This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa File: jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa (raw, json) Hash identifier: RrABUIpu4ptZlczjH/fM2s5sz3fOdOO4fUwiVsgsKxY= Subject key identifier: 8C:70:7E:04:AB:44:E3:24:B8:11:D0:04:C4:38:EA:3D:82:90:D6:A1 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B0C31817F42FB23351092BAB287646B01 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa Signing time: Thu 11 Dec 2025 06:55:29 +0000 ROA not before: Thu 11 Dec 2025 06:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42926 IP address blocks: 84.17.64.0/24 maxlen: 24 84.17.77.0/24 maxlen: 24 84.17.80.0/24 maxlen: 24 84.17.81.0/24 maxlen: 24 84.17.82.0/24 maxlen: 24 84.17.85.0/24 maxlen: 24 84.17.92.0/24 maxlen: 24 84.17.94.0/24 maxlen: 24 193.254.252.0/24 maxlen: 24 193.254.253.0/24 maxlen: 24 195.128.32.0/24 maxlen: 24 195.128.33.0/24 maxlen: 24 195.128.34.0/24 maxlen: 24 195.128.36.0/24 maxlen: 24 195.128.38.0/24 maxlen: 24 195.128.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:31:81:7f:42:fb:23:35:10:92:ba:b2:87:64:6b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 11 06:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c707e04ab44e324b811d004c438ea3d8290d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:6b:f6:6f:ae:1c:10:c6:23:44:40:27:70: cb:69:ff:c4:5d:c2:33:cc:0b:47:62:eb:69:53:75: 79:aa:3d:1d:a9:73:55:95:63:69:8d:df:b4:73:e9: fc:e9:43:a6:ee:32:6a:8c:a2:e9:7c:6b:2a:8e:f2: 7d:b6:a7:e9:76:00:36:05:d6:ca:ff:2d:ba:08:3d: 4e:54:95:32:32:df:84:a3:7a:8c:ca:a5:ff:1a:15: e6:bb:14:dc:3e:e0:10:79:69:47:77:5f:77:2a:05: 04:1a:84:e4:51:53:9c:77:8b:2d:a9:51:8c:fe:7f: 73:66:4d:67:c8:55:14:31:9c:61:42:8a:a0:07:bb: 5c:79:2f:a9:cc:ac:28:96:7f:33:79:1e:8d:81:74: 21:40:b2:a8:fd:7a:54:03:fe:f1:2b:ec:e5:a8:3d: 6d:1a:f9:37:97:e4:d8:e1:0b:b5:2a:a5:2d:b5:19: bd:49:0c:d6:a1:b7:21:a4:2f:e8:79:ed:ea:be:80: 5f:5c:10:b8:50:49:d8:21:16:99:8c:2c:ab:30:20: 74:d2:f6:37:40:cd:0a:56:1c:81:f5:e3:75:99:69: 5d:4e:45:30:0c:3d:41:02:b2:f2:88:68:81:f8:1b: 7f:78:44:e8:0a:ef:50:b1:6b:c7:d3:c0:57:a5:81: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:7E:04:AB:44:E3:24:B8:11:D0:04:C4:38:EA:3D:82:90:D6:A1 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.64.0/24 84.17.77.0/24 84.17.80.0-84.17.82.255 84.17.85.0/24 84.17.92.0/24 84.17.94.0/24 193.254.252.0/23 195.128.32.0-195.128.34.255 195.128.36.0/24 195.128.38.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:54:ff:ac:59:c1:d0:37:d5:b9:56:08:0c:81:ce:65:a3:1e: 17:dc:10:1e:41:cc:d7:5b:1c:20:13:dd:3b:ac:39:e8:a8:45: a8:eb:34:8c:80:1f:db:f0:bf:e5:f5:e6:8c:b1:e5:c5:e2:fc: 4c:d4:d7:5a:4e:e6:fa:63:4f:dc:d2:36:b9:7d:fe:9b:66:10: b4:bb:16:3f:9e:4d:7d:c6:80:1f:d2:0a:4e:01:0b:0e:87:7f: ff:42:95:70:0f:71:f8:23:27:eb:de:60:d2:91:ae:b4:f9:cd: 33:ac:b4:02:f1:10:99:5b:eb:da:d9:be:de:3d:f0:06:8e:4b: fd:4b:b9:2a:f4:21:2e:01:3d:f1:58:e6:0f:36:2b:90:d5:7e: ff:57:31:96:59:67:f8:fb:e2:fb:22:b8:7f:ca:66:e4:49:67: fe:2f:c0:dd:79:0d:fe:2c:ab:0b:d1:d4:f4:15:af:2e:64:d7: da:4d:35:9d:24:77:d8:df:7b:d9:e1:bb:13:88:79:b0:8e:80: 45:ed:10:30:52:94:a1:81:0a:1f:d3:cc:5b:a1:f7:86:ac:60: ab:f0:a9:d4:e1:a8:c6:a5:d7:b7:1f:9a:50:a0:54:7a:56:17: ec:97:cf:0f:df:47:8d:49:c1:c4:33:6f:62:ba:b0:93:5e:3a: 3b:46:30:e6 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZsMMYF/QvsjNRCSurKHZGsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjExMDY1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzcwN2UwNGFiNDRlMzI0YjgxMWQwMDRjNDM4ZWEzZDgyOTBkNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyClr9m+uHBDGI0RAJ3DLaf/EXcIz zAtHYutpU3V5qj0dqXNVlWNpjd+0c+n86UOm7jJqjKLpfGsqjvJ9tqfpdgA2BdbK /y26CD1OVJUyMt+Eo3qMyqX/GhXmuxTcPuAQeWlHd193KgUEGoTkUVOcd4stqVGM /n9zZk1nyFUUMZxhQoqgB7tceS+pzKwoln8zeR6NgXQhQLKo/XpUA/7xK+zlqD1t Gvk3l+TY4Qu1KqUttRm9SQzWobchpC/oee3qvoBfXBC4UEnYIRaZjCyrMCB00vY3 QM0KVhyB9eN1mWldTkUwDD1BArLyiGiB+Bt/eEToCu9QsWvH08BXpYGR3QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFIxwfgSrROMkuBHQBMQ46j2CkNahMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvakhCLUJLdEU0eVM0RWRBRXhEanFQWUtRMXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAVBFAAwQA VBFNMAwDBARUEVADBABUEVIDBABUEVUDBABUEVwDBABUEV4DBAHB/vwwDAMEBcOA IAMEAMOAIgMEAMOAJAMEAcOAJjANBgkqhkiG9w0BAQsFAAOCAQEAOlT/rFnB0DfV uVYIDIHOZaMeF9wQHkHM11scIBPdO6w56KhFqOs0jIAf2/C/5fXmjLHlxeL8TNTX Wk7m+mNP3NI2uX3+m2YQtLsWP55NfcaAH9IKTgELDod//0KVcA9x+CMn695g0pGu tPnNM6y0AvEQmVvr2tm+3j3wBo5L/Uu5KvQhLgE98VjmDzYrkNV+/1cxllln+Pvi +yK4f8pm5Eln/i/A3XkN/iyrC9HU9BWvLmTX2k01nSR32N972eG7E4h5sI6ARe0Q MFKUoYEKH9PMW6H3hqxgq/Cp1OGoxqXXtx+aUKBUelYX7JfPD99HjUnBxDNvYrqw k146O0Yw5g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:16 2025 by rpki-client