This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jXnaEvzPAKlwUURcuri_2EY0APE.roa File: jXnaEvzPAKlwUURcuri_2EY0APE.roa (raw, json) Hash identifier: bJ2+8fTTeF2ubi8NQ1u0/9fvglhy+2tBtDJvXGWQnEM= Subject key identifier: 8D:79:DA:12:FC:CF:00:A9:70:51:44:5C:BA:B8:BF:D8:46:34:00:F1 Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019B7A5B412482283B0D6A453C37ACDC61AA Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jXnaEvzPAKlwUURcuri_2EY0APE.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28907 IP address blocks: 5.149.120.0/21 maxlen: 21 5.149.124.0/22 maxlen: 24 77.87.192.0/21 maxlen: 21 78.27.192.0/19 maxlen: 24 89.184.64.0/19 maxlen: 24 89.184.64.0/22 maxlen: 24 89.184.65.0/24 maxlen: 24 89.184.66.0/23 maxlen: 23 89.184.72.0/21 maxlen: 21 89.184.80.0/21 maxlen: 24 89.184.88.0/21 maxlen: 21 193.178.144.0/23 maxlen: 23 193.178.146.0/23 maxlen: 23 195.39.196.0/23 maxlen: 23 195.39.196.0/24 maxlen: 24 195.39.197.0/24 maxlen: 24 2a02:2278::/32 maxlen: 32 2a02:2278::/40 maxlen: 56 2a02:2278:100::/44 maxlen: 56 2a02:2278:200::/40 maxlen: 56 2a02:2278:204::/48 maxlen: 48 2a02:2278:208::/48 maxlen: 48 2a02:2278:220::/48 maxlen: 48 2a02:2278:221::/48 maxlen: 48 2a02:2278:234::/48 maxlen: 48 2a02:2278:235::/48 maxlen: 48 2a02:2278:236::/48 maxlen: 48 2a02:2278:237::/48 maxlen: 48 2a02:2278:800::/40 maxlen: 56 2a02:2278:7000::/40 maxlen: 56 2a02:2278:ff00::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:41:24:82:28:3b:0d:6a:45:3c:37:ac:dc:61:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d79da12fccf00a97051445cbab8bfd8463400f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:ca:08:e0:95:96:5d:0f:b9:76:dc:6d:9c: b9:65:1e:ad:99:bb:2c:9e:b5:ee:66:0c:ac:e2:78: f4:14:e1:75:b7:bd:6b:38:9c:87:a9:bc:d7:80:06: 57:c9:19:51:7c:f0:9e:5d:7c:ce:a4:69:94:62:9e: fa:f7:7d:53:1c:82:8b:12:82:b3:18:7b:73:6a:84: 65:7a:bb:65:79:68:d6:f1:eb:e0:2e:1f:ee:2e:00: 98:3b:19:2c:d4:d5:3c:93:be:f2:1e:a7:02:8f:a1: 91:1f:bb:e0:29:05:cd:ea:f7:8e:58:fa:92:ea:f6: 71:a7:d6:a6:ad:fd:c7:4f:1e:94:ec:45:d8:50:b1: 20:f2:4f:5f:b6:02:b8:94:60:f3:b1:ba:01:4f:52: 3b:ed:23:d2:11:46:d6:5f:d0:30:8e:55:5b:a9:df: 91:d8:43:4f:9f:7a:76:1a:57:04:a9:49:a7:c0:f9: 5d:4d:01:50:e9:9b:c0:ea:46:dd:31:8e:fd:63:55: d6:55:e1:35:65:32:2e:7c:0e:5f:97:5d:61:25:29: 58:8e:fa:76:62:f0:99:9a:f6:61:fe:a7:b1:5e:a1: a8:3b:b9:d9:87:38:b0:75:49:45:dd:97:63:7f:a7: f6:ac:e3:0b:ca:e0:65:e2:84:ad:e1:eb:ca:18:13: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:79:DA:12:FC:CF:00:A9:70:51:44:5C:BA:B8:BF:D8:46:34:00:F1 