This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/jVDrmBIoje6iRSObfGXaCjLz0xo.roa File: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (raw, json) Hash identifier: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc= Subject key identifier: 8D:50:EB:98:12:28:8D:EE:A2:45:23:9B:7C:65:DA:0A:32:F3:D3:1A Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019C33523BAF35B379D8E5ED523684B7493E Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/jVDrmBIoje6iRSObfGXaCjLz0xo.roa Signing time: Fri 06 Feb 2026 14:19:13 +0000 ROA not before: Fri 06 Feb 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15580 IP address blocks: 91.206.86.0/24 maxlen: 24 185.55.192.0/24 maxlen: 24 193.8.188.0/24 maxlen: 24 193.58.216.0/24 maxlen: 24 193.58.222.0/23 maxlen: 23 193.58.222.0/24 maxlen: 24 193.58.223.0/24 maxlen: 24 193.194.6.0/23 maxlen: 23 193.194.10.0/23 maxlen: 23 193.194.10.0/24 maxlen: 24 193.194.11.0/24 maxlen: 24 193.194.12.0/22 maxlen: 22 194.127.0.0/18 maxlen: 18 194.127.0.0/24 maxlen: 24 194.127.1.0/24 maxlen: 24 194.127.2.0/24 maxlen: 24 194.127.3.0/24 maxlen: 24 194.127.4.0/24 maxlen: 24 194.127.5.0/24 maxlen: 24 194.127.9.0/24 maxlen: 24 194.127.9.64/27 maxlen: 27 194.127.9.224/27 maxlen: 27 194.127.10.0/24 maxlen: 24 194.127.11.0/24 maxlen: 24 194.127.12.0/24 maxlen: 24 194.127.13.0/24 maxlen: 24 194.127.14.0/24 maxlen: 24 194.127.15.0/24 maxlen: 24 194.127.16.0/24 maxlen: 24 194.127.17.0/24 maxlen: 24 194.127.19.0/24 maxlen: 24 194.127.20.0/24 maxlen: 24 194.127.21.0/24 maxlen: 24 194.127.22.0/24 maxlen: 24 194.127.23.0/24 maxlen: 24 194.127.24.0/23 maxlen: 23 194.127.24.0/24 maxlen: 24 194.127.25.0/24 maxlen: 24 194.127.26.0/23 maxlen: 23 194.127.26.0/24 maxlen: 24 194.127.27.0/24 maxlen: 24 194.127.28.0/24 maxlen: 24 194.127.29.0/24 maxlen: 24 194.127.30.0/24 maxlen: 24 194.127.31.0/24 maxlen: 24 194.127.32.0/22 maxlen: 24 194.127.32.0/24 maxlen: 24 194.127.33.0/24 maxlen: 24 194.127.34.0/24 maxlen: 24 194.127.35.0/24 maxlen: 24 194.127.64.0/24 maxlen: 24 194.127.65.0/24 maxlen: 24 194.127.66.0/24 maxlen: 24 194.127.67.0/24 maxlen: 24 194.127.72.0/24 maxlen: 24 194.127.73.0/24 maxlen: 24 194.127.74.0/24 maxlen: 24 194.127.75.0/24 maxlen: 24 194.127.76.0/24 maxlen: 24 194.127.81.0/24 maxlen: 24 194.127.88.0/24 maxlen: 24 194.127.89.0/24 maxlen: 24 2a01:6f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:52:3b:af:35:b3:79:d8:e5:ed:52:36:84:b7:49:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Feb 6 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d50eb9812288deea245239b7c65da0a32f3d31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:29:a4:4e:03:43:1f:13:3a:4b:29:dc:d4: 01:9a:4b:63:87:f5:f2:c6:77:2c:fb:d9:20:a4:e7: a5:54:42:c1:ce:23:30:69:20:37:14:7a:f1:86:d5: 16:cd:22:eb:3d:6e:8a:1e:eb:bf:14:32:34:ab:ee: 99:f0:32:c1:8b:97:4d:ce:56:a8:c3:9c:85:6d:8c: 15:a2:43:fb:34:0a:ed:01:43:0e:ae:37:12:8c:b1: be:f3:e1:77:16:12:5a:a2:39:bb:b1:cf:13:28:bf: 68:c5:d8:45:01:8d:eb:95:77:e9:bf:bc:1c:05:df: 01:c9:cf:82:50:97:fe:d3:28:38:43:58:a9:87:ff: d6:2c:7b:52:07:0e:74:06:d4:95:f1:44:2a:56:aa: