This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jkQ0cjjvR8b8NK1T6I4-hz0uLXE.roa File: jkQ0cjjvR8b8NK1T6I4-hz0uLXE.roa (raw, json) Hash identifier: OMbKxOoLBBNuzGdiy6kvjC1dAQxrdUblnDxHUBsyfD4= Subject key identifier: 8E:44:34:72:38:EF:47:C6:FC:34:AD:53:E8:8E:3E:87:3D:2E:2D:71 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F852EAA2E9E4D64ABE989C905A3AA7D Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jkQ0cjjvR8b8NK1T6I4-hz0uLXE.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 178.175.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2e:aa:2e:9e:4d:64:ab:e9:89:c9:05:a3:aa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e44347238ef47c6fc34ad53e88e3e873d2e2d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:0a:c8:38:93:ee:93:6d:76:a1:ab:84:b4: d0:78:8d:e7:f4:4c:6a:86:c9:25:74:8c:34:df:3b: e4:61:e3:18:66:d2:90:99:ea:82:95:07:32:7a:6e: 21:0c:2f:5f:fb:14:2d:2d:55:ac:12:40:5c:1a:b7: 40:76:43:7c:43:be:8c:47:32:59:57:96:58:76:ab: a8:51:75:f9:74:96:9d:b9:a5:33:23:1d:aa:7b:3e: a4:a3:0c:e3:15:dc:c0:be:b0:67:f7:c3:f3:1f:e9: ec:79:de:4d:18:bf:b8:90:b4:53:c8:dd:49:ae:d5: 8f:9a:3e:e8:9b:24:04:81:b9:1a:7b:7f:6e:e7:3c: da:49:c1:be:a5:c6:ae:73:8f:06:01:7f:1c:97:8b: 9d:2e:ef:0a:d2:c5:3e:bb:3b:ab:31:ae:f7:5a:fc: ff:74:fe:75:5a:18:dc:56:31:d9:bf:4f:ba:b5:cd: 29:a1:17:2f:e5:3b:19:39:f2:9b:ad:32:bc:3f:d7: fc:4f:a3:ec:e2:49:7d:2b:b4:6c:94:27:69:93:f6: 02:11:1c:91:19:ba:8b:df:ce:5f:46:66:83:08:ae: bd:58:55:82:7f:5f:15:a2:97:9a:80:d0:3b:5f:6d: 36:19:50:66:2b:86:57:c9:ca:55:fe:6f:43:aa:6c: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:34:72:38:EF:47:C6:FC:34:AD:53:E8:8E:3E:87:3D:2E:2D:71 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jkQ0cjjvR8b8NK1T6I4-hz0uLXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.176.0/22 Signature Algorithm: sha256WithRSAEncryption 83:8e:53:76:71:3e:5f:73:53:01:b6:3d:7a:e5:e2:5b:61:c5: f8:29:48:14:55:d2:37:d0:a4:f7:cc:a8:f2:72:b0:16:0d:b3: c4:aa:09:b4:5a:41:57:3b:26:d5:1a:e2:cd:07:f8:f9:2b:38: 01:dd:b8:90:46:f3:1c:9a:fc:36:1b:9c:a0:3b:35:26:af:ae: bc:08:9a:7c:f7:93:b0:40:c0:5a:9a:44:08:c6:90:0f:43:1e: c8:21:c6:04:f8:e0:ed:71:59:33:c8:3a:d2:85:07:96:3e:7d: b0:08:79:fe:81:6b:49:07:96:2f:db:90:78:7c:13:cf:6c:f1: 20:ea:33:e1:a5:4e:3b:3e:60:b0:62:22:03:58:ac:ce:34:29: 36:9a:16:fd:fc:c5:eb:aa:0c:d1:09:78:c2:54:34:9d:b3:b2: 5d:2f:8a:54:ae:42:dd:ca:83:ff:72:7d:59:22:53:3e:60:89: 60:09:0a:df:e3:8c:5e:1e:9e:80:e9:62:66:47:1b:20:bd:4a: 16:fb:96:76:5d:df:0e:a7:c2:db:7d:e5:e2:a0:47:08:28:c5: 98:d3:81:96:67:91:9a:a0:dd:10:8a:d7:60:de:25:ba:d5:61: eb:e8:c7:6a:48:8d:d1:4e:f9:ac:ea:2d:7c:db:c8:b2:ab:07: 58:d7:32:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hS6qLp5NZKvpickFo6p9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ0MzQ3MjM4ZWY0N2M2ZmMzNGFkNTNlODhlM2U4NzNkMmUyZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzYKyDiT7pNtdqGrhLTQeI3n9Exq hskldIw03zvkYeMYZtKQmeqClQcyem4hDC9f+xQtLVWsEkBcGrdAdkN8Q76MRzJZ V5ZYdquoUXX5dJaduaUzIx2qez6kowzjFdzAvrBn98PzH+nsed5NGL+4kLRTyN1J rtWPmj7omyQEgbkae39u5zzaScG+pcauc48GAX8cl4udLu8K0sU+uzurMa73Wvz/ dP51WhjcVjHZv0+6tc0poRcv5TsZOfKbrTK8P9f8T6Ps4kl9K7RslCdpk/YCERyR GbqL385fRmaDCK69WFWCf18VopeagNA7X202GVBmK4ZXycpV/m9DqmyBcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5ENHI470fG/DStU+iOPoc9Li1xMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvamtRMGNqanZSOGI4TksxVDZJNC1oejB1TFhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsq+wMA0G CSqGSIb3DQEBCwUAA4IBAQCDjlN2cT5fc1MBtj165eJbYcX4KUgUVdI30KT3zKjy crAWDbPEqgm0WkFXOybVGuLNB/j5KzgB3biQRvMcmvw2G5ygOzUmr668CJp895Ow QMBamkQIxpAPQx7IIcYE+ODtcVkzyDrShQeWPn2wCHn+gWtJB5Yv25B4fBPPbPEg 6jPhpU47PmCwYiIDWKzONCk2mhb9/MXrqgzRCXjCVDSds7JdL4pUrkLdyoP/cn1Z IlM+YIlgCQrf44xeHp6A6WJmRxsgvUoW+5Z2Xd8Op8LbfeXioEcIKMWY04GWZ5Ga oN0Qitdg3iW61WHr6MdqSI3RTvms6i1828iyqwdY1zLt -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:15 2026 by rpki-client