This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/jJBnBZB9j6ZSy8oi7va1DliuM5I.roa File: jJBnBZB9j6ZSy8oi7va1DliuM5I.roa (raw, json) Hash identifier: PXgKRNLOfY6nAlq8b+44/oNeFFKEJ75+kqlPxgLOYf0= Subject key identifier: 8C:90:67:05:90:7D:8F:A6:52:CB:CA:22:EE:F6:B5:0E:58:AE:33:92 Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67 Certificate serial: 019B78A22001EEBEA7C64911BA5271E1228A Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/jJBnBZB9j6ZSy8oi7va1DliuM5I.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61323 IP address blocks: 31.193.0.0/20 maxlen: 20 37.220.88.0/21 maxlen: 21 45.67.172.0/22 maxlen: 22 45.84.20.0/22 maxlen: 24 45.131.136.0/22 maxlen: 22 45.145.100.0/22 maxlen: 22 45.157.40.0/22 maxlen: 22 46.37.160.0/19 maxlen: 19 78.24.88.0/24 maxlen: 24 78.24.89.0/24 maxlen: 24 78.24.90.0/23 maxlen: 23 78.109.160.0/20 maxlen: 20 78.137.112.0/20 maxlen: 20 80.66.200.0/22 maxlen: 22 80.244.176.0/20 maxlen: 20 81.201.128.0/20 maxlen: 20 94.229.160.0/20 maxlen: 20 109.108.128.0/19 maxlen: 19 159.253.208.0/21 maxlen: 21 176.124.52.0/22 maxlen: 24 178.238.128.0/20 maxlen: 20 185.55.76.0/23 maxlen: 24 185.55.76.0/24 maxlen: 24 185.55.77.0/24 maxlen: 24 185.55.78.0/23 maxlen: 23 185.156.64.0/24 maxlen: 24 185.156.65.0/24 maxlen: 24 185.156.66.0/23 maxlen: 23 185.160.180.0/22 maxlen: 22 185.160.252.0/22 maxlen: 24 185.162.224.0/22 maxlen: 22 185.166.128.0/22 maxlen: 22 185.181.196.0/22 maxlen: 22 185.182.88.0/22 maxlen: 22 185.197.60.0/22 maxlen: 22 185.207.108.0/22 maxlen: 22 185.210.196.0/22 maxlen: 22 185.213.116.0/22 maxlen: 22 185.216.76.0/22 maxlen: 22 185.217.40.0/22 maxlen: 22 185.220.60.0/22 maxlen: 22 185.221.204.0/22 maxlen: 22 185.226.220.0/22 maxlen: 22 185.234.36.0/22 maxlen: 22 185.241.248.0/22 maxlen: 24 192.166.44.0/24 maxlen: 24 192.166.45.0/24 maxlen: 24 192.166.46.0/23 maxlen: 23 193.39.252.0/22 maxlen: 22 194.39.164.0/22 maxlen: 22 195.69.102.0/24 maxlen: 24 2a02:21a8::/48 maxlen: 48 2a02:21a8:1::/48 maxlen: 48 2a02:22d0::/32 maxlen: 32 2a02:22d0:c::/48 maxlen: 48 2a09:b200:6::/48 maxlen: 48 2a09:b600:5::/48 maxlen: 48 2a09:ba00:4::/48 maxlen: 48 2a0c:3dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:20:01:ee:be:a7:c6:49:11:ba:52:71:e1:22:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c906705907d8fa652cbca22eef6b50e58ae3392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:df:27:3f:fa:1c:10:9d:21:77:df:3f:8a: d3:a1:63:a7:9a:dc:75:7d:f1:78:01:7b:54:23:2c: 99:30:c7:ad:16:dd:0a:d4:0a:2f:e1:70:7a:47:93: 08:ee:8a:a4:93:93:6f:fa:5f:b2:f1:3a:49:95:97: 0e:41:e3:9b:ad:01:ab:41:44:62:36:f7:92:d1:44: 9e:73:47:47:6c:3c:09:6e:af:73:3a:fe:05:49:6d: ce:a7:d1:d6:2f:2d:38:94:a6:94:e8:64:9e:57:7d: b8:23:2c:33:e2:ae:83:96:a6:7c:2e:0e:da:bb:a8: bf:11:e1:02:e6:24:7f:f2:d4:23:6a:64:da:f3:8b: ab:8b:a0:8e:31:19:0f:ce:eb:17:64:37:f2:db:4d: b3:e4:f2:1b:60:93:77:a7:2a:2e:ac:15:37:ba:c4: bc:4f:d3:92:77:c5:f2:3e:c8:c1:fa:93:83:a6:d7: 8d:5c:7d:c5:8c:8a:72:9f:c0:0b:7d:0a:df:5a:2f: 0b:82:84:ab:b1:27:3d:3e:b6:1b:0b:a3:68:72:81: 6c:6f:04:7f:21:2d:b2:98:ed:98:4c:07:98:b6:c5: aa:f2:16:c5:3f:f8:11:54:05:c6:e6:42:67:e1:c9: b1:b3:c0:cf:cd:c5:5e:e8:c4:d9:97:fc:ce:88:49: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:90:67:05:90:7D:8F:A6:52:CB:CA:22:EE:F6:B5:0E:58:AE:33:92 X509v3 Authority Key Identifier: keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/jJBnBZB9j6ZSy8oi7va1DliuM5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.0.0/20 37.220.88.0/21 45.67.172.0/22 45.84.20.0/22 45.131.136.0/22 45.145.100.0/22 45.157.40.0/22 46.37.160.0/19 78.24.88.0/22 78.109.160.0/20 78.137.112.0/20 80.66.200.0/22 80.244.176.0/20 81.201.128.0/20 94.229.160.0/20 109.108.128.0/19 159.253.208.0/21 176.124.52.0/22 178.238.128.0/20 185.55.76.0/22 185.156.64.0/22 185.160.180.0/22 185.160.252.0/22 185.162.224.0/22 185.166.128.0/22 185.181.196.0/22 185.182.88.0/22 185.197.60.0/22 185.207.108.0/22 185.210.196.0/22 185.213.116.0/22 185.216.76.0/22 185.217.40.0/22 185.220.60.0/22 185.221.204.0/22 185.226.220.0/22 185.234.36.0/22 185.241.248.0/22 192.166.44.0/22 193.39.252.0/22 194.39.164.0/22 195.69.102.0/24 IPv6: 2a02:21a8::/47 2a02:22d0::/32 2a09:b200:6::/48 2a09:b600:5::/48 2a09:ba00:4::/48 2a0c:3dc0::/29 Signature Algorithm: sha256WithRSAEncryption 60:f6:33:46:41:c5:ef:a0:2d:c6:c0:6f:b7:bc:b8:47:53:e6: 87:aa:36:2d:b4:95:f7:54:de:44:0f:65:38:bb:3a:77:11:7a: 6f:ef:72:9f:59:40:3e:5b:d2:1c:1e:b1:fd:2b:2a:6a:6a:06: ab:bd:e9:bc:a2:44:07:52:df:9a:82:a5:e0:bc:56:92:0e:48: ef:b8:db:06:10:9e:ad:36:cf:a9:41:1f:c2:e3:c0:f8:a4:a5: 64:34:1c:46:ce:7b:99:7e:6c:93:21:df:5b:b9:a9:09:ae:33: 