e1:61:19:e4:68:58:82:9c:a5:e4:f9:6e:d1:c1:53: f1:86:26:2a:9a:04:45:2b:4d:85:df:be:c9:eb:f1: 02:d2:5a:b8:5f:1b:55:7a:86:a9:95:12:4d:00:41: 9a:8c:fd:c6:60:de:c2:41:6d:21:84:19:f8:59:08: 65:78:64:a5:4b:a1:0f:cc:e4:b4:a5:c4:69:e0:da: 81:5a:49:33:02:30:3d:68:49:00:ab:22:3d:1f:0f: 10:e9:63:fd:94:57:bf:ec:56:e1:d4:6f:f4:62:98: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:EB:98:12:28:8D:EE:A2:45:23:9B:7C:65:DA:0A:32:F3:D3:1A X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/jVDrmBIoje6iRSObfGXaCjLz0xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.86.0/24 185.55.192.0/24 193.8.188.0/24 193.58.216.0/24 193.58.222.0/23 193.194.6.0/23 193.194.10.0-193.194.15.255 194.127.0.0-194.127.67.255 194.127.72.0-194.127.76.255 194.127.81.0/24 194.127.88.0/23 IPv6: 2a01:6f8::/32 Signature Algorithm: sha256WithRSAEncryption bb:0a:66:94:22:b5:93:64:ff:b0:54:61:be:9c:e3:9f:9f:95: 52:99:68:89:9d:3a:02:7f:ec:7e:ad:35:93:d0:85:1c:d0:03: ef:b5:02:30:d1:f0:d1:5d:de:72:03:e8:7f:8c:86:25:cb:73: e6:49:f6:de:1d:44:d7:61:b9:b1:ff:d0:b8:30:f0:a9:56:9e: ad:53:b4:dd:5f:49:c8:d7:d2:38:ea:b5:e9:b6:66:c5:b1:88: f0:6c:9a:e9:f1:d3:00:fb:fa:cd:8b:70:f3:42:4f:e9:12:ec: 49:7e:ac:90:ab:c9:2d:40:ed:bb:fe:3d:f3:54:bf:99:fb:78: c2:ea:74:22:c9:96:6d:11:5f:17:d3:89:9b:8b:cb:8a:e2:d1: ce:c4:93:18:c2:3e:7e:6a:17:ef:ac:0a:b2:a5:05:4a:f7:25: 10:5a:15:08:13:56:45:c3:8a:39:56:33:1a:55:a8:96:f3:8d: a7:38:a0:85:5f:26:8d:9a:96:97:45:c9:d4:c3:24:a0:9a:f8: 5a:62:8c:cc:b9:3d:5a:3d:ca:24:81:52:cf:12:d3:fe:12:d5: e3:e1:f7:33:0b:73:f0:7b:9a:ea:22:c3:2d:a7:24:e0:e0:a0: c4:4c:70:94:83:95:ac:d8:56:a4:36:63:90:a0:6b:57:99:53: d1:fc:8d:de -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZwzUjuvNbN52OXtUjaEt0k+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjYwMjA2MTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDUwZWI5ODEyMjg4ZGVlYTI0NTIzOWI3YzY1ZGEwYTMyZjNkMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdAppE4DQx8TOksp3NQBmktjh/Xy xncs+9kgpOelVELBziMwaSA3FHrxhtUWzSLrPW6KHuu/FDI0q+6Z8DLBi5dNzlao w5yFbYwVokP7NArtAUMOrjcSjLG+8+F3FhJaojm7sc8TKL9oxdhFAY3rlXfpv7wc Bd8Byc+CUJf+0yg4Q1iph//WLHtSBw50BtSV8UQqVqrhYRnkaFiCnKXk+W7RwVPx hiYqmgRFK02F377J6/EC0lq4XxtVeoaplRJNAEGajP3GYN7CQW0hhBn4WQhleGSl S6EPzOS0pcRp4NqBWkkzAjA9aEkAqyI9Hw8Q6WP9lFe/7Fbh1G/0YpifHQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFI1Q65gSKI3uokUjm3xl2goy89MaMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvalZEcm1CSW9qZTZpUlNPYmZHWGFDakx6MHhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAFvOVgME ALk3wAMEAMEIvAMEAME62AMEAcE63gMEAcHCBjAMAwQBwcIKAwQEwcIAMAsDAwDC fwMEAsJ/QDAMAwQDwn9IAwQAwn9MAwQAwn9RAwQBwn9YMA0EAgACMAcDBQAqAQb4 MA0GCSqGSIb3DQEBCwUAA4IBAQC7CmaUIrWTZP+wVGG+nOOfn5VSmWiJnToCf+x+ rTWT0IUc0APvtQIw0fDRXd5yA+h/jIYly3PmSfbeHUTXYbmx/9C4MPCpVp6tU7Td X0nI19I46rXptmbFsYjwbJrp8dMA+/rNi3DzQk/pEuxJfqyQq8ktQO27/j3zVL+Z +3jC6nQiyZZtEV8X04mbi8uK4tHOxJMYwj5+ahfvrAqypQVK9yUQWhUIE1ZFw4o5 VjMaVaiW842nOKCFXyaNmpaXRcnUwySgmvhaYozMuT1aPcokgVLPEtP+EtXj4fcz C3Pwe5rqIsMtpyTg4KDETHCUg5Ws2FakNmOQoGtXmVPR/I3e -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:12 2026 by rpki-client