This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa File: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (raw, json) Hash identifier: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q= Subject key identifier: 8E:BD:32:B8:D2:EA:78:AF:F1:85:BB:89:0A:C4:8D:B9:16:E1:07:A3 Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Certificate serial: 019B7F82F703FB78414085EEA5031F7E1A44 Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa Signing time: Fri 02 Jan 2026 16:20:47 +0000 ROA not before: Fri 02 Jan 2026 16:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 80.65.48.0/20 maxlen: 20 80.65.56.0/24 maxlen: 24 88.87.32.0/19 maxlen: 19 109.239.224.0/20 maxlen: 20 146.247.128.0/17 maxlen: 17 146.247.154.0/24 maxlen: 24 146.247.160.0/19 maxlen: 19 146.247.192.0/19 maxlen: 19 146.247.226.0/24 maxlen: 24 146.247.246.0/24 maxlen: 24 185.166.204.0/22 maxlen: 22 185.166.205.0/24 maxlen: 24 185.168.240.0/22 maxlen: 22 213.166.160.0/19 maxlen: 19 2001:1ad8::/32 maxlen: 32 2a00:1b60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f7:03:fb:78:41:40:85:ee:a5:03:1f:7e:1a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Validity Not Before: Jan 2 16:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebd32b8d2ea78aff185bb890ac48db916e107a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:8d:0c:d3:f2:ac:87:46:5b:9c:29:10:1f: 1e:6e:a1:2f:8b:ec:0d:d7:b1:ad:ae:21:23:8f:62: db:88:16:d6:03:9c:10:72:4a:86:45:76:fb:e9:2a: c7:92:13:72:58:66:d6:f5:37:34:45:06:70:91:25: db:71:f4:09:77:cb:0c:64:03:60:8c:71:1b:a6:33: 35:45:8c:b9:64:7c:87:85:2f:97:64:e7:22:19:81: 0c:62:6e:2a:90:d7:87:ea:e7:4b:89:63:8f:99:8a: 79:2e:f3:cf:79:9a:a4:92:2c:ae:01:07:20:21:04: 5a:ce:55:21:55:15:0b:d6:32:9e:dc:48:0b:f6:f6: 16:64:1f:53:47:18:94:5a:79:11:6f:e8:c7:9a:24: 31:b5:36:7d:db:6f:28:01:c6:42:70:40:50:67:82: 2d:b4:15:02:8c:da:b4:cd:f9:8d:01:fe:52:7d:25: c1:4d:b3:1f:63:95:94:19:d2:75:a5:7f:ee:c6:9d: c2:d2:13:27:51:5d:5c:c8:07:c9:fb:91:8e:20:e5: 16:7d:2f:3b:aa:67:06:be:af:17:67:2c:22:85:dd: f2:97:71:96:f0:a1:90:5b:e2:3d:2e:d4:82:35:66: 98:16:40:31:96:11:5d:b5:35:44:b7:ba:c8:cd:e7: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:32:B8:D2:EA:78:AF:F1:85:BB:89:0A:C4:8D:B9:16:E1:07:A3 X509v3 Authority Key Identifier: keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.48.0/20 88.87.32.0/19 109.239.224.0/20 146.247.128.0/17 185.166.204.0/22 185.168.240.0/22 213.166.160.0/19 IPv6: 2001:1ad8::/32 2a00:1b60::/32 Signature Algorithm: sha256WithRSAEncryption 9e:10:9f:46:c8:73:7a:61:15:cb:99:f7:60:bb:bf:cc:70:19: 02:2e:6a:d9:fe:6a:95:82:42:ef:44:0d:fa:a2:3f:be:5e:fb: 37:54:bc:c8:f0:ff:0e:f9:9d:4c:c7:60:d7:dc:ce:7a:f2:7b: 33:9d:03:53:2f:e7:13:86:37:ad:24:ba:ff:c7:c4:c4:ec:6f: 93:40:d9:f4:a1:f7:a4:b3:aa:e3:df:7e:b2:16:98:d8:2f:14: 79:df:86:91:12:b7:9b:5f:a3:89:b3:7c:a9:0e:de:32:bc:63: e9:bf:01:75:5f:79:54:fc:93:2c:7d:92:f9:38:7b:0d:b7:f1: 0b:1e:2f:12:df:ba:28:16:c2:e4:52:66:b0:a5:f1:2a:01:f4: 73:9f:33:32:b4:02:8c:eb:91:67:c2:d4:a3:04:bf:55:2f:9b: 69:df:56:62:58:d9:9c:8b:30:79:94:43:44:02:be:b2:2f:2d: 70:67:60:ac:f8:0b:01:e2:3b:df:b3:e3:b2:e3:24:e2:12:41: f4:4b:ef:a1:92:21:49:21:4f:c8:32:84:8e:d3:d8:8d:b7:20: ef:53:05:26:5a:a8:25:7c:aa:1d:2a:d9:d5:48:95:9a:eb:78: 59:e0:b5:b1:64:2c:93:31:00:33:21:4e:cb:88:5f:fa:4f:45: ef:5f:3e:26 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/gvcD+3hBQIXupQMffhpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey YTYwZGUwHhcNMjYwMTAyMTYyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJkMzJiOGQyZWE3OGFmZjE4NWJiODkwYWM0OGRiOTE2ZTEwN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdqNDNPyrIdGW5wpEB8ebqEvi+wN 17GtriEjj2LbiBbWA5wQckqGRXb76SrHkhNyWGbW9Tc0RQZwkSXbcfQJd8sMZANg jHEbpjM1RYy5ZHyHhS+XZOciGYEMYm4qkNeH6udLiWOPmYp5LvPPeZqkkiyuAQcg IQRazlUhVRUL1jKe3EgL9vYWZB9TRxiUWnkRb+jHmiQxtTZ9228oAcZCcEBQZ4It tBUCjNq0zfmNAf5SfSXBTbMfY5WUGdJ1pX/uxp3C0hMnUV1cyAfJ+5GOIOUWfS87 qmcGvq8XZywihd3yl3GW8KGQW+I9LtSCNWaYFkAxlhFdtTVEt7rIzedFQQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFI69MrjS6niv8YW7iQrEjbkW4QejMB8GA1UdIwQY MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt ZjYwNzBhNGFkODNhLzEvanIweXVOTHFlS194aGJ1SkNzU051UmJoQjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQEUEEwAwQF WFcgAwQEbe/gAwQHkveAAwQCuabMAwQCuajwAwQF1aagMBQEAgACMA4DBQAgARrY AwUAKgAbYDANBgkqhkiG9w0BAQsFAAOCAQEAnhCfRshzemEVy5n3YLu/zHAZAi5q 2f5qlYJC70QN+qI/vl77N1S8yPD/DvmdTMdg19zOevJ7M50DUy/nE4Y3rSS6/8fE xOxvk0DZ9KH3pLOq499+shaY2C8Ued+GkRK3m1+jibN8qQ7eMrxj6b8BdV95VPyT LH2S+Th7DbfxCx4vEt+6KBbC5FJmsKXxKgH0c58zMrQCjOuRZ8LUowS/VS+bad9W YljZnIsweZRDRAK+si8tcGdgrPgLAeI737PjsuMk4hJB9EvvoZIhSSFPyDKEjtPY jbcg71MFJlqoJXyqHSrZ1UiVmut4WeC1sWQskzEAMyFOy4hf+k9F718+Jg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:21 2026 by rpki-client