This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/JL1o6upPnIKdVbHUy_Ef2-ANX44.roa File: JL1o6upPnIKdVbHUy_Ef2-ANX44.roa (raw, json) Hash identifier: 3XMBFcXTXxWpf6Am9wDF23AjMe5aTPM0s8HS5SFHSAA= Subject key identifier: 24:BD:68:EA:EA:4F:9C:82:9D:55:B1:D4:CB:F1:1F:DB:E0:0D:5F:8E Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203 Certificate serial: 019B797E14FEA2FC8634583E56BE68844834 Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/JL1o6upPnIKdVbHUy_Ef2-ANX44.roa Signing time: Thu 01 Jan 2026 12:17:44 +0000 ROA not before: Thu 01 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43232 IP address blocks: 185.123.184.0/22 maxlen: 22 2a03:9120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:14:fe:a2:fc:86:34:58:3e:56:be:68:84:48:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24bd68eaea4f9c829d55b1d4cbf11fdbe00d5f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:18:25:3b:9c:71:88:29:9a:e7:56:7c:bd: e6:67:0d:ac:4c:17:cd:61:c0:8f:89:e0:95:6d:b0: 7b:46:3f:10:a6:36:e1:f8:d3:cb:c3:ab:a3:b6:c9: 8a:f5:99:9a:78:55:93:52:1c:42:83:95:d2:22:e6: a5:c9:da:b8:30:f2:af:7c:31:96:fb:ae:54:b8:c9: 15:a9:eb:d6:6f:e2:14:42:ec:6f:a8:8c:ee:c2:ca: 31:cf:d7:bf:90:68:16:10:0c:40:07:f2:39:76:56: bb:5a:95:b8:da:d8:40:4b:10:b7:40:49:44:c6:47: 29:1c:56:8a:26:ca:b6:63:97:8d:16:93:80:df:0d: af:9d:19:15:c4:89:e3:fa:14:42:52:65:2b:88:3c: 08:69:eb:68:83:00:09:25:64:58:ac:01:84:74:68: 28:15:7d:ed:dc:ca:c6:f8:23:b2:1f:59:d3:89:29: 3a:88:a1:2b:9d:72:4e:aa:e1:45:f1:cc:6a:30:50: 0f:8c:98:62:eb:07:ac:94:e7:60:44:1b:84:da:32: 5f:c0:31:36:e9:9a:d9:37:5c:43:82:8b:1a:7b:c0: 81:ed:1b:43:ea:e3:ca:e0:18:99:88:ac:5d:fc:0a: 85:5c:4d:04:bd:41:ac:99:e5:73:2e:eb:69:ce:b7: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BD:68:EA:EA:4F:9C:82:9D:55:B1:D4:CB:F1:1F:DB:E0:0D:5F:8E X509v3 Authority Key Identifier: keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/JL1o6upPnIKdVbHUy_Ef2-ANX44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.184.0/22 IPv6: 2a03:9120::/32 Signature Algorithm: sha256WithRSAEncryption 7c:86:94:f5:38:21:47:a8:ab:4b:ae:88:5e:b8:f0:39:5d:c3: 8d:be:c6:0c:6f:0a:b0:82:4b:fa:81:6d:66:00:4c:a6:ac:dd: a3:bd:ca:46:60:b4:66:ca:e2:5a:28:06:76:e4:49:cf:4f:77: e9:ad:2f:51:73:96:c7:a2:6d:1d:d5:18:9d:69:e3:02:77:47: c7:da:30:9a:27:7c:78:29:1f:3e:21:5d:cc:79:88:93:3d:28: cf:db:4e:e3:9e:34:30:8b:90:3e:9f:4d:5b:5a:26:84:7a:65: ba:84:1e:d3:9b:12:95:41:76:f8:8a:3b:b1:6b:17:e8:48:d8: 81:0c:2d:13:fb:53:13:d2:b5:9e:3d:6e:89:92:69:a6:6c:b8: 6b:23:e3:f5:bc:f9:45:d7:1d:a8:9e:4f:15:65:35:57:03:6d: 0f:c4:4e:c9:73:d9:9f:c9:98:ed:8f:1e:91:1d:1f:40:5a:1d: c1:20:f0:6a:cf:a7:61:08:a0:52:de:70:c7:2b:00:49:3b:96: 55:94:a0:fd:34:ad:a0:59:bb:ad:e3:96:8a:03:50:ea:a7:ee: cd:ce:52:b4:a6:37:67:62:97:80:ac:6b:54:5c:63:9f:60:82: 51:e5:61:89:1a:95:66:3a:dc:0b:07:53:06:a5:af:85:eb:9d: fe:76:69:c2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fhT+ovyGNFg+Vr5ohEg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1 OGQyMDMwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGJkNjhlYWVhNGY5YzgyOWQ1NWIxZDRjYmYxMWZkYmUwMGQ1ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AUYJTuccYgpmudWfL3mZw2sTBfN YcCPieCVbbB7Rj8Qpjbh+NPLw6ujtsmK9ZmaeFWTUhxCg5XSIualydq4MPKvfDGW +65UuMkVqevWb+IUQuxvqIzuwsoxz9e/kGgWEAxAB/I5dla7WpW42thASxC3QElE xkcpHFaKJsq2Y5eNFpOA3w2vnRkVxInj+hRCUmUriDwIaetogwAJJWRYrAGEdGgo FX3t3MrG+COyH1nTiSk6iKErnXJOquFF8cxqMFAPjJhi6weslOdgRBuE2jJfwDE2 6ZrZN1xDgosae8CB7RtD6uPK4BiZiKxd/AqFXE0EvUGsmeVzLutpzreyjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCS9aOrqT5yCnVWx1MvxH9vgDV+OMB8GA1UdIwQY MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt MzY5Y2Q4YmUyNWZlLzEvSkwxbzZ1cFBuSUtkVmJIVXlfRWYyLUFOWDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXu4MA0E AgACMAcDBQAqA5EgMA0GCSqGSIb3DQEBCwUAA4IBAQB8hpT1OCFHqKtLroheuPA5 XcONvsYMbwqwgkv6gW1mAEymrN2jvcpGYLRmyuJaKAZ25EnPT3fprS9Rc5bHom0d 1RidaeMCd0fH2jCaJ3x4KR8+IV3MeYiTPSjP207jnjQwi5A+n01bWiaEemW6hB7T mxKVQXb4ijuxaxfoSNiBDC0T+1MT0rWePW6JkmmmbLhrI+P1vPlF1x2onk8VZTVX A20PxE7Jc9mfyZjtjx6RHR9AWh3BIPBqz6dhCKBS3nDHKwBJO5ZVlKD9NK2gWbut 45aKA1Dqp+7NzlK0pjdnYpeArGtUXGOfYIJR5WGJGpVmOtwLB1MGpa+F653+dmnC -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:33 2026 by rpki-client