157.167.67.0/24 maxlen: 24 157.167.68.0/24 maxlen: 24 157.167.69.0/24 maxlen: 24 157.167.70.0/24 maxlen: 24 157.167.71.0/24 maxlen: 24 157.167.72.0/24 maxlen: 24 157.167.73.0/24 maxlen: 24 157.167.74.0/24 maxlen: 24 157.167.75.0/24 maxlen: 24 157.167.76.0/24 maxlen: 24 157.167.77.0/24 maxlen: 24 157.167.78.0/24 maxlen: 24 157.167.79.0/24 maxlen: 24 157.167.80.0/24 maxlen: 24 157.167.81.0/24 maxlen: 24 157.167.82.0/24 maxlen: 24 157.167.83.0/24 maxlen: 24 157.167.84.0/24 maxlen: 24 157.167.85.0/24 maxlen: 24 157.167.86.0/24 maxlen: 24 157.167.87.0/24 maxlen: 24 157.167.88.0/24 maxlen: 24 157.167.89.0/24 maxlen: 24 157.167.90.0/24 maxlen: 24 157.167.91.0/24 maxlen: 24 157.167.92.0/24 maxlen: 24 157.167.93.0/24 maxlen: 24 157.167.94.0/24 maxlen: 24 157.167.95.0/24 maxlen: 24 157.167.96.0/24 maxlen: 24 157.167.97.0/24 maxlen: 24 157.167.98.0/24 maxlen: 24 157.167.99.0/24 maxlen: 24 157.167.100.0/24 maxlen: 24 157.167.101.0/24 maxlen: 24 157.167.102.0/24 maxlen: 24 157.167.103.0/24 maxlen: 24 157.167.104.0/24 maxlen: 24 157.167.105.0/24 maxlen: 24 157.167.106.0/24 maxlen: 24 157.167.107.0/24 maxlen: 24 157.167.108.0/24 maxlen: 24 157.167.109.0/24 maxlen: 24 157.167.110.0/24 maxlen: 24 157.167.111.0/24 maxlen: 24 157.167.112.0/24 maxlen: 24 157.167.113.0/24 maxlen: 24 157.167.114.0/24 maxlen: 24 157.167.115.0/24 maxlen: 24 157.167.116.0/24 maxlen: 24 157.167.117.0/24 maxlen: 24 157.167.118.0/24 maxlen: 24 157.167.119.0/24 maxlen: 24 157.167.120.0/24 maxlen: 24 157.167.121.0/24 maxlen: 24 157.167.122.0/24 maxlen: 24 157.167.123.0/24 maxlen: 24 157.167.124.0/24 maxlen: 24 157.167.125.0/24 maxlen: 24 157.167.126.0/24 maxlen: 24 157.167.127.0/24 maxlen: 24 157.167.128.0/24 maxlen: 24 157.167.130.0/24 maxlen: 24 157.167.131.0/24 maxlen: 24 157.167.132.0/24 maxlen: 24 157.167.157.0/24 maxlen: 24 157.167.158.0/24 maxlen: 24 157.167.159.0/24 maxlen: 24 157.167.163.0/24 maxlen: 24 157.167.164.0/24 maxlen: 24 157.167.165.0/24 maxlen: 24 185.4.96.0/24 maxlen: 24 185.4.97.0/24 maxlen: 24 185.4.98.0/24 maxlen: 24 2001:4010::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:59:59:97:47:9f:f7:65:94:2b:8c:60:ac:8e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7b2514fe7a58a2a83d19b9d850c1c77e447a026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:2b:4c:e3:a3:6e:2c:10:4a:a2:b4:4f:c4: 24:42:40:d9:78:8a:c4:b2:5b:09:07:52:70:fc:94: fa:cb:97:b0:f9:ef:ad:8c:30:e3:cd:b8:bd:e3:33: f7:29:2c:c1:15:ee:6c:12:19:ef:94:ee:43:f7:bc: b4:e2:52:31:22:68:fd:4f:e0:71:a6:e4:85:4d:cb: 16:98:63:b2:f9:cf:95:25:f4:a6:e0:75:28:85:ab: 8f:42:5b:0a:c5:c8:02:56:05:ad:9a:a0:58:8b:e1: 47:ed:91:a5:7e:f3:41:d6:bb:21:03:18:e2:df:21: 8a:f9:a9:28:5c:75:a4:48:90:6c:f4:2f:42:09:bd: bf:8f:84:f1:a7:d6:1f:b4:d6:5f:02:03:8b:0d:d9: f8:94:5b:05:7b:74:24:fd:d8:b0:fe:93:24:ab:86: 1c:88:5d:56:f1:e8:ac:ec:e7:e5:b9:20:f2:a1:c3: e4:04:32:94:1c:6f:f5:3d:13:7f:be:87:8d:35:95: 08:cc:a6:4b:53:e9:9c:21:2e:04:48:32:7a:07:70: 3c:1b:18:4d:b7:3a:5f:15:a2:93:24:c2:31:c0:b7: 