This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Jm12F1fJac9AdzTGN7xQVn8K_U4.roa File: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (raw, json) Hash identifier: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc= Subject key identifier: 26:6D:76:17:57:C9:69:CF:40:77:34:C6:37:BC:50:56:7F:0A:FD:4E Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019B7DCB6625E67A6817817BA3ABF1426EA3 Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Jm12F1fJac9AdzTGN7xQVn8K_U4.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 89.104.206.0/24 maxlen: 24 185.195.0.0/22 maxlen: 24 2a01:77c0:1619::/48 maxlen: 48 2a01:77c0:7135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:25:e6:7a:68:17:81:7b:a3:ab:f1:42:6e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266d761757c969cf407734c637bc50567f0afd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:2c:fd:eb:20:71:9a:c8:41:12:47:de:27: b0:66:4b:41:70:b9:6d:10:6f:14:d0:7a:ab:9d:fc: 13:a9:4e:7b:2e:b7:39:a4:d9:9b:5d:d0:32:a8:21: fc:f9:fd:05:e8:b5:f9:7e:54:1a:1a:f1:b8:24:2c: 7f:fe:f5:34:d6:50:e3:85:a1:b3:ea:01:a4:19:d7: a4:25:48:e1:ae:52:70:59:b7:cc:6c:05:9d:ef:76: 11:62:82:2d:68:66:20:5f:a6:86:ec:0e:27:68:1d: 5e:cd:96:d3:44:a8:ef:44:51:51:f8:19:5f:69:97: ec:d8:0b:20:ce:cb:70:3c:7b:25:ba:4e:fd:dd:39: 64:9a:05:c7:7f:b4:56:cd:98:b1:25:d6:46:af:8a: 60:3e:ac:16:b8:c5:70:8d:7a:5b:e4:0b:b0:61:b0: 78:79:29:fc:4d:e6:2f:12:24:fc:30:2f:eb:81:55: 05:d0:db:7a:2c:e7:2f:05:26:2b:eb:49:21:bd:50: a0:2f:f2:03:f6:81:1c:07:6a:bd:71:73:71:fd:1a: 0e:58:53:a1:4d:2c:17:c9:b8:f0:67:7d:04:29:ef: 65:85:9b:26:f9:83:79:0c:dc:15:2a:d3:f3:e8:80: 74:be:d2:31:9c:04:0d:01:bc:f0:e5:f4:59:1f:f2: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6D:76:17:57:C9:69:CF:40:77:34:C6:37:BC:50:56:7F:0A:FD:4E X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Jm12F1fJac9AdzTGN7xQVn8K_U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.104.206.0/24 185.195.0.0/22 IPv6: 2a01:77c0:1619::/48 2a01:77c0:7135::/48 Signature Algorithm: sha256WithRSAEncryption 00:79:4c:6e:53:85:af:c8:fd:74:df:68:50:24:f1:47:6b:0f: 2b:29:34:df:35:4e:d5:2c:06:40:76:b2:2b:ac:ab:03:a8:6e: 94:8b:e4:61:35:28:30:9b:83:0c:8c:56:45:3d:53:6d:21:c1: df:a7:e2:a4:1f:28:cd:ba:29:cc:8b:f8:f9:1a:fd:f4:8f:70: e5:bb:bf:2d:6e:f0:72:af:a7:e9:fc:a4:4c:7a:ff:86:57:b7: 1d:73:81:e2:04:cc:d6:2c:30:08:6c:72:8e:49:cb:81:f3:24: 0a:87:a6:d0:64:44:43:ed:02:4e:da:b2:4d:74:fb:32:94:1b: e9:55:36:cb:f0:86:c8:fb:45:be:93:03:ac:39:8c:d8:39:91: 93:28:cb:5b:2b:c6:c0:c6:90:1d:a0:c6:fb:41:29:2e:04:b3: b9:be:60:5f:b2:45:47:55:7b:4b:10:38:4a:ee:13:6f:c7:0d: 84:97:a6:7d:87:59:88:49:86:c3:cc:bf:4f:6b:59:0d:b6:6b: f0:29:01:88:6c:09:11:5e:e6:77:b5:fa:3d:da:a1:b0:92:a8: c5:b9:ab:fb:6c:a8:08:1c:eb:8e:a3:9a:2b:9c:15:61:48:77: ae:5f:60:84:67:0b:06:73:eb:44:ce:b4:00:69:dd:1b:81:bd: ff:6a:2e:eb -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9y2Yl5npoF4F7o6vxQm6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZkNzYxNzU3Yzk2OWNmNDA3NzM0YzYzN2JjNTA1NjdmMGFmZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Qs/esgcZrIQRJH3iewZktBcLlt EG8U0HqrnfwTqU57Lrc5pNmbXdAyqCH8+f0F6LX5flQaGvG4JCx//vU01lDjhaGz 6gGkGdekJUjhrlJwWbfMbAWd73YRYoItaGYgX6aG7A4naB1ezZbTRKjvRFFR+Blf aZfs2AsgzstwPHsluk793TlkmgXHf7RWzZixJdZGr4pgPqwWuMVwjXpb5AuwYbB4 eSn8TeYvEiT8MC/rgVUF0Nt6LOcvBSYr60khvVCgL/ID9oEcB2q9cXNx/RoOWFOh TSwXybjwZ30EKe9lhZsm+YN5DNwVKtPz6IB0vtIxnAQNAbzw5fRZH/IKQwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCZtdhdXyWnPQHc0xje8UFZ/Cv1OMB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvSm0xMkYxZkphYzlBZHpUR043eFFWbjhLX1U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAWWjOAwQC ucMAMBgEAgACMBIDBwAqAXfAFhkDBwAqAXfAcTUwDQYJKoZIhvcNAQELBQADggEB AAB5TG5Tha/I/XTfaFAk8UdrDyspNN81TtUsBkB2siusqwOobpSL5GE1KDCbgwyM VkU9U20hwd+n4qQfKM26KcyL+Pka/fSPcOW7vy1u8HKvp+n8pEx6/4ZXtx1zgeIE zNYsMAhsco5Jy4HzJAqHptBkREPtAk7ask10+zKUG+lVNsvwhsj7Rb6TA6w5jNg5 kZMoy1srxsDGkB2gxvtBKS4Es7m+YF+yRUdVe0sQOEruE2/HDYSXpn2HWYhJhsPM v09rWQ22a/ApAYhsCRFe5ne1+j3aobCSqMW5q/tsqAgc646jmiucFWFId65fYIRn CwZz60TOtABp3RuBvf9qLus= -----END CERTIFICATE-----Generated at Sat Jan 17 08:24:54 2026 by rpki-client