This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/jZLLv74nES8X7HrAvzMmRiiIMQ4.roa File: jZLLv74nES8X7HrAvzMmRiiIMQ4.roa (raw, json) Hash identifier: ToeBoYoZimyYyA3TOZCcbSyTu3TK4xRAHnCuvXcY/eo= Subject key identifier: 8D:92:CB:BF:BE:27:11:2F:17:EC:7A:C0:BF:33:26:46:28:88:31:0E Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B27FED2080171D78A0B499D3C64C29BC9 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/jZLLv74nES8X7HrAvzMmRiiIMQ4.roa Signing time: Tue 16 Dec 2025 16:29:29 +0000 ROA not before: Tue 16 Dec 2025 16:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34209 IP address blocks: 46.28.240.0/21 maxlen: 21 46.28.241.0/24 maxlen: 24 46.28.243.0/24 maxlen: 24 46.28.244.0/24 maxlen: 24 46.28.245.0/24 maxlen: 24 46.28.246.0/24 maxlen: 24 193.22.169.0/24 maxlen: 24 193.41.210.0/23 maxlen: 23 195.80.237.0/24 maxlen: 24 2a02:2978::/36 maxlen: 36 2a02:2978:a000::/36 maxlen: 36 2a02:2978:b000::/36 maxlen: 36 2a02:2978:c000::/36 maxlen: 36 2a02:2978:e000::/36 maxlen: 36 2a02:2978:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:fe:d2:08:01:71:d7:8a:0b:49:9d:3c:64:c2:9b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Dec 16 16:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d92cbbfbe27112f17ec7ac0bf3326462888310e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:48:5a:38:8d:21:54:a1:ab:a3:1c:b8:89: 21:61:31:a0:48:95:c6:17:fb:07:32:26:61:e1:9d: 5c:d6:79:a7:a6:53:f0:67:2c:2d:f5:e3:b1:ea:b1: 05:8a:ee:89:7e:0d:b4:ba:54:9c:9f:30:e9:b9:96: ef:8f:3c:4d:ef:07:bb:33:11:62:f2:c7:d3:59:09: 03:88:40:59:cd:0b:d6:a3:52:6b:ad:23:81:64:93: 7b:32:dd:9f:85:e1:a5:ff:dd:ad:e1:58:9a:ac:4f: 5b:90:e5:5b:1c:ee:ce:6a:51:32:f2:5a:c1:88:25: b3:7d:f2:08:9a:1b:28:a8:fd:39:3c:08:f5:85:c9: a1:08:2c:0a:9a:d0:98:b2:70:9b:54:14:53:ae:75: 6d:62:93:2c:b9:b0:06:1c:16:42:01:76:a8:cf:2f: 8b:bb:24:77:19:63:21:6b:78:4d:03:c0:81:fb:ec: c7:c9:5e:39:2d:82:d0:e3:84:70:fd:89:1d:78:ce: bb:66:87:b8:b8:79:db:44:d0:62:01:75:55:6c:43: 03:60:dc:3e:49:2a:c2:5c:be:46:b6:97:e2:79:85: 7d:3b:97:23:c7:f8:b9:e3:cd:29:f2:2f:49:1e:92: 7e:ba:a5:14:ff:51:79:8b:ef:ab:37:55:30:cd:53: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:92:CB:BF:BE:27:11:2F:17:EC:7A:C0:BF:33:26:46:28:88:31:0E X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/jZLLv74nES8X7HrAvzMmRiiIMQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.240.0/21 193.22.169.0/24 