This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/JaO5OnQIDf6BT_KO6X-q0gWKfE4.roa File: JaO5OnQIDf6BT_KO6X-q0gWKfE4.roa (raw, json) Hash identifier: jpoWqZ7mYAn8aMylxVphKF5yzRTD2y3/s+UF9XY2XwM= Subject key identifier: 25:A3:B9:3A:74:08:0D:FE:81:4F:F2:8E:E9:7F:AA:D2:05:8A:7C:4E Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Certificate serial: 019B7F8334555B7DDEE34DED7F428993D045 Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/JaO5OnQIDf6BT_KO6X-q0gWKfE4.roa Signing time: Fri 02 Jan 2026 16:21:03 +0000 ROA not before: Fri 02 Jan 2026 16:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30764 IP address blocks: 46.47.128.0/18 maxlen: 18 62.129.32.0/19 maxlen: 19 78.157.128.0/19 maxlen: 19 82.209.0.0/18 maxlen: 18 85.135.0.0/17 maxlen: 17 89.29.0.0/17 maxlen: 17 91.106.240.0/20 maxlen: 20 94.242.64.0/18 maxlen: 18 128.0.176.0/20 maxlen: 20 164.215.112.0/20 maxlen: 20 185.5.68.0/22 maxlen: 22 193.165.0.0/16 maxlen: 16 193.165.0.0/24 maxlen: 24 193.165.57.0/24 maxlen: 24 193.165.58.0/23 maxlen: 23 193.165.61.0/24 maxlen: 24 193.165.96.0/23 maxlen: 23 193.165.236.0/23 maxlen: 23 212.109.176.0/20 maxlen: 20 213.216.32.0/19 maxlen: 19 2a00:ca8::/32 maxlen: 32 2a02:c38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:34:55:5b:7d:de:e3:4d:ed:7f:42:89:93:d0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Validity Not Before: Jan 2 16:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a3b93a74080dfe814ff28ee97faad2058a7c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:8f:96:cb:3e:a5:ad:68:cb:ec:58:05:8e: 73:65:d5:1c:0b:9c:a2:98:10:87:2a:16:33:67:f7: d8:b2:04:c5:d6:f6:a3:d0:b2:5a:bb:7b:58:14:08: a0:83:ce:80:42:44:09:3c:a3:7b:17:54:0a:26:6a: 9b:89:2f:08:36:00:fc:56:62:62:b2:d8:48:09:27: 3d:94:92:31:ed:25:ea:38:2c:0a:71:0c:ba:92:32: b8:32:86:78:17:3c:2f:f1:35:e4:ce:cc:e2:d6:79: d1:8f:cf:74:59:97:55:01:ec:2b:ac:20:a9:53:c0: 31:0d:39:5c:a1:67:69:62:b4:9b:36:0b:cf:a4:c4: 6e:b0:76:ab:58:23:e4:dd:26:32:bc:ed:0b:09:12: 93:c0:85:08:eb:d3:50:92:51:d1:05:ef:d2:df:75: 31:ae:ad:63:4a:83:ef:33:93:a9:51:cd:cf:f2:ba: 38:7e:6e:c9:56:e3:f3:c9:11:ef:cd:63:91:ba:33: 6c:1a:9c:36:98:d4:55:e7:36:5b:ea:30:67:9c:ca: 4d:ee:d2:58:b2:2e:5e:d8:e4:3a:af:61:a6:f1:94: ef:ca:80:4d:44:2d:4a:78:44:87:65:fd:f9:f0:06: 82:c6:66:42:e1:e6:39:7a:de:4d:6d:00:56:79:3d: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:B9:3A:74:08:0D:FE:81:4F:F2:8E:E9:7F:AA:D2:05:8A:7C:4E X509v3 Authority Key Identifier: keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/JaO5OnQIDf6BT_KO6X-q0gWKfE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.47.128.0/18 62.129.32.0/19 78.157.128.0/19 82.209.0.0/18 85.135.0.0/17 89.29.0.0/17 