This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/JmkFCABPoX7SZe-QwBD6PChOSGk.roa File: JmkFCABPoX7SZe-QwBD6PChOSGk.roa (raw, json) Hash identifier: xzMASuZ9G8RWkd86x5BZTykE+oySkmLx0mmIPA2Mdbo= Subject key identifier: 26:69:05:08:00:4F:A1:7E:D2:65:EF:90:C0:10:FA:3C:28:4E:48:69 Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Certificate serial: 019B791084466D5BDF3865E2EA89DE68F40C Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/JmkFCABPoX7SZe-QwBD6PChOSGk.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47242 IP address blocks: 81.31.144.0/24 maxlen: 24 81.31.145.0/24 maxlen: 24 81.31.146.0/24 maxlen: 24 81.31.147.0/24 maxlen: 24 81.31.148.0/24 maxlen: 24 81.31.149.0/24 maxlen: 24 81.31.150.0/24 maxlen: 24 81.31.151.0/24 maxlen: 24 81.31.152.0/24 maxlen: 24 81.31.153.0/24 maxlen: 24 81.31.154.0/24 maxlen: 24 81.31.155.0/24 maxlen: 24 81.31.156.0/24 maxlen: 24 81.31.157.0/24 maxlen: 24 81.31.158.0/24 maxlen: 24 81.31.159.0/24 maxlen: 24 149.62.184.0/24 maxlen: 24 149.62.185.0/24 maxlen: 24 149.62.186.0/24 maxlen: 24 149.62.187.0/24 maxlen: 24 149.62.188.0/24 maxlen: 24 149.62.189.0/24 maxlen: 24 149.62.190.0/24 maxlen: 24 149.62.191.0/24 maxlen: 24 185.84.96.0/24 maxlen: 24 185.84.97.0/24 maxlen: 24 185.84.98.0/24 maxlen: 24 185.84.99.0/24 maxlen: 24 185.201.64.0/24 maxlen: 24 185.201.65.0/24 maxlen: 24 185.201.66.0/24 maxlen: 24 185.201.67.0/24 maxlen: 24 192.81.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:46:6d:5b:df:38:65:e2:ea:89:de:68:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26690508004fa17ed265ef90c010fa3c284e4869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:17:43:3a:b6:c4:f8:96:9e:ea:d0:07:38: 15:39:42:89:cc:07:24:1b:77:59:fa:d5:b2:86:c5: 06:7d:33:e9:9b:c9:2e:b2:6f:2a:85:43:02:42:30: fb:9c:33:b8:31:5f:9c:f5:d5:5a:c4:10:7c:d1:d4: 93:85:1c:99:ec:d2:58:43:b3:09:b7:7e:53:64:ac: 6b:f5:47:7b:4e:73:b0:73:13:f1:f0:9b:86:b3:3c: b0:8a:1c:b7:f9:35:bf:63:ea:a0:52:c4:0a:ab:18: 00:83:12:a1:41:e7:cc:12:38:ab:db:b8:42:ff:5b: a7:c4:bb:0f:dd:ab:17:82:6d:8a:e2:f2:e3:14:b1: ea:b3:b1:39:8e:f5:11:09:5b:b9:29:39:66:ea:33: 57:b2:46:18:ad:6a:26:5e:46:d2:33:9f:d3:d7:a2: 25:48:63:45:6a:c2:ef:95:71:6f:5d:f0:63:f8:84: cb:43:3b:6d:0f:0c:39:14:92:06:c7:71:22:29:22: 4c:77:e1:35:e3:a7:2f:57:ec:91:c9:6c:6f:05:cd: 19:27:b7:dc:b8:0b:a6:4c:ce:ac:b9:42:4d:44:3d: 1d:bd:c4:ed:d9:a1:00:10:09:ac:4f:22:d8:2f:d2: 7c:37:dc:7a:79:f0:15:60:c5:82:a5:87:62:b5:4b: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:69:05:08:00:4F:A1:7E:D2:65:EF:90:C0:10:FA:3C:28:4E:48:69 X509v3 Authority Key Identifier: keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/JmkFCABPoX7SZe-QwBD6PChOSGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.144.0/20 149.62.184.0/21 185.84.96.0/22 185.201.64.0/22 192.81.193.