This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Jz-voqtmr6s9l-17wwWOzkPklP4.roa File: Jz-voqtmr6s9l-17wwWOzkPklP4.roa (raw, json) Hash identifier: 0KYzp44vVJK8KCX44xgQuMur9j5UVfh+V8DoZ5sxES4= Subject key identifier: 27:3F:AF:A2:AB:66:AF:AB:3D:97:ED:7B:C3:05:8E:CE:43:E4:94:FE Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019B7CED8E717BD7A4FC298FF21B2A843805 Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Jz-voqtmr6s9l-17wwWOzkPklP4.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8455 IP address blocks: 85.222.236.0/24 maxlen: 24 85.222.237.0/24 maxlen: 24 85.222.238.0/24 maxlen: 24 85.222.239.0/24 maxlen: 24 89.255.200.0/21 maxlen: 24 89.255.200.0/24 maxlen: 24 89.255.201.0/24 maxlen: 24 89.255.202.0/24 maxlen: 24 89.255.203.0/24 maxlen: 24 89.255.204.0/24 maxlen: 24 89.255.205.0/24 maxlen: 24 89.255.206.0/24 maxlen: 24 89.255.207.0/24 maxlen: 24 185.223.86.0/23 maxlen: 24 185.234.96.0/22 maxlen: 24 185.242.220.0/22 maxlen: 22 195.43.158.0/24 maxlen: 24 195.137.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8e:71:7b:d7:a4:fc:29:8f:f2:1b:2a:84:38:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=273fafa2ab66afab3d97ed7bc3058ece43e494fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:fd:17:a4:30:c9:8b:25:30:ad:c9:00:7a: 7c:6a:a3:62:2e:f2:c8:e7:91:48:b3:06:d0:9f:26: b6:ff:14:3d:00:19:a2:33:7d:bd:3d:3d:da:49:1f: 1a:a2:0a:67:43:4b:b8:6f:e0:ef:00:42:86:5e:76: a8:e3:79:95:f2:35:de:99:ca:13:ea:a5:e8:7b:fa: a1:67:e2:fc:76:6a:4a:6a:b1:e9:c9:9f:66:86:0f: 2a:ce:5a:49:6b:d4:07:35:4c:58:af:3d:12:32:1f: b0:01:74:e1:48:3e:09:20:af:40:45:aa:94:f7:3d: 44:86:00:99:85:5a:ee:bb:03:b7:c4:cf:12:ba:07: ed:5f:09:f5:d8:66:36:ca:2a:21:2a:f8:2e:f8:cc: b8:99:21:df:1b:1e:68:5c:fa:dd:02:0e:77:fc:2b: be:2f:de:67:a2:f2:8d:75:6c:97:bb:4d:ae:f1:06: 9e:d6:3d:ea:e8:4d:92:e3:68:a6:13:6a:d6:30:4a: 12:f2:6f:ee:09:58:87:6d:4d:b6:bb:56:72:93:ee: cc:6a:42:bc:e5:31:f2:c6:b2:b5:29:ad:cb:c7:ea: 9b:3e:2e:49:24:2b:b2:77:3c:ea:57:cd:00:26:48: e4:e8:97:5e:a5:5a:fe:55:66:a8:05:f4:f4:27:26: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3F:AF:A2:AB:66:AF:AB:3D:97:ED:7B:C3:05:8E:CE:43:E4:94:FE X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Jz-voqtmr6s9l-17wwWOzkPklP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.236.0/22 89.255.200.0/21 185.223.86.0/23 185.234.96.0/22 185.242.220.0/22 195.43.158.0/24 195.137.242.0/24 Signature Algorithm: sha256WithRSAEncryption 76:bc:ea:0f:1d:9a:1f:6e:73:b5:49:c7:e3:08:e3:b9:7d:e8: e7:b5:68:2f:b9:30:8a:4c:30:8d:c7:17:83:ae:4c:b3:36:b1: 59:96:7c:9e:1f:79:10:fe:9b:f9:c1:0b:b5:35:29:3c:bf:3f: d4:6a:2a:89:5f:18:a3:03:5f:73:9d:ea:f6:7e:05:4e:44:97: b7:c6:b3:33:21:d2:5f:f2:8a:90:3f:0f:56:e5:f9:3f:9f:1c: b9:01:8d:5b:5c:ec:c6:8a:e2:27:a7:5a:e8:48:c0:06:45:41: 22:5a:1e:70:2f:31:8a:33:8b:18:71:ee:7c:7c:05:e2:b7:d1: b6:4c:22:c6:57:70:4a:7b:a6:4f:5d:35:fb:90:90:6a:be:08: 5b:34:cb:1c:ed:8c:65:39:62:de:49:da:aa:8f:fc:40:53:36: c5:62:fb:68:35:3f:6b:6f:26:7f:aa:dc:24:15:e3:74:d8:b1: 55:91:8a:19:94:8b:c0:93:5f:cf:d1:cb:4f:a1:f1:5f:9c:ca: c9:80:cc:bb:df:19:fc:dd:6f:50:4a:3e:0e:c9:24:36:f8:84: 31:61:7e:a0:f8:87:29:7d:6e:c5:c4:c2:a8:a9:3f:0a:87:5e: ba:23:79:20:ea:df:32:46:4d:7b:16:a5:73:30:57:99:ef:64: ba:f2:d3:94 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87Y5xe9ek/CmP8hsqhDgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzNmYWZhMmFiNjZhZmFiM2Q5N2VkN2JjMzA1OGVjZTQzZTQ5NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/9F6QwyYslMK3JAHp8aqNiLvLI 55FIswbQnya2/xQ9ABmiM329PT3aSR8aogpnQ0u4b+DvAEKGXnao43mV8jXemcoT 6qXoe/qhZ+L8dmpKarHpyZ9mhg8qzlpJa9QHNUxYrz0SMh+wAXThSD4JIK9ARaqU 9z1EhgCZhVruuwO3xM8SugftXwn12GY2yiohKvgu+My4mSHfGx5oXPrdAg53/Cu+ L95novKNdWyXu02u8Qae1j3q6E2S42imE2rWMEoS8m/uCViHbU22u1Zyk+7MakK8 5THyxrK1Ka3Lx+qbPi5JJCuydzzqV80AJkjk6JdepVr+VWaoBfT0JyaojQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCc/r6KrZq+rPZfte8MFjs5D5JT+MB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvSnotdm9xdG1yNnM5bC0xN3d3V096a1BrbFA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCVd7sAwQD Wf/IAwQBud9WAwQCuepgAwQCufLcAwQAwyueAwQAw4nyMA0GCSqGSIb3DQEBCwUA A4IBAQB2vOoPHZofbnO1ScfjCOO5fejntWgvuTCKTDCNxxeDrkyzNrFZlnyeH3kQ /pv5wQu1NSk8vz/UaiqJXxijA19zner2fgVORJe3xrMzIdJf8oqQPw9W5fk/nxy5 AY1bXOzGiuInp1roSMAGRUEiWh5wLzGKM4sYce58fAXit9G2TCLGV3BKe6ZPXTX7 kJBqvghbNMsc7YxlOWLeSdqqj/xAUzbFYvtoNT9rbyZ/qtwkFeN02LFVkYoZlIvA k1/P0ctPofFfnMrJgMy73xn83W9QSj4OySQ2+IQxYX6g+IcpfW7FxMKoqT8Kh166 I3kg6t8yRk17FqVzMFeZ72S68tOU -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:58 2026 by rpki-client