This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/m0JBcNifgnkupm2Gw9Bt39udNkw.roa File: m0JBcNifgnkupm2Gw9Bt39udNkw.roa (raw, json) Hash identifier: IXsvEfN8RKH14B+O7p2elXqG3F9dsf9xtICSKf0rJUw= Subject key identifier: 9B:42:41:70:D8:9F:82:79:2E:A6:6D:86:C3:D0:6D:DF:DB:9D:36:4C Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37D76D3A568EDC6FEBF162A8410731 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/m0JBcNifgnkupm2Gw9Bt39udNkw.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41881 IP address blocks: 95.38.0.0/21 maxlen: 21 95.38.8.0/24 maxlen: 24 95.38.9.0/24 maxlen: 24 95.38.10.0/24 maxlen: 24 95.38.11.0/24 maxlen: 24 95.38.12.0/24 maxlen: 24 95.38.13.0/24 maxlen: 24 95.38.14.0/24 maxlen: 24 95.38.15.0/24 maxlen: 24 95.38.16.0/20 maxlen: 20 95.38.16.0/24 maxlen: 24 95.38.17.0/24 maxlen: 24 95.38.18.0/24 maxlen: 24 95.38.19.0/24 maxlen: 24 95.38.20.0/24 maxlen: 24 95.38.21.0/24 maxlen: 24 95.38.22.0/24 maxlen: 24 95.38.23.0/24 maxlen: 24 95.38.24.0/24 maxlen: 24 95.38.25.0/24 maxlen: 24 95.38.26.0/24 maxlen: 24 95.38.27.0/24 maxlen: 24 95.38.28.0/24 maxlen: 24 95.38.29.0/24 maxlen: 24 95.38.30.0/24 maxlen: 24 95.38.31.0/24 maxlen: 24 95.38.32.0/24 maxlen: 24 95.38.33.0/24 maxlen: 24 95.38.34.0/24 maxlen: 24 95.38.35.0/24 maxlen: 24 95.38.36.0/23 maxlen: 23 95.38.39.0/24 maxlen: 24 95.38.40.0/24 maxlen: 24 95.38.41.0/24 maxlen: 24 95.38.42.0/24 maxlen: 24 95.38.43.0/24 maxlen: 24 95.38.44.0/22 maxlen: 22 95.38.44.0/24 maxlen: 24 95.38.46.0/24 maxlen: 24 95.38.47.0/24 maxlen: 24 95.38.48.0/24 maxlen: 24 95.38.49.0/24 maxlen: 24 95.38.50.0/24 maxlen: 24 95.38.51.0/24 maxlen: 24 95.38.52.0/24 maxlen: 24 95.38.53.0/24 maxlen: 24 95.38.54.0/23 maxlen: 23 95.38.56.0/23 maxlen: 23 95.38.58.0/24 maxlen: 24 95.38.59.0/24 maxlen: 24 95.38.60.0/24 maxlen: 24 95.38.61.0/24 maxlen: 24 95.38.62.0/23 maxlen: 23 95.38.62.0/24 maxlen: 24 95.38.63.0/24 maxlen: 24 95.38.64.0/24 maxlen: 24 95.38.65.0/24 maxlen: 24 95.38.66.0/23 maxlen: 23 95.38.68.0/24 maxlen: 24 95.38.69.0/24 maxlen: 24 95.38.70.0/24 maxlen: 24 95.38.71.0/24 maxlen: 24 95.38.72.0/24 maxlen: 24 95.38.73.0/24 maxlen: 24 95.38.74.0/23 maxlen: 23 95.38.74.0/24 maxlen: 24 95.38.75.0/24 maxlen: 24 95.38.76.0/24 maxlen: 24 95.38.77.0/24 maxlen: 24 95.38.78.0/23 maxlen: 23 95.38.78.0/24 maxlen: 24 95.38.79.0/24 maxlen: 24 95.38.80.0/24 maxlen: 24 95.38.81.0/24 maxlen: 24 95.38.82.0/23 maxlen: 23 95.38.84.0/23 maxlen: 23 95.38.84.0/24 maxlen: 24 95.38.85.0/24 maxlen: 24 95.38.86.0/24 maxlen: 24 95.38.87.0/24 maxlen: 24 95.38.88.0/22 maxlen: 22 95.38.88.0/24 maxlen: 24 95.38.89.0/24 maxlen: 24 95.38.90.0/24 maxlen: 24 95.38.91.0/24 maxlen: 24 95.38.92.0/24 maxlen: 24 95.38.93.0/24 maxlen: 24 95.38.94.0/23 maxlen: 23 95.38.96.0/21 maxlen: 21 95.38.96.0/23 maxlen: 23 95.38.98.0/23 