This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa File: Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa (raw, json) Hash identifier: bS0A196A1VxcXT/9qLUtNV5FjCCPOQid0Srt7nWffI0= Subject key identifier: 26:8E:2C:2F:C9:57:2E:FC:96:74:F4:96:A1:29:19:C1:90:95:27:4E Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B7758B98B452ECF06A6E956BA5C984789 Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16039 IP address blocks: 31.177.48.0/21 maxlen: 21 31.177.48.0/24 maxlen: 24 31.177.49.0/24 maxlen: 24 31.177.50.0/24 maxlen: 24 31.177.51.0/24 maxlen: 24 31.177.52.0/24 maxlen: 24 31.177.53.0/24 maxlen: 24 31.177.54.0/24 maxlen: 24 31.177.55.0/24 maxlen: 24 82.199.32.0/20 maxlen: 24 82.199.32.0/24 maxlen: 24 82.199.37.0/24 maxlen: 24 82.199.38.0/24 maxlen: 24 82.199.39.0/24 maxlen: 24 82.199.40.0/24 maxlen: 24 82.199.41.0/24 maxlen: 24 82.199.43.0/24 maxlen: 24 82.199.44.0/24 maxlen: 24 82.199.45.0/24 maxlen: 24 82.199.47.0/24 maxlen: 24 82.199.48.0/20 maxlen: 24 82.199.48.0/24 maxlen: 24 82.199.49.0/24 maxlen: 24 82.199.50.0/24 maxlen: 24 82.199.51.0/24 maxlen: 24 82.199.52.0/24 maxlen: 24 82.199.53.0/24 maxlen: 24 82.199.54.0/24 maxlen: 24 82.199.55.0/24 maxlen: 24 82.199.56.0/24 maxlen: 24 82.199.57.0/24 maxlen: 24 82.199.58.0/24 maxlen: 24 82.199.59.0/24 maxlen: 24 82.199.60.0/24 maxlen: 24 82.199.61.0/24 maxlen: 24 82.199.63.0/24 maxlen: 24 193.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b9:8b:45:2e:cf:06:a6:e9:56:ba:5c:98:47:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268e2c2fc9572efc9674f496a12919c19095274e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:4b:b4:e1:0c:aa:00:f8:2e:99:ad:1c:0c: 86:c0:33:3d:25:fb:aa:3d:f9:b0:e7:32:46:b0:a2: 89:a4:94:90:c1:d3:73:fb:d4:45:a5:46:b7:e1:d2: 69:60:ca:2f:9f:56:76:2f:7a:9a:1f:f4:29:56:82: 65:65:b9:fd:ea:a4:ef:20:51:d4:24:51:75:84:5f: 82:48:ee:7e:9a:55:db:db:f9:4b:04:5c:23:eb:6f: a8:67:9a:e8:ab:91:4e:33:75:f9:6d:c6:63:6f:f2: e1:0a:67:a2:07:34:9f:88:20:85:11:36:bf:88:32: 8d:ce:07:83:4c:76:7d:ff:56:60:23:40:53:4a:e4: ba:99:1d:5c:c1:40:0c:55:03:c0:84:cc:85:f8:fe: 4b:7b:c3:1d:80:15:a8:db:10:2d:9a:ea:e3:b1:f4: 54:d5:91:e7:f0:c5:3b:25:23:b0:3a:af:9e:23:32: 4c:d4:2e:dd:af:27:a9:78:52:61:fa:d3:7b:33:f1: 5e:02:36:37:7c:b0:ea:bc:0d:c8:35:bb:24:d5:91: 9e:96:d8:a0:19:ed:65:9e:65:9c:9a:58:1b:05:61: c7:e7:73:d6:d7:a9:f7:6e:93:1f:36:b1:49:8a:b0: