This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jUX_vhLsNJhpUXEjgtoSuF2uodA.roa File: jUX_vhLsNJhpUXEjgtoSuF2uodA.roa (raw, json) Hash identifier: o1W7wQNf0dR0c9b2g7S/8vvQ6zDrm6Oqt0pOXFNL5ZM= Subject key identifier: 8D:45:FF:BE:12:EC:34:98:69:51:71:23:82:DA:12:B8:5D:AE:A1:D0 Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Certificate serial: 019B7D5CBCB19C82A8FEB5C38A692A2BE777 Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jUX_vhLsNJhpUXEjgtoSuF2uodA.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49601 IP address blocks: 91.229.56.0/24 maxlen: 32 91.229.182.0/24 maxlen: 32 91.229.210.0/24 maxlen: 32 185.189.124.0/22 maxlen: 32 185.189.124.0/24 maxlen: 32 185.189.125.0/24 maxlen: 32 185.189.126.0/24 maxlen: 32 185.189.127.0/24 maxlen: 32 185.226.60.0/22 maxlen: 32 185.226.60.0/24 maxlen: 32 185.226.61.0/24 maxlen: 32 185.226.62.0/24 maxlen: 32 185.226.63.0/24 maxlen: 32 185.252.96.0/22 maxlen: 32 185.252.96.0/24 maxlen: 32 185.252.97.0/24 maxlen: 32 185.252.98.0/24 maxlen: 32 185.252.99.0/24 maxlen: 32 2a0b:e680::/29 maxlen: 128 2a0c:3e00::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bc:b1:9c:82:a8:fe:b5:c3:8a:69:2a:2b:e7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d45ffbe12ec34986951712382da12b85daea1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:7a:a2:77:a8:d6:86:68:0a:de:d3:f8:b4: 9d:36:0d:94:8d:b6:0e:cb:4d:6a:46:96:f6:cb:8f: 95:5d:b6:ea:7d:f1:31:02:44:aa:e0:f0:52:2f:eb: a3:9e:1e:8f:9d:2f:ba:5b:65:d6:b1:41:f7:06:7a: 12:f6:cc:3e:ef:70:f5:56:7b:f1:ed:ed:2e:d6:9b: 37:6d:76:bb:6f:c6:f2:39:05:a2:70:70:dc:88:1e: e9:c7:80:f0:a0:a3:62:46:cd:c3:19:89:62:32:0d: 9f:15:af:83:be:cd:61:3d:d3:f4:18:f3:d3:b8:4b: 86:2a:19:e1:5c:df:8a:fa:fc:a8:0a:d6:5b:52:75: 03:e4:e9:47:63:24:e7:b7:e5:87:2a:bd:05:09:f9: a9:2f:c7:83:f1:2e:78:7b:45:dd:91:ad:6f:be:d7: ab:d3:b5:9b:93:72:4d:3c:5e:52:4c:53:34:40:70: ea:ad:38:a8:45:52:aa:7e:65:77:34:38:b7:6e:cf: 8e:21:a5:9c:77:88:db:5a:be:a4:4a:39:dc:0f:36: e1:9d:b3:19:55:2e:c8:4c:5a:4e:68:0a:a3:9c:68: 0d:d8:51:8d:aa:3a:1e:84:8b:a0:e9:d2:6c:82:04: 3b:95:82:e1:c7:98:f7:76:ab:5e:b9:1d:5e:32:b7: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:FF:BE:12:EC:34:98:69:51:71:23:82:DA:12:B8:5D:AE:A1:D0 X509v3 Authority Key Identifier: keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jUX_vhLsNJhpUXEjgtoSuF2uodA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.56.0/24 91.229.182.0/24 