maxlen: 23 95.38.100.0/23 maxlen: 23 95.38.102.0/23 maxlen: 23 95.38.104.0/22 maxlen: 22 95.38.108.0/24 maxlen: 24 95.38.109.0/24 maxlen: 24 95.38.110.0/23 maxlen: 23 95.38.112.0/21 maxlen: 21 95.38.116.0/23 maxlen: 23 95.38.116.0/24 maxlen: 24 95.38.117.0/24 maxlen: 24 95.38.118.0/24 maxlen: 24 95.38.119.0/24 maxlen: 24 95.38.120.0/24 maxlen: 24 95.38.121.0/24 maxlen: 24 95.38.122.0/23 maxlen: 23 95.38.122.0/24 maxlen: 24 95.38.123.0/24 maxlen: 24 95.38.124.0/24 maxlen: 24 95.38.125.0/24 maxlen: 24 95.38.126.0/23 maxlen: 23 95.38.128.0/20 maxlen: 20 95.38.128.0/22 maxlen: 22 95.38.128.0/23 maxlen: 23 95.38.128.0/24 maxlen: 24 95.38.129.0/24 maxlen: 24 95.38.130.0/23 maxlen: 23 95.38.160.0/21 maxlen: 21 95.38.168.0/22 maxlen: 22 95.38.168.0/23 maxlen: 23 95.38.169.0/24 maxlen: 24 95.38.170.0/24 maxlen: 24 95.38.172.0/23 maxlen: 23 95.38.174.0/24 maxlen: 24 95.38.175.0/24 maxlen: 24 95.38.176.0/20 maxlen: 20 95.38.192.0/21 maxlen: 21 95.38.192.0/24 maxlen: 24 95.38.193.0/24 maxlen: 24 95.38.194.0/24 maxlen: 24 95.38.195.0/24 maxlen: 24 95.38.196.0/24 maxlen: 24 95.38.199.0/24 maxlen: 24 95.38.200.0/22 maxlen: 22 95.38.200.0/24 maxlen: 24 95.38.201.0/24 maxlen: 24 95.38.202.0/24 maxlen: 24 95.38.203.0/24 maxlen: 24 95.38.204.0/23 maxlen: 23 95.38.206.0/24 maxlen: 24 95.38.208.0/21 maxlen: 21 95.38.208.0/22 maxlen: 22 95.38.210.0/24 maxlen: 24 95.38.211.0/24 maxlen: 24 95.38.212.0/23 maxlen: 23 95.38.215.0/24 maxlen: 24 95.38.216.0/23 maxlen: 23 95.38.218.0/24 maxlen: 24 95.38.220.0/22 maxlen: 22 95.38.224.0/24 maxlen: 24 95.38.225.0/24 maxlen: 24 95.38.226.0/23 maxlen: 23 95.38.228.0/22 maxlen: 22 95.38.232.0/21 maxlen: 21 95.38.240.0/21 maxlen: 21 95.38.252.0/24 maxlen: 24 95.38.253.0/24 maxlen: 24 95.38.254.0/24 maxlen: 24 95.38.255.0/24 maxlen: 24 185.20.160.0/24 maxlen: 24 185.20.161.0/24 maxlen: 24 185.20.162.0/24 maxlen: 24 185.20.163.0/24 maxlen: 24 2a00:52e0::/32 maxlen: 32 2a01:bd80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d7:6d:3a:56:8e:dc:6f:eb:f1:62:a8:41:07:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b424170d89f82792ea66d86c3d06ddfdb9d364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:1d:56:38:02:3c:84:d6:a7:68:15:71:14: ea:36:7f:c2:8c:10:26:01:5e:a1:46:a1:a9:f4:e7: 3f:13:c7:ba:51:f3:64:87:c6:99:dd:09:8f:48:b7: ed:83:15:20:0b:36:ae:ac:f1:2d:d7:e3:c8:6b:0f: 00:84:b8:eb:d2:34:fd:aa:ad:7d:ab:7c:a6:5b:85: 3e:eb:c4:90:c3:d8:f6:c2:c1:0c:84:8f:15:24:12: 14:3c:af:1c:da:5c:50:d5:10:c9:a7:48:12:08:75: 49:8b:8b:70:61:83:d6:c4:21:b2:7f:31:12:96:fb: 5c:5b:fa:20:d5:a8:2b:4a:40:6d:75:89:b3:a1:53: 9f:ad:7e:ec:9f:5c:59:cf:e7:e1:ab:85:98:b6:59: 8e:a3:13:61:51:44:d4:00:83:3e:26:96:c2:26:52: 9d:87:22:76:e5:ef:b2:41:3b:2d:8a:bd:22:f0:b0: 83:d6:94:cc:fe:56:90:06:8c:b5:37:de:e8:b6:9f: 2a:7f:bd:7c:4d:10:fa:4d:f4:07:9e:91:70:d0:f5: