This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa File: jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa (raw, json) Hash identifier: YC9Zk7AeEy/U3DouNdWT44SnwPIkBw05lQ2yggZvMZA= Subject key identifier: 8E:4C:15:CF:51:F0:F7:50:64:2C:BF:F1:23:53:19:CD:95:FF:AC:BD Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019BE4D480778E96FC1421D8803A9FC4E502 Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa Signing time: Thu 22 Jan 2026 08:31:30 +0000 ROA not before: Thu 22 Jan 2026 08:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215013 IP address blocks: 89.223.9.0/24 maxlen: 24 188.72.103.0/24 maxlen: 24 188.72.104.0/24 maxlen: 24 188.72.105.0/24 maxlen: 24 188.72.110.0/24 maxlen: 24 188.72.111.0/24 maxlen: 24 188.72.112.0/24 maxlen: 24 188.72.113.0/24 maxlen: 24 2a0d:d6c7:10::/48 maxlen: 48 2a0d:d6c7:11::/48 maxlen: 48 2a0d:d6c7:12::/48 maxlen: 48 2a0d:d6c7:13::/48 maxlen: 48 2a0d:d6c7:14::/48 maxlen: 48 2a0d:d6c7:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:d4:80:77:8e:96:fc:14:21:d8:80:3a:9f:c4:e5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Jan 22 08:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4c15cf51f0f750642cbff1235319cd95ffacbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:b8:78:c6:c9:06:e5:56:4d:0a:02:f7:af: b6:af:15:fa:55:62:48:54:a8:8c:27:a1:c5:c7:cd: 29:f7:70:54:bd:e9:2c:49:92:9d:48:c9:46:41:71: e7:2b:fb:ce:e8:f5:fa:db:84:22:86:4a:f4:b0:a7: 8a:13:b8:e3:91:84:10:4c:41:c8:d5:61:91:d2:43: 4e:6d:5c:06:e9:a1:4c:d0:13:3d:d5:05:ae:0d:81: cb:49:96:9b:aa:8a:07:d1:20:eb:23:54:e4:f7:a3: ff:4e:77:6d:4e:f5:82:59:02:3f:55:bc:5b:23:f4: b6:a9:17:fc:13:22:8c:a6:2f:fa:12:a0:3e:66:e2: 57:85:24:73:f8:db:d7:ea:98:26:84:f9:44:2b:42: a2:19:03:20:74:43:75:1b:d1:de:9d:3c:2e:95:ca: ce:ad:3e:91:9f:99:0b:b1:f8:d3:7b:6b:a6:c7:f4: a6:da:54:1a:18:93:9b:ec:d5:37:3d:53:9f:12:28: 4f:af:d9:29:b0:49:7a:ad:e2:d5:4a:df:70:1c:94: 53:63:c3:10:cb:72:38:53:76:4b:4f:62:57:be:92: b3:35:f2:92:8d:5c:75:70:c3:83:4d:3c:8c:7d:44: 97:05:7c:c4:cb:5a:6e:db:5b:64:5f:4b:29:db:c5: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:15:CF:51:F0:F7:50:64:2C:BF:F1:23:53:19:CD:95:FF:AC:BD X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.223.9.0/24 188.72.103.0-188.72.105.255 188.72.110.0-188.72.113.255 IPv6: 2a0d:d6c7:10::-2a0d:d6c7:15:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:93:bb:6b:f2:b9:88:ca:dd:da:c4:d0:88:b7:cb:d5:4d:94: 5c:ee:d0:0e:ed:a3:2c:4f:49:f0:8e:43:e4:f7:1d:be:98:39: b8:83:fd:1f:52:f1:16:d0:73:58:fa:c2:dc:08:c9:78:90:a0: f6:b0:b1:d6:da:09:67:5f:8e:3b:65:e5:26:87:c7:49:30:5a: 0e:0c:b0:9d:fd:39:0f:21:6a:d7:76:3c:39:d7:29:63:02:cb: 8b:b0:67:1f:a9:38:a4:a4:eb:1b:50:61:7d:a1:16:22:de:ae: f9:63:9f:98:af:38:5a:b5:3e:e1:2b:f0:84:06:9e:9d:51:26: 00:28:05:49:42:57:47:d6:ab:f9:bb:15:24:67:b4:78:29:45: e2:c7:ce:b6:5d:82:77:e2:95:51:7a:dd:6d:46:4b:9b:1c:83: 7a:92:53:4a:30:24:36:df:e8:9a:b4:a7:a0:d1:3b:14:e0:1e: ed:2a:33:9c:43:1d:69:9a:03:b0:d8:d2:2b:3f:a2:19:9e:b9: e1:61:fa:4b:04:ce:4b:05:82:60:51:2d:55:88:a1:69:77:3d: a3:ac:48:2a:37:41:6d:7a:0b:80:b6:f1:07:6e:49:e0:83:10: 99:89:66:85:0e:4b:3e:89:e9:1d:17:ac:ed:4e:4d:eb:fe:8f: 6a:c4:41:8b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvk1IB3jpb8FCHYgDqfxOUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjYwMTIyMDgzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTRjMTVjZjUxZjBmNzUwNjQyY2JmZjEyMzUzMTljZDk1ZmZhY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytO4eMbJBuVWTQoC96+2rxX6VWJI VKiMJ6HFx80p93BUveksSZKdSMlGQXHnK/vO6PX624Qihkr0sKeKE7jjkYQQTEHI 1WGR0kNObVwG6aFM0BM91QWuDYHLSZabqooH0SDrI1Tk96P/TndtTvWCWQI/Vbxb I/S2qRf8EyKMpi/6EqA+ZuJXhSRz+NvX6pgmhPlEK0KiGQMgdEN1G9HenTwulcrO rT6Rn5kLsfjTe2umx/Sm2lQaGJOb7NU3PVOfEihPr9kpsEl6reLVSt9wHJRTY8MQ y3I4U3ZLT2JXvpKzNfKSjVx1cMODTTyMfUSXBXzEy1pu21tkX0sp28V5KwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFI5MFc9R8PdQZCy/8SNTGc2V/6y9MB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvamt3VnoxSHc5MUJrTExfeEkxTVp6WlhfckwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAoBAIAATAiAwQAWd8JMAwD BAC8SGcDBAG8SGgwDAMEAbxIbgMEAbxIcDAaBAIAAjAUMBIDBwQqDdbHABADBwEq DdbHABQwDQYJKoZIhvcNAQELBQADggEBADmTu2vyuYjK3drE0Ii3y9VNlFzu0A7t oyxPSfCOQ+T3Hb6YObiD/R9S8RbQc1j6wtwIyXiQoPawsdbaCWdfjjtl5SaHx0kw Wg4MsJ39OQ8hatd2PDnXKWMCy4uwZx+pOKSk6xtQYX2hFiLervljn5ivOFq1PuEr 8IQGnp1RJgAoBUlCV0fWq/m7FSRntHgpReLHzrZdgnfilVF63W1GS5scg3qSU0ow JDbf6Jq0p6DROxTgHu0qM5xDHWmaA7DY0is/ohmeueFh+ksEzksFgmBRLVWIoWl3 PaOsSCo3QW16C4C28QduSeCDEJmJZoUOSz6J6R0XrO1OTev+j2rEQYs= -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:43 2026 by rpki-client