This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa File: jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa (raw, json) Hash identifier: oQRjlCXEvb91V7QDXOTq59uWKq0mZjS4woUXREc+3oY= Subject key identifier: 8D:9A:D1:C4:0A:C0:91:6B:20:21:15:CB:CE:A5:C5:27:6B:B3:83:53 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DDFD09A675B74BD88C78C04D3579 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41457 IP address blocks: 89.36.33.0/24 maxlen: 24 95.175.150.0/24 maxlen: 24 185.79.19.0/24 maxlen: 24 192.40.69.0/24 maxlen: 24 194.46.60.0/24 maxlen: 24 2a0c:2505:1000::/48 maxlen: 48 2a14:6780::/32 maxlen: 32 2a14:6780:2::/48 maxlen: 48 2a14:6780:3::/48 maxlen: 48 2a14:6780:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dd:fd:09:a6:75:b7:4b:d8:8c:78:c0:4d:35:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9ad1c40ac0916b202115cbcea5c5276bb38353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:9c:27:44:a1:c3:ac:3c:28:b2:24:51:57: b4:2b:67:8b:68:b6:b5:5f:11:c8:6f:6e:98:e5:64: 61:9f:4b:88:11:e6:21:e6:c4:ef:ac:8b:c6:57:8d: 2b:d0:d3:5f:d8:c0:16:67:c7:a6:b4:b9:0d:6e:44: ec:c1:a2:7c:54:46:b7:62:41:14:2b:7f:f5:b6:02: 4c:16:11:cb:20:d6:8d:ae:f6:9b:dd:66:f5:3d:ca: a0:93:f9:5c:1d:c9:60:14:88:b4:f2:3a:c9:1e:bb: aa:b8:3f:3d:b3:6d:e7:ed:1b:bf:0e:82:75:88:9a: 49:21:7e:0f:61:df:e0:bc:4e:ce:1b:7a:f3:ad:4f: 99:f1:03:f7:63:7d:a9:7b:5c:e3:5f:60:ff:3a:9d: 1a:68:a9:53:01:86:c9:82:6d:44:6f:af:91:93:10: 56:00:9f:04:f9:74:b8:d6:f6:f3:0f:13:b6:cb:f4: c9:dd:a2:57:56:a3:16:98:f7:4a:48:d3:e0:ca:9a: a8:43:74:f2:72:d3:58:99:df:49:74:c6:20:96:c4: 73:42:9b:fe:f2:68:7e:96:5b:b4:94:95:ad:c2:25: 94:37:cf:26:c2:f8:06:8b:13:6d:7b:eb:3f:3d:56: 3a:3b:e2:6a:a4:dd:7a:c5:6f:e4:a0:f7:33:4d:ca: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9A:D1:C4:0A:C0:91:6B:20:21:15:CB:CE:A5:C5:27:6B:B3:83:53 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.33.0/24 95.175.150.0/24 185.79.19.0/24 192.40.69.0/24 194.46.60.0/24 IPv6: 2a0c:2505:1000::/48 2a14:6780::/32 Signature Algorithm: sha256WithRSAEncryption 59:95:34:af:a4:95:25:b7:b0:fb:fc:c6:ac:50:42:cf:49:96: a8:5c:a8:d2:34:89:a9:50:e3:d1:87:7e:40:62:43:f0:80:03: 85:7e:c7:e8:b6:e4:d6:4c:df:3d:5a:a5:9f:72:ce:4c:cf:99: 5f:01:34:b0:ba:65:1f:3f:44:49:cb:14:13:6e:a8:19:01:4b: 9e:c3:6a:a5:f8:8f:94:58:e5:b6:c8:ad:d6:ef:26:93:3d:03: 91:21:d3:b0:1f:7c:0f:bd:f4:51:97:88:99:1c:ff:9b:5a:32: 89:54:a7:6c:9b:43:6a:26:0f:22:57:42:61:2b:cc:a8:d3:b1: df:96:10:bd:d3:2b:81:14:41:f1:0d:5c:66:c7:72:e1:e1:6b: 81:2f:f1:3f:26:ab:7f:81:c7:cc:b8:05:47:fa:3d:75:f8:ee: c4:ac:63:da:72:38:c2:30:ab:c4:cc:b3:6f:e7:1b:4a:05:06: 2e:95:59:00:ef:6e:df:f5:0a:a0:54:dd:b3:6d:47:5d:4a:af: 9f:8f:c7:8f:31:00:9b:3e:3a:f0:7e:25:42:c5:97:3d:48:20: 19:df:c3:6b:71:3a:aa:5f:b8:a2:79:02:82:28:d9:09:99:82: 2d:8f:e4:74:e3:8f:ea:51:f8:2e:f5:e8:af:5b:f5:4d:eb:ce: be:48:fa:0c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+N939CaZ1t0vYjHjATTV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDlhZDFjNDBhYzA5MTZiMjAyMTE1Y2JjZWE1YzUyNzZiYjM4MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTCcJ0Shw6w8KLIkUVe0K2eLaLa1 XxHIb26Y5WRhn0uIEeYh5sTvrIvGV40r0NNf2MAWZ8emtLkNbkTswaJ8VEa3YkEU K3/1tgJMFhHLINaNrvab3Wb1Pcqgk/lcHclgFIi08jrJHruquD89s23n7Ru/DoJ1 iJpJIX4PYd/gvE7OG3rzrU+Z8QP3Y32pe1zjX2D/Op0aaKlTAYbJgm1Eb6+RkxBW AJ8E+XS41vbzDxO2y/TJ3aJXVqMWmPdKSNPgypqoQ3TyctNYmd9JdMYglsRzQpv+ 8mh+llu0lJWtwiWUN88mwvgGixNte+s/PVY6O+JqpN16xW/koPczTcp5vwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFI2a0cQKwJFrICEVy86lxSdrs4NTMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvalpyUnhBckFrV3NnSVJYTHpxWEZKMnV6ZzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQAWSQhAwQA X6+WAwQAuU8TAwQAwChFAwQAwi48MBYEAgACMBADBwAqDCUFEAADBQAqFGeAMA0G CSqGSIb3DQEBCwUAA4IBAQBZlTSvpJUlt7D7/MasUELPSZaoXKjSNImpUOPRh35A YkPwgAOFfsfotuTWTN89WqWfcs5Mz5lfATSwumUfP0RJyxQTbqgZAUuew2ql+I+U WOW2yK3W7yaTPQORIdOwH3wPvfRRl4iZHP+bWjKJVKdsm0NqJg8iV0JhK8yo07Hf lhC90yuBFEHxDVxmx3Lh4WuBL/E/Jqt/gcfMuAVH+j11+O7ErGPacjjCMKvEzLNv 5xtKBQYulVkA727f9QqgVN2zbUddSq+fj8ePMQCbPjrwfiVCxZc9SCAZ38NrcTqq X7iieQKCKNkJmYItj+R044/qUfgu9eivW/VN686+SPoM -----END CERTIFICATE-----Generated at Wed Jan 21 11:10:01 2026 by rpki-client