This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa File: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (raw, json) Hash identifier: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw= Subject key identifier: 8E:F7:EE:CD:00:76:21:CF:0B:92:7F:EF:F9:F5:34:BC:3E:CA:65:42 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B7C804B248A34D1B0F3DA4551E8C4731C Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200490 IP address blocks: 185.243.20.0/22 maxlen: 22 2001:67c:22f4::/48 maxlen: 48 2a0c:fe80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4b:24:8a:34:d1:b0:f3:da:45:51:e8:c4:73:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ef7eecd007621cf0b927feff9f534bc3eca6542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:aa:89:f0:48:f9:76:bf:e2:75:f9:ac:68: e2:b5:13:e8:98:95:3c:67:aa:74:4c:9f:38:63:b0: bc:17:5d:ae:e1:d8:c9:6a:84:46:a8:4f:19:52:34: 05:5f:35:22:c9:67:37:be:c1:99:8b:5c:e5:2f:de: 9a:20:e4:13:e5:c3:ef:86:d8:a5:0b:eb:8f:0a:f5: a3:20:0f:fc:4b:54:90:8d:b6:05:21:90:f6:a3:4f: b6:b7:6d:12:5b:40:98:54:79:f9:a7:2d:b3:7e:a3: 1d:33:db:2a:96:75:97:77:64:81:10:be:01:35:7b: e2:55:51:1c:d7:b2:ab:9b:12:18:57:d7:26:8a:5b: bb:11:9a:02:72:7e:07:18:c1:99:20:16:b1:f8:96: 4e:4e:50:74:1f:27:2e:23:25:10:ff:51:c7:bd:1b: f0:98:1c:a2:16:0c:66:93:b7:0a:d9:d0:7a:d4:2a: c5:37:b7:11:48:4e:33:17:af:62:01:cc:9d:80:e1: 4e:41:5f:bb:85:5c:1a:bd:e4:93:92:27:bd:aa:9f: b9:00:e2:84:48:37:b1:fc:cc:66:13:c2:bf:0d:fe: cb:ef:47:65:b1:2d:ba:68:b3:9c:57:76:d7:0c:8e: c8:0b:05:ec:70:86:b8:50:93:d5:aa:19:c0:74:c8: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:EE:CD:00:76:21:CF:0B:92:7F:EF:F9:F5:34:BC:3E:CA:65:42 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.20.0/22 IPv6: 2001:67c:22f4::/48 2a0c:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 02:f7:30:b3:46:aa:78:01:2a:c9:69:a0:68:a9:ed:94:7e:e5: a0:16:39:95:77:ac:29:81:4d:c3:88:fd:cc:80:6f:9d:4a:39: 63:2f:fc:0f:61:a4:fb:1c:99:ae:8b:4f:10:f7:b7:f8:30:67: a1:de:0f:5f:01:5c:f9:bc:07:90:fb:81:96:98:39:b4:5a:88: e5:ae:f6:3b:ac:2e:30:1f:1a:f9:88:6a:9b:67:b0:4f:5d:c6: a7:4f:1f:26:de:91:18:30:d4:16:b0:0b:1a:b4:5b:98:f4:fe: 69:ed:ae:c1:0c:66:b8:d9:1b:fe:2d:d0:1c:21:a1:f4:6d:ed: 4a:29:69:cd:54:3e:62:71:86:fa:15:40:1b:cd:e3:78:54:ee: aa:6e:be:43:8a:11:c8:bb:9f:17:b4:c5:71:f9:a9:48:d3:05: c6:a2:e9:dd:7e:d2:d1:60:0f:33:04:df:41:a3:d5:7c:08:10: 08:84:de:56:ec:d7:87:81:45:e4:55:80:3a:96:65:69:e0:9c: 22:17:f9:1d:54:92:a1:16:3f:44:ef:a8:3a:e4:90:c9:73:54: 71:07:49:17:c6:bf:e9:0e:75:bd:3b:fd:cc:a6:ea:2f:83:23: ec:39:e0:8f:4f:b7:3f:21:57:4c:34:87:83:d6:71:7f:98:cf: ba:88:c9:f8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gEskijTRsPPaRVHoxHMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWY3ZWVjZDAwNzYyMWNmMGI5MjdmZWZmOWY1MzRiYzNlY2E2NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk2qifBI+Xa/4nX5rGjitRPomJU8 Z6p0TJ84Y7C8F12u4djJaoRGqE8ZUjQFXzUiyWc3vsGZi1zlL96aIOQT5cPvhtil C+uPCvWjIA/8S1SQjbYFIZD2o0+2t20SW0CYVHn5py2zfqMdM9sqlnWXd2SBEL4B NXviVVEc17KrmxIYV9cmilu7EZoCcn4HGMGZIBax+JZOTlB0HycuIyUQ/1HHvRvw mByiFgxmk7cK2dB61CrFN7cRSE4zF69iAcydgOFOQV+7hVwaveSTkie9qp+5AOKE SDex/MxmE8K/Df7L70dlsS26aLOcV3bXDI7ICwXscIa4UJPVqhnAdMgO6QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI737s0AdiHPC5J/7/n1NLw+ymVCMB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEvanZmdXpRQjJJYzhMa25fdi1mVTB2RDdLWlVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCufMUMBYE AgACMBADBwAgAQZ8IvQDBQMqDP6AMA0GCSqGSIb3DQEBCwUAA4IBAQAC9zCzRqp4 ASrJaaBoqe2UfuWgFjmVd6wpgU3DiP3MgG+dSjljL/wPYaT7HJmui08Q97f4MGeh 3g9fAVz5vAeQ+4GWmDm0WojlrvY7rC4wHxr5iGqbZ7BPXcanTx8m3pEYMNQWsAsa tFuY9P5p7a7BDGa42Rv+LdAcIaH0be1KKWnNVD5icYb6FUAbzeN4VO6qbr5DihHI u58XtMVx+alI0wXGoundftLRYA8zBN9Bo9V8CBAIhN5W7NeHgUXkVYA6lmVp4Jwi F/kdVJKhFj9E76g65JDJc1RxB0kXxr/pDnW9O/3MpuovgyPsOeCPT7c/IVdMNIeD 1nF/mM+6iMn4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client