This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa
File: j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa (raw, json)
Hash identifier: 0yTqCet5P3ODllcDE+M+UeCbUGfs7QLH8Q0FEDZxAWA=
Subject key identifier: 8F:E0:A3:96:93:B8:7F:C3:71:0A:39:AB:1B:03:98:25:6E:8E:8F:9C
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 019B78A3569527D6851DF33086E813D65D75
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa
Signing time: Thu 01 Jan 2026 08:18:49 +0000
ROA not before: Thu 01 Jan 2026 08:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31275
IP address blocks: 83.220.64.0/19 maxlen: 19
83.220.64.0/24 maxlen: 24
83.220.65.0/24 maxlen: 24
83.220.66.0/24 maxlen: 24
83.220.67.0/24 maxlen: 24
83.220.68.0/24 maxlen: 24
83.220.69.0/24 maxlen: 24
83.220.70.0/24 maxlen: 24
83.220.71.0/24 maxlen: 24
83.220.72.0/24 maxlen: 24
83.220.73.0/24 maxlen: 24
83.220.74.0/24 maxlen: 24
83.220.75.0/24 maxlen: 24
83.220.76.0/24 maxlen: 24
83.220.77.0/24 maxlen: 24
83.220.78.0/24 maxlen: 24
83.220.79.0/24 maxlen: 24
83.220.80.0/24 maxlen: 24
83.220.81.0/24 maxlen: 24
83.220.82.0/24 maxlen: 24
83.220.83.0/24 maxlen: 24
83.220.84.0/24 maxlen: 24
83.220.85.0/24 maxlen: 24
83.220.86.0/24 maxlen: 24
83.220.87.0/24 maxlen: 24
83.220.88.0/24 maxlen: 24
83.220.89.0/24 maxlen: 24
83.220.90.0/24 maxlen: 24
83.220.91.0/24 maxlen: 24
83.220.92.0/24 maxlen: 24
83.220.93.0/24 maxlen: 24
83.220.94.0/24 maxlen: 24
83.220.95.0/24 maxlen: 24
93.93.172.0/22 maxlen: 22
2a04:e380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:56:95:27:d6:85:1d:f3:30:86:e8:13:d6:5d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 1 08:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fe0a39693b87fc3710a39ab1b0398256e8e8f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:97:74:dd:83:4c:41:b5:0f:ff:56:30:ab:
1e:ac:b5:66:1e:43:25:27:15:4e:53:4f:ef:58:b8:
3c:14:b5:01:3c:c5:72:ae:55:af:c6:0d:80:f9:c1:
60:9c:b6:ad:07:fe:bb:c2:b5:39:49:d4:06:2f:4e:
f2:d6:67:e3:6e:15:1d:ca:b7:55:2f:39:b5:2f:1e:
df:61:a3:9e:14:cc:d7:c5:87:06:df:34:3c:24:25:
63:d3:33:0e:96:b4:16:2c:34:57:29:b1:7c:50:92:
bf:b9:2e:cc:8f:c5:c2:60:c7:d1:15:a9:b0:eb:46:
07:c0:48:d0:e6:c1:f1:3d:c7:50:07:e0:36:28:e2:
ed:1f:58:5d:55:cd:4b:30:fe:b7:b1:55:2c:80:0d:
a1:71:f6:dd:1c:51:ca:44:c4:ec:8b:ed:98:5e:ff:
82:46:98:8d:99:7e:7f:f5:44:80:1e:9a:65:fd:2f:
c0:91:96:8d:42:59:17:92:f9:c6:91:21:b9:0f:94:
a0:3b:d1:79:89:83:62:5c:40:2e:76:37:95:e5:b3:
23:45:c2:05:c7:24:32:84:8e:0f:f1:a2:50:99:95:
9c:39:39:fe:8c:d3:da:2e:40:3e:e8:48:83:37:2d:
5f:70:ea:f6:66:58:95:89:b0:4a:1e:14:e9:95:e5:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:A3:96:93:B8:7F:C3:71:0A:39:AB:1B:03:98:25:6E:8E:8F:9C
