This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jAAzF2mbaNNdWTGjqFfM4DOJ1BA.roa File: jAAzF2mbaNNdWTGjqFfM4DOJ1BA.roa (raw, json) Hash identifier: TwcmgIWdEBo06j/eUftgn588EBy8YYfmyOS1Opt0nOE= Subject key identifier: 8C:00:33:17:69:9B:68:D3:5D:59:31:A3:A8:57:CC:E0:33:89:D4:10 Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Certificate serial: 019B329785B91C01925A2830E3E0758BA3E4 Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jAAzF2mbaNNdWTGjqFfM4DOJ1BA.roa Signing time: Thu 18 Dec 2025 17:52:29 +0000 ROA not before: Thu 18 Dec 2025 17:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49601 IP address blocks: 91.229.56.0/24 maxlen: 32 91.229.182.0/24 maxlen: 32 91.229.210.0/24 maxlen: 32 185.189.124.0/22 maxlen: 32 185.189.124.0/24 maxlen: 32 185.189.125.0/24 maxlen: 32 185.189.126.0/24 maxlen: 32 185.189.127.0/24 maxlen: 32 185.226.60.0/22 maxlen: 32 185.226.60.0/24 maxlen: 32 185.226.61.0/24 maxlen: 32 185.226.62.0/24 maxlen: 32 185.226.63.0/24 maxlen: 32 185.252.96.0/22 maxlen: 32 185.252.96.0/24 maxlen: 32 185.252.97.0/24 maxlen: 32 185.252.98.0/24 maxlen: 32 185.252.99.0/24 maxlen: 32 2a0b:e680::/29 maxlen: 128 2a0c:3e00::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:97:85:b9:1c:01:92:5a:28:30:e3:e0:75:8b:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Validity Not Before: Dec 18 17:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c003317699b68d35d5931a3a857cce03389d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:8d:3e:24:67:3b:77:d2:42:68:91:94:73: bd:11:ef:aa:d3:1e:e2:99:47:4d:84:64:68:7b:29: c5:c0:d2:d4:23:86:b8:53:e5:83:6e:c8:01:b9:07: 66:37:45:78:b0:7c:cf:ef:cb:9d:2f:72:00:59:e5: 6e:a7:66:fe:ce:bd:ab:1f:cc:4b:20:2d:67:e2:ed: 08:b9:8b:07:55:22:b5:62:95:33:a2:01:fb:81:02: 08:19:4f:9c:f4:18:d3:62:8a:de:e4:96:13:e3:05: a9:41:03:96:c1:7a:ca:48:dc:13:1b:9f:ab:66:9e: 81:f3:5b:54:f7:3d:f7:07:b4:c3:5f:bc:c6:24:94: f4:a9:98:51:3d:5f:00:77:a5:8d:37:00:a4:27:9a: 9d:ef:a3:c6:fd:ec:74:c1:78:76:5c:dc:20:b1:a1: 2a:95:92:67:c6:24:8d:ed:57:e7:56:40:46:0e:f3: 4e:75:07:ef:81:13:ed:69:18:98:c5:46:21:18:d0: cf:1f:16:37:c1:13:dc:fe:35:4a:f9:df:34:b3:07: 15:c9:34:bd:cb:ef:30:3a:43:35:39:5c:8b:70:e1: a8:1a:20:d4:f9:8f:d1:2a:6e:29:b9:d5:5f:16:d0: a8:8d:26:50:93:13:ba:4a:0e:f4:3a:15:26:d0:2e: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:00:33:17:69:9B:68:D3:5D:59:31:A3:A8:57:CC:E0:33:89:D4:10 X509v3 Authority Key Identifier: keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/jAAzF2mbaNNdWTGjqFfM4DOJ1BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.56.0/24 