This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JdO_rJ2_eFAgY-6PcLnBy9jgAcQ.roa File: JdO_rJ2_eFAgY-6PcLnBy9jgAcQ.roa (raw, json) Hash identifier: x8BVPxAcMhJ7OTqYe/8/q2ToYzB/FggAhUa5z7SsToc= Subject key identifier: 25:D3:BF:AC:9D:BF:78:50:20:63:EE:8F:70:B9:C1:CB:D8:E0:01:C4 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7666D61244858DA98AA2E17D2D941 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JdO_rJ2_eFAgY-6PcLnBy9jgAcQ.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25515 IP address blocks: 77.51.0.0/16 maxlen: 16 77.51.176.0/21 maxlen: 21 77.51.184.0/21 maxlen: 21 77.51.192.0/21 maxlen: 21 77.51.200.0/21 maxlen: 21 77.51.208.0/21 maxlen: 21 77.51.216.0/21 maxlen: 21 77.51.224.0/21 maxlen: 21 85.94.0.0/19 maxlen: 19 89.109.192.0/18 maxlen: 18 90.154.120.0/21 maxlen: 21 91.188.223.0/24 maxlen: 24 95.72.0.0/15 maxlen: 15 146.19.98.0/24 maxlen: 24 185.141.236.0/23 maxlen: 23 185.202.109.0/24 maxlen: 24 193.3.188.0/24 maxlen: 24 213.140.224.0/19 maxlen: 19 217.107.96.0/21 maxlen: 21 217.107.104.0/23 maxlen: 23 2a00:56c0:40d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:66:6d:61:24:48:58:da:98:aa:2e:17:d2:d9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25d3bfac9dbf78502063ee8f70b9c1cbd8e001c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:e1:41:90:06:c0:49:b9:da:90:a6:bf:a7: eb:83:67:96:88:ce:f9:31:87:dc:bb:e5:7d:38:7f: 18:1d:59:64:92:97:ac:16:94:58:a5:b3:d2:b1:19: f3:83:10:1c:0c:49:30:fd:9b:c5:45:ef:1c:6e:31: 85:30:d3:63:34:6b:54:b0:b4:98:71:65:4c:0d:23: da:b7:02:69:21:5f:77:f6:d5:e7:0c:95:e1:59:27: 56:aa:c8:a9:64:43:f9:e9:0c:33:34:61:c1:a8:87: d1:f9:ab:f1:bf:c9:dd:6b:d3:c5:f6:c8:7a:74:dc: d3:b0:f4:0b:79:80:de:de:53:d1:27:17:44:93:dd: 28:c7:0b:99:03:3c:70:44:49:45:eb:10:02:c7:94: a2:30:9e:39:94:47:a3:bd:3a:72:99:07:24:7d:77: be:9d:21:40:2c:4f:61:e0:7d:09:bf:30:10:26:6d: ba:2d:58:30:5e:9c:b3:c1:19:e2:0b:e8:b4:6b:a5: fc:33:32:13:00:40:82:65:61:47:14:0b:6e:d3:7f: fd:42:88:58:a7:69:46:0f:4f:7e:7e:4e:3a:f0:8f: 1f:07:d4:2d:08:35:c2:5b:66:29:4f:30:ab:8f:99: 4d:13:f7:da:44:6c:44:69:03:f6:f2:d6:7f:49:07: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:BF:AC:9D:BF:78:50:20:63:EE:8F:70:B9:C1:CB:D8:E0:01:C4 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JdO_rJ2_eFAgY-6PcLnBy9jgAcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.51.0.0/16 85.94.0.0/19 89.109.192.0/18 90.154.120.0/21 