This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa File: jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa (raw, json) Hash identifier: JmlPibEqMfscplOPIOSacxthvDnFR9Ge2IhPMvlaWZs= Subject key identifier: 8D:4C:66:FE:A8:1F:87:72:18:7C:70:D8:E0:1B:11:B6:49:15:2F:4C Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Certificate serial: 019B7EA689AE0C5F0299487D1E92B12A593B Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199907 IP address blocks: 185.42.172.0/24 maxlen: 24 185.42.173.0/24 maxlen: 24 185.42.174.0/24 maxlen: 24 185.42.175.0/24 maxlen: 24 194.24.188.0/24 maxlen: 24 2a01:63a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:89:ae:0c:5f:02:99:48:7d:1e:92:b1:2a:59:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d4c66fea81f8772187c70d8e01b11b649152f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:2b:07:f0:7e:44:6a:33:63:38:14:33:bb: 80:09:10:10:81:89:14:2a:f9:d6:bc:db:2c:32:04: df:04:82:44:71:54:b8:63:4e:70:58:b9:75:ba:0d: 71:22:03:69:1f:40:c2:74:48:0e:2e:72:2a:33:fd: 3b:8d:03:16:66:97:0e:be:12:aa:f9:7d:e7:ac:ee: 84:fb:73:46:57:2e:a1:c1:d0:f0:b8:59:1c:97:0c: b2:ad:50:37:a1:f1:90:dc:7e:f1:c6:85:33:aa:df: cb:ac:01:45:d2:fa:2a:4a:7b:3d:98:ae:f5:65:6a: 69:76:f1:bc:45:0c:af:c1:14:33:f6:4a:d5:ab:5c: 09:1d:dc:43:d7:4d:5b:9b:24:fa:86:20:8e:0b:00: b2:cf:89:60:c2:f6:13:93:14:26:4c:a4:25:b6:00: 2d:cd:79:ee:cd:30:cc:b1:b5:46:4d:6c:78:1d:64: a5:08:72:db:63:7d:fb:b2:6d:5e:4d:9d:c8:eb:9a: bc:1d:6c:13:77:f8:9a:8c:2e:55:50:52:39:5b:c3: 33:1f:c4:bf:a0:4f:69:58:11:46:85:d9:38:ae:31: d0:5d:b8:51:6a:5c:80:6e:e1:50:09:62:4b:91:0a: a9:36:4e:50:7b:53:dc:39:2f:0f:0e:44:33:13:34: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4C:66:FE:A8:1F:87:72:18:7C:70:D8:E0:1B:11:B6:49:15:2F:4C X509v3 Authority Key Identifier: keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.172.0/22 194.24.188.0/24 IPv6: 2a01:63a0::/32 Signature Algorithm: sha256WithRSAEncryption a9:42:36:ae:ff:2d:bd:52:84:ef:cf:f3:8c:3e:ee:4d:a7:4c: 5b:3f:8a:97:65:8b:5c:45:bb:d2:7a:b6:6f:62:a0:ae:89:c5: 3a:db:fb:f5:99:0b:28:e1:58:38:96:00:1d:65:d9:ee:09:75: 1b:21:70:f6:d8:1c:59:77:0e:52:4e:a9:cb:c0:25:98:e0:43: e3:c7:8b:4f:a9:ac:44:29:8d:80:d4:50:77:c9:10:be:2c:67: 7b:96:54:da:9d:2b:69:3f:40:11:71:6f:72:37:ec:0e:73:3a: ad:25:29:e2:43:e0:1d:a7:41:42:17:c9:6f:3d:74:a8:ff:81: 2c:5c:82:c8:32:15:32:d8:ee:e7:ef:8a:5f:cb:ce:90:6e:85: 27:03:4f:9e:41:3a:4b:35:62:22:4c:31:6d:f1:25:9b:86:61: 41:c4:b5:ed:1f:ab:fc:e3:53:bb:c8:0e:30:88:36:99:7f:fc: be:e0:35:b9:e6:ea:1a:aa:10:98:7e:70:ab:7f:0e:9f:5c:73: 0b:80:f4:9b:53:e3:a4:7a:ae:61:36:d6:14:8f:72:0b:c3:31: 2a:f4:36:f5:c1:c0:ba:87:7f:53:e8:d6:6c:65:1d:e3:4e:bf: 66:11:ec:af:30:d4:c2:a1:61:ec:90:72:82:d7:6d:df:85:b2: 66:a2:90:fb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pomuDF8CmUh9HpKxKlk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz OWViNzYwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDRjNjZmZWE4MWY4NzcyMTg3YzcwZDhlMDFiMTFiNjQ5MTUyZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dQrB/B+RGozYzgUM7uACRAQgYkU KvnWvNssMgTfBIJEcVS4Y05wWLl1ug1xIgNpH0DCdEgOLnIqM/07jQMWZpcOvhKq +X3nrO6E+3NGVy6hwdDwuFkclwyyrVA3ofGQ3H7xxoUzqt/LrAFF0voqSns9mK71 ZWppdvG8RQyvwRQz9krVq1wJHdxD101bmyT6hiCOCwCyz4lgwvYTkxQmTKQltgAt zXnuzTDMsbVGTWx4HWSlCHLbY337sm1eTZ3I65q8HWwTd/iajC5VUFI5W8MzH8S/ oE9pWBFGhdk4rjHQXbhRalyAbuFQCWJLkQqpNk5Qe1PcOS8PDkQzEzSpoQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI1MZv6oH4dyGHxw2OAbEbZJFS9MMB8GA1UdIwQY MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt M2UzNjYwZGExM2E0LzEvalV4bV9xZ2ZoM0lZZkhEWTRCc1J0a2tWTDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0 LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSqsAwQA whi8MA0EAgACMAcDBQAqAWOgMA0GCSqGSIb3DQEBCwUAA4IBAQCpQjau/y29UoTv z/OMPu5Np0xbP4qXZYtcRbvSerZvYqCuicU62/v1mQso4Vg4lgAdZdnuCXUbIXD2 2BxZdw5STqnLwCWY4EPjx4tPqaxEKY2A1FB3yRC+LGd7llTanStpP0ARcW9yN+wO czqtJSniQ+Adp0FCF8lvPXSo/4EsXILIMhUy2O7n74pfy86QboUnA0+eQTpLNWIi TDFt8SWbhmFBxLXtH6v841O7yA4wiDaZf/y+4DW55uoaqhCYfnCrfw6fXHMLgPSb U+Okeq5hNtYUj3ILwzEq9Db1wcC6h39T6NZsZR3jTr9mEeyvMNTCoWHskHKC123f hbJmopD7 -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client