This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/j_dlNBpw9nrxphVhyhTmP13d1VY.roa File: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (raw, json) Hash identifier: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8= Subject key identifier: 8F:F7:65:34:1A:70:F6:7A:F1:A6:15:61:CA:14:E6:3F:5D:DD:D5:56 Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6 Certificate serial: 019B7C10FF16F8539607175E7B453EAB2274 Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/j_dlNBpw9nrxphVhyhTmP13d1VY.roa Signing time: Fri 02 Jan 2026 00:17:27 +0000 ROA not before: Fri 02 Jan 2026 00:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28875 IP address blocks: 45.15.80.0/22 maxlen: 24 185.104.16.0/22 maxlen: 24 2a00:f740::/32 maxlen: 48 2a0e:2b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:10:ff:16:f8:53:96:07:17:5e:7b:45:3e:ab:22:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6 Validity Not Before: Jan 2 00:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ff765341a70f67af1a61561ca14e63f5dddd556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:8e:be:db:71:fd:9d:39:93:bf:65:7e:64: 37:63:68:21:98:37:b4:f0:6d:54:01:e1:94:cc:ac: 9a:c4:e6:3b:83:db:cf:bb:74:f2:19:d1:58:9e:e5: 53:44:4e:a5:cc:d8:93:a4:ab:e6:04:8c:1f:bf:89: 85:ff:a8:e3:2f:ee:62:30:3a:6c:3a:34:03:83:cc: a4:91:bb:e8:93:c2:db:86:a9:fe:ac:ed:00:60:ff: f1:7c:ae:d4:b4:d7:fe:e0:80:20:fc:18:03:ed:c1: cc:00:28:40:38:d0:50:a7:90:88:3a:4e:bd:76:9c: ae:52:a3:15:1c:b2:9c:7c:f5:cc:20:55:b9:df:47: c2:9a:3c:e5:28:d4:52:48:77:2b:80:0d:49:cf:87: 3e:13:92:86:70:ce:ef:8b:63:7e:d2:9d:9b:4b:b2: b5:46:47:6c:29:d1:9e:b9:d1:05:f4:01:cc:e1:28: a2:33:98:d3:c3:ed:0e:d3:76:54:6c:51:a0:89:3b: 39:de:a8:32:60:1d:bc:5e:bb:dd:2e:43:3e:f9:de: 24:04:d8:fb:8b:ab:ab:16:73:81:93:9d:8f:bf:3f: 49:ce:2d:19:16:ca:1f:2e:69:a5:f1:09:27:03:da: 24:29:4e:e4:eb:5a:a5:52:39:71:e1:a4:4f:a2:1a: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:65:34:1A:70:F6:7A:F1:A6:15:61:CA:14:E6:3F:5D:DD:D5:56 X509v3 Authority Key Identifier: keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/j_dlNBpw9nrxphVhyhTmP13d1VY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.80.0/22 185.104.16.0/22 IPv6: 2a00:f740::/32 2a0e:2b80::/32 Signature Algorithm: sha256WithRSAEncryption b3:df:33:a8:0a:98:d4:7b:b0:15:be:eb:96:d5:84:a7:1e:e4: a6:65:6e:1e:19:68:93:3d:e7:1d:8c:d7:47:c9:22:e4:e6:d1: ad:79:68:b4:68:90:f8:1a:a2:ad:18:87:c8:29:c5:bb:30:73: e2:40:74:b1:f1:0a:6e:7a:e8:ec:8c:72:0b:03:52:8e:bc:84: 84:50:48:4c:65:71:ad:22:88:83:fb:fc:ac:f1:6a:f6:59:44: 0c:d3:fb:77:74:20:85:18:78:a1:6a:14:13:38:4a:86:6f:e1: ef:05:58:92:9f:83:6a:e3:38:be:d4:99:62:85:80:29:7d:45: b0:0c:55:73:e3:64:9f:77:3d:01:ff:2b:7e:fc:b5:f6:d6:f8: c2:3f:9a:ea:2a:e6:cc:bd:92:e0:5f:b8:b0:ae:31:f0:48:be: e5:8d:3d:49:5d:d6:fd:9f:52:58:c5:9b:1c:d4:96:3f:63:ca: df:c1:a2:96:8b:f5:c6:01:ef:55:c4:03:9c:3e:98:8c:19:5e: 55:57:be:34:e2:d9:d1:b4:e1:d2:06:42:9b:eb:91:59:e8:74: cb:e7:95:cf:4e:5b:fe:11:53:a3:28:8a:1b:48:b0:bc:01:2d: 3a:81:d9:57:dd:44:a3:99:cd:a0:5c:27:8c:32:df:81:70:20: 63:f9:09:cf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8EP8W+FOWBxdee0U+qyJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1 NWFkYjYwHhcNMjYwMTAyMDAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmY3NjUzNDFhNzBmNjdhZjFhNjE1NjFjYTE0ZTYzZjVkZGRkNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2iOvttx/Z05k79lfmQ3Y2ghmDe0 8G1UAeGUzKyaxOY7g9vPu3TyGdFYnuVTRE6lzNiTpKvmBIwfv4mF/6jjL+5iMDps OjQDg8ykkbvok8Lbhqn+rO0AYP/xfK7UtNf+4IAg/BgD7cHMAChAONBQp5CIOk69 dpyuUqMVHLKcfPXMIFW530fCmjzlKNRSSHcrgA1Jz4c+E5KGcM7vi2N+0p2bS7K1 RkdsKdGeudEF9AHM4SiiM5jTw+0O03ZUbFGgiTs53qgyYB28XrvdLkM++d4kBNj7 i6urFnOBk52Pvz9Jzi0ZFsofLmml8QknA9okKU7k61qlUjlx4aRPohr+dwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI/3ZTQacPZ68aYVYcoU5j9d3dVWMB8GA1UdIwQY MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt MGY4NzZhYmQxZTMwLzEval9kbE5CcHc5bnJ4cGhWaHloVG1QMTNkMVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLQ9QAwQC uWgQMBQEAgACMA4DBQAqAPdAAwUAKg4rgDANBgkqhkiG9w0BAQsFAAOCAQEAs98z qAqY1HuwFb7rltWEpx7kpmVuHhlokz3nHYzXR8ki5ObRrXlotGiQ+BqirRiHyCnF uzBz4kB0sfEKbnro7IxyCwNSjryEhFBITGVxrSKIg/v8rPFq9llEDNP7d3QghRh4 oWoUEzhKhm/h7wVYkp+DauM4vtSZYoWAKX1FsAxVc+Nkn3c9Af8rfvy19tb4wj+a 6irmzL2S4F+4sK4x8Ei+5Y09SV3W/Z9SWMWbHNSWP2PK38Gilov1xgHvVcQDnD6Y jBleVVe+NOLZ0bTh0gZCm+uRWeh0y+eVz05b/hFToyiKG0iwvAEtOoHZV91Eo5nN oFwnjDLfgXAgY/kJzw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:38 2026 by rpki-client