4b:4c:b3:71:16:1c:f1:9e:44:21:dd:98:16:7a:2f:38:7c:31: 94:dc:eb:b4:2d:22:2e:0e:45:be:ee:f4:3c:8c:da:0c:e8:fd: cf:6f:e4:b4:34:51:0b:82:e5:00:d0:b3:8d:c5:84:a1:0e:b0: bb:cf:d0:2a:13:a1:14:57:bb:5a:6c:8a:47:f6:73:36:92:3f: 11:5a:9c:fa:44:53:d2:f1:f8:14:ef:0c:1e:f9:2b:84:d9:94: 0e:65:38:ad:4c:ae:87:c1:00:07:1d:9e:51:ff:12:8c:91:fa: 8e:d4:7e:4b:85:6e:60:e9:fb:b3:bd:20:2e:66:8e:64:8c:24: 36:4c:f7:e9:38:e6:fa:1b:8e:f7:09:32:a6:d5:85:87:aa:9e: 12:27:1d:90 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISAZt4oiAB7r6nxkkRulJx4SKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0 OTJkNjcwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzkwNjcwNTkwN2Q4ZmE2NTJjYmNhMjJlZWY2YjUwZTU4YWUzMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vfJz/6HBCdIXffP4rToWOnmtx1 ffF4AXtUIyyZMMetFt0K1Aov4XB6R5MI7oqkk5Nv+l+y8TpJlZcOQeObrQGrQURi NveS0USec0dHbDwJbq9zOv4FSW3Op9HWLy04lKaU6GSeV324Iywz4q6DlqZ8Lg7a u6i/EeEC5iR/8tQjamTa84uri6COMRkPzusXZDfy202z5PIbYJN3pyourBU3usS8 T9OSd8XyPsjB+pODpteNXH3FjIpyn8ALfQrfWi8LgoSrsSc9PrYbC6NocoFsbwR/ IS2ymO2YTAeYtsWq8hbFP/gRVAXG5kJn4cmxs8DPzcVe6MTZl/zOiEl8OwIDAQAB o4IDQjCCAz4wHQYDVR0OBBYEFIyQZwWQfY+mUsvKIu72tQ5YrjOSMB8GA1UdIwQY MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt YmVmM2JhMjFjNzE1LzEvakpCbkJaQjlqNlpTeThvaTd2YTFEbGl1TTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1 LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBVgYIKwYBBQUHAQcBAf8EggFFMIIBQTCCAQMEAgABMIH8 AwQEH8EAAwQDJdxYAwQCLUOsAwQCLVQUAwQCLYOIAwQCLZFkAwQCLZ0oAwQFLiWg AwQCThhYAwQETm2gAwQETolwAwQCUELIAwQEUPSwAwQEUcmAAwQEXuWgAwQFbWyA AwQDn/3QAwQCsHw0AwQEsu6AAwQCuTdMAwQCuZxAAwQCuaC0AwQCuaD8AwQCuaLg AwQCuaaAAwQCubXEAwQCubZYAwQCucU8AwQCuc9sAwQCudLEAwQCudV0AwQCudhM AwQCudkoAwQCudw8AwQCud3MAwQCueLcAwQCueokAwQCufH4AwQCwKYsAwQCwSf8 AwQCwiekAwQAw0VmMDgEAgACMDIDBwEqAiGoAAADBQAqAiLQAwcAKgmyAAAGAwcA Kgm2AAAFAwcAKgm6AAAEAwUDKgw9wDANBgkqhkiG9w0BAQsFAAOCAQEAYPYzRkHF 76AtxsBvt7y4R1Pmh6o2LbSV91TeRA9lOLs6dxF6b+9yn1lAPlvSHB6x/SsqamoG q73pvKJEB1LfmoKl4LxWkg5I77jbBhCerTbPqUEfwuPA+KSlZDQcRs57mX5skyHf W7mpCa4zS0yzcRYc8Z5EId2YFnovOHwxlNzrtC0iLg5Fvu70PIzaDOj9z2/ktDRR C4LlANCzjcWEoQ6wu8/QKhOhFFe7WmyKR/ZzNpI/EVqc+kRT0vH4FO8MHvkrhNmU DmU4rUyuh8EABx2eUf8SjJH6jtR+S4VuYOn7s70gLmaOZIwkNkz36Tjm+huO9wky ptWFh6qeEicdkA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:54 2026 by rpki-client