This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa File: jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa (raw, json) Hash identifier: KVbYTEO9c7jfQrSlpqs7ND4XndUrbw5w4184ONdqawM= Subject key identifier: 8D:78:91:ED:78:D7:86:F2:3D:5E:05:6D:26:54:2D:46:81:10:12:E6 Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B79ECCC8C46D94BF66E529EC97706E01E Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16202 IP address blocks: 77.64.128.0/17 maxlen: 20 77.64.128.0/18 maxlen: 18 77.64.128.0/19 maxlen: 19 77.64.146.0/23 maxlen: 23 77.64.160.0/19 maxlen: 19 77.64.192.0/19 maxlen: 19 77.64.192.0/20 maxlen: 20 77.64.208.0/20 maxlen: 20 77.64.224.0/20 maxlen: 20 77.64.240.0/20 maxlen: 20 77.64.252.0/23 maxlen: 23 77.64.254.0/23 maxlen: 23 83.221.64.0/19 maxlen: 23 83.221.64.0/20 maxlen: 23 83.221.64.0/21 maxlen: 21 83.221.72.0/21 maxlen: 21 83.221.80.0/20 maxlen: 20 83.221.80.0/21 maxlen: 21 83.221.88.0/21 maxlen: 21 89.186.128.0/19 maxlen: 19 89.186.128.0/20 maxlen: 20 89.186.128.0/21 maxlen: 21 89.186.136.0/21 maxlen: 21 89.186.144.0/20 maxlen: 20 89.186.144.0/21 maxlen: 21 89.186.152.0/21 maxlen: 21 92.206.0.0/16 maxlen: 16 92.206.0.0/17 maxlen: 17 92.206.0.0/18 maxlen: 18 92.206.64.0/18 maxlen: 23 92.206.128.0/18 maxlen: 23 92.206.160.0/19 maxlen: 19 92.206.190.0/23 maxlen: 23 92.206.192.0/18 maxlen: 23 92.206.224.0/19 maxlen: 19 95.168.128.0/19 maxlen: 19 95.168.128.0/20 maxlen: 20 95.168.144.0/20 maxlen: 20 185.44.148.0/22 maxlen: 22 185.44.150.0/23 maxlen: 23 217.68.160.0/19 maxlen: 19 217.68.160.0/20 maxlen: 20 217.68.176.0/20 maxlen: 20 2a00:c1a0::/32 maxlen: 32 2a00:c1a0::/34 maxlen: 34 2a00:c1a0:4000::/34 maxlen: 34 2a00:c1a0:8000::/34 maxlen: 34 2a00:c1a0:c000::/34 maxlen: 34 2a02:2454:8000::/33 maxlen: 36 2a02:2457:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cc:8c:46:d9:4b:f6:6e:52:9e:c9:77:06:e0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d7891ed78d786f23d5e056d26542d46811012e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:55:d7:ed:95:cd:f0:2a:58:66:a9:0c:7f: 14:3b:d3:4c:45:95:3b:64:c8:48:5e:a5:f2:a9:17: de:d9:23:dc:8f:52:cc:71:52:30:8b:13:33:4d:28: 14:07:af:f3:be:cc:80:33:40:c2:24:7b:5b:d9:49: 96:8a:dd:d5:cd:1b:8c:d5:b6:3e:7e:e2:d3:92:40: e5:09:6e:6e:e8:fb:6d:39:a7:6e:4f:d6:95:12:72: 29:e7:68:f7:c7:26:c2:39:d9:cd:21:fa:b2:55:99: 14:44:82:7f:3b:bd:49:7a:a2:cc:54:c2:d5:6b:75: 31:a1:6a:93:84:1f:99:a4:c3:40:32:93:a8:8d:75: be:bf:cf:db:ac:17:ce:b6:17:ab:00:4a:45:f7:13: cb:82:17:58:b1:15:4a:63:a2:ba:39:a9:35:c5:84: d0:0d:2d:8b:de:73:d9:77:63:fb:e2:b1:42:c0:8c: 59:4b:2f:27:10:8f:14:01:7b:66:31:6f:4b:b1:53: 20:41:d9:88:d1:b9:f5:23:01:a9:92:8f:08:cc:53: 