This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jPdjCk1CYrXkkpDCBjZca3t8qIg.roa File: jPdjCk1CYrXkkpDCBjZca3t8qIg.roa (raw, json) Hash identifier: dDr3vSobZUfHammK81X6vIgaRMlFS0bX0zTCy8DXbnY= Subject key identifier: 8C:F7:63:0A:4D:42:62:B5:E4:92:90:C2:06:36:5C:6B:7B:7C:A8:88 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BBC7985357F6A954E3C9B45EB9B97B456 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jPdjCk1CYrXkkpDCBjZca3t8qIg.roa Signing time: Wed 14 Jan 2026 12:27:19 +0000 ROA not before: Wed 14 Jan 2026 12:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205090 IP address blocks: 89.44.86.0/24 maxlen: 24 89.44.87.0/24 maxlen: 24 91.200.12.0/24 maxlen: 24 91.200.13.0/24 maxlen: 24 95.81.121.0/24 maxlen: 24 95.81.122.0/24 maxlen: 24 103.71.20.0/24 maxlen: 24 103.71.21.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 109.69.62.0/24 maxlen: 24 185.105.88.0/24 maxlen: 24 185.105.89.0/24 maxlen: 24 185.105.90.0/24 maxlen: 24 185.105.91.0/24 maxlen: 24 185.128.104.0/24 maxlen: 24 185.128.105.0/24 maxlen: 24 185.128.106.0/24 maxlen: 24 185.128.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:79:85:35:7f:6a:95:4e:3c:9b:45:eb:9b:97:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 14 12:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf7630a4d4262b5e49290c206365c6b7b7ca888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:6a:01:46:d3:ca:97:ab:a7:41:86:23:d4: ee:f6:39:80:f5:92:cb:07:1f:8e:7c:df:17:ca:7a: 24:eb:cd:20:65:5f:b0:a9:3d:2f:ac:51:de:11:8a: de:6e:35:ac:cd:cf:0e:bb:9b:e6:85:52:6c:a0:7a: a0:06:a6:bf:05:87:e5:f0:4c:5a:05:5b:eb:e1:ed: c1:c4:7d:45:d5:51:b9:6b:0f:1a:63:7c:49:17:e2: 55:92:ff:d8:37:d7:87:f5:d9:7e:63:c9:d5:b7:00: b6:1f:da:5c:3f:f3:bb:8c:73:c7:fe:fb:01:bc:8c: ce:ca:42:67:1e:e9:b9:5d:45:dc:cd:9e:d4:c0:d9: 88:00:9b:51:97:ac:e8:ba:72:a3:25:aa:62:b6:d1: 03:17:97:af:76:fa:30:40:98:df:f0:d5:ed:96:a8: 5b:b1:e4:ff:b9:4e:f9:66:5b:d6:e3:61:07:37:05: 87:d8:7b:3d:f5:c3:22:ef:f5:a6:06:89:21:96:2e: af:a6:89:05:3b:94:94:45:7b:a7:86:4e:ee:dc:b2: 3b:2a:12:47:e0:c8:85:72:38:c5:d1:0a:29:4c:15: 93:80:0c:9f:0d:31:2c:86:f2:95:c8:cd:fb:d0:86: 07:0d:b7:32:f3:22:db:49:89:b8:25:02:05:ba:b6: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:63:0A:4D:42:62:B5:E4:92:90:C2:06:36:5C:6B:7B:7C:A8:88 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jPdjCk1CYrXkkpDCBjZca3t8qIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.86.0/23 91.200.12.0/23 95.81.121.0-95.81.122.255 103.71.20.0/23 104.128.133.0/24 109.69.62.0/24 185.105.88.0/22 185.128.104.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:34:6d:57:d0:9a:bf:85:08:f8:71:fe:c4:85:80:c0:0e:20: d9:5b:7b:9e:bc:73:3d:e2:06:cf:dc:0a:4a:ed:de:1d:49:6c: 68:25:25:87:81:c2:45:5c:41:de:8c:c7:13:5f:a3:a8:56:d0: 66:2c:1d:0e:54:55:59:20:ba:1a:f6:4c:c9:b9:e5:5f:d6:81: 94:e0:bc:3c:16:15:11:c0:3c:df:cd:98:fa:e5:0a:ee:ec:6c: 1a:ed:d3:b5:9a:96:9b:7b:74:1f:72:73:16:79:9b:a9:ce:b6: 54:7f:e4:00:a5:a4:23:fa:90:e3:72:83:43:29:3a:44:8a:c9: 2c:48:a0:33:76:90:50:fc:bd:9a:a6:84:8b:9a:cd:df:34:b2: 53:6e:73:d9:58:c8:ad:a7:a0:72:ca:1d:d5:0d:86:9e:2d:6a: b1:f4:69:4d:bf:b3:d0:ac:87:b3:a5:fa:ad:c2:52:1d:f9:7c: 31:5e:95:5a:46:13:7c:10:d2:81:4b:a6:7a:b8:a2:3a:62:a4: 76:59:76:81:53:42:5b:77:48:db:ff:85:b0:b6:03:10:7a:de: 1e:73:81:32:4a:67:54:46:23:61:a6:42:29:2a:f4:4c:29:f1: f5:25:0f:65:ba:a2:b4:ca:64:74:b1:e1:ef:d4:49:00:d7:39: af:d3:05:65 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZu8eYU1f2qVTjybReubl7RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTE0MTIyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Y3NjMwYTRkNDI2MmI1ZTQ5MjkwYzIwNjM2NWM2YjdiN2NhODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2hqAUbTyperp0GGI9Tu9jmA9ZLL Bx+OfN8Xynok680gZV+wqT0vrFHeEYrebjWszc8Ou5vmhVJsoHqgBqa/BYfl8Exa BVvr4e3BxH1F1VG5aw8aY3xJF+JVkv/YN9eH9dl+Y8nVtwC2H9pcP/O7jHPH/vsB vIzOykJnHum5XUXczZ7UwNmIAJtRl6zounKjJapittEDF5evdvowQJjf8NXtlqhb seT/uU75ZlvW42EHNwWH2Hs99cMi7/WmBokhli6vpokFO5SURXunhk7u3LI7KhJH 4MiFcjjF0QopTBWTgAyfDTEshvKVyM370IYHDbcy8yLbSYm4JQIFurYkpwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFIz3YwpNQmK15JKQwgY2XGt7fKiIMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvalBkakNrMUNZclhra3BEQ0JqWmNhM3Q4cUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBWSxWAwQB W8gMMAwDBABfUXkDBABfUXoDBAFnRxQDBABogIUDBABtRT4DBAK5aVgDBAK5gGgw DQYJKoZIhvcNAQELBQADggEBAC40bVfQmr+FCPhx/sSFgMAOINlbe568cz3iBs/c Ckrt3h1JbGglJYeBwkVcQd6MxxNfo6hW0GYsHQ5UVVkguhr2TMm55V/WgZTgvDwW FRHAPN/NmPrlCu7sbBrt07Walpt7dB9ycxZ5m6nOtlR/5AClpCP6kONyg0MpOkSK ySxIoDN2kFD8vZqmhIuazd80slNuc9lYyK2noHLKHdUNhp4tarH0aU2/s9Csh7Ol +q3CUh35fDFelVpGE3wQ0oFLpnq4ojpipHZZdoFTQlt3SNv/hbC2AxB63h5zgTJK Z1RGI2GmQikq9Ewp8fUlD2W6orTKZHSx4e/USQDXOa/TBWU= -----END CERTIFICATE-----Generated at Wed Jan 21 08:07:00 2026 by rpki-client