This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/JnhXW-TDSlbtLU5yFnzY9cnU22U.roa File: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (raw, json) Hash identifier: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI= Subject key identifier: 26:78:57:5B:E4:C3:4A:56:ED:2D:4E:72:16:7C:D8:F5:C9:D4:DB:65 Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Certificate serial: 019BA2D2FB3FE8A7A5116233390525595F0A Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/JnhXW-TDSlbtLU5yFnzY9cnU22U.roa Signing time: Fri 09 Jan 2026 12:54:54 +0000 ROA not before: Fri 09 Jan 2026 12:54:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6799 IP address blocks: 2.84.0.0/14 maxlen: 14 2.84.0.0/16 maxlen: 16 2.84.64.0/19 maxlen: 19 2.85.0.0/16 maxlen: 16 2.86.0.0/16 maxlen: 16 2.86.64.0/19 maxlen: 19 2.87.0.0/16 maxlen: 16 31.217.160.0/19 maxlen: 19 45.139.212.0/22 maxlen: 22 45.139.212.0/23 maxlen: 23 45.139.214.0/23 maxlen: 23 62.103.0.0/16 maxlen: 16 62.103.0.0/24 maxlen: 24 62.103.126.0/24 maxlen: 24 62.103.146.0/24 maxlen: 24 62.103.147.0/24 maxlen: 24 62.103.163.0/24 maxlen: 24 62.103.228.0/24 maxlen: 24 79.128.0.0/14 maxlen: 14 79.128.0.0/16 maxlen: 16 79.128.176.0/24 maxlen: 24 79.128.177.0/24 maxlen: 24 79.128.178.0/24 maxlen: 24 79.128.179.0/24 maxlen: 24 79.128.180.0/24 maxlen: 24 79.128.181.0/24 maxlen: 24 79.128.182.0/24 maxlen: 24 79.128.183.0/24 maxlen: 24 79.128.184.0/24 maxlen: 24 79.128.185.0/24 maxlen: 24 79.128.186.0/24 maxlen: 24 79.128.187.0/24 maxlen: 24 79.128.188.0/24 maxlen: 24 79.128.190.0/24 maxlen: 24 79.128.191.0/24 maxlen: 24 79.128.192.0/24 maxlen: 24 79.128.193.0/24 maxlen: 24 79.128.194.0/24 maxlen: 24 79.128.195.0/24 maxlen: 24 79.128.196.0/24 maxlen: 24 79.128.197.0/24 maxlen: 24 79.128.198.0/24 maxlen: 24 79.128.199.0/24 maxlen: 24 79.128.200.0/24 maxlen: 24 79.128.201.0/24 maxlen: 24 79.128.202.0/24 maxlen: 24 79.128.203.0/24 maxlen: 24 79.129.0.0/16 maxlen: 16 79.130.0.0/16 maxlen: 16 79.130.0.0/19 maxlen: 19 79.130.64.0/19 maxlen: 19 79.131.0.0/16 maxlen: 16 79.131.32.0/19 maxlen: 19 80.106.0.0/15 maxlen: 15 80.106.0.0/16 maxlen: 16 80.106.4.0/23 maxlen: 23 80.106.6.0/24 maxlen: 24 80.106.217.0/24 maxlen: 24 80.106.237.0/24 maxlen: 24 80.107.0.0/16 maxlen: 24 80.107.91.0/24 maxlen: 24 80.107.116.0/22 maxlen: 22 80.107.204.0/24 maxlen: 24 83.235.0.0/16 maxlen: 16 83.235.64.0/24 maxlen: 24 83.235.67.0/24 maxlen: 24 83.235.70.0/24 maxlen: 24 83.235.71.0/24 maxlen: 24 83.235.72.0/24 maxlen: 24 83.235.73.0/24 maxlen: 24 83.235.74.0/24 maxlen: 24 83.235.75.0/24 maxlen: 24 83.235.76.0/24 maxlen: 24 83.235.77.0/24 maxlen: 24 85.72.0.0/14 maxlen: 14 85.72.0.0/16 maxlen: 16 85.73.0.0/16 maxlen: 16 85.73.128.0/18 maxlen: 18 85.73.192.0/18 maxlen: 18 85.74.0.0/16 maxlen: 16 85.74.160.0/20 maxlen: 20 85.74.192.0/19 maxlen: 19 85.75.0.0/16 maxlen: 16 85.75.0.0/18 maxlen: 18 85.75.80.0/21 maxlen: 21 85.75.112.0/21 maxlen: 21 85.75.224.0/20 maxlen: 20 87.202.0.0/15 maxlen: 15 87.202.0.0/16 maxlen: 16 87.202.96.0/19 maxlen: 19 