This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/jIkBln67tBEqFrddInS7FiZiLBA.roa File: jIkBln67tBEqFrddInS7FiZiLBA.roa (raw, json) Hash identifier: XeN/N3RSEi8zGMX3oXezfBvkd+PC1ufTYKGx8KmK4ps= Subject key identifier: 8C:89:01:96:7E:BB:B4:11:2A:16:B7:5D:22:74:BB:16:26:62:2C:10 Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db Certificate serial: 019BAE927C9FFE4FB96AEF71B540EF4A7E60 Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/jIkBln67tBEqFrddInS7FiZiLBA.roa Signing time: Sun 11 Jan 2026 19:39:54 +0000 ROA not before: Sun 11 Jan 2026 19:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39775 IP address blocks: 62.192.32.0/19 maxlen: 24 81.90.208.0/20 maxlen: 24 91.204.16.0/22 maxlen: 24 185.149.124.0/22 maxlen: 24 185.149.126.0/24 maxlen: 24 185.190.0.0/22 maxlen: 24 2a02:1378::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:92:7c:9f:fe:4f:b9:6a:ef:71:b5:40:ef:4a:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db Validity Not Before: Jan 11 19:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8901967ebbb4112a16b75d2274bb1626622c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:2a:27:8a:ec:5d:1b:e9:ce:00:6f:b4:fe: 79:57:f6:fe:31:5a:1c:3f:bd:25:ec:ba:bb:0f:5e: 5e:6d:c1:cf:9f:3f:7c:dd:0f:aa:b5:f5:e5:7f:ae: 5f:bc:23:c8:ab:c1:51:e1:70:8d:e1:b8:79:ed:1f: ce:11:f8:a1:13:f4:6a:52:d6:8d:9d:01:db:93:a5: 89:8a:dc:56:a6:99:68:34:2d:fc:0e:e0:36:c8:b9: 84:7d:7a:6f:ff:e1:e1:7d:b7:bd:be:7c:36:c2:09: 74:8e:84:7d:f2:4f:04:d8:02:6d:40:62:55:a2:66: 0e:65:04:70:d7:32:95:e8:d5:42:72:f6:58:75:6e: b0:7a:fb:61:57:2c:9a:f6:58:3a:00:e8:e2:0c:a1: 09:4b:e5:f8:80:b4:cb:6a:65:51:93:52:99:b1:ff: 3e:ff:81:32:f7:6a:03:92:14:53:27:68:92:35:1b: bc:de:3a:f7:76:55:98:78:0f:ce:b2:9c:5a:3d:32: e7:13:59:08:15:60:26:0d:4e:b5:6d:95:be:15:26: 8a:ad:df:bf:51:ab:ae:c7:33:b4:ae:7c:a3:c5:a6: 95:7b:cd:0e:f3:07:dd:16:d4:37:bb:44:21:40:ec: 32:90:b3:0c:3c:68:f2:9d:c5:9a:c6:3d:4a:c9:a8: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:01:96:7E:BB:B4:11:2A:16:B7:5D:22:74:BB:16:26:62:2C:10 X509v3 Authority Key Identifier: keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/jIkBln67tBEqFrddInS7FiZiLBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.32.0/19 81.90.208.0/20 91.204.16.0/22 185.149.124.0/22 185.190.0.0/22 IPv6: 2a02:1378::/32 Signature Algorithm: sha256WithRSAEncryption 2b:fe:c7:7b:54:eb:91:e9:1c:ee:db:bc:78:78:ff:7d:65:cf: a7:49:00:9b:04:7b:89:ca:bd:84:c5:bc:fd:56:a2:5b:77:28: 0f:97:00:90:4e:7a:ac:ba:1a:f1:49:70:a6:84:9b:e0:d7:87: c1:7f:f6:f0:15:ec:20:49:61:0f:f1:da:11:57:47:3c:3f:8b: 38:e9:76:e7:2f:89:84:c8:f9:26:b3:9e:c3:4d:4c:92:9b:c0: 3d:3c:3c:06:99:3e:d2:6a:96:7b:52:98:79:3d:06:48:84:6e: 34:14:52:66:97:a4:d7:cc:d2:ed:3c:5b:58:d8:21:9a:ca:67: 8c:3a:a2:db:ad:a1:dc:d0:7f:55:48:a4:f5:d4:6c:4f:f2:f1: fb:e4:05:bc:96:75:c2:f7:a7:78:82:47:12:66:4b:14:7a:a6: 15:89:3a:57:b6:6d:54:a9:18:9a:8e:8e:71:4e:cc:a8:bc:19: cc:a2:af:59:e1:7b:ca:ef:0c:52:2d:f3:a7:5f:d1:7f:12:e2: 4b:f5:e9:81:0c:97:d2:56:a7:e8:b2:f4:09:8e:36:22:00:fa: d3:27:45:b6:66:07:56:16:11:99:91:44:b3:44:5f:d3:42:77: 90:3b:0c:71:35:31:64:10:15:ca:84:ab:da:69:1b:a9:c8:ab: 7b:b9:2a:e4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZuuknyf/k+5au9xtUDvSn5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OGQxZjZlMzM2YTdjODEzNTE5NDFiYzBiOWRlYTM5ZDdk NzY0ZGIwHhcNMjYwMTExMTkzOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzg5MDE5NjdlYmJiNDExMmExNmI3NWQyMjc0YmIxNjI2NjIyYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArroqJ4rsXRvpzgBvtP55V/b+MVoc P70l7Lq7D15ebcHPnz983Q+qtfXlf65fvCPIq8FR4XCN4bh57R/OEfihE/RqUtaN nQHbk6WJitxWpploNC38DuA2yLmEfXpv/+Hhfbe9vnw2wgl0joR98k8E2AJtQGJV omYOZQRw1zKV6NVCcvZYdW6wevthVyya9lg6AOjiDKEJS+X4gLTLamVRk1KZsf8+ /4Ey92oDkhRTJ2iSNRu83jr3dlWYeA/OspxaPTLnE1kIFWAmDU61bZW+FSaKrd+/ UauuxzO0rnyjxaaVe80O8wfdFtQ3u0QhQOwykLMMPGjyncWaxj1KyahqBwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIyJAZZ+u7QRKha3XSJ0uxYmYiwQMB8GA1UdIwQY MBaAFLmNH24zanyBNRlBvAud6jnX12TbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAt MDM4NTdlZjViMzg3LzEvaklrQmxuNjd0QkVxRnJkZEluUzdGaVppTEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAtMDM4NTdlZjViMzg3 LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPsAgAwQE UVrQAwQCW8wQAwQCuZV8AwQCub4AMA0EAgACMAcDBQAqAhN4MA0GCSqGSIb3DQEB CwUAA4IBAQAr/sd7VOuR6Rzu27x4eP99Zc+nSQCbBHuJyr2Exbz9VqJbdygPlwCQ TnqsuhrxSXCmhJvg14fBf/bwFewgSWEP8doRV0c8P4s46XbnL4mEyPkms57DTUyS m8A9PDwGmT7SapZ7Uph5PQZIhG40FFJml6TXzNLtPFtY2CGaymeMOqLbraHc0H9V SKT11GxP8vH75AW8lnXC96d4gkcSZksUeqYViTpXtm1UqRiajo5xTsyovBnMoq9Z 4XvK7wxSLfOnX9F/EuJL9emBDJfSVqfosvQJjjYiAPrTJ0W2ZgdWFhGZkUSzRF/T QneQOwxxNTFkEBXKhKvaaRupyKt7uSrk -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:25 2026 by rpki-client