This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/dNcSO2D1n9uq3rj5pUSA78mpRA8.roa File: dNcSO2D1n9uq3rj5pUSA78mpRA8.roa (raw, json) Hash identifier: rII1EW/12EQZrNsshye1c1W72xQr8Ukcmqzw0ramVd4= Subject key identifier: 74:D7:12:3B:60:F5:9F:DB:AA:DE:B8:F9:A5:44:80:EF:C9:A9:44:0F Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916 Certificate serial: 019B7834CA732EDB0CF2BFBF5B5715FFB681 Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/dNcSO2D1n9uq3rj5pUSA78mpRA8.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44513 IP address blocks: 31.15.72.0/21 maxlen: 21 31.15.72.0/22 maxlen: 22 31.15.76.0/22 maxlen: 22 31.15.76.0/24 maxlen: 24 80.69.240.0/20 maxlen: 20 92.43.240.0/21 maxlen: 21 185.129.88.0/22 maxlen: 22 195.181.176.0/20 maxlen: 20 195.181.176.0/21 maxlen: 21 195.181.176.0/22 maxlen: 22 195.181.184.0/22 maxlen: 22 195.181.188.0/22 maxlen: 22 213.32.208.0/20 maxlen: 20 213.163.208.0/20 maxlen: 20 213.163.208.0/21 maxlen: 21 213.163.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ca:73:2e:db:0c:f2:bf:bf:5b:57:15:ff:b6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d7123b60f59fdbaadeb8f9a54480efc9a9440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:e8:08:3f:c7:60:b2:e5:8e:8b:77:33:88: a0:d1:ae:70:7d:0c:82:aa:59:9b:74:01:f8:b0:8f: a5:15:ef:a4:b4:35:63:eb:17:37:f8:3f:fd:89:be: ef:9d:ee:88:f2:89:5a:fa:8e:74:da:05:70:2a:9c: a7:d3:37:9f:dd:7e:ec:36:c7:0f:86:23:2d:a6:60: 75:e7:62:ec:fb:23:fc:61:62:80:f1:93:be:41:ca: 7c:ec:61:9c:21:97:8c:4d:36:d9:30:ca:52:c6:65: 48:b4:66:73:27:18:36:74:91:a0:b7:82:5b:c7:0b: 1f:e3:af:c9:8b:31:80:73:42:d0:ec:e7:e7:c0:95: 30:3a:85:e1:11:27:c7:bc:55:46:16:5c:23:b5:cd: a7:f9:f7:e0:1f:1f:5a:dc:e7:dd:5e:27:ce:a2:ef: 01:70:d2:78:9d:c6:b3:d5:8f:fb:3d:ae:45:c5:21: c5:1a:e4:9b:15:a2:d2:b9:64:55:dc:7a:6a:6a:e8: 0c:87:1e:55:cc:d9:5a:4f:89:7f:5d:96:83:91:de: 7b:ee:f6:55:f9:5a:33:6b:18:a8:5b:26:c8:81:2e: 99:d4:e0:bb:82:84:9a:92:11:9c:15:b8:5f:3e:fe: 4f:7b:9e:30:38:55:d8:8d:f3:2c:d7:34:3b:0f:39: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D7:12:3B:60:F5:9F:DB:AA:DE:B8:F9:A5:44:80:EF:C9:A9:44:0F X509v3 Authority Key Identifier: keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/dNcSO2D1n9uq3rj5pUSA78mpRA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.72.0/21 80.69.240.0/20 92.43.240.0/21 185.129.88.0/22 195.181.176.0/20 213.32.208.0/20 213.163.208.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:f7:25:ec:e2:0f:c8:c2:54:89:4c:3b:64:a5:55:37:08:cf: e6:c9:1f:ea:e6:51:57:86:59:20:25:6c:6e:0f:88:56:f5:fe: 9f:1f:a1:8c:ac:76:39:9b:35:6d:b7:d0:14:00:1e:0a:63:e0: 3a:58:97:59:7b:b8:b7:6a:90:26:60:33:66:76:32:e2:dc:ed: ff:54:a1:01:0c:8a:d4:3f:f6:da:4d:5f:18:18:45:ea:ea:ae: 48:44:09:43:e6:33:70:76:fa:f1:6e:bf:26:73:6a:97:38:68: 9a:67:45:f3:6a:f9:da:72:90:56:8c:37:4a:66:b0:45:01:ca: 93:fa:fa:23:ba:4c:55:ad:b1:c6:04:96:08:2e:cd:b2:39:64: e8:b7:3b:bb:1b:49:55:11:33:6a:07:57:9f:93:01:1c:17:83: f3:f3:89:18:08:ed:c6:79:18:6c:f1:5a:04:80:bb:a9:cc:b5: b7:cc:41:d4:92:5c:09:ad:22:ad:a2:02:e2:52:ee:b4:52:b9: c6:82:9a:36:e5:fc:a1:64:a5:e5:29:63:10:7e:86:6f:2e:38: 6d:5e:67:db:25:8a:13:df:16:38:9e:08:a2:49:dd:e2:a7:ed: f2:52:ab:61:af:b1:4f:bb:b9:5d:c1:89:db:a8:1a:98:e1:f5: 30:10:26:72 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NMpzLtsM8r+/W1cV/7aBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl ZjY5MTYwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ3MTIzYjYwZjU5ZmRiYWFkZWI4ZjlhNTQ0ODBlZmM5YTk0NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3XoCD/HYLLljot3M4ig0a5wfQyC qlmbdAH4sI+lFe+ktDVj6xc3+D/9ib7vne6I8ola+o502gVwKpyn0zef3X7sNscP hiMtpmB152Ls+yP8YWKA8ZO+Qcp87GGcIZeMTTbZMMpSxmVItGZzJxg2dJGgt4Jb xwsf46/JizGAc0LQ7OfnwJUwOoXhESfHvFVGFlwjtc2n+ffgHx9a3OfdXifOou8B cNJ4ncaz1Y/7Pa5FxSHFGuSbFaLSuWRV3HpqaugMhx5VzNlaT4l/XZaDkd577vZV +VozaxioWybIgS6Z1OC7goSakhGcFbhfPv5Pe54wOFXYjfMs1zQ7DzlutwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHTXEjtg9Z/bqt64+aVEgO/JqUQPMB8GA1UdIwQY MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt OTNkMGIwMGU3ZTA0LzEvZE5jU08yRDFuOXVxM3JqNXBVU0E3OG1wUkE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0 LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDHw9IAwQE UEXwAwQDXCvwAwQCuYFYAwQEw7WwAwQE1SDQAwQE1aPQMA0GCSqGSIb3DQEBCwUA A4IBAQAu9yXs4g/IwlSJTDtkpVU3CM/myR/q5lFXhlkgJWxuD4hW9f6fH6GMrHY5 mzVtt9AUAB4KY+A6WJdZe7i3apAmYDNmdjLi3O3/VKEBDIrUP/baTV8YGEXq6q5I RAlD5jNwdvrxbr8mc2qXOGiaZ0XzavnacpBWjDdKZrBFAcqT+vojukxVrbHGBJYI Ls2yOWTotzu7G0lVETNqB1efkwEcF4Pz84kYCO3GeRhs8VoEgLupzLW3zEHUklwJ rSKtogLiUu60UrnGgpo25fyhZKXlKWMQfoZvLjhtXmfbJYoT3xY4ngiiSd3ip+3y Uqthr7FPu7ldwYnbqBqY4fUwECZy -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:09 2026 by rpki-client