This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JJJWUYnlC2FD4t4ZuUg-A4OOp7M.roa File: JJJWUYnlC2FD4t4ZuUg-A4OOp7M.roa (raw, json) Hash identifier: VhmECDUAHwgCmCiha/5x181NaLaXSSz+rMELG8xP/t8= Subject key identifier: 24:92:56:51:89:E5:0B:61:43:E2:DE:19:B9:48:3E:03:83:8E:A7:B3 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B356A266105058751037DDCC064ACD5 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JJJWUYnlC2FD4t4ZuUg-A4OOp7M.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39347 IP address blocks: 85.121.208.0/21 maxlen: 24 85.122.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6a:26:61:05:05:87:51:03:7d:dc:c0:64:ac:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2492565189e50b6143e2de19b9483e03838ea7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:50:a4:dd:2b:df:67:f2:6c:54:1a:8d:32: 15:da:b0:9b:93:94:47:a0:03:3b:70:f8:5f:ac:42: 32:35:20:9c:f4:27:8f:0a:b9:71:4d:48:5c:a3:5a: 22:71:ef:62:cf:a3:de:ae:bd:5d:95:34:14:c8:16: e9:5d:9c:91:24:33:9b:a1:9b:eb:a4:e5:f7:42:b5: 36:d2:33:84:33:fa:d6:47:98:cf:91:56:39:75:f0: 79:1c:be:50:b0:22:04:9d:3b:25:4c:14:ac:e9:59: 16:2f:39:74:2e:07:6a:b2:4b:a0:98:15:76:fd:f6: d3:84:fb:15:00:74:33:ab:04:c8:bb:e2:ec:8b:81: fe:b7:ff:f1:34:6c:ea:7e:a9:e1:7c:e4:fd:1a:48: 34:6d:91:ac:4f:f0:f8:ae:71:bc:61:b5:f2:e2:ea: 47:e8:92:55:c6:8b:a7:75:08:b6:86:fc:c9:8f:d8: b8:45:6a:32:95:e9:d0:0f:96:d5:49:14:f7:d1:f6: f8:08:d4:bb:b1:fe:97:20:35:75:e6:f7:64:61:ad: bc:ba:0a:c6:1e:11:63:55:45:8f:83:0b:b4:7c:5b: 88:9a:c4:75:cc:98:50:63:a3:2d:92:e9:54:33:39: 0f:48:6e:c6:ae:04:3c:76:f1:67:67:c5:fc:a6:c9: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:56:51:89:E5:0B:61:43:E2:DE:19:B9:48:3E:03:83:8E:A7:B3 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JJJWUYnlC2FD4t4ZuUg-A4OOp7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.121.208.0/21 85.122.120.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:75:64:a7:88:02:d8:48:ff:3d:74:68:bb:af:e3:bc:e0:79: a5:e7:3d:82:40:24:ec:a1:11:44:af:f6:5d:98:85:35:ed:ca: cd:3e:a8:d6:e8:b0:ab:fc:c4:ec:42:b1:7b:15:fd:21:6b:4a: 5a:e0:1e:11:17:2b:e3:29:77:81:c7:90:71:e9:22:6f:ca:96: 42:b2:07:a0:b9:19:3c:ea:60:57:65:67:ce:f6:25:f4:41:51: e4:88:48:81:d4:24:73:fb:21:cd:62:38:f6:3b:9e:fa:91:b3: 31:26:70:82:9d:9d:d7:ea:6b:a3:29:6b:6a:78:99:0f:8b:ee: 34:bf:75:61:c4:61:50:06:99:e5:16:0c:66:ed:3f:b1:3b:a3: 53:2c:27:d2:af:e6:83:bc:91:fa:5e:14:99:ad:2d:90:f6:9d: 27:e7:e4:08:41:2a:55:29:0d:bd:ab:f6:0c:9b:e0:68:78:c7: 0b:43:61:7f:3e:8e:cf:08:d6:cc:e2:83:c6:e1:e2:2f:4a:cd: 77:f5:f1:94:8e:ba:e0:ed:77:97:8d:0b:89:00:4a:ac:59:94: 8f:a6:ce:85:9c:11:58:79:04:1d:36:dd:ac:b8:ef:4c:9e:0b: 4b:0f:9f:78:5a:44:2b:68:f6:13:38:c7:5a:5e:7f:4d:e3:a7: 76:94:c7:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NWomYQUFh1EDfdzAZKzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkyNTY1MTg5ZTUwYjYxNDNlMmRlMTliOTQ4M2UwMzgzOGVhN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtepQpN0r32fybFQajTIV2rCbk5RH oAM7cPhfrEIyNSCc9CePCrlxTUhco1oice9iz6Perr1dlTQUyBbpXZyRJDOboZvr pOX3QrU20jOEM/rWR5jPkVY5dfB5HL5QsCIEnTslTBSs6VkWLzl0LgdqskugmBV2 /fbThPsVAHQzqwTIu+Lsi4H+t//xNGzqfqnhfOT9Gkg0bZGsT/D4rnG8YbXy4upH 6JJVxoundQi2hvzJj9i4RWoylenQD5bVSRT30fb4CNS7sf6XIDV15vdkYa28ugrG HhFjVUWPgwu0fFuImsR1zJhQY6MtkulUMzkPSG7GrgQ8dvFnZ8X8psnIawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCSSVlGJ5QthQ+LeGblIPgODjqezMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvSkpKV1VZbmxDMkZENHQ0WnVVZy1BNE9PcDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVXnQAwQC VXp4MA0GCSqGSIb3DQEBCwUAA4IBAQAKdWSniALYSP89dGi7r+O84Hml5z2CQCTs oRFEr/ZdmIU17crNPqjW6LCr/MTsQrF7Ff0ha0pa4B4RFyvjKXeBx5Bx6SJvypZC sgeguRk86mBXZWfO9iX0QVHkiEiB1CRz+yHNYjj2O576kbMxJnCCnZ3X6mujKWtq eJkPi+40v3VhxGFQBpnlFgxm7T+xO6NTLCfSr+aDvJH6XhSZrS2Q9p0n5+QIQSpV KQ29q/YMm+BoeMcLQ2F/Po7PCNbM4oPG4eIvSs139fGUjrrg7XeXjQuJAEqsWZSP ps6FnBFYeQQdNt2suO9MngtLD594WkQraPYTOMdaXn9N46d2lMcH -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:03 2026 by rpki-client