This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/jyWwljpxReKpY4SMeUD8H4nVEP4.roa File: jyWwljpxReKpY4SMeUD8H4nVEP4.roa (raw, json) Hash identifier: tJLW0eLTpJpwX5IQWcFTLh7LDmOemJn5jSjE5FDR4w0= Subject key identifier: 8F:25:B0:96:3A:71:45:E2:A9:63:84:8C:79:40:FC:1F:89:D5:10:FE Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Certificate serial: 019B7B365AAFDF2CC7EA631A732FC4B833A8 Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/jyWwljpxReKpY4SMeUD8H4nVEP4.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15954 IP address blocks: 31.24.120.0/21 maxlen: 21 31.47.72.0/21 maxlen: 21 37.247.120.0/21 maxlen: 21 91.216.219.0/24 maxlen: 24 185.49.184.0/22 maxlen: 22 185.57.196.0/22 maxlen: 22 185.66.72.0/24 maxlen: 24 185.66.73.0/24 maxlen: 24 185.66.74.0/24 maxlen: 24 185.203.224.0/22 maxlen: 22 193.247.194.0/24 maxlen: 24 194.176.119.0/24 maxlen: 24 217.18.32.0/20 maxlen: 20 2a01:a940::/32 maxlen: 32 2a01:a941::/32 maxlen: 32 2a01:a942::/32 maxlen: 32 2a02:2810::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5a:af:df:2c:c7:ea:63:1a:73:2f:c4:b8:33:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f25b0963a7145e2a963848c7940fc1f89d510fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:9f:15:b6:0a:c4:5c:2f:d5:00:ff:ab:bc: e6:ac:1e:c1:0a:69:ba:28:81:51:43:0d:70:7e:5b: c6:89:ff:aa:fc:42:03:12:21:51:6b:48:aa:f1:16: 72:6e:71:e3:36:65:e4:6d:96:e6:7d:20:3d:ba:af: f2:21:6b:7b:ac:7e:da:5e:ad:ad:66:7f:e8:40:09: 3e:3b:86:ab:5d:46:8f:ae:fd:39:00:cb:35:e1:61: 9a:ea:a7:f1:ae:3e:46:3a:80:75:6a:50:94:cd:a8: 55:cf:02:22:d4:30:91:56:10:0f:20:2b:f5:25:78: e0:8b:3c:0a:ca:f6:87:d2:92:9b:da:4d:94:a0:87: 86:72:be:b0:36:d6:cd:dd:6d:88:85:04:f7:b8:3f: 8d:ab:64:b8:91:0e:4f:16:c2:19:17:f1:6a:1f:62: 91:72:24:21:bc:e1:c0:c9:e1:d1:20:fc:0e:70:26: bb:f2:78:9f:2d:47:87:5f:16:08:7f:e1:54:91:f9: d6:95:87:82:a9:10:d0:04:40:df:35:9a:85:38:e5: 6f:93:d3:8e:18:37:89:9e:b2:23:bf:f0:9b:9c:63: 85:05:3d:c0:75:c6:a7:7e:5a:5c:74:6a:5e:69:3d: b0:ce:bc:2d:d7:e1:fe:a6:d5:96:fd:6b:e2:df:b5: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:B0:96:3A:71:45:E2:A9:63:84:8C:79:40:FC:1F:89:D5:10:FE X509v3 Authority Key Identifier: keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/jyWwljpxReKpY4SMeUD8H4nVEP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.120.0/21 31.47.72.0/21 37.247.120.0/21 91.216.219.0/24 185.49.184.0/22 185.57.196.0/22 185.66.72.0-185.66.74.255 185.203.224.0/22 193.247.194.0/24 194.176.119.0/24 217.18.32.0/20 