48:43:04:42:b1:ca:9b:6e:e5:8b:2c:02:e8:15:6d: f7:79:2e:f9:49:16:70:88:dd:19:55:05:8f:73:74: a3:66:9f:eb:ea:7c:a5:7b:ac:c4:b6:ba:02:2b:54: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:91:ED:78:D7:86:F2:3D:5E:05:6D:26:54:2D:46:81:10:12:E6 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.64.128.0/17 83.221.64.0/19 89.186.128.0/19 92.206.0.0/16 95.168.128.0/19 185.44.148.0/22 217.68.160.0/19 IPv6: 2a00:c1a0::/32 2a02:2454:8000::/33 2a02:2457:100::/40 Signature Algorithm: sha256WithRSAEncryption 37:5b:95:a9:d6:7b:a5:7c:66:38:d6:cb:0d:12:26:7a:cc:78: 27:41:6b:21:a4:5e:eb:ca:be:38:0b:13:ef:d0:a1:de:b9:b8: b4:ca:9d:a2:45:c4:c1:e0:76:70:81:59:94:45:1c:64:63:46: b8:d1:ab:03:7c:d3:13:03:aa:27:a2:3a:89:01:74:23:19:53: 65:4f:33:bf:80:b1:dc:c6:59:a7:d8:0c:af:3f:4f:cc:f5:71: 73:0c:78:1c:e6:97:1c:2c:dc:ea:19:41:2c:c9:2a:44:49:94: 1e:88:41:0a:c0:ce:34:b2:ea:8e:67:cc:0b:b2:65:09:bd:84: 40:4c:41:fa:bb:82:13:06:ba:8e:d0:4c:73:c0:f5:b0:7e:e8: ff:26:c9:96:5e:8d:c2:6c:6d:4a:48:57:b1:5d:1f:9c:71:61: 6e:cc:ce:3d:fe:6f:2f:11:56:e3:dd:93:e0:54:38:0e:2d:1f: 73:a5:a4:fe:02:bb:3d:5b:dd:a7:18:ac:83:80:55:d1:fa:7c: fc:24:5e:79:bc:5e:64:54:bf:3b:36:04:fa:8a:ac:af:68:b3: 80:e4:f9:57:d2:cb:a5:de:cb:e0:ed:ec:d8:1e:51:ae:f4:4c: 65:f6:fb:57:8c:b4:a6:07:44:a1:53:a2:9a:9a:8a:a9:95:2f: 36:1f:48:e9 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt57MyMRtlL9m5Snsl3BuAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc4OTFlZDc4ZDc4NmYyM2Q1ZTA1NmQyNjU0MmQ0NjgxMTAxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV9V1+2VzfAqWGapDH8UO9NMRZU7 ZMhIXqXyqRfe2SPcj1LMcVIwixMzTSgUB6/zvsyAM0DCJHtb2UmWit3VzRuM1bY+ fuLTkkDlCW5u6PttOaduT9aVEnIp52j3xybCOdnNIfqyVZkURIJ/O71JeqLMVMLV a3UxoWqThB+ZpMNAMpOojXW+v8/brBfOtherAEpF9xPLghdYsRVKY6K6Oak1xYTQ DS2L3nPZd2P74rFCwIxZSy8nEI8UAXtmMW9LsVMgQdmI0bn1IwGpko8IzFNIQwRC scqbbuWLLALoFW33eS75SRZwiN0ZVQWPc3SjZp/r6nyle6zEtroCK1Q+xQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI14ke1414byPV4FbSZULUaBEBLmMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvalhpUjdYalhodkk5WGdWdEpsUXRSb0VRRXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAvBAIAATApAwQHTUCAAwQF U91AAwQFWbqAAwMAXM4DBAVfqIADBAK5LJQDBAXZRKAwHQQCAAIwFwMFACoAwaAD BgcqAiRUgAMGACoCJFcBMA0GCSqGSIb3DQEBCwUAA4IBAQA3W5Wp1nulfGY41ssN EiZ6zHgnQWshpF7ryr44CxPv0KHeubi0yp2iRcTB4HZwgVmURRxkY0a40asDfNMT A6onojqJAXQjGVNlTzO/gLHcxlmn2AyvP0/M9XFzDHgc5pccLNzqGUEsySpESZQe iEEKwM40suqOZ8wLsmUJvYRATEH6u4ITBrqO0ExzwPWwfuj/JsmWXo3CbG1KSFex XR+ccWFuzM49/m8vEVbj3ZPgVDgOLR9zpaT+Ars9W92nGKyDgFXR+nz8JF55vF5k VL87NgT6iqyvaLOA5PlX0sul3svg7ezYHlGu9Exl9vtXjLSmB0ShU6KamoqplS82 H0jp -----END CERTIFICATE-----Generated at Mon Jan 26 21:34:06 2026 by rpki-client