This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/jWDr3wDugKmfFHaWOIXK3rm3KBM.roa File: jWDr3wDugKmfFHaWOIXK3rm3KBM.roa (raw, json) Hash identifier: t/jm2gNNlq/4NY3+0/h6qliZGJIxWHdoCDUSrWKpxvQ= Subject key identifier: 8D:60:EB:DF:00:EE:80:A9:9F:14:76:96:38:85:CA:DE:B9:B7:28:13 Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647 Certificate serial: 019B7A5ACFA98D772B077E72BF31F7C85EEF Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/jWDr3wDugKmfFHaWOIXK3rm3KBM.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204006 IP address blocks: 185.117.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cf:a9:8d:77:2b:07:7e:72:bf:31:f7:c8:5e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d60ebdf00ee80a99f1476963885cadeb9b72813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:de:b9:90:65:78:18:15:1b:ff:f5:e1:4a: 76:46:a6:d0:89:9e:62:80:a7:ec:95:ed:b8:ec:ca: 83:ea:e2:e2:92:35:61:f4:b7:78:26:5e:30:f7:0b: 74:29:a3:dc:a9:ec:2b:92:4b:99:62:fd:f4:d9:be: 3b:f2:8b:da:dc:66:8d:43:c5:f6:7c:4d:a2:24:cc: 63:5c:91:a7:a6:66:9f:e6:81:51:21:dd:ed:9e:9c: 2f:09:fb:73:8e:eb:39:55:a4:c8:39:3c:f9:18:50: 6e:9f:cd:3d:60:91:09:a5:ee:e2:60:32:15:90:85: c6:2c:c0:51:b9:3b:42:f1:51:b1:98:23:cb:e4:ed: e2:b9:c5:97:8d:dd:16:c0:4b:79:4e:12:8d:fa:84: 36:94:6f:79:0c:ce:18:d0:56:e4:d4:81:8e:24:85: b1:39:10:24:dc:ca:ad:3c:9b:a6:47:eb:60:59:62: 22:4f:f0:e1:cf:5e:a7:91:bb:a9:17:1b:e8:4c:7e: 4a:b9:0a:3f:8a:db:95:c2:9c:1f:90:92:ce:f5:a9: 0e:a4:ed:e6:e6:5c:cf:8f:90:5c:70:eb:5e:1c:fd: 0a:36:7e:4c:7f:0c:e3:ed:20:04:8f:04:79:21:a7: e2:6e:14:68:d0:ce:1f:8e:32:25:d6:b5:87:b9:2f: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:60:EB:DF:00:EE:80:A9:9F:14:76:96:38:85:CA:DE:B9:B7:28:13 X509v3 Authority Key Identifier: keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/jWDr3wDugKmfFHaWOIXK3rm3KBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.135.0/24 Signature Algorithm: sha256WithRSAEncryption b0:24:0c:65:d9:61:41:ba:6d:6b:ef:d6:2e:a9:cd:1c:67:d4: b3:e2:5e:af:c4:40:ed:75:17:25:4d:75:63:5e:ac:8b:f1:2e: 63:5f:68:44:b2:57:9c:6f:73:4c:53:49:de:23:a9:f5:26:0d: 51:1e:f1:37:db:23:b0:b9:3e:3f:2b:89:73:ab:4a:c9:3d:68: fb:d0:be:d5:92:e4:56:fc:bc:8f:68:79:07:ae:6c:28:03:f8: 30:5f:7d:c4:f3:4d:1c:1b:2f:47:ef:d3:26:5e:39:f6:a9:90: e8:73:0b:88:45:78:3c:64:eb:cf:a3:50:fe:68:f7:b6:f4:38: 2f:49:83:6b:e0:e7:5a:8f:ac:fd:af:29:18:97:26:95:70:32: 35:be:b5:21:11:ad:a0:62:eb:d3:97:a1:01:1c:ae:29:78:3b: c4:0a:bd:db:a8:15:30:1b:d6:3f:70:6d:45:85:6f:89:d3:2a: f9:68:5a:4a:42:4e:34:ad:49:c9:ae:42:af:fb:ca:2f:8b:f3: 5a:59:58:8d:c1:c8:94:4d:60:df:08:de:df:de:31:a9:fe:65: 87:85:31:e2:ab:57:3c:27:4e:d4:27:a7:93:01:d8:14:d5:87: 44:63:79:0b:c1:08:3e:4e:22:ed:8b:9a:8a:83:4f:94:c1:5b: cc:ea:77:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws+pjXcrB35yvzH3yF7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx MjE2NDcwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDYwZWJkZjAwZWU4MGE5OWYxNDc2OTYzODg1Y2FkZWI5YjcyODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9neuZBleBgVG//14Up2RqbQiZ5i gKfsle247MqD6uLikjVh9Ld4Jl4w9wt0KaPcqewrkkuZYv302b478ova3GaNQ8X2 fE2iJMxjXJGnpmaf5oFRId3tnpwvCftzjus5VaTIOTz5GFBun809YJEJpe7iYDIV kIXGLMBRuTtC8VGxmCPL5O3iucWXjd0WwEt5ThKN+oQ2lG95DM4Y0Fbk1IGOJIWx ORAk3MqtPJumR+tgWWIiT/Dhz16nkbupFxvoTH5KuQo/ituVwpwfkJLO9akOpO3m 5lzPj5BccOteHP0KNn5Mfwzj7SAEjwR5IafibhRo0M4fjjIl1rWHuS9QjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1g698A7oCpnxR2ljiFyt65tygTMB8GA1UdIwQY MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt YjE1YjNmYmMwNGE2LzEvaldEcjN3RHVnS21mRkhhV09JWEszcm0zS0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2 LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXWHMA0G CSqGSIb3DQEBCwUAA4IBAQCwJAxl2WFBum1r79Yuqc0cZ9Sz4l6vxEDtdRclTXVj XqyL8S5jX2hEslecb3NMU0neI6n1Jg1RHvE32yOwuT4/K4lzq0rJPWj70L7VkuRW /LyPaHkHrmwoA/gwX33E800cGy9H79MmXjn2qZDocwuIRXg8ZOvPo1D+aPe29Dgv SYNr4Odaj6z9rykYlyaVcDI1vrUhEa2gYuvTl6EBHK4peDvECr3bqBUwG9Y/cG1F hW+J0yr5aFpKQk40rUnJrkKv+8ovi/NaWViNwciUTWDfCN7f3jGp/mWHhTHiq1c8 J07UJ6eTAdgU1YdEY3kLwQg+TiLti5qKg0+UwVvM6nff -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:10 2026 by rpki-client