193.41.210.0/23 195.80.237.0/24 IPv6: 2a02:2978::/36 2a02:2978:a000::-2a02:2978:cfff:ffff:ffff:ffff:ffff:ffff 2a02:2978:e000::/35 Signature Algorithm: sha256WithRSAEncryption 3f:01:78:29:69:6d:c0:61:52:d0:3b:d2:40:78:2c:b5:04:ad: dd:11:75:6c:4a:76:33:36:17:24:2c:fe:f0:e4:36:1a:a2:15: 5c:54:35:01:55:82:ce:88:79:74:f2:6a:e8:4d:ab:ae:ac:f9: 0b:38:03:a2:f2:f3:48:89:c3:1b:6a:d7:4f:26:3c:b1:91:93: c3:b1:84:12:6d:a4:60:c7:c1:14:df:84:b0:14:d3:67:e8:80: cd:65:5a:1f:1c:34:83:8f:2c:88:2f:79:f4:bf:25:bb:96:d0: 96:72:98:d5:d6:a0:2f:df:e6:13:45:ef:14:0b:e0:15:e7:e8: 5a:1b:33:c4:cb:c2:9c:cb:f1:c9:5d:c6:9c:f5:27:88:1c:f3: f2:87:25:1a:4d:ee:ee:51:b3:ab:a3:5b:26:b6:5f:3c:2e:7c: 37:d9:4f:b9:a7:f9:8e:96:c8:7c:b1:d4:3e:b8:f2:b3:9a:43: a9:b7:c6:d7:72:a3:0b:0c:5b:d9:8f:d0:8f:90:45:e0:3e:d0: c1:20:7a:05:ed:7a:17:df:a2:ca:f2:8a:5a:61:1f:0b:1c:c9: 8e:cd:ba:74:04:bb:df:5d:e6:7a:ae:76:74:7e:d1:d7:69:4d: 27:17:21:9f:84:16:5e:23:99:33:56:1f:c1:45:60:17:36:5c: 1b:1b:96:ad -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZsn/tIIAXHXigtJnTxkwpvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjUxMjE2MTYyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDkyY2JiZmJlMjcxMTJmMTdlYzdhYzBiZjMzMjY0NjI4ODgzMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdIWjiNIVShq6McuIkhYTGgSJXG F/sHMiZh4Z1c1nmnplPwZywt9eOx6rEFiu6Jfg20ulScnzDpuZbvjzxN7we7MxFi 8sfTWQkDiEBZzQvWo1JrrSOBZJN7Mt2fheGl/92t4ViarE9bkOVbHO7OalEy8lrB iCWzffIImhsoqP05PAj1hcmhCCwKmtCYsnCbVBRTrnVtYpMsubAGHBZCAXaozy+L uyR3GWMha3hNA8CB++zHyV45LYLQ44Rw/YkdeM67Zoe4uHnbRNBiAXVVbEMDYNw+ SSrCXL5GtpfieYV9O5cjx/i5480p8i9JHpJ+uqUU/1F5i++rN1UwzVOkpQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFI2Sy7++JxEvF+x6wL8zJkYoiDEOMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvalpMTHY3NG5FUzhYN0hyQXZ6TW1SaWlJTVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAeBAIAATAYAwQDLhzwAwQA wRapAwQBwSnSAwQAw1DtMCgEAgACMCIDBgQqAil4ADAQAwYFKgIpeKADBgQqAil4 wAMGBSoCKXjgMA0GCSqGSIb3DQEBCwUAA4IBAQA/AXgpaW3AYVLQO9JAeCy1BK3d EXVsSnYzNhckLP7w5DYaohVcVDUBVYLOiHl08mroTauurPkLOAOi8vNIicMbatdP JjyxkZPDsYQSbaRgx8EU34SwFNNn6IDNZVofHDSDjyyIL3n0vyW7ltCWcpjV1qAv 3+YTRe8UC+AV5+haGzPEy8Kcy/HJXcac9SeIHPPyhyUaTe7uUbOro1smtl88Lnw3 2U+5p/mOlsh8sdQ+uPKzmkOpt8bXcqMLDFvZj9CPkEXgPtDBIHoF7XoX36LK8opa YR8LHMmOzbp0BLvfXeZ6rnZ0ftHXaU0nFyGfhBZeI5kzVh/BRWAXNlwbG5at -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:33 2025 by rpki-client