This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/JzI2TwjdG1BoFH-bZaW2U6ge5C0.roa File: JzI2TwjdG1BoFH-bZaW2U6ge5C0.roa (raw, json) Hash identifier: PeP61WhBh3Xm07uOWaGBiwybkJxvwEn3CCzlNFkkOVs= Subject key identifier: 27:32:36:4F:08:DD:1B:50:68:14:7F:9B:65:A5:B6:53:A8:1E:E4:2D Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504 Certificate serial: 019B7910BCF0225FF0582776012C40B2473F Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/JzI2TwjdG1BoFH-bZaW2U6ge5C0.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 185.118.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:f0:22:5f:f0:58:27:76:01:2c:40:b2:47:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2732364f08dd1b5068147f9b65a5b653a81ee42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:d2:0a:fd:52:50:40:d5:01:92:c0:b9:a8: a9:14:af:00:bf:25:73:60:84:59:8c:5b:b9:9d:27: bc:98:00:6f:f8:40:7c:06:1a:8d:9a:eb:1a:d0:c3: 05:a1:9b:f2:76:f1:7c:48:ec:66:c2:b9:7d:9e:12: 6e:07:f6:d2:3a:f3:ec:38:6c:5b:3d:ec:e6:7a:6d: 34:e5:18:7f:f6:83:37:8a:c7:e0:9a:4c:d0:f5:e9: 61:af:3a:e0:15:1d:1b:36:f2:7f:cf:4e:e2:ae:ea: d3:9b:c9:df:7b:89:28:0f:7b:18:96:b1:8e:c9:31: 67:f7:3d:79:05:d2:af:5e:64:88:0c:2c:0f:f3:83: 68:4d:3b:32:bf:ab:a7:a3:25:10:33:8f:7f:f4:82: 93:56:49:1a:3a:e9:35:89:e1:14:90:a6:22:5f:fc: e4:85:16:23:9f:7a:fe:a0:9b:27:c7:53:cb:31:59: fa:64:35:71:c1:83:b7:97:83:2f:60:fb:35:87:57: 09:9d:aa:26:42:a9:0c:59:51:17:af:35:33:b4:d1: 81:13:95:4a:73:ef:81:59:93:35:ef:83:e9:85:8a: 8d:db:63:2b:c3:22:bc:47:1c:82:22:c6:b4:19:ab: b1:f3:5d:82:ea:ce:2b:0a:7b:b0:08:a1:b0:cf:37: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:32:36:4F:08:DD:1B:50:68:14:7F:9B:65:A5:B6:53:A8:1E:E4:2D X509v3 Authority Key Identifier: keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/JzI2TwjdG1BoFH-bZaW2U6ge5C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.104.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f9:aa:dd:03:2f:80:b6:0b:bd:15:5b:6a:69:a2:74:92:0d: 9e:06:47:05:82:1f:4e:af:fe:c9:6f:84:0c:b4:53:33:01:9e: 38:47:c0:7a:ca:ab:71:89:ca:85:43:26:5b:4f:80:d7:2a:ce: 25:41:73:e6:aa:a3:1e:fa:f3:21:20:36:6b:ed:13:46:6e:28: 69:29:f0:a4:80:6c:d8:1b:fb:9e:3c:c1:0c:af:da:7f:57:42: 50:6c:51:7c:8b:ca:65:22:0b:d5:cc:18:a5:9e:9f:55:e1:1d: 06:7f:b7:c2:26:32:1b:be:45:db:1a:73:38:1d:4e:fc:38:22: ed:a5:8c:95:20:ad:99:b0:7b:d1:60:ea:8b:ba:5e:34:74:15: 72:b4:24:68:8f:44:a9:46:4c:6c:46:fa:01:46:6c:8d:a5:1f: aa:e8:9c:ef:ea:93:be:60:a6:e2:ab:4b:1d:f8:73:ae:d5:e5: cb:bc:a1:c6:e1:2d:de:fe:8a:4a:c7:d6:7e:34:c1:66:4e:bf: ea:c4:57:c6:33:e0:05:72:8c:e9:45:07:5b:75:02:9a:1c:71: 43:c7:8b:e9:db:7b:9b:ee:59:cf:cc:53:75:ae:b5:f2:10:d0: 24:f7:bd:21:b1:2b:82:1e:e3:74:78:d2:cf:0f:33:a4:3f:9f: a9:08:35:38 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ELzwIl/wWCd2ASxAskc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmUzM2M4ZDE4ZTUzYmZkMjQ4MjIwOThkYzc0ODY0MDU1 MGM1MDQwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzMyMzY0ZjA4ZGQxYjUwNjgxNDdmOWI2NWE1YjY1M2E4MWVlNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03/SCv1SUEDVAZLAuaipFK8AvyVz YIRZjFu5nSe8mABv+EB8BhqNmusa0MMFoZvydvF8SOxmwrl9nhJuB/bSOvPsOGxb Pezmem005Rh/9oM3isfgmkzQ9elhrzrgFR0bNvJ/z07irurTm8nfe4koD3sYlrGO yTFn9z15BdKvXmSIDCwP84NoTTsyv6unoyUQM49/9IKTVkkaOuk1ieEUkKYiX/zk hRYjn3r+oJsnx1PLMVn6ZDVxwYO3l4MvYPs1h1cJnaomQqkMWVEXrzUztNGBE5VK c++BWZM174PphYqN22MrwyK8RxyCIsa0Gaux812C6s4rCnuwCKGwzzdNKwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCcyNk8I3RtQaBR/m2WltlOoHuQtMB8GA1UdIwQY MBaAFPu+M8jRjlO/0kgiCY3HSGQFUMUEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03NHp5TkdPVTdfU1NDSUpqY2RJWkFWUXhRUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFl LTA1NTQzMTFkODdiNS8xL0p6STJUd2pkRzFCb0ZILWJaYVcyVTZnZTVDMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFlLTA1NTQzMTFkODdi NS8xLzEtNzR6eU5HT1U3X1NTQ0lKamNkSVpBVlF4UVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5dmgw DQYJKoZIhvcNAQELBQADggEBALT5qt0DL4C2C70VW2pponSSDZ4GRwWCH06v/slv hAy0UzMBnjhHwHrKq3GJyoVDJltPgNcqziVBc+aqox768yEgNmvtE0ZuKGkp8KSA bNgb+548wQyv2n9XQlBsUXyLymUiC9XMGKWen1XhHQZ/t8ImMhu+RdsaczgdTvw4 Iu2ljJUgrZmwe9Fg6ou6XjR0FXK0JGiPRKlGTGxG+gFGbI2lH6ronO/qk75gpuKr Sx34c67V5cu8ocbhLd7+ikrH1n40wWZOv+rEV8Yz4AVyjOlFB1t1ApoccUPHi+nb e5vuWc/MU3WutfIQ0CT3vSGxK4Ie43R40s8PM6Q/n6kINTg= -----END CERTIFICATE-----Generated at Fri Jan 23 16:02:17 2026 by rpki-client