This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/JF5HZsn7h3hTXeSm3T5gZ-J45no.roa File: JF5HZsn7h3hTXeSm3T5gZ-J45no.roa (raw, json) Hash identifier: nH/dD1vhkAFkX+8w5fK7+63eCRhFsEpgDdLpvN3kRkk= Subject key identifier: 24:5E:47:66:C9:FB:87:78:53:5D:E4:A6:DD:3E:60:67:E2:78:E6:7A Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Certificate serial: 019B7EA68926DC681B2E891D0DDD498E7B56 Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/JF5HZsn7h3hTXeSm3T5gZ-J45no.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 185.42.172.0/24 maxlen: 24 185.42.173.0/24 maxlen: 24 185.42.174.0/24 maxlen: 24 185.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:89:26:dc:68:1b:2e:89:1d:0d:dd:49:8e:7b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=245e4766c9fb8778535de4a6dd3e6067e278e67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:21:c6:fb:05:90:d6:36:d6:40:8f:8c:8d: 07:54:50:b7:84:b7:62:34:66:e9:7b:5c:6f:db:a9: 22:60:51:e2:f3:1d:ba:52:34:88:df:d2:57:24:a5: 79:76:22:7a:30:c1:02:1f:c1:54:59:67:51:28:6c: 2b:08:b0:3d:dc:8d:da:64:6b:31:3d:a1:1a:e3:ea: 78:5c:2f:79:b3:d4:3d:ae:9f:84:ed:2a:57:0f:f6: 0a:e8:6e:a5:da:c6:0b:63:14:4c:c1:63:bc:bb:a5: 7b:fc:59:a4:a3:4b:84:61:50:93:78:68:a3:c2:22: 19:81:f3:1d:a6:c0:77:9b:23:51:fb:6c:4a:0d:bc: 8a:eb:b0:c2:23:eb:03:e7:05:ec:4f:37:f4:a7:59: 16:07:72:dd:2b:a2:78:79:1b:71:1e:64:5d:25:65: cd:68:c6:69:c1:4a:99:81:a2:b0:65:8b:df:55:a6: 77:1d:85:43:db:95:a8:56:f1:0a:26:9f:b0:00:08: c4:58:96:05:35:fa:e6:ce:f1:e1:b8:1d:fe:c9:4b: 11:92:34:0b:e8:e4:f8:e2:58:11:b4:8e:4c:3f:d3: 35:e0:e0:c6:d5:eb:f2:34:e5:15:0e:0c:c5:e1:97: a9:ac:7b:f5:68:ad:f7:22:f6:ac:4a:d2:46:55:07: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:47:66:C9:FB:87:78:53:5D:E4:A6:DD:3E:60:67:E2:78:E6:7A X509v3 Authority Key Identifier: keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/JF5HZsn7h3hTXeSm3T5gZ-J45no.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.172.0/22 Signature Algorithm: sha256WithRSAEncryption 49:5d:7c:1a:98:75:50:79:ca:c8:07:e0:2c:33:c6:01:88:7c: 54:62:48:3a:57:94:70:54:91:e3:0e:2c:0b:fc:05:76:a4:d9: b9:f0:06:94:55:f3:27:c4:7a:c2:d2:9a:ae:93:a5:07:e2:77: f8:49:50:bf:15:b1:c5:3b:6b:18:05:c1:96:96:3f:82:1d:bd: 24:c5:8a:a3:4c:85:4d:f1:45:1f:b8:f7:a2:64:37:7e:86:9b: 2f:6d:3b:38:7a:b6:63:e9:3e:51:54:3e:2b:db:2e:e6:37:5f: 46:ab:e8:f7:ac:22:4b:1b:cd:4b:31:83:64:f9:06:4c:8d:12: d3:d9:6b:28:a4:e5:92:ae:1b:b3:13:8d:69:fc:b2:0b:0d:3e: a0:05:4c:36:0a:a8:08:a8:18:55:8b:fa:70:0b:ea:fd:49:ad: 33:b5:ac:80:f5:0a:df:e4:f8:7e:4e:4d:c0:78:5e:c2:ca:a4: 53:6c:34:c7:dc:46:11:d6:c4:cd:6c:27:14:14:f7:bb:9d:6a: 31:1c:b1:fa:68:03:3a:ce:1e:d0:59:00:18:86:7f:e7:78:ab: 41:f3:16:dd:db:a8:28:33:7a:57:00:d9:98:fc:d4:b9:6c:2c: cd:43:f7:e8:e3:dd:a2:82:ae:d6:b0:78:23:c6:e5:21:cf:33: ef:15:7c:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pokm3GgbLokdDd1JjntWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz OWViNzYwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDVlNDc2NmM5ZmI4Nzc4NTM1ZGU0YTZkZDNlNjA2N2UyNzhlNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC0hxvsFkNY21kCPjI0HVFC3hLdi NGbpe1xv26kiYFHi8x26UjSI39JXJKV5diJ6MMECH8FUWWdRKGwrCLA93I3aZGsx PaEa4+p4XC95s9Q9rp+E7SpXD/YK6G6l2sYLYxRMwWO8u6V7/Fmko0uEYVCTeGij wiIZgfMdpsB3myNR+2xKDbyK67DCI+sD5wXsTzf0p1kWB3LdK6J4eRtxHmRdJWXN aMZpwUqZgaKwZYvfVaZ3HYVD25WoVvEKJp+wAAjEWJYFNfrmzvHhuB3+yUsRkjQL 6OT44lgRtI5MP9M14ODG1evyNOUVDgzF4ZeprHv1aK33IvasStJGVQfYewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCReR2bJ+4d4U13kpt0+YGfieOZ6MB8GA1UdIwQY MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt M2UzNjYwZGExM2E0LzEvSkY1SFpzbjdoM2hUWGVTbTNUNWdaLUo0NW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0 LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSqsMA0G CSqGSIb3DQEBCwUAA4IBAQBJXXwamHVQecrIB+AsM8YBiHxUYkg6V5RwVJHjDiwL /AV2pNm58AaUVfMnxHrC0pquk6UH4nf4SVC/FbHFO2sYBcGWlj+CHb0kxYqjTIVN 8UUfuPeiZDd+hpsvbTs4erZj6T5RVD4r2y7mN19Gq+j3rCJLG81LMYNk+QZMjRLT 2WsopOWSrhuzE41p/LILDT6gBUw2CqgIqBhVi/pwC+r9Sa0ztayA9Qrf5Ph+Tk3A eF7CyqRTbDTH3EYR1sTNbCcUFPe7nWoxHLH6aAM6zh7QWQAYhn/neKtB8xbd26go M3pXANmY/NS5bCzNQ/fo492igq7WsHgjxuUhzzPvFXxl -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:32 2026 by rpki-client