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c5:9f:42:ed:0b:81:5c:a7:0d:c7:27:9d:44:67:54:2d:9c: 8e:86:f7:61:6a:56:b4:83:32:81:77:4c:34:12:a9:1b:4c:ce: 86:f2:f9:9d:68:c5:ac:9f:ff:2b:bb:09:6d:0d:3f:15:95:74: 6c:14:d3:68:6e:f8:79:ce:15:8e:db:aa:e0:7b:d1:2d:3b:1f: b4:eb:30:a3:a2:50:97:c3:62:b2:d3:40:31:e7:fc:f6:54:28: df:e2:24:4e:8a:a1:0f:85:6f:3e:1f:a2:ca:1f:7e:a5:eb:80: 47:4c:7f:5f:4e:2d:89:03:6d:08:98:5c:d0:78:52:f8:b7:12: ea:08:1f:69:2e:ad:67:46:c2:ad:60:ea:3b:d4:a0:97:d6:e5: 6b:e4:e1:99:8e:be:c9:b4:6a:c4:4a:bc:ad:cb:5c:de:c2:52: 13:51:a3:c6:09:b7:18:89:65:d1:15:cb:25:2d:fc:e8:05:5d: 55:21:33:ed:53:ce:84:4d:95:f1:c4:cc:8a:e6:1e:60:8f:f6: ec:84:21:21:41:6f:f9:6f:25:36:d2:c0:c2:40:b2:20:cd:76: 6a:dc:9e:27:d5:68:af:c2:00:c0:fd:21:7d:e1:70:7b:e6:6f: f9:a5:23:11:d9:6a:0e:8a:f6:e6:d0:ee:23:b4:6c:05:a8:c4: fd:13:f1:e3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EIRGbVvfOGXi6oneaPQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2 OTMxZjQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjY5MDUwODAwNGZhMTdlZDI2NWVmOTBjMDEwZmEzYzI4NGU0ODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LgXQzq2xPiWnurQBzgVOUKJzAck G3dZ+tWyhsUGfTPpm8kusm8qhUMCQjD7nDO4MV+c9dVaxBB80dSThRyZ7NJYQ7MJ t35TZKxr9Ud7TnOwcxPx8JuGszywihy3+TW/Y+qgUsQKqxgAgxKhQefMEjir27hC /1unxLsP3asXgm2K4vLjFLHqs7E5jvURCVu5KTlm6jNXskYYrWomXkbSM5/T16Il SGNFasLvlXFvXfBj+ITLQzttDww5FJIGx3EiKSJMd+E146cvV+yRyWxvBc0ZJ7fc uAumTM6suUJNRD0dvcTt2aEAEAmsTyLYL9J8N9x6efAVYMWCpYditUtf6QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCZpBQgAT6F+0mXvkMAQ+jwoTkhpMB8GA1UdIwQY MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt MzllY2E0NzI2NjhiLzEvSm1rRkNBQlBvWDdTWmUtUXdCRDZQQ2hPU0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEUR+QAwQD lT64AwQCuVRgAwQCuclAAwQAwFHBMA0GCSqGSIb3DQEBCwUAA4IBAQAAxZ9C7QuB XKcNxyedRGdULZyOhvdhala0gzKBd0w0EqkbTM6G8vmdaMWsn/8ruwltDT8VlXRs FNNobvh5zhWO26rge9EtOx+06zCjolCXw2Ky00Ax5/z2VCjf4iROiqEPhW8+H6LK H36l64BHTH9fTi2JA20ImFzQeFL4txLqCB9pLq1nRsKtYOo71KCX1uVr5OGZjr7J tGrESryty1zewlITUaPGCbcYiWXRFcslLfzoBV1VITPtU86ETZXxxMyK5h5gj/bs hCEhQW/5byU20sDCQLIgzXZq3J4n1WivwgDA/SF94XB75m/5pSMR2WoOivbm0O4j tGwFqMT9E/Hj -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:26 2026 by rpki-client