This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/jW75sPmmFSuAByKBWvYaeRnFXOM.roa File: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (raw, json) Hash identifier: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4= Subject key identifier: 8D:6E:F9:B0:F9:A6:15:2B:80:07:22:81:5A:F6:1A:79:19:C5:5C:E3 Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Certificate serial: 019B7B360E29DE051D1CA76600F30DBE92AA Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/jW75sPmmFSuAByKBWvYaeRnFXOM.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200154 IP address blocks: 185.32.44.0/22 maxlen: 22 185.32.44.0/24 maxlen: 24 185.32.45.0/24 maxlen: 24 185.32.46.0/24 maxlen: 24 185.32.47.0/24 maxlen: 24 185.40.32.0/24 maxlen: 24 185.40.33.0/24 maxlen: 24 2a00:c0a0::/32 maxlen: 32 2a00:c0a0::/34 maxlen: 34 2a00:c0a0:4000::/34 maxlen: 34 2a00:c0a0:8000::/34 maxlen: 34 2a00:c0a0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:29:de:05:1d:1c:a7:66:00:f3:0d:be:92:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6ef9b0f9a6152b800722815af61a7919c55ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:3c:ce:a4:8f:6c:33:04:90:67:27:4d:7b: ba:5b:18:62:3f:52:02:ff:f2:d8:53:b2:e8:b7:5f: 1f:3d:7c:3d:1a:57:fb:b5:be:8f:d0:40:e7:b4:e4: 30:d2:be:74:3e:7e:ae:d8:ea:60:db:06:dc:ac:47: 7b:de:cd:61:95:c1:4d:e2:32:ee:7a:01:63:c3:22: 25:52:db:17:ed:e6:90:0d:91:65:de:2b:0f:2f:49: 51:a2:1e:ad:fd:87:b7:b4:21:fa:3b:98:c3:d5:07: fc:08:7f:64:7f:f6:10:4d:48:9c:83:61:d7:4e:a4: 1b:d6:8c:e8:d0:56:89:e9:ea:79:26:32:cd:43:a1: b2:f6:67:57:2f:61:89:70:b5:e9:83:b1:ba:e9:df: 97:f3:76:20:ec:0e:ff:f5:62:02:13:6e:96:df:33: 9c:5f:36:37:17:b0:5e:b5:c5:44:b9:e9:fe:eb:c0: fb:fd:91:04:6c:31:02:0f:5c:45:fc:16:dd:a1:9d: d6:c0:7a:81:17:31:4f:89:be:ea:b0:c2:7d:ba:58: 71:96:9c:67:36:69:1f:be:b1:8e:e3:21:43:52:65: 89:a2:15:6c:74:a3:c7:40:2d:82:c8:c4:5a:b2:98: 5e:08:81:4b:8e:87:cd:87:b2:bc:7f:04:67:17:86: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6E:F9:B0:F9:A6:15:2B:80:07:22:81:5A:F6:1A:79:19:C5:5C:E3 X509v3 Authority Key Identifier: keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/jW75sPmmFSuAByKBWvYaeRnFXOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.44.0/22 185.40.32.0/23 IPv6: 2a00:c0a0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:32:04:65:eb:2b:88:19:f4:d3:0c:c9:b4:87:50:5f:ba:9e: d3:4a:de:a1:58:20:28:96:45:b4:0e:f7:9a:19:5f:62:16:59: 9c:23:f5:38:03:99:e2:67:85:a1:9d:6c:bc:08:f8:1d:b2:28: 1f:73:bb:08:db:4f:a1:fc:88:3b:3c:b2:b9:a4:fb:40:6b:66: ae:80:5f:2e:73:b2:a4:87:b5:f5:34:cb:24:57:0f:0f:60:13: 9c:95:01:af:ad:74:b0:72:06:c9:da:e2:97:09:ef:42:f6:8e: 39:6a:e5:eb:c8:df:87:ed:26:63:0a:0f:6c:cd:da:d3:96:6e: ea:a5:ac:31:cb:49:35:ff:26:2c:ac:dc:96:b2:57:45:28:26: be:da:21:b5:06:f8:54:2a:10:70:de:a3:15:61:c8:0d:7d:02: eb:59:04:64:a1:9a:99:5d:4b:b5:44:ce:b8:66:26:73:53:02: 6c:9e:e4:41:e6:8f:e0:07:ba:f2:62:85:89:af:6b:54:99:84: a3:0e:d0:cd:1f:b9:d7:7a:7a:19:9a:19:cd:25:b8:dc:59:9d: e3:34:5b:59:e8:aa:1e:7c:9c:70:bf:13:74:40:78:2a:76:45: d6:da:5d:2f:92:e4:a4:44:b9:71:98:09:63:32:1d:87:24:a1: 66:3e:45:f7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Ng4p3gUdHKdmAPMNvpKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3 YzBjMWIwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZlZjliMGY5YTYxNTJiODAwNzIyODE1YWY2MWE3OTE5YzU1Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbg8zqSPbDMEkGcnTXu6WxhiP1IC //LYU7Lot18fPXw9Glf7tb6P0EDntOQw0r50Pn6u2Opg2wbcrEd73s1hlcFN4jLu egFjwyIlUtsX7eaQDZFl3isPL0lRoh6t/Ye3tCH6O5jD1Qf8CH9kf/YQTUicg2HX TqQb1ozo0FaJ6ep5JjLNQ6Gy9mdXL2GJcLXpg7G66d+X83Yg7A7/9WICE26W3zOc XzY3F7BetcVEuen+68D7/ZEEbDECD1xF/BbdoZ3WwHqBFzFPib7qsMJ9ulhxlpxn NmkfvrGO4yFDUmWJohVsdKPHQC2CyMRaspheCIFLjofNh7K8fwRnF4bZzwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI1u+bD5phUrgAcigVr2GnkZxVzjMB8GA1UdIwQY MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt NmIzYTQ3NjY3Y2E4LzEvalc3NXNQbW1GU3VBQnlLQld2WWFlUm5GWE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4 LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSAsAwQB uSggMA0EAgACMAcDBQAqAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQAKMgRl6yuIGfTT DMm0h1Bfup7TSt6hWCAolkW0DveaGV9iFlmcI/U4A5niZ4WhnWy8CPgdsigfc7sI 20+h/Ig7PLK5pPtAa2augF8uc7Kkh7X1NMskVw8PYBOclQGvrXSwcgbJ2uKXCe9C 9o45auXryN+H7SZjCg9szdrTlm7qpawxy0k1/yYsrNyWsldFKCa+2iG1BvhUKhBw 3qMVYcgNfQLrWQRkoZqZXUu1RM64ZiZzUwJsnuRB5o/gB7ryYoWJr2tUmYSjDtDN H7nXenoZmhnNJbjcWZ3jNFtZ6KoefJxwvxN0QHgqdkXW2l0vkuSkRLlxmAljMh2H JKFmPkX3 -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:12 2026 by rpki-client