This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa File: jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa (raw, json) Hash identifier: W/pO2gP/Hnrcu+Gr8iHWv61QQmdy+1W+lWNUobK5q7E= Subject key identifier: 8C:6A:7C:AA:78:0F:C2:B4:5C:7C:C6:78:E8:D7:34:B9:7B:F8:B6:A2 Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Certificate serial: 019B7EA4D71EDB71CFBBE8B34FE172A91E2B Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa Signing time: Fri 02 Jan 2026 12:18:10 +0000 ROA not before: Fri 02 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.98.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d7:1e:db:71:cf:bb:e8:b3:4f:e1:72:a9:1e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c6a7caa780fc2b45c7cc678e8d734b97bf8b6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:50:b9:12:e5:e9:eb:47:76:3f:29:e8:15: 5e:bb:78:1d:f4:b2:73:13:eb:0e:a1:4c:7a:b8:cd: 2d:50:96:f2:7f:4b:5f:02:37:5a:e1:0b:7e:4b:00: b7:b4:65:35:6f:a1:37:91:1a:96:15:61:2f:ba:4b: 1c:f0:49:08:cb:7c:e6:92:91:80:0c:a0:d4:de:82: a1:77:f5:44:aa:8b:ec:2f:77:9b:df:5b:2a:de:cb: 1f:0a:df:ef:7c:ba:35:8f:3a:33:07:65:1a:49:9c: b3:89:46:3a:ee:16:b8:ba:f5:13:fa:59:82:c4:62: 47:60:4a:82:2a:b8:c1:81:a3:f1:0d:42:4b:80:8e: 2b:bb:9d:6b:d9:23:62:c9:4a:80:e8:b3:a0:47:74: 2e:2d:ec:7b:e9:39:fd:d4:c5:81:5e:f1:ec:16:3b: f1:8e:76:55:28:31:fe:0c:dc:07:eb:e9:84:79:5e: 20:30:ae:49:0b:1a:c8:b8:30:68:4b:f4:37:c6:c4: e4:52:c0:6e:4d:96:7d:18:e5:75:b2:89:97:54:a6: e1:66:eb:8c:a4:bd:e7:04:29:c2:0c:0c:74:07:55: 9a:c7:01:e4:e6:59:5c:f0:23:33:67:c2:50:d1:af: 6f:6a:74:0c:99:c1:a7:d7:9f:e7:2b:5e:2e:61:be: d3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6A:7C:AA:78:0F:C2:B4:5C:7C:C6:78:E8:D7:34:B9:7B:F8:B6:A2 X509v3 Authority Key Identifier: keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.159.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:4e:7d:f3:14:da:6c:58:be:9c:fa:f8:51:74:22:f6:48:8f: cc:a5:9a:86:ef:5d:b8:cf:17:9b:d6:03:aa:80:d0:11:d0:5f: d3:5c:d7:57:24:e4:31:8b:94:32:d7:e5:aa:e1:fb:3d:0c:0e: 19:2a:30:db:fd:97:72:12:4e:4a:10:64:6f:07:90:c3:05:84: 14:97:1c:b6:14:c4:bf:d7:68:96:fe:75:2f:12:3e:9f:6f:cd: 54:e2:3e:08:9c:c0:9c:c3:6e:43:75:ad:43:2e:26:15:ce:ef: 34:93:48:a6:91:1a:b6:21:3e:b0:3d:ba:c6:cf:a3:56:bc:a1: 3b:ec:b9:bd:8b:7b:4b:60:63:2b:9d:9f:79:78:a0:bb:96:08: 3a:98:fe:a5:99:d8:22:ae:67:3f:76:d3:a7:1e:33:14:e7:4a: 2c:7d:87:bf:a0:38:d0:9a:ad:de:eb:04:15:36:9a:9e:9f:1b: d2:34:b1:a1:40:45:24:74:7c:8a:d9:0c:a6:af:d0:ac:da:cd: f0:e0:90:d3:57:d5:98:b6:42:85:97:10:0d:d9:c4:da:52:93: 3c:9f:0c:d5:a4:f7:86:d7:eb:1b:a9:91:51:46:c3:d7:9c:74: 49:eb:ad:93:b3:49:b6:a5:29:30:4d:b3:b7:b8:f7:76:9f:8a: f6:7f:d0:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNce23HPu+izT+FyqR4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj NDU0ZDgwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzZhN2NhYTc4MGZjMmI0NWM3Y2M2NzhlOGQ3MzRiOTdiZjhiNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOhQuRLl6etHdj8p6BVeu3gd9LJz E+sOoUx6uM0tUJbyf0tfAjda4Qt+SwC3tGU1b6E3kRqWFWEvuksc8EkIy3zmkpGA DKDU3oKhd/VEqovsL3eb31sq3ssfCt/vfLo1jzozB2UaSZyziUY67ha4uvUT+lmC xGJHYEqCKrjBgaPxDUJLgI4ru51r2SNiyUqA6LOgR3QuLex76Tn91MWBXvHsFjvx jnZVKDH+DNwH6+mEeV4gMK5JCxrIuDBoS/Q3xsTkUsBuTZZ9GOV1somXVKbhZuuM pL3nBCnCDAx0B1WaxwHk5llc8CMzZ8JQ0a9vanQMmcGn15/nK14uYb7TBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxqfKp4D8K0XHzGeOjXNLl7+LaiMB8GA1UdIwQY MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt NTRmNmJjODVhYWMwLzEvakdwOHFuZ1B3clJjZk1aNDZOYzB1WHY0dHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWKfMA0G CSqGSIb3DQEBCwUAA4IBAQBeTn3zFNpsWL6c+vhRdCL2SI/MpZqG7124zxeb1gOq gNAR0F/TXNdXJOQxi5Qy1+Wq4fs9DA4ZKjDb/ZdyEk5KEGRvB5DDBYQUlxy2FMS/ 12iW/nUvEj6fb81U4j4InMCcw25Dda1DLiYVzu80k0imkRq2IT6wPbrGz6NWvKE7 7Lm9i3tLYGMrnZ95eKC7lgg6mP6lmdgirmc/dtOnHjMU50osfYe/oDjQmq3e6wQV NpqenxvSNLGhQEUkdHyK2Qymr9Cs2s3w4JDTV9WYtkKFlxAN2cTaUpM8nwzVpPeG 1+sbqZFRRsPXnHRJ662Ts0m2pSkwTbO3uPd2n4r2f9Bi -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:19 2026 by rpki-client