This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JAWf7i8yihMZ69rJcE4IlSkCbA4.roa File: JAWf7i8yihMZ69rJcE4IlSkCbA4.roa (raw, json) Hash identifier: XZCyuAFSnHvazYcpP8RLQOb8aYNa7U4qcC6R5VXopRA= Subject key identifier: 24:05:9F:EE:2F:32:8A:13:19:EB:DA:C9:70:4E:08:95:29:02:6C:0E Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40121DE34307AE5DD49F00F0D3003 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JAWf7i8yihMZ69rJcE4IlSkCbA4.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 82.115.220.0/24 maxlen: 24 185.103.110.0/24 maxlen: 24 185.112.82.0/24 maxlen: 24 185.117.118.0/24 maxlen: 24 185.204.1.0/24 maxlen: 24 185.212.149.0/24 maxlen: 24 185.217.196.0/24 maxlen: 24 185.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:01:21:de:34:30:7a:e5:dd:49:f0:0f:0d:30:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24059fee2f328a1319ebdac9704e089529026c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:01:61:80:85:46:d7:9d:72:52:2b:4e:3c: 77:66:88:7c:5a:b5:94:7f:d0:e3:6d:e9:2e:cf:ef: 2e:03:df:0d:7c:9a:5c:77:cb:68:f2:ec:0f:93:b2: 52:d9:36:18:a7:5c:2b:06:c7:dc:43:a1:94:63:4e: 68:c3:e9:ee:cf:a0:8d:00:16:81:57:b3:78:9c:e9: cc:1c:7d:c3:ce:41:aa:bc:df:a9:e5:09:df:7b:8f: 16:71:a4:ff:60:52:a9:02:9a:50:5b:b9:9e:04:7d: 2e:f8:9e:1c:26:d3:40:a8:5a:fa:a7:a3:ee:76:18: 32:3c:fe:ee:d7:d5:b9:24:b0:2e:c7:39:29:9a:24: e2:55:ca:fb:43:94:a5:15:86:4d:e7:c5:a2:31:47: 16:61:f1:2c:8d:f3:3b:65:45:9f:d1:04:6f:68:05: 8a:89:a5:91:f7:7e:fa:6b:77:04:e8:6f:ef:40:08: 61:60:0e:2a:a6:17:09:96:9d:d2:a8:41:88:7b:8a: 2d:8d:96:d4:58:c7:42:f6:db:c5:2c:78:e9:f2:4d: b1:cf:fa:e1:92:77:10:53:05:99:d9:be:9e:9d:a4: 50:eb:b2:8e:e9:f2:6f:21:a8:df:d1:45:94:10:2f: 66:85:76:86:e7:e5:86:5b:a2:0a:c7:79:eb:79:d7: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:05:9F:EE:2F:32:8A:13:19:EB:DA:C9:70:4E:08:95:29:02:6C:0E X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/JAWf7i8yihMZ69rJcE4IlSkCbA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.220.0/24 185.103.110.0/24 185.112.82.0/24 185.117.118.0/24 185.204.1.0/24 185.212.149.0/24 185.217.196.0/24 185.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 44:22:ec:3a:05:9e:2e:9a:5a:b9:cd:b6:01:0c:94:c7:17:ec: 62:cb:60:fe:13:a3:bb:f5:59:18:d9:3c:8f:a0:74:c3:0d:50: 78:6d:c8:aa:96:d8:31:92:fc:19:a5:c9:9c:5a:d1:79:b0:71: 49:c5:91:b5:56:50:d1:b2:96:44:e4:85:bf:44:0b:98:28:73: 99:6b:b7:2d:02:ae:f8:ac:be:31:9a:fc:c8:b6:8f:97:d7:e0: 84:00:b9:14:4a:88:16:c8:1b:a2:db:a6:ed:1b:5d:28:33:d6: d6:b5:91:b4:fb:e8:6a:dd:52:d8:63:cb:f8:73:61:5a:b0:6b: 92:8f:c2:90:b9:f0:af:29:a2:40:62:ae:26:52:2a:9b:f3:e6: ab:84:6e:7d:07:74:28:3f:03:2d:57:81:d3:a7:fa:25:18:b9: 76:79:10:0e:9c:44:90:6a:b8:66:ae:28:7c:60:05:4f:f6:69: 19:92:8e:cf:27:07:48:44:d6:78:22:38:c3:37:7c:e3:cd:3f: 41:d5:45:99:e9:e7:28:9a:89:55:82:a7:5f:b9:19:b1:7a:87: 1c:14:d6:87:9f:27:ac:50:95:1d:0d:15:9b:a6:4d:a1:02:77: cb:81:d3:32:4b:19:cd:c7:cd:eb:06:07:f9:70:38:d9:15:7d: 5a:01:74:a7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7pAEh3jQweuXdSfAPDTADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDA1OWZlZTJmMzI4YTEzMTllYmRhYzk3MDRlMDg5NTI5MDI2YzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKcBYYCFRtedclIrTjx3Zoh8WrWU f9Djbekuz+8uA98NfJpcd8to8uwPk7JS2TYYp1wrBsfcQ6GUY05ow+nuz6CNABaB V7N4nOnMHH3DzkGqvN+p5Qnfe48WcaT/YFKpAppQW7meBH0u+J4cJtNAqFr6p6Pu dhgyPP7u19W5JLAuxzkpmiTiVcr7Q5SlFYZN58WiMUcWYfEsjfM7ZUWf0QRvaAWK iaWR9376a3cE6G/vQAhhYA4qphcJlp3SqEGIe4otjZbUWMdC9tvFLHjp8k2xz/rh kncQUwWZ2b6enaRQ67KO6fJvIajf0UWUEC9mhXaG5+WGW6IKx3nreddNCQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCQFn+4vMooTGevayXBOCJUpAmwOMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvSkFXZjdpOHlpaE1aNjlySmNFNElsU2tDYkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUnPcAwQA uWduAwQAuXBSAwQAuXV2AwQAucwBAwQAudSVAwQAudnEAwQAud2jMA0GCSqGSIb3 DQEBCwUAA4IBAQBEIuw6BZ4umlq5zbYBDJTHF+xiy2D+E6O79VkY2TyPoHTDDVB4 bciqltgxkvwZpcmcWtF5sHFJxZG1VlDRspZE5IW/RAuYKHOZa7ctAq74rL4xmvzI to+X1+CEALkUSogWyBui26btG10oM9bWtZG0++hq3VLYY8v4c2FasGuSj8KQufCv KaJAYq4mUiqb8+arhG59B3QoPwMtV4HTp/olGLl2eRAOnESQarhmrih8YAVP9mkZ ko7PJwdIRNZ4IjjDN3zjzT9B1UWZ6ecomolVgqdfuRmxeoccFNaHnyesUJUdDRWb pk2hAnfLgdMySxnNx83rBgf5cDjZFX1aAXSn -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client