This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jkioZ7sMtN29opHHMof3tv_YZR0.roa File: jkioZ7sMtN29opHHMof3tv_YZR0.roa (raw, json) Hash identifier: z+ea8bYxi98v1D0ZT+9JXvz7vJ4jYL4VA16/BZkZvwM= Subject key identifier: 8E:48:A8:67:BB:0C:B4:DD:BD:A2:91:C7:32:87:F7:B6:FF:D8:65:1D Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844A23FFB6DAA7731C033B23A273E1 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jkioZ7sMtN29opHHMof3tv_YZR0.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198513 IP address blocks: 185.227.81.0/24 maxlen: 24 194.146.45.0/24 maxlen: 24 2a0b:3c40:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4a:23:ff:b6:da:a7:73:1c:03:3b:23:a2:73:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e48a867bb0cb4ddbda291c73287f7b6ffd8651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:ab:7c:58:ec:66:ec:2c:c4:fc:34:de:8f: 6e:da:8f:d0:a1:53:0d:02:27:0c:b3:c3:1c:ec:c7: a0:30:4d:8f:c2:57:e5:8e:81:fc:1c:70:d5:e5:8f: 4b:e9:a8:37:f2:3a:09:a7:06:17:3b:f9:49:1c:91: ad:72:18:c9:ca:66:29:42:ea:ee:94:4b:92:42:5f: b4:16:9a:20:9c:d7:8f:25:f2:c7:6c:7b:bc:06:01: 57:cd:00:84:04:2b:3c:6c:73:bf:03:a3:22:1d:a5: 09:74:01:a1:07:fe:e2:bf:16:47:25:bb:d6:54:80: 7c:f5:4c:38:aa:40:b7:e0:29:50:15:91:cc:0d:99: b2:42:d8:f8:2a:3a:b2:9d:8f:16:fa:41:91:80:2a: a7:9d:22:28:01:51:bc:76:cb:7f:f9:02:f5:4c:5b: f9:e0:f2:82:7b:d4:b0:62:91:36:11:64:e7:ce:33: 2b:c5:2b:41:24:d1:42:f7:cb:05:d6:75:cb:85:c1: b8:5e:d6:1d:d6:f6:21:14:16:99:0b:bb:36:69:57: b6:a6:8b:3c:e7:f1:18:a1:29:1b:c4:d3:03:f6:b0: 45:90:04:0d:1f:8f:c2:4c:cc:51:76:a0:5a:b4:a9: ee:82:ff:87:8a:e8:0d:e6:c9:3d:cd:8e:95:3e:e6: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:48:A8:67:BB:0C:B4:DD:BD:A2:91:C7:32:87:F7:B6:FF:D8:65:1D X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/jkioZ7sMtN29opHHMof3tv_YZR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.81.0/24 194.146.45.0/24 IPv6: 2a0b:3c40:13::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b8:a6:b5:7c:77:dc:b4:9c:a8:4b:f2:05:9f:78:0b:90:c7: 8e:0b:77:8d:13:71:e2:5a:2f:ad:e6:8d:01:16:2b:83:e1:5c: 08:ef:20:4e:a1:5b:41:5b:b8:68:42:75:f5:e4:27:2a:9f:38: 43:1f:c0:de:70:3f:ba:1a:01:82:a3:9a:4e:a1:de:9e:d7:b3: a7:a4:fc:e7:f1:3d:d0:ba:38:01:ce:24:ae:ad:de:21:76:e3: 35:d8:60:57:6a:a8:9f:75:2d:3b:3d:79:61:4f:78:56:af:c7: 6f:80:a6:79:22:2d:67:5d:04:f0:3a:f1:4a:4f:49:65:d0:e3: 9d:52:9d:af:8b:bd:f4:18:18:0e:85:50:0a:f9:f6:9f:5f:1d: 4d:cb:c0:ff:a1:56:04:50:57:88:33:8e:d7:41:78:11:6f:e4: ae:81:8f:42:e2:d0:a6:d8:97:d9:5e:2b:2a:0e:6e:58:e9:ee: 12:5f:97:64:f9:e6:72:31:68:98:ee:ad:9c:e9:f6:8b:33:75: 26:f9:4c:e9:22:5c:e5:3f:3b:b1:0e:26:11:35:c8:7c:ab:4d: 98:ad:20:af:ab:4f:fb:b8:8a:fb:35:f7:fd:4a:df:f5:cd:10: ae:2e:92:60:64:cc:04:85:ed:12:24:12:46:ce:e2:e1:c0:82: 08:a7:67:f2 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/hEoj/7bap3McAzsjonPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ4YTg2N2JiMGNiNGRkYmRhMjkxYzczMjg3ZjdiNmZmZDg2NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMGrfFjsZuwsxPw03o9u2o/QoVMN AicMs8Mc7MegME2PwlfljoH8HHDV5Y9L6ag38joJpwYXO/lJHJGtchjJymYpQuru lEuSQl+0FpognNePJfLHbHu8BgFXzQCEBCs8bHO/A6MiHaUJdAGhB/7ivxZHJbvW VIB89Uw4qkC34ClQFZHMDZmyQtj4KjqynY8W+kGRgCqnnSIoAVG8dst/+QL1TFv5 4PKCe9SwYpE2EWTnzjMrxStBJNFC98sF1nXLhcG4XtYd1vYhFBaZC7s2aVe2pos8 5/EYoSkbxNMD9rBFkAQNH4/CTMxRdqBatKnugv+HiugN5sk9zY6VPuYCGQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFI5IqGe7DLTdvaKRxzKH97b/2GUdMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvamtpb1o3c010TjI5b3BISE1vZjN0dl9ZWlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAueNRAwQA wpItMA8EAgACMAkDBwAqCzxAABMwDQYJKoZIhvcNAQELBQADggEBAI64prV8d9y0 nKhL8gWfeAuQx44Ld40TceJaL63mjQEWK4PhXAjvIE6hW0FbuGhCdfXkJyqfOEMf wN5wP7oaAYKjmk6h3p7Xs6ek/OfxPdC6OAHOJK6t3iF24zXYYFdqqJ91LTs9eWFP eFavx2+ApnkiLWddBPA68UpPSWXQ451Sna+LvfQYGA6FUAr59p9fHU3LwP+hVgRQ V4gzjtdBeBFv5K6Bj0Li0KbYl9leKyoObljp7hJfl2T55nIxaJjurZzp9oszdSb5 TOkiXOU/O7EOJhE1yHyrTZitIK+rT/u4ivs19/1K3/XNEK4ukmBkzASF7RIkEkbO 4uHAgginZ/I= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:34 2026 by rpki-client