This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/jZPt1zxHD8CqfaPHuBiTRpmEBbI.roa File: jZPt1zxHD8CqfaPHuBiTRpmEBbI.roa (raw, json) Hash identifier: cId390elWVkvOxHP093/PaXgwsEWNc4Z+/XgWzPQ1Yk= Subject key identifier: 8D:93:ED:D7:3C:47:0F:C0:AA:7D:A3:C7:B8:18:93:46:99:84:05:B2 Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9 Certificate serial: 019B7B3642B61D00E36A5CF00A0036800C14 Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/jZPt1zxHD8CqfaPHuBiTRpmEBbI.roa Signing time: Thu 01 Jan 2026 20:18:32 +0000 ROA not before: Thu 01 Jan 2026 20:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39180 IP address blocks: 37.148.240.0/21 maxlen: 21 81.18.176.0/20 maxlen: 20 93.191.40.0/21 maxlen: 21 178.18.48.0/20 maxlen: 20 185.29.64.0/23 maxlen: 23 185.153.244.0/22 maxlen: 22 188.93.40.0/21 maxlen: 21 195.13.34.0/24 maxlen: 24 2a01:378::/32 maxlen: 32 2a01:379::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:42:b6:1d:00:e3:6a:5c:f0:0a:00:36:80:0c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d93edd73c470fc0aa7da3c7b8189346998405b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:69:2e:0d:51:d3:e1:fe:82:88:a7:5f:62: dd:9b:fe:c5:45:c5:a6:eb:38:fc:40:f3:ec:a6:af: c0:5c:69:d4:df:93:ca:fa:be:43:47:24:e3:73:f4: 1d:f6:a7:79:da:7d:d7:28:83:1c:f0:ea:05:e4:85: 23:c1:44:fd:8b:a5:23:18:01:82:df:f6:93:08:59: 38:bf:b0:18:8c:b0:f4:4c:99:58:d7:94:a2:9c:5e: 00:0d:f0:7c:59:8a:e3:16:9e:fc:00:c5:f0:fc:21: 6f:ea:87:49:e0:3e:89:71:f1:08:b9:f2:bc:fb:42: 3c:39:f2:61:63:d2:d2:2f:ac:59:ac:12:d4:93:a6: 50:b5:c7:2a:be:c6:62:d0:33:ef:88:32:e2:92:e6: 5c:01:a5:18:de:fb:ef:9b:e7:7d:c2:19:cb:f5:42: ca:5d:fa:52:76:03:72:e2:ad:da:cd:88:1a:32:48: bb:c0:30:bd:11:6d:83:41:90:ad:7a:95:fb:a8:90: 5d:de:75:6d:87:ec:c0:2b:91:9f:44:a8:a2:6f:e1: c8:2f:31:cf:51:44:bf:0f:35:90:c4:25:6c:a1:ee: f8:a5:bc:a1:e3:bb:de:55:3b:a7:80:5f:07:c6:b6: 87:c7:09:1d:f4:ea:0a:b1:ad:0c:31:99:77:54:44: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:93:ED:D7:3C:47:0F:C0:AA:7D:A3:C7:B8:18:93:46:99:84:05:B2 X509v3 Authority Key Identifier: keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/jZPt1zxHD8CqfaPHuBiTRpmEBbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.240.0/21 81.18.176.0/20 93.191.40.0/21 178.18.48.0/20 185.29.64.0/23 185.153.244.0/22 188.93.40.0/21 195.13.34.0/24 IPv6: 2a01:378::/31 Signature Algorithm: sha256WithRSAEncryption 6f:c6:f5:97:9c:92:6b:3b:ed:f8:3f:d1:5f:c9:e6:14:ce:a4: c0:65:71:ca:06:f0:d9:78:7b:29:95:72:59:e5:00:9d:84:2f: 09:94:0c:19:0a:9b:89:cd:47:9e:b2:fe:06:80:be:2a:fa:f2: 05:cf:c6:2c:52:af:2b:96:bc:3e:c4:f1:6c:e3:5e:6f:97:9d: b2:a3:f5:73:86:6d:74:17:8c:dd:c4:55:cb:3b:f9:b9:f8:9e: 02:95:79:30:0e:4f:2a:b2:75:08:5b:7e:d9:7e:a0:32:b5:8c: 3d:56:6d:2e:7f:cd:0c:15:05:47:a0:28:57:84:5b:5b:13:b8: 49:86:28:07:d3:79:53:54:16:d5:ed:44:5c:3c:01:6f:fd:10: 72:97:9d:ca:2e:3d:da:c0:4c:2e:2f:cb:a1:ce:ab:12:c3:4e: 8b:16:e0:00:d4:58:96:01:5a:96:a0:d4:68:28:0f:83:05:c0: 56:90:5b:3a:e9:f9:79:b2:f6:b6:58:db:86:bf:7a:ec:bd:87: 6a:ca:35:c4:22:dc:63:6f:97:54:15:4e:3d:99:6c:34:6b:1e: d7:2a:9f:90:2f:e6:22:08:41:ae:b1:70:34:8a:c7:40:fe:e1: 73:e9:3e:a7:b0:39:4f:89:bd:56:cd:46:1f:57:a7:ef:3b:1e: 8c:92:2f:e5 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7NkK2HQDjalzwCgA2gAwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1 MGY1YTkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDkzZWRkNzNjNDcwZmMwYWE3ZGEzYzdiODE4OTM0Njk5ODQwNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE5pLg1R0+H+goinX2Ldm/7FRcWm 6zj8QPPspq/AXGnU35PK+r5DRyTjc/Qd9qd52n3XKIMc8OoF5IUjwUT9i6UjGAGC 3/aTCFk4v7AYjLD0TJlY15SinF4ADfB8WYrjFp78AMXw/CFv6odJ4D6JcfEIufK8 +0I8OfJhY9LSL6xZrBLUk6ZQtccqvsZi0DPviDLikuZcAaUY3vvvm+d9whnL9ULK XfpSdgNy4q3azYgaMki7wDC9EW2DQZCtepX7qJBd3nVth+zAK5GfRKiib+HILzHP UUS/DzWQxCVsoe74pbyh47veVTungF8HxraHxwkd9OoKsa0MMZl3VETlMQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFI2T7dc8Rw/Aqn2jx7gYk0aZhAWyMB8GA1UdIwQY MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt NjZkMjUzNDMyZjVmLzEvalpQdDF6eEhEOENxZmFQSHVCaVRScG1FQmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDJZTwAwQE URKwAwQDXb8oAwQEshIwAwQBuR1AAwQCuZn0AwQDvF0oAwQAww0iMA0EAgACMAcD BQEqAQN4MA0GCSqGSIb3DQEBCwUAA4IBAQBvxvWXnJJrO+34P9FfyeYUzqTAZXHK BvDZeHsplXJZ5QCdhC8JlAwZCpuJzUeesv4GgL4q+vIFz8YsUq8rlrw+xPFs415v l52yo/Vzhm10F4zdxFXLO/m5+J4ClXkwDk8qsnUIW37ZfqAytYw9Vm0uf80MFQVH oChXhFtbE7hJhigH03lTVBbV7URcPAFv/RByl53KLj3awEwuL8uhzqsSw06LFuAA 1FiWAVqWoNRoKA+DBcBWkFs66fl5sva2WNuGv3rsvYdqyjXEItxjb5dUFU49mWw0 ax7XKp+QL+YiCEGusXA0isdA/uFz6T6nsDlPib1WzUYfV6fvOx6Mki/l -----END CERTIFICATE-----Generated at Tue Jan 27 03:25:24 2026 by rpki-client