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/j-CjlpO4f8NxCjmrGwOYJW6Oj5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.64.0/19
93.93.172.0/22
IPv6:
2a04:e380::/29
Signature Algorithm: sha256WithRSAEncryption
89:f7:7c:16:66:d7:0c:b1:c1:1b:c6:39:56:b6:59:36:d5:fa:
75:de:2f:9a:29:d0:fa:0e:61:d4:19:02:28:0f:64:84:75:0b:
a6:23:b4:c7:b7:67:7a:7a:66:bf:7b:18:b1:8f:59:86:66:c9:
d6:08:78:77:26:dc:cc:6d:45:e0:1d:20:c3:e1:d7:75:49:6f:
af:d5:c3:be:15:44:f4:3c:64:78:98:da:1a:cd:f7:7e:15:17:
11:db:93:c0:ae:f8:46:08:f5:52:13:ba:7a:81:de:97:fb:30:
5e:a6:04:65:38:52:d8:2c:04:64:af:70:6d:16:a9:05:54:e6:
77:4d:07:0f:c1:8e:4f:e3:86:bf:92:b3:2b:2f:19:52:61:d9:
d9:04:c3:f9:78:66:50:d5:52:10:61:5b:52:b8:15:ee:ba:5c:
fb:60:27:c7:6b:80:a0:73:a4:10:6a:9c:99:7e:63:ee:1f:29:
97:d7:6e:33:7b:42:07:87:6c:e2:91:0f:05:17:97:48:37:2a:
46:4b:85:e9:ea:2b:68:0f:0f:20:39:89:e4:a2:bd:8b:67:0b:
71:f2:c6:a6:f4:50:28:e5:53:44:60:a4:db:04:e0:fd:0c:c1:
52:fd:6e:ec:ee:2b:d9:6f:a7:0e:8a:1c:b5:32:ca:05:95:13:
f5:c8:38:ae
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt4o1aVJ9aFHfMwhugT1l11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjJkYzY5NDA3NjBiN2ZiYzJlYTQzNjdjYzUzYmMyMzBh
NjRmOWIwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmUwYTM5NjkzYjg3ZmMzNzEwYTM5YWIxYjAzOTgyNTZlOGU4ZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1iXdN2DTEG1D/9WMKserLVmHkMl
JxVOU0/vWLg8FLUBPMVyrlWvxg2A+cFgnLatB/67wrU5SdQGL07y1mfjbhUdyrdV
Lzm1Lx7fYaOeFMzXxYcG3zQ8JCVj0zMOlrQWLDRXKbF8UJK/uS7Mj8XCYMfRFamw
60YHwEjQ5sHxPcdQB+A2KOLtH1hdVc1LMP63sVUsgA2hcfbdHFHKRMTsi+2YXv+C
RpiNmX5/9USAHppl/S/AkZaNQlkXkvnGkSG5D5SgO9F5iYNiXEAudjeV5bMjRcIF
xyQyhI4P8aJQmZWcOTn+jNPaLkA+6EiDNy1fcOr2ZliVibBKHhTpleX68wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI/go5aTuH/DcQo5qxsDmCVujo+cMB8GA1UdIwQY
MBaAFAli3GlAdgt/vC6kNnzFO8Iwpk+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2Yt
NjU0MTk3N2Y2NWY5LzEvai1DamxwTzRmOE54Q2ptckd3T1lKVzZPajV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yMGZmMGYtNjE4Zi00Y2I2LWJjN2YtNjU0MTk3N2Y2NWY5
LzEvQ1dMY2FVQjJDMy04THFRMmZNVTd3akNtVDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFU9xAAwQC
XV2sMA0EAgACMAcDBQMqBOOAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ93wWZtcMscEb
xjlWtlk21fp13i+aKdD6DmHUGQIoD2SEdQumI7THt2d6ema/exixj1mGZsnWCHh3
JtzMbUXgHSDD4dd1SW+v1cO+FUT0PGR4mNoazfd+FRcR25PArvhGCPVSE7p6gd6X
+zBepgRlOFLYLARkr3BtFqkFVOZ3TQcPwY5P44a/krMrLxlSYdnZBMP5eGZQ1VIQ
YVtSuBXuulz7YCfHa4Cgc6QQapyZfmPuHymX124ze0IHh2zikQ8FF5dINypGS4Xp
6itoDw8gOYnkor2LZwtx8sam9FAo5VNEYKTbBOD9DMFS/W7s7ivZb6cOihy1MsoF
lRP1yDiu
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:13 2026 by rpki-client