This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/JO8lw9pc6rdb9fPDm96v3IXX6ls.roa File: JO8lw9pc6rdb9fPDm96v3IXX6ls.roa (raw, json) Hash identifier: Laxa18ToStQU8xtCFVMy0nxd8qXrekn2wbTOcsi/EWg= Subject key identifier: 24:EF:25:C3:DA:5C:EA:B7:5B:F5:F3:C3:9B:DE:AF:DC:85:D7:EA:5B Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76906EB60FA2C9118708353D8413B Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/JO8lw9pc6rdb9fPDm96v3IXX6ls.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211522 IP address blocks: 94.228.162.0/24 maxlen: 24 94.228.163.0/24 maxlen: 24 94.228.164.0/24 maxlen: 24 94.228.165.0/24 maxlen: 24 94.228.168.0/24 maxlen: 24 94.228.169.0/24 maxlen: 24 94.228.170.0/24 maxlen: 24 178.236.240.0/24 maxlen: 24 178.236.244.0/24 maxlen: 24 178.236.245.0/24 maxlen: 24 178.236.246.0/24 maxlen: 24 178.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:06:eb:60:fa:2c:91:18:70:83:53:d8:41:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ef25c3da5ceab75bf5f3c39bdeafdc85d7ea5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:1f:db:e5:1c:0f:45:4f:5e:8f:7c:68:d8: 3a:60:2a:d3:68:91:5b:a9:d3:d6:2d:b9:79:c5:43: be:88:f7:42:32:4d:d2:d2:2b:14:e2:38:c3:54:10: c4:31:4f:54:fb:d0:2b:4a:30:cf:03:cb:30:99:14: 63:2e:75:ee:4e:da:b5:05:04:a0:c5:8a:3a:a8:81: 5e:aa:50:06:b5:e9:40:9c:73:07:0f:09:74:8d:ba: a5:88:51:98:39:ce:41:b6:a7:f3:33:bd:67:6e:0c: f1:c9:74:9e:f7:68:07:20:78:44:1e:49:44:c9:62: ab:e1:01:2b:bf:87:e5:00:5f:44:6c:8e:09:19:0a: e7:db:ea:70:3f:67:1b:be:b7:e0:03:20:9c:74:30: f5:6a:83:b3:c7:7f:b2:19:39:c5:6d:0d:c0:62:79: 02:b7:83:55:c0:5b:4c:cf:5c:49:e5:ee:36:13:d3: e0:d6:37:17:26:79:b6:38:80:ab:15:4a:44:36:6c: 23:61:d9:64:98:d1:de:69:de:01:64:6b:69:99:6b: 5a:86:f1:b8:19:3d:c3:b2:96:fb:e5:9f:0b:c5:99: 72:51:1f:e2:0a:2b:07:2c:f0:54:3b:15:68:82:81: 9d:fe:f7:74:23:85:39:dc:9a:af:7d:c7:d6:c8:6d: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:25:C3:DA:5C:EA:B7:5B:F5:F3:C3:9B:DE:AF:DC:85:D7:EA:5B X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/JO8lw9pc6rdb9fPDm96v3IXX6ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.162.0-94.228.165.255 94.228.168.0-94.228.170.255 178.236.240.0/24 178.236.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:12:60:ef:a7:22:32:21:e4:e0:90:89:e8:5d:c8:a3:e2:9f: d6:9e:5f:30:9b:2b:f7:cd:5c:34:34:e7:f0:34:af:2d:c6:67: 28:f3:41:83:0b:d3:bf:dc:7e:6d:9e:4f:be:fd:d9:a7:71:68: 69:ab:7a:f5:3d:b5:0a:d7:17:b9:57:f8:c4:fa:97:47:cc:5b: bc:e3:02:ef:95:90:27:d7:43:72:fc:70:b0:86:a4:6a:3d:95: 64:59:d0:0e:7d:c7:f7:8f:0d:80:10:a9:c0:5f:14:28:e5:aa: ef:7a:92:52:00:12:e8:75:65:5c:d0:94:4c:d8:a1:d6:28:ac: 75:74:a6:89:4d:ef:c3:96:1c:b0:c9:f8:c8:74:35:52:65:c4: a2:c8:08:d8:a7:3a:1a:2c:34:24:eb:83:ad:68:f8:a6:ea:42: 86:c8:0b:9a:53:7d:5a:9c:46:a1:6a:b0:12:4f:dc:2d:0d:bd: 24:ee:45:59:8b:f7:bf:4f:c8:59:32:da:8c:04:9e:a0:74:03: 3d:ad:58:c0:b5:f9:db:40:b1:0a:87:08:1b:4b:58:6e:30:8f: b3:aa:dd:30:25:98:90:08:92:59:b2:97:6e:94:a2:54:5f:b9: 5e:d5:a5:ce:55:b1:ce:0d:24:1c:a1:d5:c6:4c:e6:07:e8:e2: af:d1:05:ae -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3x2kG62D6LJEYcINT2EE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGVmMjVjM2RhNWNlYWI3NWJmNWYzYzM5YmRlYWZkYzg1ZDdlYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf0f2+UcD0VPXo98aNg6YCrTaJFb qdPWLbl5xUO+iPdCMk3S0isU4jjDVBDEMU9U+9ArSjDPA8swmRRjLnXuTtq1BQSg xYo6qIFeqlAGtelAnHMHDwl0jbqliFGYOc5BtqfzM71nbgzxyXSe92gHIHhEHklE yWKr4QErv4flAF9EbI4JGQrn2+pwP2cbvrfgAyCcdDD1aoOzx3+yGTnFbQ3AYnkC t4NVwFtMz1xJ5e42E9Pg1jcXJnm2OICrFUpENmwjYdlkmNHead4BZGtpmWtahvG4 GT3Dspb75Z8LxZlyUR/iCisHLPBUOxVogoGd/vd0I4U53JqvfcfWyG378QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCTvJcPaXOq3W/Xzw5ver9yF1+pbMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvSk84bHc5cGM2cmRiOWZQRG05NnYzSVhYNmxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFe5KID BAFe5KQwDAMEA17kqAMEAF7kqgMEALLs8AMEArLs9DANBgkqhkiG9w0BAQsFAAOC AQEADxJg76ciMiHk4JCJ6F3Io+Kf1p5fMJsr981cNDTn8DSvLcZnKPNBgwvTv9x+ bZ5Pvv3Zp3Foaat69T21CtcXuVf4xPqXR8xbvOMC75WQJ9dDcvxwsIakaj2VZFnQ Dn3H948NgBCpwF8UKOWq73qSUgAS6HVlXNCUTNih1iisdXSmiU3vw5YcsMn4yHQ1 UmXEosgI2Kc6Giw0JOuDrWj4pupChsgLmlN9WpxGoWqwEk/cLQ29JO5FWYv3v0/I WTLajASeoHQDPa1YwLX520CxCocIG0tYbjCPs6rdMCWYkAiSWbKXbpSiVF+5XtWl zlWxzg0kHKHVxkzmB+jir9EFrg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:17 2026 by rpki-client