ac:c8:04:38:f8:09:b9:0a:bf:8e:da:79:e9:61:1f: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8E:2C:2F:C9:57:2E:FC:96:74:F4:96:A1:29:19:C1:90:95:27:4E X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.48.0/21 82.199.32.0/19 193.42.28.0/22 Signature Algorithm: sha256WithRSAEncryption 00:09:a0:83:2d:2e:2e:d5:df:8e:a2:aa:08:52:4f:59:ff:e4: 09:78:6a:42:d9:7b:53:9b:9d:21:27:49:95:47:b5:a3:20:21: ac:13:91:9e:91:6a:2f:a2:ee:3c:b7:50:99:2e:f6:76:61:58: 41:f9:1b:ce:1a:68:44:c6:5f:fc:83:a2:de:2e:f3:fb:84:14: a7:69:fc:5b:07:ba:8d:a4:ba:ab:1e:c1:32:26:75:9b:b9:b2: d7:08:5e:d7:de:9f:1c:15:1a:8f:e4:f2:4a:e4:44:48:dc:28: ba:23:25:6d:80:32:f6:ec:05:e8:45:68:2a:e1:22:ad:b1:c4: 0e:15:eb:ce:45:c2:be:83:ec:67:82:4b:10:2b:c3:98:29:9d: 26:71:ce:0a:37:e8:e3:f8:23:e3:3b:4b:de:c0:96:80:53:d9: 48:79:79:a2:be:10:75:fd:1b:fb:b1:95:bd:b6:23:3c:ba:5e: 7a:02:9f:03:29:2c:b5:8c:d5:18:54:93:2f:d8:1a:fa:f0:fa: 27:fa:6a:f7:c4:79:50:ca:63:28:3e:85:ed:e5:23:62:f1:74: 69:1c:83:a1:4c:76:b6:5f:85:34:7d:1f:45:2d:44:cc:53:fa: f3:bd:d3:3e:b1:30:ab:4c:6a:50:80:2d:93:8f:18:bd:1d:9a: 24:6f:47:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WLmLRS7PBqbpVrpcmEeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjhlMmMyZmM5NTcyZWZjOTY3NGY0OTZhMTI5MTljMTkwOTUyNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAZLtOEMqgD4LpmtHAyGwDM9Jfuq Pfmw5zJGsKKJpJSQwdNz+9RFpUa34dJpYMovn1Z2L3qaH/QpVoJlZbn96qTvIFHU JFF1hF+CSO5+mlXb2/lLBFwj62+oZ5roq5FOM3X5bcZjb/LhCmeiBzSfiCCFETa/ iDKNzgeDTHZ9/1ZgI0BTSuS6mR1cwUAMVQPAhMyF+P5Le8MdgBWo2xAtmurjsfRU 1ZHn8MU7JSOwOq+eIzJM1C7dryepeFJh+tN7M/FeAjY3fLDqvA3INbsk1ZGeltig Ge1lnmWcmlgbBWHH53PW16n3bpMfNrFJirCsyAQ4+Am5Cr+O2nnpYR/9kwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCaOLC/JVy78lnT0lqEpGcGQlSdOMB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvSm80c0w4bFhMdnlXZFBTV29Ta1p3WkNWSjA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH7EwAwQF UscgAwQCwSocMA0GCSqGSIb3DQEBCwUAA4IBAQAACaCDLS4u1d+OoqoIUk9Z/+QJ eGpC2XtTm50hJ0mVR7WjICGsE5GekWovou48t1CZLvZ2YVhB+RvOGmhExl/8g6Le LvP7hBSnafxbB7qNpLqrHsEyJnWbubLXCF7X3p8cFRqP5PJK5ERI3Ci6IyVtgDL2 7AXoRWgq4SKtscQOFevORcK+g+xngksQK8OYKZ0mcc4KN+jj+CPjO0vewJaAU9lI eXmivhB1/Rv7sZW9tiM8ul56Ap8DKSy1jNUYVJMv2Br68Pon+mr3xHlQymMoPoXt 5SNi8XRpHIOhTHa2X4U0fR9FLUTMU/rzvdM+sTCrTGpQgC2Tjxi9HZokb0cj -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:06 2026 by rpki-client