This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa
File: J-vxkqVlMbRDT8b5oTyV10wqk9c.roa (raw, json)
Hash identifier: hwGlMVqWOEk3sg39v14bIdu9rIL0O67wVHeY+xkcOlE=
Subject key identifier: 27:EB:F1:92:A5:65:31:B4:43:4F:C6:F9:A1:3C:95:D7:4C:2A:93:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019B78A241B191AACC7DFDDA362041E338F8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa
Signing time: Thu 01 Jan 2026 08:17:37 +0000
ROA not before: Thu 01 Jan 2026 08:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
92.244.162.0/23 maxlen: 24
92.244.164.0/23 maxlen: 24
92.244.166.0/23 maxlen: 24
92.244.168.0/23 maxlen: 24
92.244.170.0/23 maxlen: 24
92.244.172.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.18.0/24 maxlen: 24
93.152.21.0/24 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.64.0/22 maxlen: 24
93.152.92.0/24 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.13.0/24 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.174.254.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.21.0/24 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.29.0/24 maxlen: 24
109.204.41.0/24 maxlen: 24
109.204.45.0/24 maxlen: 24
109.204.51.0/24 maxlen: 24
109.204.54.0/24 maxlen: 24
109.204.58.0/24 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.112.0/24 maxlen: 24
109.204.117.0/24 maxlen: 24
109.204.118.0/24 maxlen: 24
109.204.121.0/24 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 24
195.40.28.0/23 maxlen: 24
195.40.96.0/23 maxlen: 24
195.40.108.0/23 maxlen: 24
195.40.162.0/23 maxlen: 24
195.172.96.0/23 maxlen: 24
195.172.100.0/23 maxlen: 24
195.172.104.0/23 maxlen: 24
195.172.192.0/23 maxlen: 24
195.172.198.0/23 maxlen: 24
195.172.202.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:41:b1:91:aa:cc:7d:fd:da:36:20:41:e3:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 1 08:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ebf192a56531b4434fc6f9a13c95d74c2a93d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:c2:7d:b7:8f:19:ad:d2:3e:7e:71:61:db:
92:bb:63:0b:e5:01:ef:b6:54:02:bb:05:00:9c:7c:
1c:19:77:fc:11:26:28:0f:2f:b3:66:1e:3e:20:18:
5d:18:12:c7:08:eb:8f:55:1b:b9:67:f6:d2:20:0f:
7a:22:e0:77:2b:29:bb:79:2f:ed:ac:39:b3:d1:e7:
53:da:3e:cf:75:f1:53:30:96:4a:e0:de:81:c8:51:
4a:ea:81:56:07:cf:00:9e:81:33:de:c9:55:6f:a9:
ef:ba:4b:49:fd:81:87:c0:e8:b0:21:01:8a:22:f6:
d9:bf:99:01:5b:f8:d0:04:02:15:78:bf:2b:62:4c:
18:59:06:39:1e:05:77:10:e9:ea:8f:13:13:cd:23:
ff:72:a4:12:c3:68:33:9b:ba:0b:cb:29:b9:65:fe:
5c:75:1f:f7:75:ba:ad:c5:f0:bd:48:19:ae:ad:44:
39:fb:ba:0a:ce:e1:16:1e:d9:64:c5:e8:9b:a9:39:
73:7d:eb:45:9a:ec:9a:f4:d7:ec:83:ef:ce:70:b2:
49:bd:98:24:99:e2:93:cb:77:16:ec:38:f7:54:6f:
4a:40:0a:f3:b6:6a:9c:74:05:3b:8c:5f:c5:2c:4f:
35:8c:51:97:57:a0:2a:79:56:40:d2:b0:32:1a:5a:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:F1:92:A5:65:31:B4:43:4F:C6:F9:A1:3C:95:D7:4C:2A:93:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
79.121.226.0/23
79.121.238.0/23
92.244.162.0-92.244.173.255
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.18.0/24
93.152.21.0/24
93.152.48.0/22
93.152.64.0/22
93.152.92.0/24
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.8.0/23
95.177.13.0/24
95.177.54.0/23
95.177.72.0/23
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.255.255
109.204.0.0/22
109.204.16.0/22
109.204.21.0/24
109.204.24.0/22
109.204.29.0/24
109.204.41.0/24
109.204.45.0/24
109.204.51.0/24
109.204.54.0/24
109.204.58.0/24
109.204.96.0/22
109.204.112.0/24
109.204.117.0-109.204.118.255
109.204.121.0/24
109.204.124.0/23
195.40.18.0/23
195.40.28.0/23
195.40.96.0/23
195.40.108.0/23
195.40.162.0/23
195.172.96.0/23
195.172.100.0/23
195.172.104.0/23
195.172.192.0/23
195.172.198.0/23
195.172.202.0/23
212.134.11.0/24
212.135.0.0/24
212.135.2.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:0a:d1:f5:ff:cf:94:89:bb:73:a6:ac:2a:f0:fc:9d:8f:e4:
8b:c0:10:08:76:30:06:f5:da:66:71:b7:29:ac:31:d8:d4:bf:
2b:8e:ef:aa:97:88:ad:9b:e2:1b:18:9b:9c:1c:f7:a5:b3:5b:
42:51:7a:08:ea:8d:a3:4e:cb:42:0b:d2:12:4b:5d:cc:c7:57:
64:04:a9:d1:4b:c1:66:a0:b4:ba:cf:35:a0:53:81:b1:e2:41:
e2:2a:f6:71:1f:6e:88:b3:c2:5d:e1:e1:7f:5d:32:43:7e:ad:
f3:6c:94:d0:aa:c3:38:9d:bd:4a:0f:b4:eb:a9:d2:07:ba:cb:
52:02:d8:d0:d4:03:0c:6f:a4:ef:4f:28:7c:0e:ab:4d:d5:15:
49:e7:54:33:02:e3:18:81:8b:b9:ab:ab:c8:31:73:85:53:15:
75:67:82:44:de:8d:b8:32:21:81:6e:90:43:ea:3c:6d:c7:15:
35:5b:e9:24:b2:1b:6b:4d:f8:27:3c:4b:c0:45:a5:23:37:85:
1d:2b:79:48:37:16:9a:33:ab:f2:e8:1f:db:e6:8b:a4:9c:1d:
61:df:18:61:20:14:4c:74:53:de:30:e4:07:f7:f6:20:2c:05:
61:bf:ea:78:e1:22:48:c2:62:b6:7a:37:a5:b4:b3:57:e5:67:
25:66:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:55 2026 by rpki-client