This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JSUg1g1yYLV_uFF_DGWzr6HN_Uc.roa File: JSUg1g1yYLV_uFF_DGWzr6HN_Uc.roa (raw, json) Hash identifier: ad+xH3hi+e9jOWmn2YBWU5zUVyxPdq3R2IsQQPUkA/s= Subject key identifier: 25:25:20:D6:0D:72:60:B5:7F:B8:51:7F:0C:65:B3:AF:A1:CD:FD:47 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53216C55F9807CD1CB7BF5480091B Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JSUg1g1yYLV_uFF_DGWzr6HN_Uc.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34569 IP address blocks: 77.78.0.0/18 maxlen: 24 93.152.182.0/24 maxlen: 24 93.152.188.0/22 maxlen: 22 109.120.192.0/18 maxlen: 24 109.120.213.0/24 maxlen: 24 109.120.215.0/24 maxlen: 24 109.120.216.0/23 maxlen: 23 109.120.218.0/23 maxlen: 23 109.120.220.0/22 maxlen: 24 109.120.224.0/22 maxlen: 24 109.120.228.0/23 maxlen: 24 109.120.230.0/23 maxlen: 24 109.120.232.0/23 maxlen: 24 109.120.238.0/23 maxlen: 24 185.211.200.0/23 maxlen: 23 212.25.32.0/19 maxlen: 24 212.25.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:32:16:c5:5f:98:07:cd:1c:b7:bf:54:80:09:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=252520d60d7260b57fb8517f0c65b3afa1cdfd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:37:c1:0d:4a:61:34:05:41:a6:7e:88:dd: 70:b7:9b:78:82:1c:d0:76:78:64:75:96:86:ce:8b: 3b:be:b7:ab:ba:dc:78:49:52:3c:fa:2a:d3:9b:ad: 42:94:52:23:ac:2f:ea:1c:58:05:87:f1:e3:55:8a: d9:6d:3b:2e:83:2c:49:4f:0c:96:ac:92:37:70:f5: 94:c6:b6:73:9a:dd:43:ad:99:c8:90:6a:57:81:1e: b9:5c:17:20:a4:ce:79:68:45:bb:a7:62:83:16:5d: a8:32:38:82:b5:b9:ff:03:28:c3:24:7e:8b:5f:58: 00:d3:a3:22:38:2f:52:93:24:64:82:86:52:55:7c: 3a:c4:95:5e:56:62:b7:89:61:60:ed:67:b0:e1:de: 6d:53:ae:88:6b:ee:c9:24:1e:98:b1:e9:6d:0a:aa: 4d:5b:67:54:50:8d:5b:70:56:f1:6e:c5:ba:b8:af: fb:41:5d:00:c3:95:ff:ce:8c:53:39:b0:4a:88:ed: 9b:87:96:09:8d:ce:e3:41:34:40:e1:b7:d6:54:98: cf:c9:58:44:ef:ea:af:da:d8:76:72:11:2e:37:17: 36:d2:53:2e:c0:51:1f:56:8e:5d:24:c4:d9:68:f8: 58:85:ef:c5:e9:d3:f2:39:fe:39:82:8f:a5:b8:78: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:20:D6:0D:72:60:B5:7F:B8:51:7F:0C:65:B3:AF:A1:CD:FD:47 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JSUg1g1yYLV_uFF_DGWzr6HN_Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.0.0/18 93.152.182.0/24 93.152.188.0/22 109.120.192.0/18 185.211.200.0/23 212.25.32.0/19 Signature Algorithm: sha256WithRSAEncryption a3:b2:60:96:cd:0d:3d:71:66:26:9f:2f:87:33:51:e2:12:be: a5:93:b3:a6:10:6c:11:51:d1:5e:b8:50:87:30:b5:13:d5:a2: 7b:95:8b:7f:48:52:5e:68:c5:a9:a2:2c:3a:a2:5c:c6:db:59: 73:1e:14:0b:0d:8c:16:5d:12:26:5f:14:64:4e:fe:13:91:05: 3f:13:c3:a6:45:f7:bd:c8:8f:a6:08:5e:5a:8e:75:b4:d7:42: bb:7f:d4:66:ac:20:f0:95:e0:01:5b:6b:f8:05:b4:40:4e:db: 61:8e:e7:e6:54:de:7c:42:17:52:8d:a2:b6:40:69:a8:d8:61: 86:92:7d:18:a8:8f:95:60:75:6d:17:e1:13:12:d9:13:54:fe: cf:bb:ed:fe:df:00:2d:75:e2:1b:b4:00:31:8e:98:29:11:c4: c3:b0:64:c9:d0:ab:97:02:7d:5a:7c:f2:e2:9a:41:cc:9c:45: fc:52:b9:56:9d:af:55:df:3c:80:cb:e1:47:34:4a:75:83:5d: 9d:c3:ee:1c:36:5d:36:ac:8c:e9:40:82:01:d3:c5:b9:fe:5c: af:05:2e:86:35:12:5e:4a:5a:e3:be:4e:9d:31:57:73:75:33: 1f:ae:7a:8b:06:a0:dc:fb:3b:68:48:b4:04:0f:2a:fd:3b:87: 13:3e:b3:39 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pTIWxV+YB80ct79UgAkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTI1MjBkNjBkNzI2MGI1N2ZiODUxN2YwYzY1YjNhZmExY2RmZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5o3wQ1KYTQFQaZ+iN1wt5t4ghzQ dnhkdZaGzos7vrerutx4SVI8+irTm61ClFIjrC/qHFgFh/HjVYrZbTsugyxJTwyW rJI3cPWUxrZzmt1DrZnIkGpXgR65XBcgpM55aEW7p2KDFl2oMjiCtbn/AyjDJH6L X1gA06MiOC9SkyRkgoZSVXw6xJVeVmK3iWFg7Wew4d5tU66Ia+7JJB6YseltCqpN W2dUUI1bcFbxbsW6uK/7QV0Aw5X/zoxTObBKiO2bh5YJjc7jQTRA4bfWVJjPyVhE 7+qv2th2chEuNxc20lMuwFEfVo5dJMTZaPhYhe/F6dPyOf45go+luHgWswIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCUlINYNcmC1f7hRfwxls6+hzf1HMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvSlNVZzFnMXlZTFZfdUZGX0RHV3pyNkhOX1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGTU4AAwQA XZi2AwQCXZi8AwQGbXjAAwQBudPIAwQF1BkgMA0GCSqGSIb3DQEBCwUAA4IBAQCj smCWzQ09cWYmny+HM1HiEr6lk7OmEGwRUdFeuFCHMLUT1aJ7lYt/SFJeaMWpoiw6 olzG21lzHhQLDYwWXRImXxRkTv4TkQU/E8OmRfe9yI+mCF5ajnW010K7f9RmrCDw leABW2v4BbRATtthjufmVN58QhdSjaK2QGmo2GGGkn0YqI+VYHVtF+ETEtkTVP7P u+3+3wAtdeIbtAAxjpgpEcTDsGTJ0KuXAn1afPLimkHMnEX8UrlWna9V3zyAy+FH NEp1g12dw+4cNl02rIzpQIIB08W5/lyvBS6GNRJeSlrjvk6dMVdzdTMfrnqLBqDc +ztoSLQEDyr9O4cTPrM5 -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:17 2026 by rpki-client