91.229.182.0/24 91.229.210.0/24 185.189.124.0/22 185.226.60.0/22 185.252.96.0/22 IPv6: 2a0b:e680::/29 2a0c:3e00::/29 Signature Algorithm: sha256WithRSAEncryption ca:da:de:76:36:31:36:c5:7a:9a:fd:de:02:f9:1a:3e:b7:2e: 60:43:26:14:68:7d:17:30:93:93:30:d5:93:ea:8d:d5:9c:0f: ed:f5:50:af:68:ab:26:b4:32:6b:15:92:f7:10:3a:34:2f:b9: cb:b3:c7:a2:f3:58:b7:15:09:c9:44:07:ad:08:ce:d0:8d:31: cd:02:5f:30:4d:3e:a3:7b:94:f6:6f:23:24:6f:0c:3b:c9:7e: e9:ae:93:28:f3:6a:c8:63:9a:91:82:44:88:36:7b:35:85:d3: 20:9b:f3:5b:5f:85:e9:f0:fc:17:a0:04:7f:38:9b:87:da:78: 65:03:32:d8:4e:62:23:1d:6a:74:d5:75:91:70:e1:cf:a0:db: 9c:58:e0:35:e5:b7:16:45:6b:a2:de:69:ac:1f:fe:db:9d:50: 9c:04:21:5f:2a:fb:7b:0c:5a:05:b6:a8:ec:19:af:27:fb:e9: 4c:cb:27:08:62:01:95:1b:95:61:1d:2e:56:82:ba:c1:f8:87: d3:67:ae:ba:52:0c:b4:e8:6a:ff:a7:41:a2:6b:2e:73:eb:ed: a3:8f:b9:42:e5:88:3a:15:11:c8:80:11:c9:05:91:4d:24:ac: 03:07:34:a6:9b:b9:99:f4:54:bd:51:e2:d1:18:8b:57:73:f1: 20:a0:aa:c4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZsyl4W5HAGSWigw4+B1i6PkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw Y2ZkYzUwHhcNMjUxMjE4MTc1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzAwMzMxNzY5OWI2OGQzNWQ1OTMxYTNhODU3Y2NlMDMzODlkNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv2NPiRnO3fSQmiRlHO9Ee+q0x7i mUdNhGRoeynFwNLUI4a4U+WDbsgBuQdmN0V4sHzP78udL3IAWeVup2b+zr2rH8xL IC1n4u0IuYsHVSK1YpUzogH7gQIIGU+c9BjTYore5JYT4wWpQQOWwXrKSNwTG5+r Zp6B81tU9z33B7TDX7zGJJT0qZhRPV8Ad6WNNwCkJ5qd76PG/ex0wXh2XNwgsaEq lZJnxiSN7VfnVkBGDvNOdQfvgRPtaRiYxUYhGNDPHxY3wRPc/jVK+d80swcVyTS9 y+8wOkM1OVyLcOGoGiDU+Y/RKm4pudVfFtCojSZQkxO6Sg70OhUm0C7gdQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFIwAMxdpm2jTXVkxo6hXzOAzidQQMB8GA1UdIwQY MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt OGQ0YmZkMGFhY2U4LzEvakFBekYybWJhTk5kV1RHanFGZk00RE9KMUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4 LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQAW+U4AwQA W+W2AwQAW+XSAwQCub18AwQCueI8AwQCufxgMBQEAgACMA4DBQMqC+aAAwUDKgw+ ADANBgkqhkiG9w0BAQsFAAOCAQEAytredjYxNsV6mv3eAvkaPrcuYEMmFGh9FzCT kzDVk+qN1ZwP7fVQr2irJrQyaxWS9xA6NC+5y7PHovNYtxUJyUQHrQjO0I0xzQJf ME0+o3uU9m8jJG8MO8l+6a6TKPNqyGOakYJEiDZ7NYXTIJvzW1+F6fD8F6AEfzib h9p4ZQMy2E5iIx1qdNV1kXDhz6DbnFjgNeW3FkVrot5prB/+251QnAQhXyr7ewxa Bbao7BmvJ/vpTMsnCGIBlRuVYR0uVoK6wfiH02euulIMtOhq/6dBomsuc+vto4+5 QuWIOhURyIARyQWRTSSsAwc0ppu5mfRUvVHi0RiLV3PxIKCqxA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:49:55 2025 by rpki-client