This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jokpPFcZ5d_OPfPrZFGNxKK-V3I.roa File: jokpPFcZ5d_OPfPrZFGNxKK-V3I.roa (raw, json) Hash identifier: AkSo5qpBJhj3YrVLKxc2MUcg2FDNUpficZtJqqFq9EI= Subject key identifier: 8E:89:29:3C:57:19:E5:DF:CE:3D:F3:EB:64:51:8D:C4:A2:BE:57:72 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1304A45A66617799FDAB86595ECD25 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jokpPFcZ5d_OPfPrZFGNxKK-V3I.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205815 IP address blocks: 194.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:04:a4:5a:66:61:77:99:fd:ab:86:59:5e:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e89293c5719e5dfce3df3eb64518dc4a2be5772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c0:e6:90:a3:2c:a1:45:90:1e:2d:e5:8c:e0: ac:8b:d8:30:ff:64:b1:dd:cd:70:ca:19:4e:1d:c7: 8e:38:7e:23:17:cf:a8:18:8f:0c:6b:71:67:db:58: 95:ac:bd:e1:5a:e6:c0:6f:a8:20:96:65:c5:82:7a: 9b:93:4e:5b:47:96:ac:aa:3a:6b:c9:0f:c9:8f:a0: d6:22:66:ef:71:5c:36:37:0e:ee:bc:25:74:62:2d: 88:81:6d:24:a4:9a:d8:0a:3f:02:46:9f:63:d0:3e: 38:49:9a:0d:4a:9b:43:b7:22:50:fe:c9:67:e2:44: 85:ca:57:6f:99:49:dc:2b:95:ee:24:c5:64:df:09: d4:6f:df:7d:87:de:77:b4:27:62:0f:21:71:bb:ee: 3a:6b:a4:2a:59:3a:09:9f:af:a4:05:61:db:fd:c7: 12:15:fb:e7:b0:55:02:50:35:65:05:b9:49:88:e5: e2:e3:0f:f7:b8:95:6d:38:69:c5:61:10:4f:7e:a2: 5d:0b:2f:cd:72:e6:a7:92:7a:db:1f:79:be:06:26: 5f:ec:94:3a:04:f6:b6:72:91:b9:9c:c1:4b:3e:1c: 72:1c:4a:c5:bc:a9:3c:0c:58:57:dc:58:f0:be:30: 5e:e8:c0:e4:63:bc:71:41:9c:65:28:86:4e:e0:52: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:29:3C:57:19:E5:DF:CE:3D:F3:EB:64:51:8D:C4:A2:BE:57:72 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jokpPFcZ5d_OPfPrZFGNxKK-V3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:85:d2:b8:af:04:0e:90:52:cb:f9:5f:57:1c:53:93:bc:06: 96:7a:7a:1e:4c:99:b2:3a:49:4c:55:e4:e5:aa:73:84:b7:c6: 53:0d:e9:66:a5:b7:a2:89:bd:69:c1:0e:88:3b:a6:6a:0b:73: c3:df:33:66:a2:cb:2c:12:f5:26:5e:65:dc:b6:8d:79:88:99: 8d:0c:d7:9c:d8:07:ed:92:83:6f:d5:66:14:b1:f0:e7:8c:7d: b5:c7:81:a6:2a:dd:8f:4c:92:28:a1:d4:1a:6a:3a:59:cd:6a: 3d:9f:92:94:cf:28:d3:d4:7b:2a:fa:1a:ed:32:3e:f2:ee:35: f1:a5:26:a7:53:04:62:0a:85:da:67:50:6c:85:d8:91:a7:37: 44:01:fb:70:f6:18:36:6f:eb:d4:37:86:7d:b2:09:5e:4a:51: 54:d6:6c:be:04:6b:2e:22:cc:f3:e4:ff:74:58:70:70:21:25: 3c:be:80:b9:61:73:43:b0:19:7d:d2:29:9f:2e:03:ba:3b:6a: 85:2e:f6:c5:19:c7:8f:77:9d:ec:de:14:d9:f9:3f:6d:e1:3e: 64:e5:d5:b9:3d:13:d6:f5:81:95:2b:7e:88:4c:bd:5b:cb:d6: a0:5c:24:43:b5:fc:4b:a6:7e:97:ea:d8:bc:b4:80:ae:34:70: 90:b5:66:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwSkWmZhd5n9q4ZZXs0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTg5MjkzYzU3MTllNWRmY2UzZGYzZWI2NDUxOGRjNGEyYmU1NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMDmkKMsoUWQHi3ljOCsi9gw/2Sx 3c1wyhlOHceOOH4jF8+oGI8Ma3Fn21iVrL3hWubAb6gglmXFgnqbk05bR5asqjpr yQ/Jj6DWImbvcVw2Nw7uvCV0Yi2IgW0kpJrYCj8CRp9j0D44SZoNSptDtyJQ/sln 4kSFyldvmUncK5XuJMVk3wnUb999h953tCdiDyFxu+46a6QqWToJn6+kBWHb/ccS FfvnsFUCUDVlBblJiOXi4w/3uJVtOGnFYRBPfqJdCy/NcuanknrbH3m+BiZf7JQ6 BPa2cpG5nMFLPhxyHErFvKk8DFhX3FjwvjBe6MDkY7xxQZxlKIZO4FK3LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6JKTxXGeXfzj3z62RRjcSivldyMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvam9rcFBGY1o1ZF9PUGZQclpGR054S0stVjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtF5MA0G CSqGSIb3DQEBCwUAA4IBAQCPhdK4rwQOkFLL+V9XHFOTvAaWenoeTJmyOklMVeTl qnOEt8ZTDelmpbeiib1pwQ6IO6ZqC3PD3zNmosssEvUmXmXcto15iJmNDNec2Aft koNv1WYUsfDnjH21x4GmKt2PTJIoodQaajpZzWo9n5KUzyjT1Hsq+hrtMj7y7jXx pSanUwRiCoXaZ1BshdiRpzdEAftw9hg2b+vUN4Z9sgleSlFU1my+BGsuIszz5P90 WHBwISU8voC5YXNDsBl90imfLgO6O2qFLvbFGcePd53s3hTZ+T9t4T5k5dW5PRPW 9YGVK36ITL1by9agXCRDtfxLpn6X6ti8tICuNHCQtWYE -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:20 2026 by rpki-client