This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/0DnLoCEjuk9LA09NU-Pj6xztVUg.roa File: 0DnLoCEjuk9LA09NU-Pj6xztVUg.roa (raw, json) Hash identifier: eavdDhCPv5oKejhQ3E73neB1uw2GLpbCsVavoHAgMTA= Subject key identifier: D0:39:CB:A0:21:23:BA:4F:4B:03:4F:4D:53:E3:E3:EB:1C:ED:55:48 Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Certificate serial: 019B78A2CE4CA861ECA3B58DB4F3131D4A87 Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/0DnLoCEjuk9LA09NU-Pj6xztVUg.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 46.17.88.0/21 maxlen: 24 91.192.192.0/22 maxlen: 24 91.215.184.0/22 maxlen: 24 185.27.244.0/22 maxlen: 24 193.164.206.0/23 maxlen: 24 193.200.80.0/23 maxlen: 24 194.50.108.0/24 maxlen: 24 194.116.174.0/23 maxlen: 24 195.8.126.0/24 maxlen: 24 212.42.0.0/19 maxlen: 24 2a03:be80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ce:4c:a8:61:ec:a3:b5:8d:b4:f3:13:1d:4a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d039cba02123ba4f4b034f4d53e3e3eb1ced5548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:16:a3:4a:7c:19:0c:36:03:e6:1c:fd:8e: 75:ee:91:53:96:4a:4d:2d:2a:6e:55:cc:bf:4a:56: d8:02:67:da:1c:78:c6:f1:9d:e9:99:aa:79:0b:3c: 7b:76:87:82:51:b0:0b:2d:3c:76:df:bd:9b:5b:b2: 93:37:f0:57:04:06:4c:99:ed:8f:4d:49:4a:06:28: e1:40:cb:3b:d3:7b:10:50:5d:d8:90:13:7f:32:76: a7:ad:8a:8a:dd:07:37:e5:ac:1d:03:64:a3:da:89: f4:3c:1e:8c:19:cd:13:75:79:6c:ca:ee:06:ec:b0: 0c:59:53:11:b4:ac:13:a6:19:56:31:2f:44:b7:b3: 66:2e:e6:e2:6b:2c:65:8a:6d:43:64:32:5e:0e:3b: a0:54:52:40:39:cc:f0:69:eb:83:b3:5f:46:94:f8: 31:5b:2c:d9:05:c2:cd:e0:a9:9c:35:b4:cd:ec:41: ad:ac:35:ff:9c:45:60:3e:84:d8:67:2a:b0:db:62: 8d:21:c6:85:16:34:8c:f3:80:1f:ce:39:5a:e2:f8: aa:8f:3e:0a:0b:a1:14:90:b3:3b:d5:f9:1e:63:52: fe:f4:0e:97:0f:1f:55:8f:69:f0:13:62:fc:22:c3: 41:47:b0:4d:2f:01:bf:30:45:06:2b:f1:d2:e7:d0: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:39:CB:A0:21:23:BA:4F:4B:03:4F:4D:53:E3:E3:EB:1C:ED:55:48 X509v3 Authority Key Identifier: keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/0DnLoCEjuk9LA09NU-Pj6xztVUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.88.0/21 91.192.192.0/22 91.215.184.0/22 185.27.244.0/22 193.164.206.0/23 193.200.80.0/23 194.50.108.0/24 194.116.174.0/23 195.8.126.0/24 212.42.0.0/19 IPv6: 2a03:be80::/32 Signature Algorithm: sha256WithRSAEncryption 57:c5:c3:2c:98:9d:14:27:31:cc:c3:7b:3c:fc:cf:50:30:00: eb:20:ad:dc:9b:8e:33:d7:7c:7c:19:37:63:89:69:2f:a6:6e: 5b:0a:9c:cc:21:ba:10:1d:a6:14:d5:07:e0:38:d7:88:60:79: 56:e5:ab:6b:c8:7d:5d:a9:de:f0:45:2b:f8:05:d4:2f:9e:e9: a3:6a:7a:f7:9a:c7:6b:f7:a0:65:72:45:da:8a:cc:76:24:4c: 4c:ee:ee:57:c5:77:24:15:a3:de:00:9e:a8:73:e5:f6:e4:b3: 18:8d:c0:f5:94:ee:3f:84:9c:28:8c:58:d3:74:4e:f5:b6:c1: c9:49:19:32:88:15:7b:5a:99:36:f0:91:03:6b:0c:b8:27:4b: aa:99:29:85:7f:44:5b:ed:62:89:05:13:b5:21:4f:ce:e3:4d: 75:d5:4f:63:36:ed:1b:dd:b1:4c:ae:da:bf:ec:ce:32:61:2e: 23:6c:f7:9a:fa:a8:58:cb:89:c6:98:47:44:b9:80:ca:65:47: bb:92:e2:87:11:6f:6b:8e:5e:26:a0:f2:d4:7e:35:95:e8:9d: 15:5f:45:d9:4e:95:c7:1c:9e:28:e5:be:56:b7:f9:9d:17:58: f2:b3:0c:4e:fc:49:65:6b:26:1e:26:ba:6f:84:e9:98:44:72: 89:05:5e:60 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt4os5MqGHso7WNtPMTHUqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk OGE5ZjUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDM5Y2JhMDIxMjNiYTRmNGIwMzRmNGQ1M2UzZTNlYjFjZWQ1NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/oWo0p8GQw2A+Yc/Y517pFTlkpN LSpuVcy/SlbYAmfaHHjG8Z3pmap5Czx7doeCUbALLTx2372bW7KTN/BXBAZMme2P TUlKBijhQMs703sQUF3YkBN/MnanrYqK3Qc35awdA2Sj2on0PB6MGc0TdXlsyu4G 7LAMWVMRtKwTphlWMS9Et7NmLubiayxlim1DZDJeDjugVFJAOczwaeuDs19GlPgx WyzZBcLN4KmcNbTN7EGtrDX/nEVgPoTYZyqw22KNIcaFFjSM84Afzjla4viqjz4K C6EUkLM71fkeY1L+9A6XDx9Vj2nwE2L8IsNBR7BNLwG/MEUGK/HS59AbIwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFNA5y6AhI7pPSwNPTVPj4+sc7VVIMB8GA1UdIwQY MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt N2E3OTRkNWNlZDNkLzEvMERuTG9DRWp1azlMQTA5TlUtUGo2eHp0VlVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDLhFYAwQC W8DAAwQCW9e4AwQCuRv0AwQBwaTOAwQBwchQAwQAwjJsAwQBwnSuAwQAwwh+AwQF 1CoAMA0EAgACMAcDBQAqA76AMA0GCSqGSIb3DQEBCwUAA4IBAQBXxcMsmJ0UJzHM w3s8/M9QMADrIK3cm44z13x8GTdjiWkvpm5bCpzMIboQHaYU1QfgONeIYHlW5atr yH1dqd7wRSv4BdQvnumjanr3msdr96BlckXaisx2JExM7u5XxXckFaPeAJ6oc+X2 5LMYjcD1lO4/hJwojFjTdE71tsHJSRkyiBV7Wpk28JEDawy4J0uqmSmFf0Rb7WKJ BRO1IU/O40111U9jNu0b3bFMrtq/7M4yYS4jbPea+qhYy4nGmEdEuYDKZUe7kuKH EW9rjl4moPLUfjWV6J0VX0XZTpXHHJ4o5b5Wt/mdF1jyswxO/EllayYeJrpvhOmY RHKJBV5g -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:17 2026 by rpki-client