This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa File: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (raw, json) Hash identifier: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk= Subject key identifier: 70:92:87:66:10:26:D7:29:5D:7C:0F:FE:96:46:78:D0:41:1E:06:34 Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50 Certificate serial: 019B7834C8ABD82556320E4843F3496F4045 Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201565 IP address blocks: 89.35.206.0/24 maxlen: 24 89.35.207.0/24 maxlen: 24 185.11.232.0/22 maxlen: 22 185.59.96.0/22 maxlen: 22 185.62.248.0/24 maxlen: 24 185.62.249.0/24 maxlen: 24 185.62.250.0/24 maxlen: 24 185.62.251.0/24 maxlen: 24 185.91.148.0/24 maxlen: 24 185.91.149.0/24 maxlen: 24 185.91.150.0/24 maxlen: 24 185.91.151.0/24 maxlen: 24 2a03:7e40::/36 maxlen: 36 2a03:7e40:1000::/36 maxlen: 36 2a03:7e40:2000::/36 maxlen: 36 2a03:7e40:3000::/36 maxlen: 36 2a03:7e40:4000::/36 maxlen: 36 2a03:7e40:5000::/36 maxlen: 36 2a03:7e40:6000::/36 maxlen: 36 2a03:7e40:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c8:ab:d8:25:56:32:0e:48:43:f3:49:6f:40:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709287661026d7295d7c0ffe964678d0411e0634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:3e:fd:28:4b:de:48:71:ef:37:0b:aa:a4: 7a:1a:91:a0:06:06:a5:9f:35:28:4e:99:80:f1:8d: fb:04:59:b4:9b:3d:fa:62:2c:55:54:be:b3:00:0a: 7d:74:48:44:17:34:a3:cd:a7:50:87:f9:89:d2:9f: 58:8b:55:df:6e:82:cf:e8:f4:7c:4e:60:55:d3:ad: e7:4a:ea:1c:2f:25:a5:7d:c8:a6:b8:83:94:4d:b9: 77:9f:8f:58:ef:f8:5a:73:ad:7a:97:d0:b3:cd:24: 38:8e:70:c0:eb:6b:d0:d6:0c:a9:4f:c0:6d:f1:c1: d3:8b:36:9e:5d:d8:62:fa:72:5d:4d:94:bb:84:67: dd:a1:2b:14:ec:38:82:71:4f:30:a8:bb:85:38:8e: f7:30:46:d5:cc:f9:15:57:bb:0c:6c:e7:aa:65:b5: 7a:61:71:a5:30:19:e0:d5:a8:a9:c1:c0:be:5c:62: cb:06:2e:18:93:83:6a:8f:8f:6c:9f:1f:5b:d9:d2: 2d:73:87:72:70:98:20:db:f3:c9:e2:46:21:65:45: a5:e2:85:2c:29:d8:dc:51:30:e8:b9:76:77:af:2a: f0:80:7f:b0:b8:02:49:f1:82:01:1c:2c:ea:67:4b: 0b:5c:93:9d:9e:4c:d0:16:9d:a0:2d:e5:44:46:90: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:87:66:10:26:D7:29:5D:7C:0F:FE:96:46:78:D0:41:1E:06:34 X509v3 Authority Key Identifier: keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.206.0/23 185.11.232.0/22 185.59.96.0/22 185.62.248.0/22 185.91.148.0/22 IPv6: 2a03:7e40::/33 Signature Algorithm: sha256WithRSAEncryption 68:c3:93:3d:ca:4f:60:39:a3:21:2c:be:31:81:a4:d3:91:f3: 27:75:08:a4:6c:86:e0:06:18:7a:61:f8:e9:41:69:84:dd:1b: f1:68:23:a1:90:c5:39:2f:9d:54:a2:1d:b4:df:bf:09:e3:ed: 03:c4:ed:85:5d:b7:1a:51:5c:e2:ce:30:2b:6e:65:65:09:5d: 81:b9:bb:cc:7f:ef:ef:ba:ab:9d:b6:11:36:bf:df:96:c4:6f: de:6b:b2:59:7c:6a:49:20:58:9b:58:4d:27:40:13:47:ee:68: 09:d4:c2:43:bb:65:b8:07:c3:81:ac:bb:ba:01:8a:5b:8e:4d: 49:81:fc:38:2d:ef:8b:ca:06:c1:31:97:e2:4b:97:3c:76:44: 0f:d7:d9:cd:3f:6c:4d:6e:ad:a0:5c:a7:c8:24:b2:e1:77:91: f8:b7:73:48:48:fb:52:74:7c:b7:17:54:dc:0d:3e:22:7a:6d: 52:2d:08:9a:64:56:25:08:c2:ae:50:e2:60:d7:aa:89:48:f9: 1e:2c:de:97:fd:71:8f:09:f3:65:70:e4:8f:fb:ec:0c:c6:2d: 89:df:04:c4:d8:e6:73:ed:c2:a5:89:98:c0:13:9e:32:11:7e: d8:5b:88:89:a5:51:ac:81:fb:cf:f7:25:19:93:5a:34:9f:db: 68:1e:74:be -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt4NMir2CVWMg5IQ/NJb0BFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1 NTVjNTAwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDkyODc2NjEwMjZkNzI5NWQ3YzBmZmU5NjQ2NzhkMDQxMWUwNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRk+/ShL3khx7zcLqqR6GpGgBgal nzUoTpmA8Y37BFm0mz36YixVVL6zAAp9dEhEFzSjzadQh/mJ0p9Yi1XfboLP6PR8 TmBV063nSuocLyWlfcimuIOUTbl3n49Y7/hac616l9CzzSQ4jnDA62vQ1gypT8Bt 8cHTizaeXdhi+nJdTZS7hGfdoSsU7DiCcU8wqLuFOI73MEbVzPkVV7sMbOeqZbV6 YXGlMBng1aipwcC+XGLLBi4Yk4Nqj49snx9b2dItc4dycJgg2/PJ4kYhZUWl4oUs KdjcUTDouXZ3ryrwgH+wuAJJ8YIBHCzqZ0sLXJOdnkzQFp2gLeVERpCB2wIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHCSh2YQJtcpXXwP/pZGeNBBHgY0MB8GA1UdIwQY MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct M2VjYTdkZjJhZTU3LzEvY0pLSFpoQW0xeWxkZkFfLWxrWjQwRUVlQmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3 LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBWSPOAwQC uQvoAwQCuTtgAwQCuT74AwQCuVuUMA4EAgACMAgDBgcqA35AADANBgkqhkiG9w0B AQsFAAOCAQEAaMOTPcpPYDmjISy+MYGk05HzJ3UIpGyG4AYYemH46UFphN0b8Wgj oZDFOS+dVKIdtN+/CePtA8TthV23GlFc4s4wK25lZQldgbm7zH/v77qrnbYRNr/f lsRv3muyWXxqSSBYm1hNJ0ATR+5oCdTCQ7tluAfDgay7ugGKW45NSYH8OC3vi8oG wTGX4kuXPHZED9fZzT9sTW6toFynyCSy4XeR+LdzSEj7UnR8txdU3A0+InptUi0I mmRWJQjCrlDiYNeqiUj5Hizel/1xjwnzZXDkj/vsDMYtid8ExNjmc+3CpYmYwBOe MhF+2FuIiaVRrIH7z/clGZNaNJ/baB50vg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:01 2026 by rpki-client