This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/JeyyXekrP9-O0pqFzDG-ct1765w.roa File: JeyyXekrP9-O0pqFzDG-ct1765w.roa (raw, json) Hash identifier: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8= Subject key identifier: 25:EC:B2:5D:E9:2B:3F:DF:8E:D2:9A:85:CC:31:BE:72:DD:7B:EB:9C Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f Certificate serial: 019BF9D227C7E9BF546A70B746F0F446B53D Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/JeyyXekrP9-O0pqFzDG-ct1765w.roa Signing time: Mon 26 Jan 2026 10:20:58 +0000 ROA not before: Mon 26 Jan 2026 10:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 194.55.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:d2:27:c7:e9:bf:54:6a:70:b7:46:f0:f4:46:b5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f Validity Not Before: Jan 26 10:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25ecb25de92b3fdf8ed29a85cc31be72dd7beb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:36:c7:12:3c:04:50:7e:14:6e:00:f0:f4: d9:b8:9d:12:08:a2:4b:fe:ac:46:48:3a:a5:d1:78: d7:80:11:e0:c9:ca:34:48:ac:1e:ec:94:10:cd:85: e9:89:62:f6:90:e8:0b:73:b6:10:20:e5:0e:28:ea: 52:4f:da:3c:13:37:0e:55:d2:6d:10:48:aa:7c:2c: 9b:dc:78:b0:2e:57:ab:78:d4:0c:aa:46:53:ee:64: 40:6b:5c:4f:df:59:06:93:db:e1:99:2d:9f:25:d1: a7:69:ea:ef:50:ab:6d:f7:61:3f:9c:58:82:24:a7: ba:9e:cd:27:ae:d0:1d:fe:b2:ce:0b:bf:83:a3:7f: cf:df:d4:d7:fd:e4:2f:8b:ee:fb:5c:be:b0:c6:b4: 57:39:24:5c:6a:59:35:a7:eb:3e:96:f1:b2:bf:20: 32:ad:12:03:1e:47:fc:e8:48:73:22:c4:79:5c:c3: f4:c4:b9:a3:58:a1:f2:5a:8e:1b:4f:79:74:2a:11: b0:5f:35:0f:18:b4:75:78:57:2d:7e:10:c6:32:98: d6:ff:43:fd:f2:fc:a5:70:36:0d:25:a3:8c:c9:c2: 8d:1a:59:6b:30:09:99:b3:01:95:56:53:1c:02:7f: 51:5d:4a:c3:33:26:8b:75:15:37:bb:e7:56:a9:03: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EC:B2:5D:E9:2B:3F:DF:8E:D2:9A:85:CC:31:BE:72:DD:7B:EB:9C X509v3 Authority Key Identifier: keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/JeyyXekrP9-O0pqFzDG-ct1765w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.112.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:5b:d7:17:6b:6a:a0:2c:4d:fd:b8:37:32:01:26:a9:06:23: db:7a:bf:bc:ff:67:ee:59:51:01:48:0a:ea:11:e1:44:de:02: 52:f2:29:84:df:26:32:5c:87:8c:14:be:82:b1:11:4d:08:46: 68:03:3b:cc:03:73:67:d2:a0:3b:3c:25:8f:2c:cc:93:4d:c8: 3c:bc:e3:c2:27:ef:f9:ee:45:0f:a5:19:71:cc:4e:fb:ac:ba: 34:1a:1f:69:7a:f2:10:04:25:2f:a0:11:a8:e3:15:5b:11:1d: 87:66:86:4b:05:f3:ad:ce:0e:5d:b6:ba:da:6a:0b:3e:58:4d: 75:7f:3c:5a:21:30:84:b2:a4:a4:a4:9d:dc:f7:db:3a:18:be: 35:3b:9f:96:b9:10:48:f5:45:45:27:ba:b8:78:01:e8:af:33: 2c:2f:3e:69:0c:f7:11:a0:3e:1e:02:32:1a:8b:c4:ea:48:10: 4e:e9:1d:f4:91:21:96:17:c4:ec:10:6d:61:e9:a9:dc:78:fe: 22:49:b2:8f:66:b6:47:85:fc:40:e9:6a:04:b9:1e:d1:fb:60: 71:4e:86:32:a7:56:ba:4e:f7:df:1c:73:21:9e:71:96:72:9a: 5c:52:54:64:49:04:8c:14:5c:01:98:4f:ce:0d:19:ba:65:6f: 03:e4:b8:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv50ifH6b9UanC3RvD0RrU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTM4YjIzYzFkM2JkYzRjMWE5M2NlOTJkZTc3YjNjN2M4 MzU4M2YwHhcNMjYwMTI2MTAyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWVjYjI1ZGU5MmIzZmRmOGVkMjlhODVjYzMxYmU3MmRkN2JlYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEQ2xxI8BFB+FG4A8PTZuJ0SCKJL /qxGSDql0XjXgBHgyco0SKwe7JQQzYXpiWL2kOgLc7YQIOUOKOpST9o8EzcOVdJt EEiqfCyb3HiwLlereNQMqkZT7mRAa1xP31kGk9vhmS2fJdGnaervUKtt92E/nFiC JKe6ns0nrtAd/rLOC7+Do3/P39TX/eQvi+77XL6wxrRXOSRcalk1p+s+lvGyvyAy rRIDHkf86EhzIsR5XMP0xLmjWKHyWo4bT3l0KhGwXzUPGLR1eFctfhDGMpjW/0P9 8vylcDYNJaOMycKNGllrMAmZswGVVlMcAn9RXUrDMyaLdRU3u+dWqQO00wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXssl3pKz/fjtKahcwxvnLde+ucMB8GA1UdIwQY MBaAFIwTiyPB073Ewak86S3nezx8g1g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4Yzgt ODM4MzA3YmU0ZmFhLzEvSmV5eVhla3JQOS1PMHBxRnpERy1jdDE3NjV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4YzgtODM4MzA3YmU0ZmFh LzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwjdwMA0G CSqGSIb3DQEBCwUAA4IBAQCaW9cXa2qgLE39uDcyASapBiPber+8/2fuWVEBSArq EeFE3gJS8imE3yYyXIeMFL6CsRFNCEZoAzvMA3Nn0qA7PCWPLMyTTcg8vOPCJ+/5 7kUPpRlxzE77rLo0Gh9pevIQBCUvoBGo4xVbER2HZoZLBfOtzg5dtrraags+WE11 fzxaITCEsqSkpJ3c99s6GL41O5+WuRBI9UVFJ7q4eAHorzMsLz5pDPcRoD4eAjIa i8TqSBBO6R30kSGWF8TsEG1h6anceP4iSbKPZrZHhfxA6WoEuR7R+2BxToYyp1a6 TvffHHMhnnGWcppcUlRkSQSMFFwBmE/ODRm6ZW8D5Lhq -----END CERTIFICATE-----Generated at Mon Jan 26 21:33:20 2026 by rpki-client