This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/JsGq180cWpQwLGA873fpca8Bxj4.roa File: JsGq180cWpQwLGA873fpca8Bxj4.roa (raw, json) Hash identifier: RBi5C0yGtp+dilj2CHlX7dy6n4QE4ZE7FypDUnxLwcU= Subject key identifier: 26:C1:AA:D7:CD:1C:5A:94:30:2C:60:3C:EF:77:E9:71:AF:01:C6:3E Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Certificate serial: 019B7F1529888B61FAEF5FE8D6CB07E05ADF Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/JsGq180cWpQwLGA873fpca8Bxj4.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21233 IP address blocks: 85.113.80.0/24 maxlen: 24 85.113.81.0/24 maxlen: 24 85.113.82.0/24 maxlen: 24 85.113.83.0/24 maxlen: 24 85.113.85.0/24 maxlen: 24 85.113.89.0/24 maxlen: 24 2001:be7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:29:88:8b:61:fa:ef:5f:e8:d6:cb:07:e0:5a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26c1aad7cd1c5a94302c603cef77e971af01c63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cc:ec:34:f6:1b:c7:21:22:5e:83:a4:60:53: 71:3a:a1:15:b3:15:7b:b0:93:d2:b9:23:ba:83:04: d0:01:46:97:9e:9d:3f:8f:8f:1d:a1:d4:37:88:04: 8f:29:b0:ff:f1:b6:04:52:50:f9:68:c9:7d:92:fe: ec:50:39:aa:24:5f:09:19:64:08:ca:3b:24:7e:16: c4:95:79:69:83:06:5b:21:c1:6c:43:38:56:c8:38: 1b:8d:ce:32:d7:af:25:3b:af:1a:ca:16:c6:6d:e6: f6:60:81:ec:42:bd:f6:4e:03:36:0a:71:f6:b5:19: 8b:a3:fb:ae:c9:a5:c9:2a:63:8f:0f:6d:b5:8e:d8: 66:fc:04:46:33:2d:3d:d1:99:2c:e5:19:47:e8:62: 22:76:7a:a4:96:7e:7b:ad:1f:0e:49:52:1e:51:1e: 16:6a:56:1f:bd:52:e4:1f:12:cb:4b:b1:6d:cd:29: 0e:98:f5:46:dd:b3:33:c3:56:f7:8b:2f:f6:ab:60: 89:35:a0:72:64:7e:7d:b3:f7:e8:0c:0d:e3:32:0a: 25:98:2a:6e:73:d2:91:1e:1c:c3:39:e0:12:98:07: b0:63:78:2d:3a:ff:d5:40:05:e7:2b:ce:e5:dd:8b: 37:97:45:91:a8:f7:dd:44:2d:55:db:61:ee:a6:3a: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C1:AA:D7:CD:1C:5A:94:30:2C:60:3C:EF:77:E9:71:AF:01:C6:3E X509v3 Authority Key Identifier: keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/JsGq180cWpQwLGA873fpca8Bxj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.113.80.0/22 85.113.85.0/24 85.113.89.0/24 IPv6: 2001:be7::/32 Signature Algorithm: sha256WithRSAEncryption 86:89:66:90:bc:eb:d4:d6:8f:8a:54:bd:a5:9e:8d:07:6c:16: 82:8c:ba:0a:8d:bb:62:bc:52:1a:c6:47:4b:a0:07:60:9b:51: d3:e2:a2:cb:c2:91:81:96:ef:75:9d:30:3c:a2:6f:27:aa:42: 72:45:23:36:19:46:ee:7a:6f:c5:11:7f:c6:c9:d0:bb:b9:9e: cf:cb:23:70:83:f3:49:90:fc:72:b6:39:1d:8e:c0:cd:73:54: 61:4a:b5:ac:6e:40:ae:27:67:b7:cb:ec:2d:a4:e7:ae:43:16: db:19:f2:53:ce:93:49:60:19:86:af:c5:14:9f:6b:6b:07:e6: 73:75:75:a7:11:9d:54:bb:2b:98:c8:72:94:ae:d7:62:3f:6e: 95:6d:f2:36:6d:c3:c8:fa:52:a9:d1:c0:80:5d:cb:c0:73:fa: 94:00:a2:84:96:5f:55:5a:e7:14:49:11:95:cd:92:27:e1:6c: 60:f3:f7:d6:0a:91:90:18:0d:53:25:a0:60:07:90:15:55:d1: f2:91:78:4e:73:62:7e:fb:bf:6c:4f:2d:b2:10:52:80:ae:b2: a6:12:9f:23:ed:d9:6c:38:8f:f1:bc:0d:93:f4:fa:a5:da:6e: 33:c4:eb:62:60:ee:83:d2:b8:f6:f7:41:37:ea:b5:3a:b6:48: a7:6a:2d:b1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FSmIi2H671/o1ssH4FrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi ZTNjMDEwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmMxYWFkN2NkMWM1YTk0MzAyYzYwM2NlZjc3ZTk3MWFmMDFjNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MzsNPYbxyEiXoOkYFNxOqEVsxV7 sJPSuSO6gwTQAUaXnp0/j48dodQ3iASPKbD/8bYEUlD5aMl9kv7sUDmqJF8JGWQI yjskfhbElXlpgwZbIcFsQzhWyDgbjc4y168lO68ayhbGbeb2YIHsQr32TgM2CnH2 tRmLo/uuyaXJKmOPD221jthm/ARGMy090Zks5RlH6GIidnqkln57rR8OSVIeUR4W alYfvVLkHxLLS7FtzSkOmPVG3bMzw1b3iy/2q2CJNaByZH59s/foDA3jMgolmCpu c9KRHhzDOeASmAewY3gtOv/VQAXnK87l3Ys3l0WRqPfdRC1V22HupjrVdwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCbBqtfNHFqUMCxgPO936XGvAcY+MB8GA1UdIwQY MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt YzExZWM2ZWE4NmI4LzEvSnNHcTE4MGNXcFF3TEdBODczZnBjYThCeGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4 LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCVXFQAwQA VXFVAwQAVXFZMA0EAgACMAcDBQAgAQvnMA0GCSqGSIb3DQEBCwUAA4IBAQCGiWaQ vOvU1o+KVL2lno0HbBaCjLoKjbtivFIaxkdLoAdgm1HT4qLLwpGBlu91nTA8om8n qkJyRSM2GUbuem/FEX/GydC7uZ7PyyNwg/NJkPxytjkdjsDNc1RhSrWsbkCuJ2e3 y+wtpOeuQxbbGfJTzpNJYBmGr8UUn2trB+ZzdXWnEZ1UuyuYyHKUrtdiP26VbfI2 bcPI+lKp0cCAXcvAc/qUAKKEll9VWucUSRGVzZIn4Wxg8/fWCpGQGA1TJaBgB5AV VdHykXhOc2J++79sTy2yEFKArrKmEp8j7dlsOI/xvA2T9Pql2m4zxOtiYO6D0rj2 90E36rU6tkinai2x -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:36 2026 by rpki-client