ff:52:7b:b4:ca:fa:50:2a:dd:e5:0a:bc:bf:14:23: ba:be:8d:a1:f4:bf:77:c3:18:64:0a:67:9e:ca:23: 64:4a:47:00:03:33:a2:85:c9:5c:49:45:bd:60:40: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:42:41:70:D8:9F:82:79:2E:A6:6D:86:C3:D0:6D:DF:DB:9D:36:4C X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/m0JBcNifgnkupm2Gw9Bt39udNkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.0.0-95.38.37.255 95.38.39.0-95.38.143.255 95.38.160.0-95.38.206.255 95.38.208.0-95.38.218.255 95.38.220.0-95.38.247.255 95.38.252.0/22 185.20.160.0/22 IPv6: 2a00:52e0::/32 2a01:bd80::/29 Signature Algorithm: sha256WithRSAEncryption 4c:dd:48:6e:81:25:d1:24:ec:0c:a1:17:29:99:96:c9:f5:81: 63:e4:6a:8a:08:56:43:e7:e5:83:61:a4:7c:2a:0b:66:82:94: fd:37:7f:41:38:db:f5:2e:28:79:6d:84:0a:fa:43:58:84:f3: 50:2f:1b:9f:0f:05:65:92:fe:59:83:a5:bd:cf:4c:64:5f:7b: a2:a0:06:25:2e:f7:49:d3:88:6e:c8:70:d0:c9:90:b6:63:e0: fd:e7:74:e7:cb:d0:5d:e1:76:0f:2a:3d:a1:db:c7:cf:de:b0: 58:8a:5c:bb:b4:17:87:bb:7c:e2:79:67:7b:a8:84:bc:a2:50: e5:41:ad:7d:82:7e:bf:52:89:ba:31:62:4c:2b:38:9a:d0:3a: be:49:f1:27:4f:b7:de:98:ae:63:17:0a:9b:69:6d:76:92:52: 41:80:27:9c:9c:4f:f2:16:53:53:c1:70:c7:e6:11:b0:55:98: 19:02:bd:ab:74:72:82:e4:5a:61:d0:4b:0c:02:75:1f:00:f7: 10:ab:14:43:a4:23:7d:94:6b:cf:99:f3:2a:39:07:2c:f2:fa: 1a:77:11:5c:df:3e:74:9b:1f:79:29:e5:0a:65:5f:89:e9:c4: c4:17:a5:6c:bf:9e:c4:89:f0:d4:9f:fe:3a:dc:25:3c:83:5d: 72:33:85:2d -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZt+N9dtOlaO3G/r8WKoQQcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjQyNDE3MGQ4OWY4Mjc5MmVhNjZkODZjM2QwNmRkZmRiOWQzNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vcdVjgCPITWp2gVcRTqNn/CjBAm AV6hRqGp9Oc/E8e6UfNkh8aZ3QmPSLftgxUgCzaurPEt1+PIaw8AhLjr0jT9qq19 q3ymW4U+68SQw9j2wsEMhI8VJBIUPK8c2lxQ1RDJp0gSCHVJi4twYYPWxCGyfzES lvtcW/og1agrSkBtdYmzoVOfrX7sn1xZz+fhq4WYtlmOoxNhUUTUAIM+JpbCJlKd hyJ25e+yQTstir0i8LCD1pTM/laQBoy1N97otp8qf718TRD6TfQHnpFw0PX/Unu0 yvpQKt3lCry/FCO6vo2h9L93wxhkCmeeyiNkSkcAAzOihclcSUW9YEC6GQIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFJtCQXDYn4J5LqZthsPQbd/bnTZMMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvbTBKQmNOaWZnbmt1cG0yR3c5QnQzOXVkTmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wVwQCAAEwUTALAwMBXyYD BAFfJiQwDAMEAF8mJwMEBF8mgDAMAwQFXyagAwQAXybOMAwDBARfJtADBABfJtow DAMEAl8m3AMEA18m8AMEAl8m/AMEArkUoDAUBAIAAjAOAwUAKgBS4AMFAyoBvYAw DQYJKoZIhvcNAQELBQADggEBAEzdSG6BJdEk7AyhFymZlsn1gWPkaooIVkPn5YNh pHwqC2aClP03f0E42/UuKHlthAr6Q1iE81AvG58PBWWS/lmDpb3PTGRfe6KgBiUu 90nTiG7IcNDJkLZj4P3ndOfL0F3hdg8qPaHbx8/esFiKXLu0F4e7fOJ5Z3uohLyi UOVBrX2Cfr9SiboxYkwrOJrQOr5J8SdPt96YrmMXCptpbXaSUkGAJ5ycT/IWU1PB cMfmEbBVmBkCvat0coLkWmHQSwwCdR8A9xCrFEOkI32Ua8+Z8yo5Byzy+hp3EVzf PnSbH3kp5QplX4npxMQXpWy/nsSJ8NSf/jrcJTyDXXIzhS0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:27 2026 by rpki-client