IPv6: 2a01:a940::-2a01:a942:ffff:ffff:ffff:ffff:ffff:ffff 2a02:2810::/32 Signature Algorithm: sha256WithRSAEncryption 8d:b4:e7:a3:9f:02:7b:63:9d:4e:1c:a7:bf:10:d6:52:9d:87: 48:d2:1a:66:65:1b:89:c4:c0:54:87:4b:de:be:2b:bf:91:52: d5:0d:89:28:47:76:90:f5:90:be:cc:15:39:cf:9d:96:e1:c8: a8:04:90:ab:75:44:d7:ce:ae:70:d2:32:3c:82:40:ab:b1:bf: 7b:fd:f8:25:8a:d4:f0:4a:00:55:35:73:7a:aa:9e:35:28:84: 83:e8:d5:90:9c:ad:51:4b:3f:f4:ca:18:46:55:59:bb:50:c2: a5:22:01:5b:47:df:c0:59:8e:d2:10:1f:04:27:b7:26:ba:93: 87:c0:dc:b3:d3:24:80:91:ae:05:da:7d:89:34:b9:75:7c:ee: 2b:84:d9:7f:14:ae:c4:5d:fb:95:e0:0a:ab:d7:e6:d6:50:23: 2d:b9:34:fb:06:f3:d2:16:c8:f1:4b:27:2c:82:e0:0b:5b:4b: b7:54:26:73:03:d1:08:88:1b:de:0e:d6:60:9f:67:98:78:99: 37:36:77:9d:10:0a:d0:b7:8a:97:15:c3:ae:7f:ba:e7:56:e7: c6:e5:45:22:40:c8:47:e6:f8:80:64:e2:c2:f4:51:6f:e5:1e: 7d:6b:84:e4:37:e9:8a:53:ed:54:fe:75:1d:14:c7:84:a2:5d: 30:45:15:a4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt7Nlqv3yzH6mMacy/EuDOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi ZmYzZDYwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjI1YjA5NjNhNzE0NWUyYTk2Mzg0OGM3OTQwZmMxZjg5ZDUxMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqfFbYKxFwv1QD/q7zmrB7BCmm6 KIFRQw1wflvGif+q/EIDEiFRa0iq8RZybnHjNmXkbZbmfSA9uq/yIWt7rH7aXq2t Zn/oQAk+O4arXUaPrv05AMs14WGa6qfxrj5GOoB1alCUzahVzwIi1DCRVhAPICv1 JXjgizwKyvaH0pKb2k2UoIeGcr6wNtbN3W2IhQT3uD+Nq2S4kQ5PFsIZF/FqH2KR ciQhvOHAyeHRIPwOcCa78nifLUeHXxYIf+FUkfnWlYeCqRDQBEDfNZqFOOVvk9OO GDeJnrIjv/CbnGOFBT3AdcanflpcdGpeaT2wzrwt1+H+ptWW/Wvi37Xl9wIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFI8lsJY6cUXiqWOEjHlA/B+J1RD+MB8GA1UdIwQY MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt OWJhYTY2Y2ExNDA0LzEvanlXd2xqcHhSZUtwWTRTTWVVRDhING5WRVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0 LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwUAQCAAEwSgMEAx8YeAME Ax8vSAMEAyX3eAMEAFvY2wMEArkxuAMEArk5xDAMAwQDuUJIAwQAuUJKAwQCucvg AwQAwffCAwQAwrB3AwQE2RIgMB0EAgACMBcwDgMFBioBqUADBQAqAalCAwUAKgIo EDANBgkqhkiG9w0BAQsFAAOCAQEAjbTno58Ce2OdThynvxDWUp2HSNIaZmUbicTA VIdL3r4rv5FS1Q2JKEd2kPWQvswVOc+dluHIqASQq3VE186ucNIyPIJAq7G/e/34 JYrU8EoAVTVzeqqeNSiEg+jVkJytUUs/9MoYRlVZu1DCpSIBW0ffwFmO0hAfBCe3 JrqTh8Dcs9MkgJGuBdp9iTS5dXzuK4TZfxSuxF37leAKq9fm1lAjLbk0+wbz0hbI 8UsnLILgC1tLt1QmcwPRCIgb3g7WYJ9nmHiZNzZ3nRAK0LeKlxXDrn+651bnxuVF IkDIR+b4gGTiwvRRb+UefWuE5DfpilPtVP51HRTHhKJdMEUVpA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:10 2026 by rpki-client