This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/jkV0poRpEabjs8GbnFFp-G9LAo4.roa File: jkV0poRpEabjs8GbnFFp-G9LAo4.roa (raw, json) Hash identifier: FGABQx3WiC5iQbCtEVt4c6hjkgReQfgzufO5sALc4Wg= Subject key identifier: 8E:45:74:A6:84:69:11:A6:E3:B3:C1:9B:9C:51:69:F8:6F:4B:02:8E Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf Certificate serial: 019B7F8307BBC09CAE059F5BF9D4B2921DD8 Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/jkV0poRpEabjs8GbnFFp-G9LAo4.roa Signing time: Fri 02 Jan 2026 16:20:52 +0000 ROA not before: Fri 02 Jan 2026 16:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31043 IP address blocks: 185.117.112.0/22 maxlen: 22 195.47.232.0/24 maxlen: 24 2a0c:3180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:07:bb:c0:9c:ae:05:9f:5b:f9:d4:b2:92:1d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf Validity Not Before: Jan 2 16:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4574a6846911a6e3b3c19b9c5169f86f4b028e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:d7:30:70:dd:6e:9e:86:87:35:72:f3:99: 1f:b8:c4:21:d3:30:5c:ef:8a:14:1a:95:a9:a4:b0: 72:d6:9e:a9:2c:84:e2:63:c0:2e:05:ec:fc:1e:ef: f2:ff:6d:e4:f7:40:dd:84:e2:96:ad:92:74:86:10: 3a:0b:eb:c4:b3:a5:15:23:35:5b:00:83:95:08:6a: 2e:f8:5e:75:dc:32:17:18:ab:2a:72:a8:d4:75:e4: 94:b4:a2:b5:eb:14:dd:59:72:ed:2d:0e:ce:a2:5d: 2f:dc:f4:17:e3:93:8d:a0:0e:cc:e4:06:8a:bf:2c: bd:5c:f7:88:9a:dc:91:7d:0b:43:e0:4e:15:37:1f: c6:28:68:c5:4c:54:7c:8b:a9:65:5f:1a:97:95:4a: eb:1d:43:1a:79:13:a6:fe:77:fa:aa:82:23:53:56: 45:bb:9d:17:21:d2:69:89:0f:bc:29:92:af:64:f6: 5e:21:7a:91:e3:57:06:4e:9f:f7:94:a6:46:29:cd: 97:c1:cf:4f:6a:e1:a4:5f:81:f8:17:16:5d:34:3b: c1:ac:64:54:1c:17:cb:ae:d2:54:9a:87:24:7d:b4: 27:50:7b:74:46:eb:41:d7:f8:5a:77:88:71:5d:9d: c0:97:bc:89:be:bd:54:ec:25:7e:65:67:5d:81:a4: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:74:A6:84:69:11:A6:E3:B3:C1:9B:9C:51:69:F8:6F:4B:02:8E X509v3 Authority Key Identifier: keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/jkV0poRpEabjs8GbnFFp-G9LAo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.112.0/22 195.47.232.0/24 IPv6: 2a0c:3180::/32 Signature Algorithm: sha256WithRSAEncryption 00:12:65:47:b7:10:e1:88:37:f5:ab:62:c9:af:e9:d8:f0:32: e3:6e:04:7a:25:a7:83:e5:50:9e:ab:cc:d3:2a:72:d9:ab:bc: 42:d2:6a:aa:fd:a8:69:3f:ca:93:ec:73:de:b1:86:b8:05:ec: 81:26:b4:c6:1d:f0:b9:f8:80:1f:b6:c1:f2:ee:6a:77:37:eb: 68:c6:03:84:50:09:1e:d6:c5:a2:88:ea:63:5e:03:e0:34:ed: 11:a0:28:77:a9:02:46:15:f9:80:bd:12:48:ff:08:0a:36:e3: cf:c9:e1:da:4e:2c:0b:be:65:86:9d:50:15:3d:b1:9d:fd:28: 5c:ea:5e:02:b7:d0:95:9f:33:87:c9:02:b7:6e:91:96:46:d8: 4a:8d:ef:ac:e7:8f:53:03:fa:5c:47:56:9c:21:42:f1:2f:e1: c9:b7:b8:ff:d9:81:83:5f:21:83:ec:6a:80:55:79:3c:46:ae: fa:77:04:a9:e9:86:6e:49:09:e4:4a:bf:1b:96:c4:30:b8:69: 22:3f:60:86:37:56:27:d0:a7:48:36:b5:a6:36:5f:0f:15:fc: 37:d0:08:21:a0:22:77:74:78:29:9e:54:3d:a5:71:9c:6f:f5: 85:ec:f6:73:f9:1e:31:20:85:38:d3:6f:9a:00:d7:be:28:09: 52:c5:95:b0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gwe7wJyuBZ9b+dSykh3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTQ5ZjY1YTNkNjgwYzQyOGZkOTRkNjdlNjVhMjcwOWYw MjkyY2YwHhcNMjYwMTAyMTYyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ1NzRhNjg0NjkxMWE2ZTNiM2MxOWI5YzUxNjlmODZmNGIwMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+XXMHDdbp6GhzVy85kfuMQh0zBc 74oUGpWppLBy1p6pLITiY8AuBez8Hu/y/23k90DdhOKWrZJ0hhA6C+vEs6UVIzVb AIOVCGou+F513DIXGKsqcqjUdeSUtKK16xTdWXLtLQ7Ool0v3PQX45ONoA7M5AaK vyy9XPeImtyRfQtD4E4VNx/GKGjFTFR8i6llXxqXlUrrHUMaeROm/nf6qoIjU1ZF u50XIdJpiQ+8KZKvZPZeIXqR41cGTp/3lKZGKc2Xwc9PauGkX4H4FxZdNDvBrGRU HBfLrtJUmockfbQnUHt0RutB1/had4hxXZ3Al7yJvr1U7CV+ZWddgaTDDwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI5FdKaEaRGm47PBm5xRafhvSwKOMB8GA1UdIwQY MBaAFMOkn2Wj1oDEKP2U1n5lonCfApLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQt ZjMzNzk3ZTM5YmIyLzEvamtWMHBvUnBFYWJqczhHYm5GRnAtRzlMQW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQtZjMzNzk3ZTM5YmIy LzEvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXVwAwQA wy/oMA0EAgACMAcDBQAqDDGAMA0GCSqGSIb3DQEBCwUAA4IBAQAAEmVHtxDhiDf1 q2LJr+nY8DLjbgR6JaeD5VCeq8zTKnLZq7xC0mqq/ahpP8qT7HPesYa4BeyBJrTG HfC5+IAftsHy7mp3N+toxgOEUAke1sWiiOpjXgPgNO0RoCh3qQJGFfmAvRJI/wgK NuPPyeHaTiwLvmWGnVAVPbGd/Shc6l4Ct9CVnzOHyQK3bpGWRthKje+s549TA/pc R1acIULxL+HJt7j/2YGDXyGD7GqAVXk8Rq76dwSp6YZuSQnkSr8blsQwuGkiP2CG N1Yn0KdINrWmNl8PFfw30AghoCJ3dHgpnlQ9pXGcb/WF7PZz+R4xIIU402+aANe+ KAlSxZWw -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:25 2026 by rpki-client