This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/jsHCAHi_rkbcLptlH_ZcV4fwk28.roa File: jsHCAHi_rkbcLptlH_ZcV4fwk28.roa (raw, json) Hash identifier: zyH/plaJ2XfnSn4akwAuw1IF7XZNkyTy9jtwAKcGKuY= Subject key identifier: 8E:C1:C2:00:78:BF:AE:46:DC:2E:9B:65:1F:F6:5C:57:87:F0:93:6F Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d Certificate serial: 019B77C6CC8DB2BEA8C5B45E602D370A18B5 Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/jsHCAHi_rkbcLptlH_ZcV4fwk28.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 193.35.110.0/24 maxlen: 24 195.128.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cc:8d:b2:be:a8:c5:b4:5e:60:2d:37:0a:18:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec1c20078bfae46dc2e9b651ff65c5787f0936f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:8f:03:99:e6:bb:5f:9a:4a:b6:18:35:15: 82:d1:9f:cc:c5:29:69:eb:a5:86:ee:ca:3e:e3:bc: 8b:83:9e:a3:60:c8:98:55:d5:2a:ec:18:52:2b:7f: 9e:52:46:8e:91:1a:3b:77:95:3c:4a:ec:2c:e0:83: 3c:02:db:cd:16:97:ed:64:a2:30:c3:ea:88:6b:e3: 6f:fc:ee:4b:84:e4:a6:f2:33:db:d4:29:45:01:ea: b4:a5:63:b6:64:d5:e2:9c:14:e2:86:3d:e4:2b:75: 39:f1:06:45:88:3a:5c:6f:09:11:f2:0a:c8:b8:05: 2d:f5:17:c7:fc:7c:c0:f5:22:da:b4:99:c8:2c:d3: 7c:83:03:a7:de:80:bb:aa:fa:96:a9:86:89:17:23: b7:73:86:b3:4f:94:2d:2f:38:24:2b:79:11:cb:e0: 7c:26:1a:87:e3:29:95:a5:4b:fa:c0:22:64:ef:7a: 62:c8:8d:9c:9d:e0:a9:6f:55:1a:46:e4:f5:57:de: a7:48:29:a9:41:9b:ad:e8:17:ef:5f:59:3f:98:ff: 36:bf:29:17:d1:b8:fd:4b:80:4e:72:72:3f:d2:54: 90:1b:b4:36:99:29:25:d7:46:52:24:e6:8e:0b:f8: 9b:ed:24:ed:35:96:1e:c3:bc:80:20:ac:31:de:d2: f7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:C2:00:78:BF:AE:46:DC:2E:9B:65:1F:F6:5C:57:87:F0:93:6F X509v3 Authority Key Identifier: keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/jsHCAHi_rkbcLptlH_ZcV4fwk28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.110.0/24 195.128.154.0/24 Signature Algorithm: sha256WithRSAEncryption dd:4d:d0:a5:38:b9:1d:77:45:d0:6f:ac:f5:fd:6a:39:66:38: 65:7e:db:73:24:1c:57:6d:29:ab:ba:b4:3b:b0:5a:20:4f:c0: ba:b2:22:c0:e1:2c:e6:52:79:c4:d9:d7:77:86:3c:2f:07:83: 9b:ec:4f:c4:f1:c9:7c:b1:d6:08:86:5d:24:2c:d8:c8:3b:b5: da:0f:05:18:25:9d:77:db:17:1d:ce:2a:ed:46:c9:6f:36:93: 81:38:29:2b:f2:6f:b5:91:02:8f:29:ee:14:76:be:ef:99:b3: a5:a5:da:36:ed:8a:1c:63:1c:4c:06:f2:11:0e:11:21:b7:79: bb:ed:f1:d0:7e:71:14:01:d5:15:1b:f7:6d:ca:84:82:0d:b5: 74:ab:60:d1:0f:8a:73:0a:bb:53:a4:2f:28:23:36:b7:4f:f2: eb:18:ee:0a:81:4f:6c:50:3a:a9:f0:32:3b:2e:cd:5f:34:a7: bb:7d:2c:11:88:a8:fe:d7:69:fc:e7:f6:5f:84:19:31:d4:e6: 4d:cb:e0:ae:44:3a:49:0f:05:15:7c:43:1b:04:21:85:fa:01: 5f:01:a2:c2:65:f4:3e:f4:d7:2b:f0:a5:51:17:84:c4:94:6d: 8a:39:7b:35:0e:73:c2:9b:9b:e1:5c:38:a3:06:a1:77:24:dd: 04:8c:78:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xsyNsr6oxbReYC03Chi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWZkMDdkYzA4NmRkN2ZlZWM2OWU2NGUwOTRkZWU1ZjQ5 Y2VhN2QwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWMxYzIwMDc4YmZhZTQ2ZGMyZTliNjUxZmY2NWM1Nzg3ZjA5MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiyPA5nmu1+aSrYYNRWC0Z/MxSlp 66WG7so+47yLg56jYMiYVdUq7BhSK3+eUkaOkRo7d5U8Suws4IM8AtvNFpftZKIw w+qIa+Nv/O5LhOSm8jPb1ClFAeq0pWO2ZNXinBTihj3kK3U58QZFiDpcbwkR8grI uAUt9RfH/HzA9SLatJnILNN8gwOn3oC7qvqWqYaJFyO3c4azT5QtLzgkK3kRy+B8 JhqH4ymVpUv6wCJk73piyI2cneCpb1UaRuT1V96nSCmpQZut6BfvX1k/mP82vykX 0bj9S4BOcnI/0lSQG7Q2mSkl10ZSJOaOC/ib7STtNZYew7yAIKwx3tL3oQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI7BwgB4v65G3C6bZR/2XFeH8JNvMB8GA1UdIwQY MBaAFD+v0H3Aht1/7saeZOCU3uX0nOp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZfUWZjQ0czWF91eHA1azRKVGU1ZlNjNm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mYjgyM2YtNzI5Ni00Mjc5LTk3MjEt OTJlMDhiYTVlMmJmLzEvanNIQ0FIaV9ya2JjTHB0bEhfWmNWNGZ3azI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mYjgyM2YtNzI5Ni00Mjc5LTk3MjEtOTJlMDhiYTVlMmJm LzEvUDZfUWZjQ0czWF91eHA1azRKVGU1ZlNjNm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSNuAwQA w4CaMA0GCSqGSIb3DQEBCwUAA4IBAQDdTdClOLkdd0XQb6z1/Wo5ZjhlfttzJBxX bSmrurQ7sFogT8C6siLA4SzmUnnE2dd3hjwvB4Ob7E/E8cl8sdYIhl0kLNjIO7Xa DwUYJZ132xcdzirtRslvNpOBOCkr8m+1kQKPKe4Udr7vmbOlpdo27YocYxxMBvIR DhEht3m77fHQfnEUAdUVG/dtyoSCDbV0q2DRD4pzCrtTpC8oIza3T/LrGO4KgU9s UDqp8DI7Ls1fNKe7fSwRiKj+12n85/ZfhBkx1OZNy+CuRDpJDwUVfEMbBCGF+gFf AaLCZfQ+9Ncr8KVRF4TElG2KOXs1DnPCm5vhXDijBqF3JN0EjHgI -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:35 2026 by rpki-client