X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/jXnaEvzPAKlwUURcuri_2EY0APE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.120.0/21 77.87.192.0/21 78.27.192.0/19 89.184.64.0/19 193.178.144.0/22 195.39.196.0/23 IPv6: 2a02:2278::/32 Signature Algorithm: sha256WithRSAEncryption a2:30:bc:8e:54:db:55:91:54:1d:f3:19:1d:fd:47:da:bc:07: 14:24:ee:14:d0:31:db:32:70:57:1a:a1:42:75:1f:bf:19:71: 90:72:d5:de:dc:93:c3:3c:3b:f3:af:d4:1a:e2:d4:bc:0e:4a: 18:c5:65:79:d9:42:79:ab:88:4c:6e:02:33:4b:6e:d5:a6:ae: 58:18:b0:57:4f:84:f2:36:e5:0e:5d:4e:06:cf:0f:73:fd:27: 51:ed:f2:72:af:9f:9d:bb:d7:6c:8a:e5:d6:0e:5c:81:b5:12: 90:b1:c3:da:78:ab:d3:a8:d7:d7:32:5f:85:a4:9b:4f:6a:0f: 42:64:ae:c8:4b:7f:d7:9e:4b:83:e1:ec:23:8d:cd:68:f6:ec: 19:ec:64:24:f8:0e:e8:8c:69:08:e1:77:a5:59:9c:ac:42:e7: a7:f5:ce:a9:73:ab:cc:34:da:31:09:7e:54:ad:b6:fb:0a:80: fc:2c:44:4b:24:7d:82:ce:ff:64:23:35:a1:a4:98:02:d6:81: 4f:ff:3e:33:82:ba:a8:3a:cd:ae:8b:2a:96:1e:45:1d:63:72: 9f:65:c1:dd:86:d9:0f:67:4e:32:1c:93:f1:2e:3d:82:a8:e2: 06:7e:3d:8a:43:f8:bd:7a:ef:fc:b3:6e:18:41:07:94:6a:01: 64:3f:92:34 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6W0Ekgig7DWpFPDes3GGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc5ZGExMmZjY2YwMGE5NzA1MTQ0NWNiYWI4YmZkODQ2MzQwMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/jKCOCVll0PuXbcbZy5ZR6tmbss nrXuZgys4nj0FOF1t71rOJyHqbzXgAZXyRlRfPCeXXzOpGmUYp76931THIKLEoKz GHtzaoRlertleWjW8evgLh/uLgCYOxks1NU8k77yHqcCj6GRH7vgKQXN6veOWPqS 6vZxp9amrf3HTx6U7EXYULEg8k9ftgK4lGDzsboBT1I77SPSEUbWX9AwjlVbqd+R 2ENPn3p2GlcEqUmnwPldTQFQ6ZvA6kbdMY79Y1XWVeE1ZTIufA5fl11hJSlYjvp2 YvCZmvZh/qexXqGoO7nZhziwdUlF3Zdjf6f2rOMLyuBl4oSt4evKGBPwtwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFI152hL8zwCpcFFEXLq4v9hGNADxMB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvalhuYUV2elBBS2x3VVVSY3VyaV8yRVkwQVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2 LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBZV4AwQD TVfAAwQFThvAAwQFWbhAAwQCwbKQAwQBwyfEMA0EAgACMAcDBQAqAiJ4MA0GCSqG SIb3DQEBCwUAA4IBAQCiMLyOVNtVkVQd8xkd/UfavAcUJO4U0DHbMnBXGqFCdR+/ GXGQctXe3JPDPDvzr9Qa4tS8DkoYxWV52UJ5q4hMbgIzS27Vpq5YGLBXT4TyNuUO XU4Gzw9z/SdR7fJyr5+du9dsiuXWDlyBtRKQscPaeKvTqNfXMl+FpJtPag9CZK7I S3/XnkuD4ewjjc1o9uwZ7GQk+A7ojGkI4XelWZysQuen9c6pc6vMNNoxCX5Urbb7 CoD8LERLJH2Czv9kIzWhpJgC1oFP/z4zgrqoOs2uiyqWHkUdY3KfZcHdhtkPZ04y HJPxLj2CqOIGfj2KQ/i9eu/8s24YQQeUagFkP5I0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:16 2026 by rpki-client