This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa File: jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa (raw, json) Hash identifier: AWBZLQMuBiaZN340mhPRyITSlDhQnxohD2VrtfAI5E8= Subject key identifier: 8E:F3:9F:BB:0F:6B:59:4E:84:26:F2:E1:5E:03:DF:24:4F:CA:4F:CB Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D14AB4D0CA04DBE71909A2E087FCF Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15545 IP address blocks: 31.46.22.0/24 maxlen: 24 46.107.224.0/24 maxlen: 24 80.249.160.0/22 maxlen: 22 80.249.165.0/24 maxlen: 24 80.249.174.0/23 maxlen: 23 80.249.174.0/24 maxlen: 24 84.2.32.0/23 maxlen: 23 84.2.34.0/23 maxlen: 23 84.2.36.0/23 maxlen: 23 84.2.37.0/24 maxlen: 24 84.2.38.0/23 maxlen: 23 84.2.39.0/24 maxlen: 24 84.2.42.0/23 maxlen: 23 84.2.46.0/23 maxlen: 23 188.36.230.0/23 maxlen: 23 194.38.104.0/22 maxlen: 22 195.228.135.0/24 maxlen: 24 195.228.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:ab:4d:0c:a0:4d:be:71:90:9a:2e:08:7f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ef39fbb0f6b594e8426f2e15e03df244fca4fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:8c:24:a6:01:be:e6:ce:5d:dd:0e:93:c7: fa:26:aa:bf:3f:5a:13:38:69:27:18:54:23:98:91: 57:02:5a:c6:28:e9:d0:5f:0e:04:0a:a2:02:ee:dd: 05:c2:c4:30:2b:30:29:51:03:57:5f:a1:e7:03:6e: ed:23:5f:bf:36:a6:e8:64:72:43:66:3a:d5:c4:8d: b3:e3:07:82:64:8a:8c:8a:ab:7c:c2:ad:e9:49:9c: aa:b3:6f:45:ca:72:81:a5:bb:1d:91:a3:b8:8a:5b: a5:10:19:d6:0f:7b:4e:ca:4e:02:fd:e9:25:01:c3: 59:4a:ec:d4:b7:b3:fd:22:47:1b:6a:75:51:0b:fa: 24:c5:c0:c5:27:dd:a7:e6:b4:2f:85:c2:14:19:66: 2c:5c:b2:2d:fa:be:11:17:42:dc:0a:d7:5e:b9:44: a7:21:47:09:9e:85:f7:5a:b1:50:44:1e:33:ef:fa: f7:a4:d8:95:7a:6d:98:9f:19:bf:6c:66:63:5d:01: 1d:72:20:11:db:60:22:ba:50:0f:2f:f0:61:31:fe: ff:62:30:3f:40:39:5d:4a:5c:b3:a2:68:9e:e8:3f: d7:50:10:d2:5a:6b:f0:f4:a3:cf:8a:27:70:0b:95: 18:4b:87:65:08:d4:e8:ff:d4:ee:1a:40:ca:d0:9c: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:9F:BB:0F:6B:59:4E:84:26:F2:E1:5E:03:DF:24:4F:CA:4F:CB X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.46.22.0/24 46.107.224.0/24 80.249.160.0/22 80.249.165.0/24 80.249.174.0/23 84.2.32.0/21 84.2.42.0/23 84.2.46.0/23 188.36.230.0/23 194.38.104.0/22 195.228.135.0/24 195.228.245.0/24 Signature Algorithm: sha256WithRSAEncryption 90:cc:86:81:ed:94:e4:3a:9c:cb:06:9b:d7:9e:27:ca:34:eb: f4:07:3c:a6:36:1e:24:ac:56:bd:c1:fc:be:6f:81:12:19:55: a6:62:c2:13:5d:32:6e:41:31:9e:94:71:6a:86:f0:94:22:ed: 9a:56:5a:09:0b:3e:70:3c:78:4a:34:5c:73:e0:75:80:7e:3c: b7:3c:f3:c9:aa:d3:1e:1b:d2:1a:60:bc:c3:4f:9d:5a:62:08: cb:66:22:90:0a:49:08:3f:d8:26:17:17:01:38:78:88:61:ec: 1b:15:23:47:b8:89:98:20:44:68:be:88:f4:87:85:1c:fc:91: a5:61:5d:45:4c:dc:38:6c:77:03:13:1b:1c:27:de:42:71:98: 18:30:27:78:75:b0:e3:9c:82:40:05:2c:d7:29:29:fc:c3:35: c1:84:0f:fd:d6:16:8d:47:c5:28:52:9e:e7:49:51:10:82:fc: 0c:18:99:e8:76:01:b1:9b:e3:48:8f:08:7b:46:f2:bc:6c:e4: 2e:dc:8b:01:3c:a6:cd:66:94:a9:d2:ca:1b:f0:9d:0c:13:b7: 03:b4:ff:56:b4:42:a6:1d:61:cf:d2:3d:c7:65:74:d5:b1:f1: da:d2:29:1c:75:dc:c8:87:8b:fc:68:4e:94:10:fd:84:49:e9: e5:80:8e:eb -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt9XRSrTQygTb5xkJouCH/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWYzOWZiYjBmNmI1OTRlODQyNmYyZTE1ZTAzZGYyNDRmY2E0ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sOMJKYBvubOXd0Ok8f6Jqq/P1oT OGknGFQjmJFXAlrGKOnQXw4ECqIC7t0FwsQwKzApUQNXX6HnA27tI1+/NqboZHJD ZjrVxI2z4weCZIqMiqt8wq3pSZyqs29FynKBpbsdkaO4ilulEBnWD3tOyk4C/ekl AcNZSuzUt7P9IkcbanVRC/okxcDFJ92n5rQvhcIUGWYsXLIt+r4RF0LcCtdeuUSn IUcJnoX3WrFQRB4z7/r3pNiVem2Ynxm/bGZjXQEdciAR22AiulAPL/BhMf7/YjA/ QDldSlyzomie6D/XUBDSWmvw9KPPiidwC5UYS4dlCNTo/9TuGkDK0Jxy7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI7zn7sPa1lOhCby4V4D3yRPyk/LMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvanZPZnV3OXJXVTZFSnZMaFhnUGZKRV9LVDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAHy4WAwQA LmvgAwQCUPmgAwQAUPmlAwQBUPmuAwQDVAIgAwQBVAIqAwQBVAIuAwQBvCTmAwQC wiZoAwQAw+SHAwQAw+T1MA0GCSqGSIb3DQEBCwUAA4IBAQCQzIaB7ZTkOpzLBpvX nifKNOv0BzymNh4krFa9wfy+b4ESGVWmYsITXTJuQTGelHFqhvCUIu2aVloJCz5w PHhKNFxz4HWAfjy3PPPJqtMeG9IaYLzDT51aYgjLZiKQCkkIP9gmFxcBOHiIYewb FSNHuImYIERovoj0h4Uc/JGlYV1FTNw4bHcDExscJ95CcZgYMCd4dbDjnIJABSzX KSn8wzXBhA/91haNR8UoUp7nSVEQgvwMGJnodgGxm+NIjwh7RvK8bOQu3IsBPKbN ZpSp0sob8J0ME7cDtP9WtEKmHWHP0j3HZXTVsfHa0ikcddzIh4v8aE6UEP2ESenl gI7r -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:34 2026 by rpki-client