This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/jFj46lu_4u0ubIJMiYtU4-hn078.roa File: jFj46lu_4u0ubIJMiYtU4-hn078.roa (raw, json) Hash identifier: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8= Subject key identifier: 8C:58:F8:EA:5B:BF:E2:ED:2E:6C:82:4C:89:8B:54:E3:E8:67:D3:BF Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8 Certificate serial: 019C08D089BCDFB7DA69B83FF7578BECDFB9 Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/jFj46lu_4u0ubIJMiYtU4-hn078.roa Signing time: Thu 29 Jan 2026 08:13:30 +0000 ROA not before: Thu 29 Jan 2026 08:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2.37.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:d0:89:bc:df:b7:da:69:b8:3f:f7:57:8b:ec:df:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8 Validity Not Before: Jan 29 08:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c58f8ea5bbfe2ed2e6c824c898b54e3e867d3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:b8:fa:ae:9e:2f:9d:49:96:b4:e5:ac:a2: bd:ec:c0:34:6d:28:e0:34:3c:70:19:a9:bc:17:f2: 03:c2:f1:21:2b:4d:49:d3:25:73:43:18:6c:ab:88: 43:d3:7a:37:07:b4:a7:4d:c6:91:1a:44:bc:4b:23: de:bd:e4:2f:ca:10:2d:b7:af:52:85:f1:4d:65:fc: 13:56:98:8f:1f:1c:0e:f0:c8:62:6e:bb:1c:ca:90: a2:7a:5a:af:df:27:b8:b3:64:cc:7d:78:43:bc:18: 5c:1a:d3:57:90:0e:03:46:e6:cf:eb:86:d4:90:1a: 48:ad:9b:dd:56:9d:c4:1b:ed:a8:fd:b6:0a:f6:3a: 89:a3:b7:6d:3f:55:e0:48:21:1a:72:52:ae:a5:f4: 09:12:04:c6:c0:de:0e:7e:2b:d0:ce:58:13:ec:35: 14:71:85:5c:95:86:aa:16:f7:5f:f9:cb:6b:97:d0: a7:95:fe:0d:7a:bf:5e:2b:eb:ce:20:ac:e0:fd:55: 82:6b:71:c7:81:19:4a:c8:64:59:2e:7f:c8:2e:9d: 61:09:3a:bc:3e:b1:3c:c0:fe:aa:93:eb:12:7d:65: 30:c7:fa:57:bf:ae:41:7e:80:4a:4f:a5:c1:63:e3: 51:08:ba:9f:c2:44:d1:56:59:39:7f:98:9b:1f:37: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:58:F8:EA:5B:BF:E2:ED:2E:6C:82:4C:89:8B:54:E3:E8:67:D3:BF X509v3 Authority Key Identifier: keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/jFj46lu_4u0ubIJMiYtU4-hn078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.37.111.0/24 Signature Algorithm: sha256WithRSAEncryption 88:a0:ef:5e:9b:83:95:9f:87:2a:ae:b0:d7:84:dd:1d:25:e9: bc:d2:10:e5:6e:15:8a:3b:ca:fd:cb:46:0c:8f:06:69:31:f5: 02:69:09:5a:55:98:cf:3f:d0:f8:8e:0f:75:e8:15:f5:d0:a8: b8:cb:73:c7:66:fa:20:3f:0c:17:94:dc:2b:9a:a2:d8:c8:6d: 53:6d:ea:14:a3:13:dd:b2:10:42:7b:17:85:db:b3:c1:5f:7d: 74:69:c3:cd:20:da:39:35:5c:ea:19:99:13:dc:ab:b1:19:91: 2a:ae:36:a2:39:2c:4a:5c:04:b0:68:36:9e:02:11:7a:b7:3a: 06:e6:e8:2b:ae:22:e6:65:0b:f3:2d:78:21:d3:f2:13:6e:ab: 43:c4:b5:0a:78:e1:da:62:a6:97:cd:16:b9:54:7f:1a:5d:68: 1c:8d:38:04:18:59:60:b4:5a:ff:70:9d:74:fd:39:91:1c:12: c7:d6:45:c3:62:cb:08:de:10:90:c1:5f:86:85:27:a8:aa:b9: a4:cf:9b:93:32:f3:4e:9c:3c:7b:0e:f1:2e:23:5c:90:55:c2: a5:6a:64:30:b8:32:c2:9e:4d:75:ff:fd:7b:25:34:78:08:75: 56:2e:e9:bb:d1:ab:43:be:78:5d:ec:2a:37:54:41:71:a2:43: 0f:32:5a:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwI0Im837faabg/91eL7N+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNzFmNGQxMTlkMGI3NGZiNjZlMzdhN2VmODc4ZDQ0OWQ1 NGRkYzgwHhcNMjYwMTI5MDgxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU4ZjhlYTViYmZlMmVkMmU2YzgyNGM4OThiNTRlM2U4NjdkM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ji4+q6eL51JlrTlrKK97MA0bSjg NDxwGam8F/IDwvEhK01J0yVzQxhsq4hD03o3B7SnTcaRGkS8SyPeveQvyhAtt69S hfFNZfwTVpiPHxwO8MhibrscypCielqv3ye4s2TMfXhDvBhcGtNXkA4DRubP64bU kBpIrZvdVp3EG+2o/bYK9jqJo7dtP1XgSCEaclKupfQJEgTGwN4OfivQzlgT7DUU cYVclYaqFvdf+ctrl9Cnlf4Ner9eK+vOIKzg/VWCa3HHgRlKyGRZLn/ILp1hCTq8 PrE8wP6qk+sSfWUwx/pXv65BfoBKT6XBY+NRCLqfwkTRVlk5f5ibHzeR2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxY+Opbv+LtLmyCTImLVOPoZ9O/MB8GA1UdIwQY MBaAFPBx9NEZ0LdPtm43p++HjUSdVN3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEhIMDBSblF0MC0yYmplbjc0ZU5SSjFVM2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82YTk2ODItMjAxYi00ZTAxLWJhMDkt MDc0NzQ1MjRlZjlhLzEvakZqNDZsdV80dTB1YklKTWlZdFU0LWhuMDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82YTk2ODItMjAxYi00ZTAxLWJhMDktMDc0NzQ1MjRlZjlh LzEvOEhIMDBSblF0MC0yYmplbjc0ZU5SSjFVM2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAiVvMA0G CSqGSIb3DQEBCwUAA4IBAQCIoO9em4OVn4cqrrDXhN0dJem80hDlbhWKO8r9y0YM jwZpMfUCaQlaVZjPP9D4jg916BX10Ki4y3PHZvogPwwXlNwrmqLYyG1TbeoUoxPd shBCexeF27PBX310acPNINo5NVzqGZkT3KuxGZEqrjaiOSxKXASwaDaeAhF6tzoG 5ugrriLmZQvzLXgh0/ITbqtDxLUKeOHaYqaXzRa5VH8aXWgcjTgEGFlgtFr/cJ10 /TmRHBLH1kXDYssI3hCQwV+GhSeoqrmkz5uTMvNOnDx7DvEuI1yQVcKlamQwuDLC nk11//17JTR4CHVWLum70atDvnhd7Co3VEFxokMPMlqa -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:42 2026 by rpki-client