This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/jwb3_W1JU1Qdkl3kW-bgLNh66os.roa File: jwb3_W1JU1Qdkl3kW-bgLNh66os.roa (raw, json) Hash identifier: 1Pb1Phz3ZFSFx/2QmC/w8mjEvm4/tTuC+LVbbpWItSY= Subject key identifier: 8F:06:F7:FD:6D:49:53:54:1D:92:5D:E4:5B:E6:E0:2C:D8:7A:EA:8B Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd Certificate serial: 019B7CEE42A90D0B9209BA1DE8480B492FB1 Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/jwb3_W1JU1Qdkl3kW-bgLNh66os.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198325 IP address blocks: 89.145.184.0/24 maxlen: 24 89.145.185.0/24 maxlen: 24 89.145.186.0/24 maxlen: 24 89.145.187.0/24 maxlen: 24 89.145.188.0/24 maxlen: 24 89.145.189.0/24 maxlen: 24 89.145.190.0/24 maxlen: 24 89.145.191.0/24 maxlen: 24 185.251.32.0/24 maxlen: 24 185.251.33.0/24 maxlen: 24 185.251.35.0/24 maxlen: 24 2a04:6680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:42:a9:0d:0b:92:09:ba:1d:e8:48:0b:49:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f06f7fd6d4953541d925de45be6e02cd87aea8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:b3:fe:ec:f3:59:d4:07:eb:6c:2c:f4:77: 91:b4:d3:7e:e2:f1:62:db:0f:5a:87:2e:29:35:41: b6:19:c2:8b:49:82:ac:98:aa:16:cf:47:95:06:9d: 3e:df:54:b1:57:fe:9d:d7:09:66:f9:08:8e:f2:6e: eb:2d:84:31:13:e4:9b:8a:0a:e3:58:d6:98:27:e4: 60:8d:06:cd:78:33:69:d8:3f:49:ee:12:c5:dc:31: d2:39:28:85:b0:a5:97:6e:07:db:b6:0a:28:76:ce: ab:0f:8a:94:22:90:92:90:aa:bc:41:57:d7:b7:3c: 5c:3e:d7:2c:c0:63:bb:11:1d:ed:eb:7d:bb:e2:0c: 9f:11:ef:3b:37:f2:59:a3:a1:5b:44:07:47:a9:74: 65:c9:af:ee:19:ae:22:40:cd:56:58:30:1a:66:0c: 5a:81:7f:e5:ab:08:79:28:58:c5:4d:35:86:5c:bf: 66:07:46:37:13:53:e9:71:14:56:4b:65:0e:3c:3a: 72:ba:b4:35:ff:11:35:04:1d:04:9e:c0:d1:34:f4: cd:43:2b:46:14:97:b3:c6:58:0c:dc:a5:c9:61:13: a6:f2:da:49:59:48:42:6e:48:ad:64:24:d8:b7:26: 25:aa:a2:26:66:cb:29:c9:ad:a7:e9:67:21:0d:30: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:F7:FD:6D:49:53:54:1D:92:5D:E4:5B:E6:E0:2C:D8:7A:EA:8B X509v3 Authority Key Identifier: keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/jwb3_W1JU1Qdkl3kW-bgLNh66os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.145.184.0/21 185.251.32.0/23 185.251.35.0/24 IPv6: 2a04:6680::/48 Signature Algorithm: sha256WithRSAEncryption 27:34:95:ad:06:8d:cd:30:01:c7:45:3d:28:3e:bf:79:77:47: e3:7f:64:90:15:6b:c2:03:50:f1:2b:8b:87:eb:78:90:8f:21: eb:65:10:f5:27:58:99:bd:65:94:30:de:77:15:90:19:7e:41: ac:85:48:16:cb:3e:72:98:2d:ad:62:45:3b:36:cc:af:18:fb: 64:94:21:06:41:d3:82:bd:1c:13:b7:07:57:71:e3:af:01:aa: e1:0e:e6:fd:b4:c0:55:45:8a:43:10:b1:76:d4:3e:bb:17:81: 10:0f:71:02:62:74:4f:10:2b:47:ba:ae:82:3d:96:e3:07:f7: 9f:2b:96:76:61:13:22:4c:95:ab:40:37:9e:21:79:4f:89:98: 9d:1e:49:61:a7:8e:47:c5:5d:ab:c0:3c:0a:1e:52:ab:41:9a: 7d:6b:19:19:ce:41:9d:8a:f7:76:06:e0:b3:79:66:9d:26:b5: 3e:3b:d6:da:00:9b:ba:ed:f1:24:92:3b:51:8e:84:e0:cb:22: 86:1f:88:44:ac:5f:5d:0c:e2:a8:da:74:5c:4f:c5:2e:2e:e1: df:27:bb:d9:56:39:81:26:77:95:2a:7c:95:4c:52:39:ff:11: 84:33:6e:3f:b7:32:ca:e3:a4:b1:47:ec:b1:bc:78:3d:72:fa: fe:a4:30:22 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87kKpDQuSCbod6EgLSS+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MGMzMjk5NmFlMTI0NjE4OTcyMjJlMmQ5Y2MwOTM5MzA5 MjdkZGQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjA2ZjdmZDZkNDk1MzU0MWQ5MjVkZTQ1YmU2ZTAyY2Q4N2FlYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSuz/uzzWdQH62ws9HeRtNN+4vFi 2w9ahy4pNUG2GcKLSYKsmKoWz0eVBp0+31SxV/6d1wlm+QiO8m7rLYQxE+Sbigrj WNaYJ+RgjQbNeDNp2D9J7hLF3DHSOSiFsKWXbgfbtgoods6rD4qUIpCSkKq8QVfX tzxcPtcswGO7ER3t63274gyfEe87N/JZo6FbRAdHqXRlya/uGa4iQM1WWDAaZgxa gX/lqwh5KFjFTTWGXL9mB0Y3E1PpcRRWS2UOPDpyurQ1/xE1BB0EnsDRNPTNQytG FJezxlgM3KXJYROm8tpJWUhCbkitZCTYtyYlqqImZsspya2n6WchDTA6AwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFI8G9/1tSVNUHZJd5Fvm4CzYeuqLMB8GA1UdIwQY MBaAFGYMMplq4SRhiXIi4tnMCTkwkn3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQt NTVjM2EyOGU2MmMzLzEvandiM19XMUpVMVFka2wza1ctYmdMTmg2Nm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQtNTVjM2EyOGU2MmMz LzEvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDWZG4AwQB ufsgAwQAufsjMA8EAgACMAkDBwAqBGaAAAAwDQYJKoZIhvcNAQELBQADggEBACc0 la0Gjc0wAcdFPSg+v3l3R+N/ZJAVa8IDUPEri4freJCPIetlEPUnWJm9ZZQw3ncV kBl+QayFSBbLPnKYLa1iRTs2zK8Y+2SUIQZB04K9HBO3B1dx468BquEO5v20wFVF ikMQsXbUPrsXgRAPcQJidE8QK0e6roI9luMH958rlnZhEyJMlatAN54heU+JmJ0e SWGnjkfFXavAPAoeUqtBmn1rGRnOQZ2K93YG4LN5Zp0mtT471toAm7rt8SSSO1GO hODLIoYfiESsX10M4qjadFxPxS4u4d8nu9lWOYEmd5UqfJVMUjn/EYQzbj+3Msrj pLFH7LG8eD1y+v6kMCI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:48 2026 by rpki-client