91.229.210.0/24 185.189.124.0/22 185.226.60.0/22 185.252.96.0/22 IPv6: 2a0b:e680::/29 2a0c:3e00::/29 Signature Algorithm: sha256WithRSAEncryption 6a:13:da:27:c1:66:65:db:b5:2d:37:f9:8c:06:3d:87:99:01: bc:f1:a4:87:80:24:2b:69:3b:46:6f:27:ea:d9:c6:ec:22:92: f5:66:a3:c3:b0:99:7b:e6:44:e6:bb:2f:97:ed:4a:69:cb:dd: e6:83:a3:4f:79:1c:df:56:3a:d3:fa:94:fc:b9:cb:cf:87:aa: f0:92:8a:47:07:ac:c3:96:e7:dc:b4:1f:ff:58:c7:29:6b:8d: cc:d4:80:96:59:08:83:a5:85:61:ce:4a:35:09:75:21:77:eb: a4:ac:a3:e4:f8:ab:8c:12:e9:10:68:76:38:54:c7:69:53:1c: 41:fe:f6:ac:15:c9:59:5d:fe:bf:b2:8e:45:ac:59:2c:6a:d2: fd:41:4c:03:b8:49:35:06:76:12:cc:47:f0:5f:d5:a8:7b:08: d0:80:75:da:d1:3d:0d:fb:1d:ba:a6:6a:0b:a4:e7:d4:f9:d7: e1:b0:75:32:26:a7:d6:ea:be:33:ee:7a:94:2e:c3:87:3f:3d: bc:2a:cd:54:d7:b2:9f:86:59:a0:6b:6c:44:ae:fc:d7:ed:10: 83:cc:3e:0b:21:57:a8:fe:ac:6b:06:cc:4d:1f:a3:df:c2:de: 1d:fa:b1:52:0f:07:31:17:f9:1f:43:fb:44:a5:7e:5e:81:65: b9:1c:e8:1e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt9XLyxnIKo/rXDimkqK+d3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw Y2ZkYzUwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQ1ZmZiZTEyZWMzNDk4Njk1MTcxMjM4MmRhMTJiODVkYWVhMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kV6oneo1oZoCt7T+LSdNg2UjbYO y01qRpb2y4+VXbbqffExAkSq4PBSL+ujnh6PnS+6W2XWsUH3BnoS9sw+73D1Vnvx 7e0u1ps3bXa7b8byOQWicHDciB7px4DwoKNiRs3DGYliMg2fFa+Dvs1hPdP0GPPT uEuGKhnhXN+K+vyoCtZbUnUD5OlHYyTnt+WHKr0FCfmpL8eD8S54e0Xdka1vvter 07Wbk3JNPF5STFM0QHDqrTioRVKqfmV3NDi3bs+OIaWcd4jbWr6kSjncDzbhnbMZ VS7ITFpOaAqjnGgN2FGNqjoehIug6dJsggQ7lYLhx5j3dqteuR1eMrfHlwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFI1F/74S7DSYaVFxI4LaErhdrqHQMB8GA1UdIwQY MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt OGQ0YmZkMGFhY2U4LzEvalVYX3ZoTHNOSmhwVVhFamd0b1N1RjJ1b2RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4 LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQAW+U4AwQA W+W2AwQAW+XSAwQCub18AwQCueI8AwQCufxgMBQEAgACMA4DBQMqC+aAAwUDKgw+ ADANBgkqhkiG9w0BAQsFAAOCAQEAahPaJ8FmZdu1LTf5jAY9h5kBvPGkh4AkK2k7 Rm8n6tnG7CKS9Wajw7CZe+ZE5rsvl+1Kacvd5oOjT3kc31Y60/qU/LnLz4eq8JKK Rwesw5bn3LQf/1jHKWuNzNSAllkIg6WFYc5KNQl1IXfrpKyj5PirjBLpEGh2OFTH aVMcQf72rBXJWV3+v7KORaxZLGrS/UFMA7hJNQZ2EsxH8F/VqHsI0IB12tE9Dfsd uqZqC6Tn1PnX4bB1Mian1uq+M+56lC7Dhz89vCrNVNeyn4ZZoGtsRK781+0Qg8w+ CyFXqP6sawbMTR+j38LeHfqxUg8HMRf5H0P7RKV+XoFluRzoHg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:26 2026 by rpki-client