This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa File: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (raw, json) Hash identifier: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ= Subject key identifier: 8D:0C:4C:8D:C7:6B:86:68:06:DF:8F:3E:14:2E:99:43:65:C1:85:60 Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Certificate serial: 019B797E4315B48663F4EE57655940B24D67 Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201188 IP address blocks: 185.16.110.0/24 maxlen: 24 185.63.16.0/24 maxlen: 24 185.63.17.0/24 maxlen: 24 185.63.18.0/24 maxlen: 24 185.63.19.0/24 maxlen: 24 185.63.92.0/24 maxlen: 24 185.63.93.0/24 maxlen: 24 185.63.94.0/24 maxlen: 24 185.63.95.0/24 maxlen: 24 2a03:ba0::/29 maxlen: 29 2a03:ba0::/32 maxlen: 32 2a03:ba0::/64 maxlen: 64 2a03:ba2::/64 maxlen: 64 2a03:ba3::/64 maxlen: 64 2a03:ba4::/64 maxlen: 64 2a03:ba5::/64 maxlen: 64 2a03:ba6::/64 maxlen: 64 2a03:ba7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:15:b4:86:63:f4:ee:57:65:59:40:b2:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d0c4c8dc76b866806df8f3e142e994365c18560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:f1:b6:3b:cb:fe:34:87:41:91:fe:13:a6: cd:73:dd:49:d7:22:fc:56:9c:b2:1e:99:c1:3d:2c: 4a:9b:9e:41:ac:c0:ee:30:91:7f:4d:17:db:6a:f6: aa:f7:5e:5e:08:2d:57:79:a6:5a:94:d9:2c:d7:47: 33:28:62:cc:3a:d7:c1:45:25:5d:d2:56:f7:af:f4: b5:02:62:1a:9f:cd:fc:24:7d:ed:37:93:50:28:a3: 58:29:17:c9:89:03:2e:38:ae:36:c7:52:b1:0a:94: 5f:11:06:90:5b:ff:30:70:ab:27:aa:b8:3d:e2:92: 1f:de:17:50:d1:58:5d:e8:c8:08:58:ed:24:a8:26: 9e:b9:cf:86:be:d7:3c:34:ee:89:1a:7a:30:49:14: 94:f1:fe:67:78:85:ac:6c:bb:3b:a2:d9:a0:93:1c: 4e:22:59:0f:fb:d3:34:ba:22:29:d7:96:4c:02:1a: dc:dd:78:61:b5:2b:b0:59:29:f8:c0:0e:0e:49:8a: 6f:ba:d8:7c:91:5c:f1:02:a5:ef:cc:c5:9a:91:8d: fc:f8:a5:8f:c3:e7:98:ad:ef:1f:f0:0f:aa:a5:71: 22:1c:f6:64:88:31:48:80:76:46:16:f2:39:47:c6: fa:aa:1b:fa:98:7b:ae:d2:ca:d1:e0:e9:78:ab:b9: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:4C:8D:C7:6B:86:68:06:DF:8F:3E:14:2E:99:43:65:C1:85:60 X509v3 Authority Key Identifier: keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.110.0/24 185.63.16.0/22 185.63.92.0/22 IPv6: 2a03:ba0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:1d:bc:fa:6d:02:de:74:12:da:c0:a5:45:a1:80:b4:82:ba: 5d:a3:32:43:c3:66:ac:a8:2c:41:41:33:25:7b:1c:dc:66:d3: ef:6d:6a:60:97:cf:38:e8:00:24:1f:d2:69:fb:52:91:0d:4d: d2:e3:cc:15:4b:9b:4f:7d:c0:fa:74:68:21:24:6e:46:8a:51: 50:c1:45:1d:f3:34:cf:bd:42:f5:dc:26:44:b6:a4:e1:16:4b: 72:8f:43:f8:f7:68:d3:85:01:e7:cb:62:32:a7:09:59:81:35: 1e:d1:63:42:89:ef:57:27:d4:04:45:f1:d7:3e:c9:df:ff:37: dc:25:46:3d:23:8e:b5:a6:a1:72:81:2f:6e:b2:56:08:2a:76: fe:ee:0b:d8:16:b7:4a:59:42:37:c2:fc:04:22:c9:2d:a9:ed: 55:6f:9a:58:09:37:d7:cb:a2:b7:b6:18:bc:61:fb:3f:9f:cc: c2:bf:5a:95:2b:70:e3:00:c1:b2:9e:77:56:19:52:22:8c:84: 95:a8:69:9c:5a:96:cb:50:6e:d4:da:96:85:16:41:78:9a:1b: a9:57:aa:da:c9:d2:0a:6a:51:d6:28:1e:16:3c:09:58:d9:cf: ad:87:84:d2:14:dd:c7:a3:84:1f:99:12:a0:36:09:99:41:62: 97:ca:56:d8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fkMVtIZj9O5XZVlAsk1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky OTRmNzgwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDBjNGM4ZGM3NmI4NjY4MDZkZjhmM2UxNDJlOTk0MzY1YzE4NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tbxtjvL/jSHQZH+E6bNc91J1yL8 VpyyHpnBPSxKm55BrMDuMJF/TRfbavaq915eCC1XeaZalNks10czKGLMOtfBRSVd 0lb3r/S1AmIan838JH3tN5NQKKNYKRfJiQMuOK42x1KxCpRfEQaQW/8wcKsnqrg9 4pIf3hdQ0Vhd6MgIWO0kqCaeuc+Gvtc8NO6JGnowSRSU8f5neIWsbLs7otmgkxxO IlkP+9M0uiIp15ZMAhrc3XhhtSuwWSn4wA4OSYpvuth8kVzxAqXvzMWakY38+KWP w+eYre8f8A+qpXEiHPZkiDFIgHZGFvI5R8b6qhv6mHuu0srR4Ol4q7lArQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFI0MTI3Ha4ZoBt+PPhQumUNlwYVgMB8GA1UdIwQY MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt YWRlNTMwZDdjNDFiLzEvalF4TWpjZHJobWdHMzQ4LUZDNlpRMlhCaFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAuRBuAwQC uT8QAwQCuT9cMA0EAgACMAcDBQMqAwugMA0GCSqGSIb3DQEBCwUAA4IBAQBbHbz6 bQLedBLawKVFoYC0grpdozJDw2asqCxBQTMlexzcZtPvbWpgl8846AAkH9Jp+1KR DU3S48wVS5tPfcD6dGghJG5GilFQwUUd8zTPvUL13CZEtqThFktyj0P492jThQHn y2IypwlZgTUe0WNCie9XJ9QERfHXPsnf/zfcJUY9I461pqFygS9uslYIKnb+7gvY FrdKWUI3wvwEIsktqe1Vb5pYCTfXy6K3thi8Yfs/n8zCv1qVK3DjAMGynndWGVIi jISVqGmcWpbLUG7U2paFFkF4mhupV6raydIKalHWKB4WPAlY2c+th4TSFN3Ho4Qf mRKgNgmZQWKXylbY -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:27 2026 by rpki-client