5e:8d:00:cc:63:70:1e:6b:6d:af:ed:29:9c:2c:61: d9:65:5d:db:18:fa:8c:b6:91:c5:24:b2:96:51:e4: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B2:51:4F:E7:A5:8A:2A:83:D1:9B:9D:85:0C:1C:77:E4:47:A0:26 X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/17JRT-eliiqD0ZudhQwcd-RHoCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.32.0-85.115.37.255 85.115.39.0-85.115.47.255 85.115.49.0-85.115.56.255 85.115.58.0-85.115.63.255 86.111.222.0/24 157.167.0.0/24 157.167.4.0-157.167.6.255 157.167.10.0-157.167.128.255 157.167.130.0-157.167.132.255 157.167.157.0-157.167.159.255 157.167.163.0-157.167.165.255 185.4.96.0-185.4.98.255 IPv6: 2001:4010::/32 Signature Algorithm: sha256WithRSAEncryption 3c:f9:4f:bf:de:21:50:1e:02:2a:a0:d9:d3:1c:fd:44:8c:fb: d5:bf:56:ef:33:af:c7:3e:01:26:ea:e5:1d:c1:79:b3:60:c9: de:b2:be:53:dd:11:67:5c:8a:1e:8e:0f:15:ab:95:cf:6d:fc: b5:4c:fb:73:71:64:48:65:73:d1:c5:01:c6:e2:c7:bd:76:68: 8a:7d:43:3f:99:98:ef:e6:bb:01:f8:a0:59:ab:01:cc:d7:ec: aa:d7:72:03:09:44:99:ef:ac:ba:f1:4e:e1:dd:9c:64:4d:e0: 1c:2e:4c:f3:3b:b9:09:03:42:a4:e2:53:b8:80:fe:81:7f:27: e6:6d:ac:64:bc:8a:c0:4e:d4:4a:92:41:37:1c:15:da:75:05: 0c:7a:28:34:3b:cc:33:28:39:ad:14:0c:e5:d7:71:02:89:ff: 0a:14:50:99:3a:e9:d6:12:a6:94:5f:2d:d8:4a:15:e1:3e:07: 2c:21:3d:23:cf:4c:f4:aa:31:c9:0e:66:ad:d9:09:5e:b5:71: d1:9c:bd:d4:ad:47:d2:e9:a4:4e:50:18:57:d9:1c:9f:9c:56: 4b:61:e9:7f:92:c4:2c:15:da:15:f1:04:59:8e:00:63:9c:04: f1:cd:ea:05:05:47:64:43:68:1f:33:79:c9:e6:36:17:f4:47: ed:74:4f:42 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yllZl0ef92WUK4xgrI6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2IyNTE0ZmU3YTU4YTJhODNkMTliOWQ4NTBjMWM3N2U0NDdhMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykgrTOOjbiwQSqK0T8QkQkDZeIrE slsJB1Jw/JT6y5ew+e+tjDDjzbi94zP3KSzBFe5sEhnvlO5D97y04lIxImj9T+Bx puSFTcsWmGOy+c+VJfSm4HUohauPQlsKxcgCVgWtmqBYi+FH7ZGlfvNB1rshAxji 3yGK+akoXHWkSJBs9C9CCb2/j4Txp9YftNZfAgOLDdn4lFsFe3Qk/diw/pMkq4Yc iF1W8eis7OfluSDyocPkBDKUHG/1PRN/voeNNZUIzKZLU+mcIS4ESDJ6B3A8GxhN tzpfFaKTJMIxwLdejQDMY3Aea22v7SmcLGHZZV3bGPqMtpHFJLKWUeR3VQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNeyUU/npYoqg9GbnYUMHHfkR6AmMB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvMTdKUlQtZWxpaXFEMFp1ZGhRd2NkLVJIb0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBnwQCAAEwgZgwDAME BVVzIAMEAVVzJDAMAwQAVXMnAwQEVXMgMAwDBABVczEDBABVczgwDAMEAVVzOgME BlVzAAMEAFZv3gMEAJ2nADAMAwQCnacEAwQAnacGMAwDBAGdpwoDBACdp4AwDAME AZ2nggMEAJ2nhDAMAwQAnaedAwQFnaeAMAwDBACdp6MDBAGdp6QwDAMEBbkEYAME ALkEYjANBAIAAjAHAwUAIAFAEDANBgkqhkiG9w0BAQsFAAOCAQEAPPlPv94hUB4C KqDZ0xz9RIz71b9W7zOvxz4BJurlHcF5s2DJ3rK+U90RZ1yKHo4PFauVz238tUz7 c3FkSGVz0cUBxuLHvXZoin1DP5mY7+a7AfigWasBzNfsqtdyAwlEme+suvFO4d2c ZE3gHC5M8zu5CQNCpOJTuID+gX8n5m2sZLyKwE7USpJBNxwV2nUFDHooNDvMMyg5 rRQM5ddxAon/ChRQmTrp1hKmlF8t2EoV4T4HLCE9I89M9KoxyQ5mrdkJXrVx0Zy9 1K1H0umkTlAYV9kcn5xWS2Hpf5LELBXaFfEEWY4AY5wE8c3qBQVHZENoHzN5yeY2 F/RH7XRPQg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:04 2026 by rpki-client