This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa File: jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa (raw, json) Hash identifier: nLB/S+2oGFc9tQIVWN3vkSki+22/PC0HnQATmKLZOKM= Subject key identifier: 8D:3C:3F:A2:AE:CB:01:8A:D2:27:5C:93:1B:A3:59:B3:EA:9D:FC:E4 Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f Certificate serial: 019B7FF1D539D731D96465625DC102EE8E63 Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21161 IP address blocks: 178.249.80.0/22 maxlen: 22 178.249.84.0/22 maxlen: 22 185.195.180.0/22 maxlen: 22 193.138.83.0/24 maxlen: 24 194.110.196.0/24 maxlen: 24 194.121.11.0/24 maxlen: 24 2a02:2198::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d5:39:d7:31:d9:64:65:62:5d:c1:02:ee:8e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3c3fa2aecb018ad2275c931ba359b3ea9dfce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:f7:9f:57:98:2b:07:4c:58:c3:90:0b:aa: 9f:49:4d:c4:80:8e:84:3d:8d:bf:3a:e2:96:3d:ce: f5:45:97:24:4d:8e:ca:33:f2:ec:07:9b:92:9b:ec: c5:82:3a:f7:a3:0c:4d:ec:d8:27:37:10:7f:86:fe: c1:91:72:d7:cf:fc:d1:b3:a3:41:f1:bb:32:1e:f3: 29:fc:13:c9:52:ec:9c:b9:2f:e3:87:71:9f:9c:b2: a4:a5:2e:d8:4e:db:3f:23:49:7b:a5:2a:8b:21:a9: 8d:69:00:ed:b9:2c:bb:46:5d:49:d8:93:0e:16:96: 66:86:eb:a8:5a:da:b7:b1:de:ac:33:e7:c0:88:4a: 24:2a:d5:90:77:e6:c8:b8:96:46:e9:9a:fa:25:1e: 5a:94:8b:ed:f0:c7:c1:de:7b:78:1f:0c:d7:9b:db: 42:f7:cd:4e:1f:db:3c:ba:75:5b:b2:4f:8e:30:6c: 94:63:fa:96:cb:00:c7:a3:e7:42:4d:65:ac:8b:af: da:3e:17:06:26:fe:12:ba:7c:47:a6:fb:b0:8b:9c: 7c:8e:fa:8d:d8:ba:74:98:ce:46:38:2f:7e:37:66: 9b:1f:18:c6:61:c2:cd:4e:ae:43:1a:00:a3:3b:ee: 1b:a7:4b:95:10:53:d4:1c:d9:f6:0c:d5:9c:38:d4: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:3F:A2:AE:CB:01:8A:D2:27:5C:93:1B:A3:59:B3:EA:9D:FC:E4 X509v3 Authority Key Identifier: keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.80.0/21 185.195.180.0/22 193.138.83.0/24 194.110.196.0/24 194.121.11.0/24 IPv6: 2a02:2198::/32 Signature Algorithm: sha256WithRSAEncryption 94:27:38:7c:e0:2b:8b:7e:fc:45:5b:b0:fb:48:a5:2b:a7:ae: ad:7d:20:b3:82:11:0d:12:97:5a:96:45:46:5e:55:ec:7c:21: 23:0c:45:3a:5d:8d:59:ae:83:d7:cf:84:71:43:b8:0b:97:cb: 87:c3:e3:82:14:7d:20:e7:02:50:4e:47:a6:a2:b9:ba:a9:34: fc:5a:88:4b:ae:02:88:38:8f:4d:c6:05:2a:e4:b3:4d:90:79: 7a:d9:31:d3:e5:57:31:92:0f:e4:35:66:c7:52:83:45:75:c8: 13:6d:92:72:d9:e5:60:fe:03:d6:e1:5e:ac:f8:de:bd:0f:00: f0:42:51:00:7f:b8:d5:3d:71:f2:30:18:01:18:6f:13:ae:da: 33:c6:1b:10:c8:8e:83:f7:66:3a:97:32:48:1f:b1:85:48:61: 5c:76:fd:81:7d:83:56:f4:b6:e1:8f:41:ee:01:8f:10:f9:0b: 78:49:3d:14:18:42:46:5b:f1:ea:97:42:60:62:46:3a:32:e7: de:31:4d:59:1e:eb:e6:7a:40:02:0e:d1:67:ad:60:9a:b7:0a: f7:c4:01:c2:f2:b1:7a:a4:2b:87:ca:28:da:c1:96:b8:6c:25: ba:4d:3b:e0:be:d7:74:da:ce:19:5b:e1:3f:1c:b8:42:5f:3f: 75:61:dd:4d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/8dU51zHZZGViXcEC7o5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWRkM2M3MjczZDlhYjM2NGEzMTRkYTQ4MWU1YmE1MWY4 NDI5NmYwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDNjM2ZhMmFlY2IwMThhZDIyNzVjOTMxYmEzNTliM2VhOWRmY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zv3n1eYKwdMWMOQC6qfSU3EgI6E PY2/OuKWPc71RZckTY7KM/LsB5uSm+zFgjr3owxN7NgnNxB/hv7BkXLXz/zRs6NB 8bsyHvMp/BPJUuycuS/jh3GfnLKkpS7YTts/I0l7pSqLIamNaQDtuSy7Rl1J2JMO FpZmhuuoWtq3sd6sM+fAiEokKtWQd+bIuJZG6Zr6JR5alIvt8MfB3nt4HwzXm9tC 981OH9s8unVbsk+OMGyUY/qWywDHo+dCTWWsi6/aPhcGJv4SunxHpvuwi5x8jvqN 2Lp0mM5GOC9+N2abHxjGYcLNTq5DGgCjO+4bp0uVEFPUHNn2DNWcONTnwQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFI08P6KuywGK0idckxujWbPqnfzkMB8GA1UdIwQY MBaAFDrt08cnPZqzZKMU2kgeW6UfhClvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTIt NjNmMDQwOTVhNGM0LzEvalR3X29xN0xBWXJTSjF5VEc2TlpzLXFkX09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTItNjNmMDQwOTVhNGM0 LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDsvlQAwQC ucO0AwQAwYpTAwQAwm7EAwQAwnkLMA0EAgACMAcDBQAqAiGYMA0GCSqGSIb3DQEB CwUAA4IBAQCUJzh84CuLfvxFW7D7SKUrp66tfSCzghENEpdalkVGXlXsfCEjDEU6 XY1ZroPXz4RxQ7gLl8uHw+OCFH0g5wJQTkemorm6qTT8WohLrgKIOI9NxgUq5LNN kHl62THT5Vcxkg/kNWbHUoNFdcgTbZJy2eVg/gPW4V6s+N69DwDwQlEAf7jVPXHy MBgBGG8TrtozxhsQyI6D92Y6lzJIH7GFSGFcdv2BfYNW9Lbhj0HuAY8Q+Qt4ST0U GEJGW/Hql0JgYkY6MufeMU1ZHuvmekACDtFnrWCatwr3xAHC8rF6pCuHyijawZa4 bCW6TTvgvtd02s4ZW+E/HLhCXz91Yd1N -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:40 2026 by rpki-client