This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa File: jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa (raw, json) Hash identifier: TzMlgxV3OUMprU97ffZezJnIgPb7d7fyoeggJfBlulk= Subject key identifier: 8C:9D:43:9B:BC:94:AA:50:31:02:3C:F4:81:89:5B:5F:89:63:BC:49 Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Certificate serial: 019B7DCAD0B75F56F1CE53A52EDFBB99733B Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41561 IP address blocks: 193.201.244.0/22 maxlen: 22 195.78.70.0/23 maxlen: 23 2a04:83c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d0:b7:5f:56:f1:ce:53:a5:2e:df:bb:99:73:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c9d439bbc94aa5031023cf481895b5f8963bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:f0:da:41:42:74:0c:a0:65:49:fa:d0:85: 8c:19:88:ec:3f:1c:46:0d:61:3f:ae:f4:b4:d7:26: 91:d7:25:b4:da:37:65:3f:06:3c:48:5e:94:54:72: a7:1c:5d:15:93:4d:57:32:d8:ce:0f:f2:36:82:bb: 53:87:5b:ac:88:d3:53:ec:bd:d9:d0:cb:9f:ae:5c: e6:ad:b7:25:6d:e9:d2:05:5b:44:ca:ef:6e:93:1c: ad:d9:1f:03:57:7c:1d:19:23:9c:17:d1:64:07:4d: 70:b7:eb:c6:0b:18:d3:d1:c4:1f:c5:ff:0d:52:a8: 9d:e8:5e:9f:de:8f:98:59:da:4d:3c:44:7d:ec:64: fc:7f:92:86:25:7a:16:f8:19:fd:c2:f9:33:99:51: 10:ea:8c:0e:96:df:7c:9d:fe:b7:7c:d0:14:63:55: 22:42:62:43:36:2f:57:8d:75:70:46:ab:a1:f1:fc: d7:fc:1d:6f:f1:21:0c:f8:f0:65:e8:4d:a8:c2:3d: 1c:f2:0e:55:14:b2:52:d1:c1:e2:98:9e:58:26:46: 9c:4e:00:1b:4b:a2:17:a3:39:2a:b6:39:84:d8:a8: 6a:7d:2d:85:ef:94:86:a1:e9:df:c4:b5:95:cc:dd: 48:7b:8e:1b:89:67:0c:ab:f3:5c:f8:1e:cc:ed:9e: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:43:9B:BC:94:AA:50:31:02:3C:F4:81:89:5B:5F:89:63:BC:49 X509v3 Authority Key Identifier: keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/jJ1Dm7yUqlAxAjz0gYlbX4ljvEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.244.0/22 195.78.70.0/23 IPv6: 2a04:83c0::/29 Signature Algorithm: sha256WithRSAEncryption b7:0f:24:05:3a:20:9f:6b:56:22:62:fc:6b:7c:ef:f7:ca:15: 95:7e:f3:95:6e:85:dd:3d:44:11:18:72:c3:f6:a9:f0:2a:94: 1f:dd:22:30:91:61:2d:b2:c4:e1:29:e2:16:76:ab:97:66:20: 62:f7:f8:a5:66:8a:6a:77:57:98:c3:71:96:0b:5f:ba:0d:b2: 8e:ef:fe:f1:3c:ed:14:33:d6:78:a2:8a:21:db:f7:42:ea:16: 38:7d:c1:88:13:f1:e0:a1:a0:a8:d4:f3:ce:52:86:f1:73:75: b0:8b:e6:d8:1b:3b:89:35:1f:2a:cf:52:3e:11:75:f0:9a:b9: 68:67:9d:6c:cb:34:ac:a4:bc:cf:7e:35:ae:78:2a:93:92:82: 0c:f0:a4:70:02:13:e4:a1:47:3a:97:c8:ee:3c:a9:ad:69:87: a8:bf:e2:04:3f:90:8c:c2:8c:24:63:d7:6e:9e:5f:8a:02:66: 0e:ac:2f:96:38:9a:69:7e:a0:e6:1c:1d:36:bc:df:35:d9:26: 42:47:60:4f:45:ae:6f:11:45:2c:7e:0e:c6:fe:ad:d7:1b:a7: 59:65:4d:df:04:9e:16:12:6f:7d:dd:1d:9b:2c:af:1a:4f:32: 1c:3a:8f:ba:03:50:a9:49:3f:8f:25:26:e9:2c:4b:1f:c6:07: 46:65:4a:86 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ytC3X1bxzlOlLt+7mXM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmJkOWRlOGQ4OTUyNmM1YTQ5YTc2NmMxZjQ4NWYwOWY1 YTkxNjYwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzlkNDM5YmJjOTRhYTUwMzEwMjNjZjQ4MTg5NWI1Zjg5NjNiYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GPw2kFCdAygZUn60IWMGYjsPxxG DWE/rvS01yaR1yW02jdlPwY8SF6UVHKnHF0Vk01XMtjOD/I2grtTh1usiNNT7L3Z 0MufrlzmrbclbenSBVtEyu9ukxyt2R8DV3wdGSOcF9FkB01wt+vGCxjT0cQfxf8N Uqid6F6f3o+YWdpNPER97GT8f5KGJXoW+Bn9wvkzmVEQ6owOlt98nf63fNAUY1Ui QmJDNi9XjXVwRquh8fzX/B1v8SEM+PBl6E2owj0c8g5VFLJS0cHimJ5YJkacTgAb S6IXozkqtjmE2KhqfS2F75SGoenfxLWVzN1Ie44biWcMq/Nc+B7M7Z7v5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIydQ5u8lKpQMQI89IGJW1+JY7xJMB8GA1UdIwQY MBaAFC/72d6NiVJsWkmnZsH0hfCfWpFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUt MWZjMWU3M2YwNjA3LzEvakoxRG03eVVxbEF4QWp6MGdZbGJYNGxqdkVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUtMWZjMWU3M2YwNjA3 LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwcn0AwQB w05GMA0EAgACMAcDBQMqBIPAMA0GCSqGSIb3DQEBCwUAA4IBAQC3DyQFOiCfa1Yi YvxrfO/3yhWVfvOVboXdPUQRGHLD9qnwKpQf3SIwkWEtssThKeIWdquXZiBi9/il Zopqd1eYw3GWC1+6DbKO7/7xPO0UM9Z4oooh2/dC6hY4fcGIE/HgoaCo1PPOUobx c3Wwi+bYGzuJNR8qz1I+EXXwmrloZ51syzSspLzPfjWueCqTkoIM8KRwAhPkoUc6 l8juPKmtaYeov+IEP5CMwowkY9dunl+KAmYOrC+WOJppfqDmHB02vN812SZCR2BP Ra5vEUUsfg7G/q3XG6dZZU3fBJ4WEm993R2bLK8aTzIcOo+6A1CpST+PJSbpLEsf xgdGZUqG -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:58 2026 by rpki-client