91.188.223.0/24 95.72.0.0/15 146.19.98.0/24 185.141.236.0/23 185.202.109.0/24 193.3.188.0/24 213.140.224.0/19 217.107.96.0-217.107.105.255 IPv6: 2a00:56c0:40d::/48 Signature Algorithm: sha256WithRSAEncryption 5e:97:ca:50:3b:2a:97:83:bf:d7:a7:e7:fe:5b:21:73:1b:4b: 7e:8d:2e:a3:97:a5:8e:55:e8:56:ec:39:e9:9d:a2:e9:b3:96: c4:5c:ee:05:5b:0b:ef:2b:b8:df:44:8d:05:1a:df:90:04:7a: 5c:14:b0:0c:dd:52:a3:89:06:6f:39:eb:6c:64:96:66:e5:06: c3:2e:80:d1:fa:ae:40:cf:54:4f:90:65:96:bf:bc:ce:08:c2: 2c:55:2d:d6:9b:58:c4:6a:85:6e:cf:35:41:0a:04:3f:65:01: b9:45:69:92:99:a9:13:52:36:7d:c5:0f:cd:38:1c:30:29:75: 63:a0:2a:5c:7b:48:28:c0:d2:7f:94:d6:0a:e8:71:77:57:63: f2:4d:fa:7d:93:28:3b:be:68:37:f3:13:d9:7e:ad:6d:e7:ca: 8a:a3:b2:99:84:cb:f8:42:5b:58:1b:7a:02:ae:75:f3:ab:ea: b0:3c:57:91:0f:be:ce:98:15:1c:70:85:02:05:69:1e:eb:6e: 9d:3f:19:c7:c6:30:1e:e4:b4:7f:92:29:8c:48:b3:f0:3c:15: f5:f8:81:c9:f2:29:cf:07:10:04:55:91:c1:18:83:ac:f1:bf: cb:c9:bf:02:a9:23:81:a5:d6:93:db:30:d7:a1:df:3a:99:20: d9:e5:2d:66 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt+p2ZtYSRIWNqYqi4X0tlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWQzYmZhYzlkYmY3ODUwMjA2M2VlOGY3MGI5YzFjYmQ4ZTAwMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LPhQZAGwEm52pCmv6frg2eWiM75 MYfcu+V9OH8YHVlkkpesFpRYpbPSsRnzgxAcDEkw/ZvFRe8cbjGFMNNjNGtUsLSY cWVMDSPatwJpIV939tXnDJXhWSdWqsipZEP56QwzNGHBqIfR+avxv8nda9PF9sh6 dNzTsPQLeYDe3lPRJxdEk90oxwuZAzxwRElF6xACx5SiMJ45lEejvTpymQckfXe+ nSFALE9h4H0JvzAQJm26LVgwXpyzwRniC+i0a6X8MzITAECCZWFHFAtu03/9QohY p2lGD09+fk468I8fB9QtCDXCW2YpTzCrj5lNE/faRGxEaQP28tZ/SQdEewIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFCXTv6ydv3hQIGPuj3C5wcvY4AHEMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSmRPX3JKMl9lRkFnWS02UGNMbkJ5OWpnQWNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBUBAIAATBOAwMATTMDBAVV XgADBAZZbcADBANamngDBABbvN8DAwFfSAMEAJITYgMEAbmN7AMEALnKbQMEAMED vAMEBdWM4DAMAwQF2WtgAwQB2WtoMA8EAgACMAkDBwAqAFbABA0wDQYJKoZIhvcN AQELBQADggEBAF6XylA7KpeDv9en5/5bIXMbS36NLqOXpY5V6FbsOemdoumzlsRc 7gVbC+8ruN9EjQUa35AEelwUsAzdUqOJBm8562xklmblBsMugNH6rkDPVE+QZZa/ vM4IwixVLdabWMRqhW7PNUEKBD9lAblFaZKZqRNSNn3FD804HDApdWOgKlx7SCjA 0n+U1grocXdXY/JN+n2TKDu+aDfzE9l+rW3nyoqjspmEy/hCW1gbegKudfOr6rA8 V5EPvs6YFRxwhQIFaR7rbp0/GcfGMB7ktH+SKYxIs/A8FfX4gcnyKc8HEARVkcEY g6zxv8vJvwKpI4Gl1pPbMNeh3zqZINnlLWY= -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client