87.202.128.0/18 maxlen: 18 87.203.0.0/16 maxlen: 16 87.203.64.0/18 maxlen: 18 94.64.0.0/13 maxlen: 13 94.64.0.0/16 maxlen: 16 94.65.0.0/16 maxlen: 16 94.66.0.0/16 maxlen: 16 94.66.56.0/22 maxlen: 22 94.66.96.0/20 maxlen: 20 94.66.96.0/22 maxlen: 22 94.66.128.0/18 maxlen: 18 94.66.220.0/22 maxlen: 22 94.67.0.0/16 maxlen: 16 94.67.128.0/17 maxlen: 17 94.68.0.0/16 maxlen: 16 94.69.0.0/16 maxlen: 16 94.69.64.0/19 maxlen: 19 94.70.0.0/16 maxlen: 16 94.70.0.0/19 maxlen: 20 94.71.0.0/16 maxlen: 16 178.146.0.0/15 maxlen: 15 178.146.0.0/16 maxlen: 16 178.147.0.0/16 maxlen: 16 185.44.144.0/22 maxlen: 22 185.44.144.0/23 maxlen: 23 185.44.146.0/23 maxlen: 23 193.218.96.0/24 maxlen: 24 193.218.97.0/24 maxlen: 24 195.22.154.0/23 maxlen: 23 195.167.0.0/17 maxlen: 17 195.167.92.0/24 maxlen: 24 195.170.0.0/19 maxlen: 19 195.170.0.0/24 maxlen: 24 195.170.2.0/24 maxlen: 24 212.205.0.0/16 maxlen: 16 212.205.221.0/24 maxlen: 24 217.195.128.0/20 maxlen: 20 217.195.128.0/21 maxlen: 21 217.195.128.0/22 maxlen: 22 2a02:580::/29 maxlen: 29 2a02:582:1800::/38 maxlen: 38 2a02:582:4800::/38 maxlen: 38 2a02:582:5800::/38 maxlen: 38 2a02:582:7000::/38 maxlen: 38 2a02:586::/35 maxlen: 35 2a02:586:2000::/36 maxlen: 36 2a02:586:3000::/36 maxlen: 36 2a02:586:4000::/34 maxlen: 34 2a02:586:8000::/34 maxlen: 34 2a02:586:c000::/34 maxlen: 34 2a02:587::/35 maxlen: 35 2a02:587:1800::/38 maxlen: 38 2a02:587:2000::/36 maxlen: 36 2a02:587:3000::/36 maxlen: 36 2a02:587:4000::/34 maxlen: 34 2a02:587:4800::/38 maxlen: 38 2a02:587:4c00::/38 maxlen: 38 2a02:587:501a::/48 maxlen: 48 2a02:587:501d::/48 maxlen: 48 2a02:587:501e::/48 maxlen: 48 2a02:587:50da::/48 maxlen: 48 2a02:587:50f7::/48 maxlen: 48 2a02:587:50fa::/48 maxlen: 48 2a02:587:5400::/38 maxlen: 38 2a02:587:5800::/38 maxlen: 38 2a02:587:5c00::/38 maxlen: 38 2a02:587:6000::/38 maxlen: 38 2a02:587:6400::/38 maxlen: 38 2a02:587:8000::/34 maxlen: 34 2a02:587:8400::/40 maxlen: 40 2a02:587:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:d2:fb:3f:e8:a7:a5:11:62:33:39:05:25:59:5f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Validity Not Before: Jan 9 12:54:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2678575be4c34a56ed2d4e72167cd8f5c9d4db65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:9d:41:98:de:f2:1c:db:69:1a:20:17:fc: 46:85:10:b2:68:f2:8b:8e:1f:99:b0:10:97:56:8b: 7b:a8:9f:e4:e2:94:fb:a6:37:f5:fd:77:ce:42:ea: fb:f9:6c:45:a7:84:81:70:25:cf:a4:cc:d2:3f:c0: c8:0c:72:4f:32:41:9a:b4:56:76:e2:8e:7c:a6:3f: ad:60:49:66:39:96:4e:3a:a1:e3:ac:7c:aa:92:0d: d7:4b:6e:0a:95:d3:6f:26:87:89:cc:f8:58:6c:eb: 9e:e2:e4:c6:77:07:e9:90:3e:12:83:38:87:0a:55: f9:bf:20:c0:c5:6d:2c:96:76:d8:45:8f:bd:96:be: 28:92:c7:59:32:45:8a:93:31:09:5b:ed:38:0d:c3: ae:15:35:98:fb:0f:43:9a:26:e1:57:f1:7a:26:fd: b7:b5:ca:b1:3e:06:44:27:45:42:07:37:5e:87:6b: a8:22:36:b5:13:0d:2d:82:b4:f1:05:d4:ff:5c:7b: 4c:d1:fa:3b:90:8a:0d:71:b9:ac:b8:99:e9:a9:b2: 0e:b9:08:a7:85:af:d2:36:f5:e6:09:65:d2:d0:96: 49:c3:f5:65:3f:08:b1:98:1a:b5:eb:58:a7:68:3d: 