This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jo1dWWomSjATumsB1Osps0RvQqg.roa File: jo1dWWomSjATumsB1Osps0RvQqg.roa (raw, json) Hash identifier: c/3GMVw3KMzYk0KzqbNpqdq6A/ra9NHlg1VXcZj299Q= Subject key identifier: 8E:8D:5D:59:6A:26:4A:30:13:BA:6B:01:D4:EB:29:B3:44:6F:42:A8 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82E0EE35EFCC9E60F3820B0B88C2B8 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jo1dWWomSjATumsB1Osps0RvQqg.roa Signing time: Fri 02 Jan 2026 16:20:42 +0000 ROA not before: Fri 02 Jan 2026 16:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 78.108.216.0/24 maxlen: 24 185.234.72.0/24 maxlen: 24 193.31.28.0/24 maxlen: 24 193.34.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e0:ee:35:ef:cc:9e:60:f3:82:0b:0b:88:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8d5d596a264a3013ba6b01d4eb29b3446f42a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:33:b1:f9:b5:b0:9e:80:5e:b7:38:4b:05: 25:7e:21:6c:92:24:21:ff:85:3b:13:14:f0:5d:2b: fa:8a:62:e5:34:11:e1:03:4f:49:5e:88:63:81:de: f8:81:96:8a:80:02:25:05:79:ee:14:54:14:da:0e: 37:84:26:dd:28:94:e1:02:b8:23:b2:72:54:b9:f1: 2c:22:39:3f:cc:80:c8:df:f2:a3:28:ff:18:e9:e2: 73:8c:7f:49:f6:62:42:a4:4a:5d:73:fc:d3:ee:a4: f2:2c:6e:b6:6a:43:e5:37:4e:14:b0:78:18:3f:09: e5:2a:1b:68:d3:46:05:05:64:68:9f:fd:30:fa:f4: e4:34:4a:8f:1a:d2:c0:fc:bd:90:89:6c:8b:38:36: 27:d6:8e:7c:5d:9a:67:d2:ff:24:50:f7:52:11:3e: ee:ef:9c:f2:bc:0d:d1:c4:69:d8:82:25:9d:99:f1: 66:0f:5c:5f:b8:de:5f:3f:8b:fe:87:e4:f4:ac:39: 88:5e:3c:01:30:8d:46:94:04:ed:08:ca:d3:7b:d9: 19:75:9b:3e:12:dc:13:d1:fe:27:3a:30:81:7a:bd: ad:fe:2b:46:8d:d7:a8:69:39:4a:b3:61:7a:1d:52: 59:94:8b:7c:c7:47:17:74:39:6e:93:10:bd:04:cb: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:5D:59:6A:26:4A:30:13:BA:6B:01:D4:EB:29:B3:44:6F:42:A8 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jo1dWWomSjATumsB1Osps0RvQqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.216.0/24 185.234.72.0/24 193.31.28.0/24 193.34.77.0/24 Signature Algorithm: sha256WithRSAEncryption 83:89:0a:9e:48:e0:ce:d6:89:f3:fa:a2:c4:7f:91:49:93:c8: 4d:12:b7:60:0c:07:fc:e8:c0:1c:8c:bb:71:4e:e4:50:ea:07: b2:d7:69:55:73:90:d1:e0:ec:30:35:0f:44:6a:f3:0a:96:29: d2:c3:09:c3:5e:3c:ec:47:4a:1f:ac:74:a9:a7:fe:57:e1:d7: 76:ce:ed:c1:7a:60:d1:20:57:2c:8f:ae:60:fa:43:aa:65:c0: c7:86:87:8d:d1:0b:80:9b:41:97:59:f8:76:0b:7b:e1:ba:2a: 35:5d:77:8a:22:15:e5:1c:16:58:cc:0c:1a:8a:c8:26:c2:72: d9:35:86:43:e7:bb:e3:7f:69:38:44:a7:b0:5e:e5:f2:a4:0d: 32:ac:9e:ea:81:99:2c:05:50:8b:bc:b4:35:c1:9f:df:06:c6: 8b:10:55:8f:42:4c:12:57:b9:2e:3b:ee:2a:94:33:f1:87:98: eb:e1:8a:c2:74:37:b3:1f:d7:49:fb:36:4f:6a:0d:f9:73:d3: 02:29:1c:c0:aa:be:4d:b2:c9:8b:f8:36:21:67:35:14:b1:cd: 80:c3:df:dd:c9:f7:5b:5f:59:60:54:65:4a:66:b4:35:e4:cd: 5d:35:09:bd:01:82:e9:a2:2b:43:90:75:6b:b8:34:61:93:fe: c7:76:4b:dd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/guDuNe/MnmDzggsLiMK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThkNWQ1OTZhMjY0YTMwMTNiYTZiMDFkNGViMjliMzQ0NmY0MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF0zsfm1sJ6AXrc4SwUlfiFskiQh /4U7ExTwXSv6imLlNBHhA09JXohjgd74gZaKgAIlBXnuFFQU2g43hCbdKJThArgj snJUufEsIjk/zIDI3/KjKP8Y6eJzjH9J9mJCpEpdc/zT7qTyLG62akPlN04UsHgY PwnlKhto00YFBWRon/0w+vTkNEqPGtLA/L2QiWyLODYn1o58XZpn0v8kUPdSET7u 75zyvA3RxGnYgiWdmfFmD1xfuN5fP4v+h+T0rDmIXjwBMI1GlATtCMrTe9kZdZs+ EtwT0f4nOjCBer2t/itGjdeoaTlKs2F6HVJZlIt8x0cXdDlukxC9BMsckwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI6NXVlqJkowE7prAdTrKbNEb0KoMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvam8xZFdXb21TakFUdW1zQjFPc3BzMFJ2UXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATmzYAwQA uepIAwQAwR8cAwQAwSJNMA0GCSqGSIb3DQEBCwUAA4IBAQCDiQqeSODO1onz+qLE f5FJk8hNErdgDAf86MAcjLtxTuRQ6gey12lVc5DR4OwwNQ9EavMKlinSwwnDXjzs R0ofrHSpp/5X4dd2zu3BemDRIFcsj65g+kOqZcDHhoeN0QuAm0GXWfh2C3vhuio1 XXeKIhXlHBZYzAwaisgmwnLZNYZD57vjf2k4RKewXuXypA0yrJ7qgZksBVCLvLQ1 wZ/fBsaLEFWPQkwSV7kuO+4qlDPxh5jr4YrCdDezH9dJ+zZPag35c9MCKRzAqr5N ssmL+DYhZzUUsc2Aw9/dyfdbX1lgVGVKZrQ15M1dNQm9AYLpoitDkHVruDRhk/7H dkvd -----END CERTIFICATE-----Generated at Tue Jan 20 15:18:01 2026 by rpki-client