This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/jbQbuOumCNgoddvSeNQ0EqiLIvk.roa File: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (raw, json) Hash identifier: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA= Subject key identifier: 8D:B4:1B:B8:EB:A6:08:D8:28:75:DB:D2:78:D4:34:12:A8:8B:22:F9 Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Certificate serial: 019B7B353FCA103A1D768A60C486F058259D Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/jbQbuOumCNgoddvSeNQ0EqiLIvk.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8304 IP address blocks: 5.144.136.0/21 maxlen: 24 46.227.80.0/21 maxlen: 24 81.91.64.0/20 maxlen: 24 91.188.64.0/19 maxlen: 24 128.204.208.0/21 maxlen: 24 185.91.36.0/22 maxlen: 24 195.200.96.0/19 maxlen: 24 213.182.32.0/19 maxlen: 24 213.218.128.0/19 maxlen: 24 2a00:e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3f:ca:10:3a:1d:76:8a:60:c4:86:f0:58:25:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db41bb8eba608d82875dbd278d43412a88b22f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:8a:bf:d8:df:90:58:30:c1:ab:36:8b:5e: 4e:d2:46:a4:9d:40:5e:74:6f:e1:c9:cf:f7:e8:d2: 92:2e:f6:47:66:41:73:2a:08:91:1f:6b:92:2e:80: 04:c5:0c:ea:68:10:af:16:2c:db:82:f8:01:04:0f: 52:09:a6:18:fe:c3:7b:57:73:e3:d4:cf:50:31:c6: 95:d6:52:5c:fb:e0:56:e7:73:81:fc:a8:0e:36:7e: 95:a7:7a:4a:4c:3f:9b:c3:b6:7e:e0:25:93:53:10: 2b:47:1c:82:9f:5d:d1:e4:4f:ed:d7:6c:94:34:08: b2:d4:f7:1f:56:3c:03:f3:65:47:8f:22:f2:ec:b8: 77:13:11:42:35:8c:09:93:e7:be:57:a0:35:bf:f0: 48:42:3a:29:e2:b4:11:7f:da:b2:a6:22:75:ff:9d: 71:ed:e6:88:05:30:8b:0f:ca:5a:f2:88:cd:96:d3: fa:a8:6a:54:58:21:77:26:65:6a:b9:72:4f:2e:01: e9:31:86:cf:1b:34:9f:e7:6a:b4:b5:ee:be:15:a6: a0:26:73:78:a5:b5:77:ca:93:b8:9d:a4:d4:0a:d5: 29:2d:d3:34:8c:f9:c5:8e:3e:a1:6c:2e:43:d3:95: d0:6e:b2:16:78:2c:7e:25:5c:99:8b:0a:64:26:f0: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:1B:B8:EB:A6:08:D8:28:75:DB:D2:78:D4:34:12:A8:8B:22:F9 X509v3 Authority Key Identifier: keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/jbQbuOumCNgoddvSeNQ0EqiLIvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.136.0/21 46.227.80.0/21 81.91.64.0/20 91.188.64.0/19 128.204.208.0/21 185.91.36.0/22 195.200.96.0/19 213.182.32.0/19 213.218.128.0/19 IPv6: 2a00:e00::/32 Signature Algorithm: sha256WithRSAEncryption 95:3f:8b:d2:46:1b:4c:9e:71:57:14:0f:b4:9f:94:f0:42:6f: e4:65:f9:f6:59:a2:cc:52:35:be:74:9d:b5:50:51:a4:27:f3: d3:ec:89:c0:f7:1c:57:24:05:96:aa:09:08:af:08:8a:76:11: 0c:7a:82:f6:1d:33:21:85:2d:f8:9c:ed:78:ad:5f:cc:18:8a: 5b:c2:ee:ba:bc:c3:2a:da:6b:80:29:e2:d9:d4:7c:37:4b:96: 89:63:7a:17:6f:6f:54:6d:f3:d8:df:41:18:bb:1d:a2:a1:62: c8:11:38:e3:e5:9f:2f:13:4b:62:e7:ae:56:b0:94:25:df:d1: e8:a8:67:31:d5:95:5b:d8:e5:09:a7:fe:2d:e2:eb:fd:bc:17: 80:59:a8:7e:fd:85:3a:e6:53:c5:42:8f:a8:9e:0b:1e:c2:94: 60:3a:eb:d6:51:b1:37:07:a6:5c:d4:c2:84:df:83:1e:3a:bf: cf:a5:e1:5f:ce:d1:83:fb:3e:e7:29:7f:9a:f3:22:b7:56:47: d2:e4:bd:ba:22:ff:cf:57:b6:e5:72:74:ac:a8:09:b4:24:ea: e8:12:99:e5:90:ff:3d:8b:bc:fe:ef:e2:a9:f5:b1:04:b0:5c: 40:4b:01:9b:71:cb:0f:d9:87:c6:de:c7:01:62:19:fa:84:67: 98:76:b1:2d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt7NT/KEDoddopgxIbwWCWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx ZWExMWQwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI0MWJiOGViYTYwOGQ4Mjg3NWRiZDI3OGQ0MzQxMmE4OGIyMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDuKv9jfkFgwwas2i15O0kaknUBe dG/hyc/36NKSLvZHZkFzKgiRH2uSLoAExQzqaBCvFizbgvgBBA9SCaYY/sN7V3Pj 1M9QMcaV1lJc++BW53OB/KgONn6Vp3pKTD+bw7Z+4CWTUxArRxyCn13R5E/t12yU NAiy1PcfVjwD82VHjyLy7Lh3ExFCNYwJk+e+V6A1v/BIQjop4rQRf9qypiJ1/51x 7eaIBTCLD8pa8ojNltP6qGpUWCF3JmVquXJPLgHpMYbPGzSf52q0te6+FaagJnN4 pbV3ypO4naTUCtUpLdM0jPnFjj6hbC5D05XQbrIWeCx+JVyZiwpkJvChNwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFI20G7jrpgjYKHXb0njUNBKoiyL5MB8GA1UdIwQY MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt YjRiMjg0MzdmZTZjLzEvamJRYnVPdW1DTmdvZGR2U2VOUTBFcWlMSXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDBZCIAwQD LuNQAwQEUVtAAwQFW7xAAwQDgMzQAwQCuVskAwQFw8hgAwQF1bYgAwQF1dqAMA0E AgACMAcDBQAqAA4AMA0GCSqGSIb3DQEBCwUAA4IBAQCVP4vSRhtMnnFXFA+0n5Tw Qm/kZfn2WaLMUjW+dJ21UFGkJ/PT7InA9xxXJAWWqgkIrwiKdhEMeoL2HTMhhS34 nO14rV/MGIpbwu66vMMq2muAKeLZ1Hw3S5aJY3oXb29UbfPY30EYux2ioWLIETjj 5Z8vE0ti565WsJQl39HoqGcx1ZVb2OUJp/4t4uv9vBeAWah+/YU65lPFQo+ongse wpRgOuvWUbE3B6Zc1MKE34MeOr/PpeFfztGD+z7nKX+a8yK3VkfS5L26Iv/PV7bl cnSsqAm0JOroEpnlkP89i7z+7+Kp9bEEsFxASwGbccsP2YfG3scBYhn6hGeYdrEt -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:46 2026 by rpki-client