5a:9a:0e:fa:2b:a8:b9:76:9a:93:55:1c:c6:aa:d8: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:78:57:5B:E4:C3:4A:56:ED:2D:4E:72:16:7C:D8:F5:C9:D4:DB:65 X509v3 Authority Key Identifier: keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/JnhXW-TDSlbtLU5yFnzY9cnU22U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.84.0.0/14 31.217.160.0/19 45.139.212.0/22 62.103.0.0/16 79.128.0.0/14 80.106.0.0/15 83.235.0.0/16 85.72.0.0/14 87.202.0.0/15 94.64.0.0/13 178.146.0.0/15 185.44.144.0/22 193.218.96.0/23 195.22.154.0/23 195.167.0.0/17 195.170.0.0/19 212.205.0.0/16 217.195.128.0/20 IPv6: 2a02:580::/29 Signature Algorithm: sha256WithRSAEncryption 5b:f9:df:5d:93:e0:fe:fa:ce:b5:a1:df:48:c0:b6:7e:e5:8e: d1:9e:6d:e9:10:44:1e:9f:b6:ac:69:3f:88:5f:3f:00:bf:60: f8:40:a6:d8:69:83:33:33:8d:d9:14:ec:26:a7:5a:60:fb:78: ee:e3:ee:78:06:11:bc:7d:57:a3:ec:70:00:9e:47:e1:20:81: 3f:f5:c7:0e:c3:71:07:80:84:3a:66:6c:77:ed:ea:c7:4c:46: dd:48:58:5d:77:7f:a1:e5:fa:2f:34:f4:34:a3:39:9a:c8:92: f0:5c:56:06:53:c9:c5:63:e0:1c:0f:2e:6f:f9:f2:14:53:88: 69:6e:6f:13:87:b2:07:e5:98:47:27:ac:e6:e3:8b:f9:67:44: bd:f5:0c:ac:ea:ac:eb:7a:97:b3:ad:61:5b:f4:4c:17:b6:91: b5:de:82:c6:e9:6f:5a:f6:e3:a2:da:6e:0d:d3:db:f2:11:74: 2b:42:f4:e7:9e:e0:ed:75:de:48:77:b4:ad:74:93:37:01:fc: 31:67:25:d7:a4:0e:a3:c5:bb:10:60:1f:c0:29:fa:9b:fd:3b: fe:c1:2b:76:bc:7a:04:b0:3e:61:85:36:4d:3b:18:8f:41:b2: 56:6c:69:9c:9b:9f:c4:58:e4:ab:ed:f9:62:1b:1a:e0:b7:24: 67:57:51:81 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZui0vs/6KelEWIzOQUlWV8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4 YmZiYjUwHhcNMjYwMTA5MTI1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc4NTc1YmU0YzM0YTU2ZWQyZDRlNzIxNjdjZDhmNWM5ZDRkYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGCdQZje8hzbaRogF/xGhRCyaPKL jh+ZsBCXVot7qJ/k4pT7pjf1/XfOQur7+WxFp4SBcCXPpMzSP8DIDHJPMkGatFZ2 4o58pj+tYElmOZZOOqHjrHyqkg3XS24KldNvJoeJzPhYbOue4uTGdwfpkD4SgziH ClX5vyDAxW0slnbYRY+9lr4oksdZMkWKkzEJW+04DcOuFTWY+w9DmibhV/F6Jv23 tcqxPgZEJ0VCBzdeh2uoIja1Ew0tgrTxBdT/XHtM0fo7kIoNcbmsuJnpqbIOuQin ha/SNvXmCWXS0JZJw/VlPwixmBq161inaD1amg76K6i5dpqTVRzGqtjPLwIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFCZ4V1vkw0pW7S1OchZ82PXJ1NtlMB8GA1UdIwQY MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt NzI0OTQ5YjQ2MGU5LzEvSm5oWFctVERTbGJ0TFU1eUZuelk5Y25VMjJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5 LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwaAQCAAEwYgMDAgJUAwQF H9mgAwQCLYvUAwMAPmcDAwJPgAMDAVBqAwMAU+sDAwJVSAMDAVfKAwMDXkADAwGy kgMEArkskAMEAcHaYAMEAcMWmgMEB8OnAAMEBcOqAAMDANTNAwQE2cOAMA0EAgAC MAcDBQMqAgWAMA0GCSqGSIb3DQEBCwUAA4IBAQBb+d9dk+D++s61od9IwLZ+5Y7R nm3pEEQen7asaT+IXz8Av2D4QKbYaYMzM43ZFOwmp1pg+3ju4+54BhG8fVej7HAA nkfhIIE/9ccOw3EHgIQ6Zmx37erHTEbdSFhdd3+h5fovNPQ0ozmayJLwXFYGU8nF Y+AcDy5v+fIUU4hpbm8Th7IH5ZhHJ6zm44v5Z0S99Qys6qzrepezrWFb9EwXtpG1 3oLG6W9a9uOi2m4N09vyEXQrQvTnnuDtdd5Id7StdJM3AfwxZyXXpA6jxbsQYB/A Kfqb/Tv+wSt2vHoEsD5hhTZNOxiPQbJWbGmcm5/EWOSr7fliGxrgtyRnV1GB -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:02 2026 by rpki-client