This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa File: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (raw, json) Hash identifier: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo= Subject key identifier: 25:ED:F1:1C:AD:A3:68:CE:A6:E5:2F:46:8B:28:6C:71:F5:95:F1:88 Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Certificate serial: 019B79110C733435E26520652359F4FB21E8 Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16045 IP address blocks: 87.120.125.0/24 maxlen: 24 87.121.18.0/24 maxlen: 24 94.156.92.0/24 maxlen: 24 109.206.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:73:34:35:e2:65:20:65:23:59:f4:fb:21:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25edf11cada368cea6e52f468b286c71f595f188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:06:6b:6b:4f:bd:80:1d:41:5e:3f:ea:78: 1f:b3:3b:34:e2:50:b8:49:1f:0c:99:66:c1:1c:71: f8:ca:05:8a:05:5e:ee:3e:3f:34:27:35:ec:5a:2c: b4:75:af:c2:19:86:0f:ff:e9:bb:60:b8:a7:fb:79: e0:8e:3b:99:4d:b3:bf:42:55:e9:55:88:b2:3c:85: 15:e0:1b:fb:f3:a0:59:1a:c4:87:6a:bc:b0:9d:0f: 5d:76:90:18:f8:ca:56:e2:10:63:a1:35:e7:28:30: ae:d6:d8:fb:c9:75:78:22:58:f9:86:7b:51:97:13: 6c:9e:6e:56:2d:2f:2b:68:e9:49:44:9c:6b:19:48: ba:3d:08:04:a4:68:61:e7:33:57:d3:31:b1:ec:b9: 15:fd:c9:19:5d:f6:4a:90:ef:b2:b6:97:00:77:31: 23:03:54:a9:7e:00:36:4f:65:55:b1:e9:e2:83:68: 95:e1:8e:f8:78:4a:6c:5c:f3:fd:47:8c:52:e6:fc: ed:72:90:ee:74:a1:97:7f:bc:bc:6a:b8:64:ca:c0: e3:8c:dd:19:09:0a:24:3b:a3:d4:48:75:7f:e2:b9: ff:b2:1c:48:6b:74:79:46:24:09:1f:d2:b6:3e:63: cc:f3:b0:0d:19:c0:5e:31:7e:b6:d3:91:6d:98:ca: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:ED:F1:1C:AD:A3:68:CE:A6:E5:2F:46:8B:28:6C:71:F5:95:F1:88 X509v3 Authority Key Identifier: keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.125.0/24 87.121.18.0/24 94.156.92.0/24 109.206.237.0/24 Signature Algorithm: sha256WithRSAEncryption 37:69:6d:e8:2b:75:8d:f0:b5:85:d2:e8:45:7f:c1:fb:83:d4: 2c:79:44:bc:dd:c9:03:94:f8:5e:4e:54:50:3c:cc:95:f1:11: 3f:e4:33:42:af:bd:e4:8a:c5:d7:91:9c:ea:25:4a:a1:df:56: b7:3b:f8:82:24:b3:0c:a9:d8:a0:ba:69:f1:96:5f:3b:a7:82: bd:33:47:b0:f2:97:be:86:53:c4:89:6f:11:46:5f:47:d7:91: 62:79:f3:67:5b:ab:a6:c3:93:21:13:a7:d8:12:e8:cd:2e:b9: fc:4b:d1:ec:e9:ca:9c:71:d3:ca:be:8c:90:39:79:74:2d:92: e5:58:59:b2:5a:92:73:09:8a:c1:ea:fb:15:b7:9b:94:7e:84: f7:dc:20:5a:9c:82:99:1e:f4:97:aa:e6:21:d5:97:2a:dc:64: 64:71:5e:1d:35:98:db:9b:44:8e:98:9f:bd:e0:db:c0:37:a7: c9:05:09:78:e9:61:c0:52:c2:f1:5a:90:cf:9e:ae:7e:21:9f: 8d:35:bd:26:6c:ae:e6:bd:bc:56:b4:66:e1:bd:18:a1:ac:30: 52:2d:a6:04:1b:95:43:07:21:05:78:60:4f:9c:fd:46:99:31: 0a:df:57:c0:c1:d9:1d:0a:eb:f8:cd:39:7b:3b:ea:c9:57:94: 67:cc:b6:62 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EQxzNDXiZSBlI1n0+yHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3 Nzg4YmUwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWVkZjExY2FkYTM2OGNlYTZlNTJmNDY4YjI4NmM3MWY1OTVmMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkGa2tPvYAdQV4/6ngfszs04lC4 SR8MmWbBHHH4ygWKBV7uPj80JzXsWiy0da/CGYYP/+m7YLin+3ngjjuZTbO/QlXp VYiyPIUV4Bv786BZGsSHarywnQ9ddpAY+MpW4hBjoTXnKDCu1tj7yXV4Ilj5hntR lxNsnm5WLS8raOlJRJxrGUi6PQgEpGhh5zNX0zGx7LkV/ckZXfZKkO+ytpcAdzEj A1SpfgA2T2VVsenig2iV4Y74eEpsXPP9R4xS5vztcpDudKGXf7y8arhkysDjjN0Z CQokO6PUSHV/4rn/shxIa3R5RiQJH9K2PmPM87ANGcBeMX6205FtmMqMKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCXt8Ryto2jOpuUvRosobHH1lfGIMB8GA1UdIwQY MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt YzZjMDZlMmIzYTlmLzEvSmUzeEhLMmphTTZtNVM5R2l5aHNjZldWOFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV3h9AwQA V3kSAwQAXpxcAwQAbc7tMA0GCSqGSIb3DQEBCwUAA4IBAQA3aW3oK3WN8LWF0uhF f8H7g9QseUS83ckDlPheTlRQPMyV8RE/5DNCr73kisXXkZzqJUqh31a3O/iCJLMM qdigumnxll87p4K9M0ew8pe+hlPEiW8RRl9H15FiefNnW6umw5MhE6fYEujNLrn8 S9Hs6cqccdPKvoyQOXl0LZLlWFmyWpJzCYrB6vsVt5uUfoT33CBanIKZHvSXquYh 1Zcq3GRkcV4dNZjbm0SOmJ+94NvAN6fJBQl46WHAUsLxWpDPnq5+IZ+NNb0mbK7m vbxWtGbhvRihrDBSLaYEG5VDByEFeGBPnP1GmTEK31fAwdkdCuv4zTl7O+rJV5Rn zLZi -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:43 2026 by rpki-client