This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jikjhRC9On9DS_EGfDRYMPVRdr8.roa File: jikjhRC9On9DS_EGfDRYMPVRdr8.roa (raw, json) Hash identifier: JYeTWOZHFu5Qv/WHfiXn05hdjtiQq1bvSJkinnP55Ck= Subject key identifier: 8E:29:23:85:10:BD:3A:7F:43:4B:F1:06:7C:34:58:30:F5:51:76:BF Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CA44C7CE3240580F9295D8F95006 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jikjhRC9On9DS_EGfDRYMPVRdr8.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 5.1.40.0/24 maxlen: 24 2a06:fe40::/32 maxlen: 32 2a06:fe41::/32 maxlen: 32 2a06:fe42::/32 maxlen: 32 2a06:fe43::/32 maxlen: 32 2a06:fe44::/32 maxlen: 32 2a06:fe45::/32 maxlen: 32 2a06:fe46::/32 maxlen: 32 2a06:fe47::/32 maxlen: 32 2a09:1d80::/29 maxlen: 29 2a09:1d80::/32 maxlen: 32 2a09:1d81::/32 maxlen: 32 2a09:1d82::/32 maxlen: 32 2a09:1d83::/32 maxlen: 32 2a09:1d84::/32 maxlen: 32 2a09:1d85::/32 maxlen: 32 2a09:1d86::/32 maxlen: 32 2a09:1d87::/32 maxlen: 32 2a0e:2c00::/29 maxlen: 29 2a0e:2c00::/32 maxlen: 32 2a0e:2c01::/32 maxlen: 32 2a0e:2c02::/32 maxlen: 32 2a0e:2c03::/32 maxlen: 32 2a0e:2c04::/32 maxlen: 32 2a0e:2c05::/32 maxlen: 32 2a0e:2c06::/32 maxlen: 32 2a0e:2c07::/32 maxlen: 32 2a0e:6c00::/29 maxlen: 29 2a0e:6c00::/32 maxlen: 32 2a0e:6c01::/32 maxlen: 32 2a0e:6c02::/32 maxlen: 32 2a0e:6c03::/32 maxlen: 32 2a0e:6c04::/32 maxlen: 32 2a0e:6c05::/32 maxlen: 32 2a0e:6c06::/32 maxlen: 32 2a0e:6c07::/32 maxlen: 32 2a0e:8400::/29 maxlen: 29 2a11:ed80::/29 maxlen: 29 2a12:f80::/29 maxlen: 29 2a12:f80::/32 maxlen: 32 2a12:f81::/32 maxlen: 32 2a12:f82::/32 maxlen: 32 2a12:f83::/32 maxlen: 32 2a12:f84::/32 maxlen: 32 2a12:f85::/32 maxlen: 32 2a12:f86::/32 maxlen: 32 2a12:f87::/32 maxlen: 32 2a12:2f00::/29 maxlen: 29 2a12:3a80::/32 maxlen: 32 2a12:3a81::/32 maxlen: 32 2a12:3a82::/32 maxlen: 32 2a12:3a83::/32 maxlen: 32 2a12:3a84::/32 maxlen: 32 2a12:3a85::/32 maxlen: 32 2a12:3a86::/32 maxlen: 32 2a12:3a87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ca:44:c7:ce:32:40:58:0f:92:95:d8:f9:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e29238510bd3a7f434bf1067c345830f55176bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:d0:fc:fa:d8:ec:3d:f9:eb:2b:fe:4b:d4: 26:93:a4:c2:ca:92:c6:a5:5f:a3:93:23:37:e8:c8: 98:f2:16:7a:1d:ef:0b:dc:ee:a3:fb:ad:57:cd:ea: 91:d7:af:01:e3:85:7f:ce:77:44:f7:03:1a:36:59: 1d:0b:93:80:5e:ee:0b:ca:75:55:85:1a:1e:70:27: 07:37:55:dd:60:65:f1:8d:6f:34:09:38:e4:9f:92: 46:19:d8:e1:a5:95:b2:9b:88:97:77:e7:8e:17:5a: 99:5c:20:e6:c2:05:3c:aa:bc:99:99:95:53:fa:73: 49:26:12:79:49:60:40:64:06:f8:1a:06:6a:a7:4d: 6f:b3:d5:64:b5:8e:11:fb:f1:2b:ea:6e:6c:df:af: c8:cf:d4:b5:6a:02:83:9e:c9:5c:a8:17:ba:c6:ec: 4b:e9:25:fe:6f:6f:77:f8:5e:9b:4a:4b:bb:c0:a2: c5:25:dc:8e:62:c7:17:73:ef:89:6f:19:b1:e8:ec: fc:aa:7c:65:1f:27:a2:72:cf:72:d3:9f:bd:89:e9: 2e:be:ad:e6:0b:ea:52:0d:a4:c4:0b:45:79:5f:49: 2b:44:35:57:27:9c:06:39:f6:1d:c6:0c:15:1a:4d: 8e:bb:87:5a:a1:63:d4:ad:96:31:7a:a4:30:44:58: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:23:85:10:BD:3A:7F:43:4B:F1:06:7C:34:58:30:F5:51:76:BF X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jikjhRC9On9DS_EGfDRYMPVRdr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.40.0/24 IPv6: 2a06:fe40::/29 2a09:1d80::/29 2a0e:2c00::/29 2a0e:6c00::/29 2a0e:8400::/29 2a11:ed80::/29 2a12:f80::/29 2a12:2f00::/29 2a12:3a80::/29 Signature Algorithm: sha256WithRSAEncryption 89:94:64:b1:3f:ee:77:88:ff:14:8a:25:9f:5e:fb:67:13:89: c6:62:fa:c7:85:77:0e:a6:c5:b6:67:c8:0c:4b:11:7d:e5:1f: ec:56:d6:26:23:43:1f:f4:38:f6:5c:7f:7e:78:04:0f:e5:d7: f5:88:7d:66:f1:0b:91:5b:cb:af:06:d2:0b:5d:a4:7a:f2:f8: 4a:74:34:9c:36:ff:5d:72:48:49:50:d3:14:1a:9a:58:5a:9c: a8:b3:b7:50:bb:b8:0e:6b:f8:14:9c:b9:83:03:a0:32:1d:e8: df:b1:ec:30:f5:e6:aa:58:1f:c1:eb:a7:a4:e3:d1:90:e9:42: 48:0a:c0:1d:6d:4a:b8:df:14:c7:40:f9:0c:14:6e:51:72:17: 59:c2:0d:c2:35:a6:c7:38:34:80:83:ee:ec:85:c1:89:f8:6a: e7:5a:bd:b0:80:21:2b:24:dd:b6:26:a6:49:b8:c2:c6:5a:2c: bd:cb:26:3a:a9:db:23:77:9f:6c:db:01:71:84:42:de:9b:9d: 13:94:7d:07:f2:d5:bb:60:dd:03:11:1f:e3:6f:95:53:e0:2b: 45:a6:51:43:6a:39:2b:ef:84:f7:cb:f6:a3:e5:00:09:89:88: 3e:49:44:23:7c:5b:a0:a8:2d:19:ef:62:ba:d3:6a:44:27:a2: 86:da:69:d0 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt/FcpEx84yQFgPkpXY+VAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTI5MjM4NTEwYmQzYTdmNDM0YmYxMDY3YzM0NTgzMGY1NTE3NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOrQ/PrY7D356yv+S9Qmk6TCypLG pV+jkyM36MiY8hZ6He8L3O6j+61XzeqR168B44V/zndE9wMaNlkdC5OAXu4LynVV hRoecCcHN1XdYGXxjW80CTjkn5JGGdjhpZWym4iXd+eOF1qZXCDmwgU8qryZmZVT +nNJJhJ5SWBAZAb4GgZqp01vs9VktY4R+/Er6m5s36/Iz9S1agKDnslcqBe6xuxL 6SX+b293+F6bSku7wKLFJdyOYscXc++Jbxmx6Oz8qnxlHyeics9y05+9iekuvq3m C+pSDaTEC0V5X0krRDVXJ5wGOfYdxgwVGk2Ou4daoWPUrZYxeqQwRFgEVwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFI4pI4UQvTp/Q0vxBnw0WDD1UXa/MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvamlramhSQzlPbjlEU19FR2ZEUllNUFZSZHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAMBAIAATAGAwQABQEoMEUE AgACMD8DBQMqBv5AAwUDKgkdgAMFAyoOLAADBQMqDmwAAwUDKg6EAAMFAyoR7YAD BQMqEg+AAwUDKhIvAAMFAyoSOoAwDQYJKoZIhvcNAQELBQADggEBAImUZLE/7neI /xSKJZ9e+2cTicZi+seFdw6mxbZnyAxLEX3lH+xW1iYjQx/0OPZcf354BA/l1/WI fWbxC5Fby68G0gtdpHry+Ep0NJw2/11ySElQ0xQamlhanKizt1C7uA5r+BScuYMD oDId6N+x7DD15qpYH8Hrp6Tj0ZDpQkgKwB1tSrjfFMdA+QwUblFyF1nCDcI1psc4 NICD7uyFwYn4audavbCAISsk3bYmpkm4wsZaLL3LJjqp2yN3n2zbAXGEQt6bnROU fQfy1btg3QMRH+NvlVPgK0WmUUNqOSvvhPfL9qPlAAmJiD5JRCN8W6CoLRnvYrrT akQnoobaadA= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:56 2026 by rpki-client