This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/jBBia4spWrLZ9kca7mX-CRNEOzY.roa File: jBBia4spWrLZ9kca7mX-CRNEOzY.roa (raw, json) Hash identifier: qc1+ZFIzhBfFEWyuznbTHHa1NN9KaHansxKNqQ0bhSg= Subject key identifier: 8C:10:62:6B:8B:29:5A:B2:D9:F6:47:1A:EE:65:FE:09:13:44:3B:36 Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09 Certificate serial: 019B783548275B635D3FAED2AC3A52F10F05 Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/jBBia4spWrLZ9kca7mX-CRNEOzY.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12808 IP address blocks: 193.242.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:48:27:5b:63:5d:3f:ae:d2:ac:3a:52:f1:0f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c10626b8b295ab2d9f6471aee65fe0913443b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:8f:c3:b8:ba:24:10:2a:22:09:dc:c5:99: fb:44:d9:7c:8b:31:aa:b1:52:09:3e:d7:9e:fc:07: 72:40:48:b2:94:40:cb:e3:b9:7c:3e:cc:8f:57:48: 74:32:98:af:d5:6d:df:d9:82:28:45:73:69:38:c6: 6f:41:18:af:11:da:82:5f:cb:62:5a:96:fb:f8:dd: 1f:9d:80:b6:66:8c:5e:e9:69:b0:51:eb:0d:65:30: 1d:f4:13:50:57:67:cf:40:2e:08:24:8e:67:f5:b9: 1a:67:1b:a5:0c:c5:9b:4b:96:9b:42:50:4f:9b:a8: ac:7e:83:05:ff:1c:d4:1d:99:5b:50:b8:0d:8f:a3: 63:13:90:18:95:15:68:be:96:ea:a4:e1:b1:53:0f: 0d:63:1e:30:76:52:5f:59:57:ac:02:ef:ef:4d:87: 79:28:1c:66:e7:c5:c9:aa:2e:f4:44:0f:22:f4:28: 9d:b0:e9:50:66:15:93:87:61:85:05:87:66:ab:6c: 50:6b:d3:cc:da:50:f1:7b:df:87:01:cc:a2:89:53: 20:17:6f:ca:ca:9f:d0:e4:ce:18:ae:b3:10:42:89: 9f:86:03:c6:d2:35:15:c3:cc:b0:59:34:67:c8:6d: 39:69:da:9c:81:9b:11:53:27:bb:56:a5:19:ab:7b: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:10:62:6B:8B:29:5A:B2:D9:F6:47:1A:EE:65:FE:09:13:44:3B:36 X509v3 Authority Key Identifier: keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/jBBia4spWrLZ9kca7mX-CRNEOzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.123.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:09:08:6d:87:83:21:34:6a:07:bd:02:6d:57:98:80:04:5c: 8b:f0:18:5a:d4:d3:86:ec:21:d8:7d:c3:ed:bb:32:6e:3e:13: 46:07:22:fc:54:54:e6:de:87:ea:08:8f:47:84:8c:f3:22:35: b8:41:8e:e5:d4:ae:ff:f7:ce:cc:3f:e1:4e:f0:cf:53:30:82: a3:28:ba:06:51:32:ea:10:46:ec:e3:64:7f:02:5e:13:e0:72: 98:ef:72:16:a1:e1:0c:ef:0b:dd:40:26:bd:ef:91:ae:cd:5b: 8a:c5:66:02:f8:e2:b8:3e:32:a0:23:91:3d:91:84:98:c3:13: 36:29:b7:50:4d:bb:6e:a0:6d:84:a0:83:26:03:42:59:e7:32: 9a:a0:59:aa:07:8b:d7:b0:f4:4f:e6:5d:44:4a:6b:1e:29:b1: c2:4d:da:66:8b:54:8a:89:53:76:6b:4f:5c:81:47:8a:8d:24: 12:32:0b:0c:fb:6c:e8:ec:5c:40:2a:f9:bb:db:77:8f:3c:1d: 45:8d:4f:24:1d:17:cb:14:f4:de:b9:f7:e4:92:f0:7d:f0:8b: fa:2a:19:2a:f0:90:21:c7:d7:cc:ea:f8:fa:64:4b:ea:20:93: 5c:1c:07:f3:84:66:84:c6:4a:ad:75:fd:c6:9f:8a:48:99:86: e2:1f:a2:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUgnW2NdP67SrDpS8Q8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMDU3NmY4NjNkZjdlMzIxYjFjYTUwNTBjZTJjMmRkMmZj YWRiMDkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzEwNjI2YjhiMjk1YWIyZDlmNjQ3MWFlZTY1ZmUwOTEzNDQzYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoOPw7i6JBAqIgncxZn7RNl8izGq sVIJPtee/AdyQEiylEDL47l8PsyPV0h0Mpiv1W3f2YIoRXNpOMZvQRivEdqCX8ti Wpb7+N0fnYC2Zoxe6WmwUesNZTAd9BNQV2fPQC4IJI5n9bkaZxulDMWbS5abQlBP m6isfoMF/xzUHZlbULgNj6NjE5AYlRVovpbqpOGxUw8NYx4wdlJfWVesAu/vTYd5 KBxm58XJqi70RA8i9CidsOlQZhWTh2GFBYdmq2xQa9PM2lDxe9+HAcyiiVMgF2/K yp/Q5M4YrrMQQomfhgPG0jUVw8ywWTRnyG05adqcgZsRUye7VqUZq3ug/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwQYmuLKVqy2fZHGu5l/gkTRDs2MB8GA1UdIwQY MBaAFP0Fdvhj334yGxylBQziwt0vytsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEt NDAxNmY2YjQ0NWEwLzEvakJCaWE0c3BXckxaOWtjYTdtWC1DUk5FT3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEtNDAxNmY2YjQ0NWEw LzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ7MA0G CSqGSIb3DQEBCwUAA4IBAQBaCQhth4MhNGoHvQJtV5iABFyL8Bha1NOG7CHYfcPt uzJuPhNGByL8VFTm3ofqCI9HhIzzIjW4QY7l1K7/987MP+FO8M9TMIKjKLoGUTLq EEbs42R/Al4T4HKY73IWoeEM7wvdQCa975GuzVuKxWYC+OK4PjKgI5E9kYSYwxM2 KbdQTbtuoG2EoIMmA0JZ5zKaoFmqB4vXsPRP5l1ESmseKbHCTdpmi1SKiVN2a09c gUeKjSQSMgsM+2zo7FxAKvm723ePPB1FjU8kHRfLFPTeuffkkvB98Iv6Khkq8JAh x9fM6vj6ZEvqIJNcHAfzhGaExkqtdf3Gn4pImYbiH6J1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:16 2026 by rpki-client