This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa File: JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa (raw, json) Hash identifier: u5PsqVAMH7Yc5b8Mh+/CsUxDWS3RTBQzxJkkDCsiaVs= Subject key identifier: 26:30:E1:8F:6B:2B:99:50:0F:DC:04:F6:AB:FB:9A:7C:56:7D:22:1C Certificate issuer: /CN=0291d4de130da6aace22ed99650be182497e0bcf Certificate serial: 019B77C6DE585A255E6128933286ECDC93FD Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25415 IP address blocks: 185.27.8.0/22 maxlen: 22 193.107.184.0/22 maxlen: 22 2a00:8920::/32 maxlen: 32 2a0c:9bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:de:58:5a:25:5e:61:28:93:32:86:ec:dc:93:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2630e18f6b2b99500fdc04f6abfb9a7c567d221c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:03:6b:f6:c1:14:39:ee:2a:51:67:d0:1c: f5:1f:fc:53:d2:64:ba:77:e9:ba:0f:ee:cc:6a:b5: c2:19:93:aa:3f:4a:3f:c0:69:47:51:a5:5d:c4:c3: d5:94:0f:ed:38:4a:f3:80:d9:c0:44:92:6b:d6:2c: 01:ef:05:fc:b3:b8:1e:e8:8b:e4:a6:2e:d4:d2:f0: ad:ed:0b:fa:f7:d0:0b:cd:93:38:37:b6:9b:87:0c: 27:0d:de:1d:32:ed:91:5e:bc:3a:23:5b:e1:a6:47: 4c:0c:06:0e:17:24:d7:58:22:ee:db:2f:1e:45:39: de:78:ed:d7:84:47:b1:af:d2:14:a8:7b:6c:73:52: 2b:84:4d:b4:eb:10:f3:8b:35:a1:ee:c6:c1:19:4a: 19:f3:41:aa:0c:1c:92:c3:09:b7:d0:04:95:6a:ad: d5:da:7a:73:ee:3e:7e:fe:7f:ef:c6:38:5a:3c:de: 2e:e4:e3:b0:a2:ef:6d:06:5d:7f:9d:e2:33:fb:57: 73:74:2c:b1:fc:fb:04:7b:65:5d:c3:86:eb:84:ec: bb:9f:87:f2:ed:94:02:a0:d1:6c:76:f4:38:6b:14: c4:03:83:23:ab:a5:de:8e:9e:c0:7c:d4:1d:87:ab: c2:8c:23:4e:aa:3c:05:65:b1:28:46:99:34:dd:4e: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:E1:8F:6B:2B:99:50:0F:DC:04:F6:AB:FB:9A:7C:56:7D:22:1C X509v3 Authority Key Identifier: keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.8.0/22 193.107.184.0/22 IPv6: 2a00:8920::/32 2a0c:9bc0::/29 Signature Algorithm: sha256WithRSAEncryption 23:97:83:9c:e0:9b:30:77:9c:e8:ad:e5:89:ae:1e:b6:bb:c2: c6:1b:0b:7b:91:5c:9a:7c:a2:f3:6a:9e:c1:48:7d:64:1b:a5: b3:63:e0:a6:9e:e3:0a:ee:ae:f8:96:92:0a:ab:91:78:d5:a1: 2a:26:7a:bf:27:04:72:4e:e8:f8:1e:9c:b1:b9:eb:6c:45:c2: 34:ba:69:1d:7f:32:9b:08:ac:ec:58:ca:40:e4:1c:e9:dd:db: 10:5c:b8:65:2b:da:a2:ea:42:0b:33:f4:6a:f7:ff:cb:a1:c4: 51:67:43:67:35:36:6a:b4:cd:c4:4a:15:48:d1:2b:7c:fd:20: ca:8e:fa:a9:b6:08:e6:93:8c:c2:6b:75:b2:3f:84:65:be:46: 72:c1:4e:0f:57:2a:66:de:ce:56:18:10:ff:ab:18:ad:36:fb: 19:a3:62:b3:c5:77:b8:3b:9c:97:66:c2:a8:f8:46:47:73:6a: 42:22:4f:b0:e2:88:4a:da:cc:8b:db:87:5a:16:b2:bc:0c:be: a3:1c:65:b5:13:a6:02:c4:91:a7:c1:85:8b:d2:47:2c:61:29: b8:7d:67:41:f2:a3:c0:bd:15:9d:9e:71:fb:46:02:b9:24:8e: 40:33:57:a9:7b:dd:73:71:1a:88:0c:11:92:02:b3:17:76:82: 95:a1:a5:68 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3xt5YWiVeYSiTMobs3JP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTFkNGRlMTMwZGE2YWFjZTIyZWQ5OTY1MGJlMTgyNDk3 ZTBiY2YwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjMwZTE4ZjZiMmI5OTUwMGZkYzA0ZjZhYmZiOWE3YzU2N2QyMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA458Da/bBFDnuKlFn0Bz1H/xT0mS6 d+m6D+7MarXCGZOqP0o/wGlHUaVdxMPVlA/tOErzgNnARJJr1iwB7wX8s7ge6Ivk pi7U0vCt7Qv699ALzZM4N7abhwwnDd4dMu2RXrw6I1vhpkdMDAYOFyTXWCLu2y8e RTneeO3XhEexr9IUqHtsc1IrhE206xDzizWh7sbBGUoZ80GqDBySwwm30ASVaq3V 2npz7j5+/n/vxjhaPN4u5OOwou9tBl1/neIz+1dzdCyx/PsEe2Vdw4brhOy7n4fy 7ZQCoNFsdvQ4axTEA4Mjq6Xejp7AfNQdh6vCjCNOqjwFZbEoRpk03U4phQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCYw4Y9rK5lQD9wE9qv7mnxWfSIcMB8GA1UdIwQY MBaAFAKR1N4TDaaqziLtmWUL4YJJfgvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBIVTNoTU5wcXJPSXUyWlpRdmhna2wtQzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hOWE0NzktOWUyZi00Y2IwLThkZWQt Nzc4MTY4MTA3N2Y3LzEvSmpEaGoyc3JtVkFQM0FUMnFfdWFmRlo5SWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hOWE0NzktOWUyZi00Y2IwLThkZWQtNzc4MTY4MTA3N2Y3 LzEvQXBIVTNoTU5wcXJPSXUyWlpRdmhna2wtQzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuRsIAwQC wWu4MBQEAgACMA4DBQAqAIkgAwUDKgybwDANBgkqhkiG9w0BAQsFAAOCAQEAI5eD nOCbMHec6K3lia4etrvCxhsLe5Fcmnyi82qewUh9ZBuls2Pgpp7jCu6u+JaSCquR eNWhKiZ6vycEck7o+B6csbnrbEXCNLppHX8ymwis7FjKQOQc6d3bEFy4ZSvaoupC CzP0avf/y6HEUWdDZzU2arTNxEoVSNErfP0gyo76qbYI5pOMwmt1sj+EZb5GcsFO D1cqZt7OVhgQ/6sYrTb7GaNis8V3uDucl2bCqPhGR3NqQiJPsOKIStrMi9uHWhay vAy+oxxltROmAsSRp8GFi9JHLGEpuH1nQfKjwL0VnZ5x+0YCuSSOQDNXqXvdc3Ea iAwRkgKzF3aClaGlaA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:34 2026 by rpki-client