This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/_JE_zjoNMnFpC-O8UaIjyYf9e0I.roa File: _JE_zjoNMnFpC-O8UaIjyYf9e0I.roa (raw, json) Hash identifier: rd/HA0/VFAFuHj8+ClqZZLt+F806ETqn1YSHQVPCNIY= Subject key identifier: FC:91:3F:CE:3A:0D:32:71:69:0B:E3:BC:51:A2:23:C9:87:FD:7B:42 Certificate issuer: /CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf Certificate serial: 019B074EE5C780DA5CCBA5867BA7163F9BB9 Authority key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/_JE_zjoNMnFpC-O8UaIjyYf9e0I.roa Signing time: Wed 10 Dec 2025 08:09:29 +0000 ROA not before: Wed 10 Dec 2025 08:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203620 IP address blocks: 185.1.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:4e:e5:c7:80:da:5c:cb:a5:86:7b:a7:16:3f:9b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf Validity Not Before: Dec 10 08:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc913fce3a0d3271690be3bc51a223c987fd7b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:82:15:74:19:90:36:51:02:f3:2f:63:48:9b: 37:98:57:7f:ce:ff:79:40:a9:5b:fe:2d:da:e7:a4: de:f9:d3:51:12:9d:3c:ad:b3:43:02:9f:5f:33:89: df:c6:0d:96:27:e0:13:f7:14:45:51:71:ed:1d:58: b7:e8:94:a9:70:99:3c:13:23:bc:21:ac:d1:5f:94: d9:84:2f:32:9c:98:d2:de:57:5f:83:aa:7b:41:fb: 8b:46:d9:09:57:0a:95:46:9b:3b:50:7f:d1:5e:a0: c9:db:05:ad:df:64:8a:0e:dd:4c:26:84:2e:3b:29: 2d:fa:f0:9a:6b:20:2a:82:50:9e:09:d7:39:d4:6c: 41:aa:83:dc:8f:d1:11:ba:1a:86:75:9e:c8:eb:82: 5e:0b:88:9d:66:e0:21:93:dd:3d:7f:40:52:6c:f2: d0:84:18:e8:7c:89:90:ae:d7:f3:87:c6:0f:18:80: e4:1b:5c:a7:2a:fb:52:08:a8:e8:e3:3c:f3:65:37: f5:d3:70:dc:b8:ef:66:86:34:29:85:37:ff:81:ab: 33:49:f4:0a:c7:e5:fd:0a:10:7c:77:6c:0a:7b:85: 7e:ff:75:23:47:0f:db:61:94:16:de:b0:9b:1d:86: 5e:f5:89:5e:fb:94:1f:54:62:2d:87:b9:d3:40:06: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:91:3F:CE:3A:0D:32:71:69:0B:E3:BC:51:A2:23:C9:87:FD:7B:42 X509v3 Authority Key Identifier: keyid:61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/_JE_zjoNMnFpC-O8UaIjyYf9e0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:6b:29:12:c5:64:78:d4:13:57:26:4b:e1:59:df:54:13:27: 95:65:a9:88:b2:f2:5d:8c:cb:f2:11:94:de:64:f9:c0:6d:28: 34:a5:a0:7e:54:44:c6:f6:65:b4:6d:9d:d3:d1:c3:3b:1d:e2: da:65:18:26:75:8d:ae:ee:79:5d:e7:5d:8f:90:d3:e2:0c:df: a9:3d:98:0a:99:06:56:da:72:21:28:0a:ca:19:32:03:52:69: 8d:ba:39:33:9a:d6:f6:a2:d0:e3:6b:ec:fa:9f:5e:47:0b:04: 23:d3:84:48:0d:85:a0:24:8a:6f:04:df:cd:89:81:6a:3a:d2: e5:99:d4:af:73:09:02:37:c0:d8:b8:86:7a:d2:b4:f5:e8:fc: 05:0e:a1:0c:64:50:85:ec:06:5d:fc:28:6a:e9:86:e9:dc:e5: 4b:99:59:ba:1d:98:5c:93:da:78:37:fa:76:64:c1:2c:cd:57: 01:ca:51:48:a3:b1:50:4f:f2:9a:4d:97:5a:d8:20:ec:76:88: f1:db:9c:32:05:fc:1f:03:f9:89:9d:32:cf:19:67:d4:45:72: 42:0c:e3:f2:79:4c:f1:b9:8f:77:dd:97:79:bb:45:a3:c3:5a: 8a:67:07:8d:b7:7b:75:01:e9:48:8d:9a:15:00:93:87:26:00: 4a:6f:37:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHTuXHgNpcy6WGe6cWP5u5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTZlMWFmZDY3OWEyYTczMTFmZDZhZDVkZjY5OTBlNTYx OGUzY2YwHhcNMjUxMjEwMDgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzkxM2ZjZTNhMGQzMjcxNjkwYmUzYmM1MWEyMjNjOTg3ZmQ3YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84IVdBmQNlEC8y9jSJs3mFd/zv95 QKlb/i3a56Te+dNREp08rbNDAp9fM4nfxg2WJ+AT9xRFUXHtHVi36JSpcJk8EyO8 IazRX5TZhC8ynJjS3ldfg6p7QfuLRtkJVwqVRps7UH/RXqDJ2wWt32SKDt1MJoQu Oykt+vCaayAqglCeCdc51GxBqoPcj9ERuhqGdZ7I64JeC4idZuAhk909f0BSbPLQ hBjofImQrtfzh8YPGIDkG1ynKvtSCKjo4zzzZTf103DcuO9mhjQphTf/gaszSfQK x+X9ChB8d2wKe4V+/3UjRw/bYZQW3rCbHYZe9Yle+5QfVGIth7nTQAYtkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyRP846DTJxaQvjvFGiI8mH/XtCMB8GA1UdIwQY MBaAFGFW4a/WeaKnMR/WrV32mQ5WGOPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZiaHI5WjVvcWN4SDlhdFhmYVpEbFlZNDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MzVmZTktNjFkOC00Y2Q4LWI2ODEt ZmRkMmRhYmRlZjFjLzEvX0pFX3pqb05NbkZwQy1POFVhSWp5WWY5ZTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MzVmZTktNjFkOC00Y2Q4LWI2ODEtZmRkMmRhYmRlZjFj LzEvWVZiaHI5WjVvcWN4SDlhdFhmYVpEbFlZNDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQElMA0G CSqGSIb3DQEBCwUAA4IBAQBsaykSxWR41BNXJkvhWd9UEyeVZamIsvJdjMvyEZTe ZPnAbSg0paB+VETG9mW0bZ3T0cM7HeLaZRgmdY2u7nld512PkNPiDN+pPZgKmQZW 2nIhKArKGTIDUmmNujkzmtb2otDja+z6n15HCwQj04RIDYWgJIpvBN/NiYFqOtLl mdSvcwkCN8DYuIZ60rT16PwFDqEMZFCF7AZd/Chq6Ybp3OVLmVm6HZhck9p4N/p2 ZMEszVcBylFIo7FQT/KaTZda2CDsdojx25wyBfwfA/mJnTLPGWfURXJCDOPyeUzx uY933Zd5u0Wjw1qKZweNt3t1AelIjZoVAJOHJgBKbzcs -----END CERTIFICATE-----Generated at Fri Dec 26 17:20:10 2025 by rpki-client