This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa File: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (raw, json) Hash identifier: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k= Subject key identifier: 8D:53:07:D8:6B:E1:91:2A:1C:82:F8:1F:BC:00:35:11:B6:5B:65:F4 Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Certificate serial: 019B7E37846546D7918791F15CAE9F16729E Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39910 IP address blocks: 80.244.9.0/24 maxlen: 24 185.203.90.0/24 maxlen: 24 2a10:7a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:84:65:46:d7:91:87:91:f1:5c:ae:9f:16:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d5307d86be1912a1c82f81fbc003511b65b65f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:24:91:41:94:25:9e:04:c0:1e:59:12:ae: a4:4c:94:23:53:e2:3c:b1:d2:da:b0:f3:45:af:58: 56:e6:eb:c1:76:45:7b:d2:96:52:e2:ca:8e:06:69: 22:eb:8f:d9:19:4c:ac:9b:40:1e:67:85:f7:99:85: 74:3c:6b:4f:ec:63:82:17:81:29:fb:01:69:df:92: 58:3d:27:e1:aa:bd:59:61:42:8e:79:ac:61:85:b1: c1:28:e2:7c:cb:e8:44:13:94:ad:e0:47:83:5e:d3: 5c:d4:e8:ff:f2:22:dd:dd:0c:3e:20:ad:10:d0:75: be:5a:f9:b7:2a:f0:d5:b8:f4:06:1c:bb:86:51:60: cc:a6:88:f4:3b:85:1b:69:eb:50:99:8e:a8:e2:ee: 06:42:ec:de:6d:22:f6:17:c2:7c:e2:25:de:cc:3d: dd:a2:8b:bd:cf:6e:61:a9:94:74:8c:f2:0b:04:5a: e5:d7:41:7a:6d:d2:8b:d8:5e:ab:f6:a8:06:df:8a: 77:d3:7f:15:99:70:9e:f7:bc:0e:f2:a3:89:ce:ba: 15:78:62:f3:0a:fe:fa:4c:6e:cd:44:82:4a:1f:23: 59:4f:a8:a2:72:7e:16:37:04:8d:c7:96:31:b2:93: 10:10:46:c3:f8:3c:e4:e0:1c:bd:c2:e8:15:ba:fd: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:07:D8:6B:E1:91:2A:1C:82:F8:1F:BC:00:35:11:B6:5B:65:F4 X509v3 Authority Key Identifier: keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.9.0/24 185.203.90.0/24 IPv6: 2a10:7a40::/29 Signature Algorithm: sha256WithRSAEncryption 6e:3a:4f:5e:a1:cf:8f:a1:24:74:66:74:d4:ce:e3:ea:2c:60: 81:7d:c0:71:aa:ab:95:b2:46:4e:ac:2c:4c:d2:e6:72:59:8d: e6:1b:29:6e:5b:b0:e0:9c:11:f2:97:d3:bc:a7:72:31:aa:bb: 5d:12:24:b3:d7:47:f2:a3:f3:77:7e:28:95:f3:0d:1f:60:f7: bd:03:8a:94:44:e0:93:8b:7d:1a:ef:0a:18:88:e5:3e:05:9e: 97:a3:af:5e:28:73:11:a1:92:e2:2c:93:d3:98:32:45:49:58: bf:09:b9:62:dd:c2:64:9e:19:64:ae:37:f2:50:b6:27:05:4a: 89:4f:d5:ec:b4:39:8e:05:3a:d4:fd:c6:3a:c1:d7:64:71:1d: 7d:a8:07:ae:5a:a8:de:d7:c0:5b:01:8a:00:b9:15:14:18:5b: 97:ee:11:5c:a1:c6:cd:8e:d5:76:be:c2:d6:e6:e1:7b:54:9a: 24:4c:78:45:cc:b3:95:0d:ab:e8:26:4c:8d:5b:2d:46:6a:13: f2:fd:59:de:01:b3:e9:0f:6b:82:87:1a:13:fd:35:fb:3d:60: 86:69:bf:3e:33:74:b5:a0:8b:df:69:6c:44:26:2e:f6:83:a0: 31:b8:29:82:50:2d:13:4f:43:60:6d:d9:94:99:2b:45:bc:fd: 7f:e9:e8:66 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+N4RlRteRh5HxXK6fFnKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1 ZmMyNWMwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDUzMDdkODZiZTE5MTJhMWM4MmY4MWZiYzAwMzUxMWI2NWI2NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlkkkUGUJZ4EwB5ZEq6kTJQjU+I8 sdLasPNFr1hW5uvBdkV70pZS4sqOBmki64/ZGUysm0AeZ4X3mYV0PGtP7GOCF4Ep +wFp35JYPSfhqr1ZYUKOeaxhhbHBKOJ8y+hEE5St4EeDXtNc1Oj/8iLd3Qw+IK0Q 0HW+Wvm3KvDVuPQGHLuGUWDMpoj0O4UbaetQmY6o4u4GQuzebSL2F8J84iXezD3d oou9z25hqZR0jPILBFrl10F6bdKL2F6r9qgG34p3038VmXCe97wO8qOJzroVeGLz Cv76TG7NRIJKHyNZT6iicn4WNwSNx5YxspMQEEbD+Dzk4By9wugVuv0eNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI1TB9hr4ZEqHIL4H7wANRG2W2X0MB8GA1UdIwQY MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt NTkxOTkzMzFlZTA5LzEvalZNSDJHdmhrU29jZ3ZnZnZBQTFFYlpiWmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5 LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUPQJAwQA uctaMA0EAgACMAcDBQMqEHpAMA0GCSqGSIb3DQEBCwUAA4IBAQBuOk9eoc+PoSR0 ZnTUzuPqLGCBfcBxqquVskZOrCxM0uZyWY3mGyluW7DgnBHyl9O8p3IxqrtdEiSz 10fyo/N3fiiV8w0fYPe9A4qUROCTi30a7woYiOU+BZ6Xo69eKHMRoZLiLJPTmDJF SVi/Cbli3cJknhlkrjfyULYnBUqJT9XstDmOBTrU/cY6wddkcR19qAeuWqje18Bb AYoAuRUUGFuX7hFcocbNjtV2vsLW5uF7VJokTHhFzLOVDavoJkyNWy1GahPy/Vne AbPpD2uChxoT/TX7PWCGab8+M3S1oIvfaWxEJi72g6AxuCmCUC0TT0NgbdmUmStF vP1/6ehm -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:13 2026 by rpki-client