91.106.240.0/20 94.242.64.0/18 128.0.176.0/20 164.215.112.0/20 185.5.68.0/22 193.165.0.0/16 212.109.176.0/20 213.216.32.0/19 IPv6: 2a00:ca8::/32 2a02:c38::/32 Signature Algorithm: sha256WithRSAEncryption 46:88:c2:95:c4:da:29:7a:2c:2d:ac:af:df:78:95:58:47:95: f6:a6:73:87:b2:2c:20:1f:28:1c:f3:f5:c0:a0:df:c4:3f:4a: 40:5c:3a:2e:19:02:26:26:4c:d9:1d:28:2f:7d:e8:f4:4d:2b: 5c:36:38:65:ff:88:1d:08:dc:51:dd:40:1f:df:1d:b5:a0:6e: d3:1d:0a:6a:30:f6:85:ef:eb:a9:b4:79:d2:4f:49:d3:cb:65: f8:0b:30:4a:2c:f0:75:9c:c3:45:8a:d4:fe:b3:05:dc:5b:bb: a5:0b:2d:93:d2:1c:23:e7:85:16:6e:21:7e:1b:ad:83:69:53: 7c:78:d3:b5:15:84:a1:f5:92:98:5f:91:66:4d:f6:af:bf:25: df:41:3b:4e:e3:87:7a:33:a0:3b:11:56:97:3f:08:8d:ee:83: dd:cf:73:79:77:e6:06:a9:bc:23:35:93:f5:a2:cb:8a:cd:28: 77:b2:89:2c:cf:54:db:85:6d:85:23:3f:75:b4:74:f9:09:12: 9a:3a:3a:c6:85:b6:2c:55:86:fa:0f:71:ba:46:6b:23:dc:a6: 45:e1:39:0a:7d:71:c4:c7:71:58:27:0a:c8:59:93:a5:be:b2: ec:7f:25:24:fb:d6:f6:d5:9b:27:1f:fa:92:9f:54:c5:01:d5: 29:5d:1c:06 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt/gzRVW33e403tf0KJk9BFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzE3ZWQxZGM0ODgwNDRlNWUyYWIwMDc1NDMzNTU4Y2Zk ZThjODUwHhcNMjYwMTAyMTYyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWEzYjkzYTc0MDgwZGZlODE0ZmYyOGVlOTdmYWFkMjA1OGE3YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliePlss+pa1oy+xYBY5zZdUcC5yi mBCHKhYzZ/fYsgTF1vaj0LJau3tYFAigg86AQkQJPKN7F1QKJmqbiS8INgD8VmJi sthICSc9lJIx7SXqOCwKcQy6kjK4MoZ4Fzwv8TXkzszi1nnRj890WZdVAewrrCCp U8AxDTlcoWdpYrSbNgvPpMRusHarWCPk3SYyvO0LCRKTwIUI69NQklHRBe/S33Ux rq1jSoPvM5OpUc3P8ro4fm7JVuPzyRHvzWORujNsGpw2mNRV5zZb6jBnnMpN7tJY si5e2OQ6r2Gm8ZTvyoBNRC1KeESHZf358AaCxmZC4eY5et5NbQBWeT2aywIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFCWjuTp0CA3+gU/yjul/qtIFinxOMB8GA1UdIwQY MBaAFJpxftHcSIBE5eKrAHVDNVjP3oyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYt MTA5NDM5MTY2OWVmLzEvSmFPNU9uUUlEZjZCVF9LTzZYLXEwZ1dLZkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYtMTA5NDM5MTY2OWVm LzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwWQQCAAEwUwMEBi4vgAME BT6BIAMEBU6dgAMEBlLRAAMEB1WHAAMEB1kdAAMEBFtq8AMEBl7yQAMEBIAAsAME BKTXcAMEArkFRAMDAMGlAwQE1G2wAwQF1dggMBQEAgACMA4DBQAqAAyoAwUAKgIM ODANBgkqhkiG9w0BAQsFAAOCAQEARojClcTaKXosLayv33iVWEeV9qZzh7IsIB8o HPP1wKDfxD9KQFw6LhkCJiZM2R0oL33o9E0rXDY4Zf+IHQjcUd1AH98dtaBu0x0K ajD2he/rqbR50k9J08tl+AswSizwdZzDRYrU/rMF3Fu7pQstk9IcI+eFFm4hfhut g2lTfHjTtRWEofWSmF+RZk32r78l30E7TuOHejOgOxFWlz8Ije6D3c9zeXfmBqm8 IzWT9aLLis0od7KJLM9U24VthSM/dbR0+QkSmjo6xoW2LFWG+g9xukZrI9ymReE5 Cn1xxMdxWCcKyFmTpb6y7H8lJPvW9tWbJx/6kp9UxQHVKV0cBg== -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:22 2026 by rpki-client