This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/jkzmp2HHhQzdcIcdCDehoxfBl2M.roa File: jkzmp2HHhQzdcIcdCDehoxfBl2M.roa (raw, json) Hash identifier: 8AbfxhHKosUM4Enth2UWivAHd/k6k+lQyWVddJM1YSQ= Subject key identifier: 8E:4C:E6:A7:61:C7:85:0C:DD:70:87:1D:08:37:A1:A3:17:C1:97:63 Certificate issuer: /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Certificate serial: 019B7A59DFEDC16515B56E19046AC9BE142F Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/jkzmp2HHhQzdcIcdCDehoxfBl2M.roa Signing time: Thu 01 Jan 2026 16:17:48 +0000 ROA not before: Thu 01 Jan 2026 16:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199946 IP address blocks: 185.37.196.0/24 maxlen: 24 185.37.197.0/24 maxlen: 24 185.37.198.0/24 maxlen: 24 185.37.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:df:ed:c1:65:15:b5:6e:19:04:6a:c9:be:14:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Validity Not Before: Jan 1 16:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4ce6a761c7850cdd70871d0837a1a317c19763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:3a:e2:79:34:b3:16:7b:09:19:98:d5:34: 0a:30:a5:f4:72:6c:33:f3:c1:03:25:ec:d5:9a:41: 4b:de:be:e3:c2:83:88:33:32:87:93:6e:84:24:9a: 17:4b:95:3c:0c:ce:32:89:7e:cf:bb:b6:b4:ca:a5: e7:4d:c1:66:45:7c:54:2c:44:9d:5d:27:15:3e:6a: 42:a3:68:ec:9a:c2:e8:72:4c:19:64:d5:fa:da:0d: 78:d1:ce:ed:d1:cc:fe:24:3c:36:57:ec:b4:98:32: 31:94:5e:39:86:bd:35:ce:dc:dd:51:f6:c9:28:84: 08:4c:b2:42:3e:71:e7:e6:7d:62:e7:c0:69:c0:34: f9:14:86:4f:05:06:2e:42:b1:3f:71:47:47:ac:2a: 20:26:0b:40:ab:67:44:1b:83:f1:91:0b:74:85:1d: be:8a:34:d0:fc:98:5b:bf:65:b9:f4:c1:da:34:33: 04:3b:fa:43:e6:7e:80:52:36:4f:dd:9a:ec:f2:6f: 7a:dc:b0:47:db:e4:4a:19:d8:ff:f6:c5:d3:13:e6: 9c:0f:ff:83:87:a7:3e:6e:c6:02:50:54:be:5f:04: 6e:6f:39:81:d6:07:bc:76:01:c3:87:1c:0a:99:e9: 8e:6a:2f:62:81:00:f9:52:83:3b:68:54:0d:ed:bf: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:E6:A7:61:C7:85:0C:DD:70:87:1D:08:37:A1:A3:17:C1:97:63 X509v3 Authority Key Identifier: keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/jkzmp2HHhQzdcIcdCDehoxfBl2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.196.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:ea:52:1c:80:14:9e:89:15:9f:d0:56:0f:85:20:89:40:8e: 62:19:45:c8:db:e5:ba:10:bd:34:db:00:5c:90:0f:56:3c:1d: 35:c6:4a:14:fd:11:b3:54:32:b5:4c:b7:4e:61:7b:41:ae:9d: be:24:02:af:a9:83:e1:e3:b4:da:3f:d2:f2:04:f3:19:4e:51: 26:a6:c8:0e:a9:35:9d:d5:e0:07:a6:70:17:d1:d8:a0:26:07: 8a:cd:96:46:d9:4b:c1:e3:76:31:67:81:35:3c:82:7e:84:40: 2c:aa:b5:98:4f:6e:f6:b0:9c:91:43:64:70:aa:9d:0e:12:ec: 52:af:76:1a:5c:8c:91:4f:a9:86:51:75:da:96:36:14:27:38: 07:7f:17:b9:47:31:ba:84:58:68:46:5f:d0:1c:a3:74:3c:d8: 4e:2c:97:a5:e5:0d:be:0b:1e:55:be:8d:11:ed:6a:71:c1:fe: 00:6d:40:18:1d:0c:cf:31:ed:82:18:34:2f:7d:63:b2:1b:3d: ac:e9:54:30:c8:f6:06:18:80:49:a8:6c:60:d4:3d:7d:91:66: a1:3d:60:f3:33:bb:8f:ce:b1:33:65:e8:43:c1:95:6b:ed:02: e2:df:44:f7:b8:c0:45:6f:69:0f:77:de:ef:d3:06:b4:c3:1f: e3:fb:2c:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wd/twWUVtW4ZBGrJvhQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMmVjYjBmMjkyNDUyYTdiZTk0ZTY5NjBmN2NlNzIwMTZi ZDE4MDUwHhcNMjYwMTAxMTYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTRjZTZhNzYxYzc4NTBjZGQ3MDg3MWQwODM3YTFhMzE3YzE5NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1So64nk0sxZ7CRmY1TQKMKX0cmwz 88EDJezVmkFL3r7jwoOIMzKHk26EJJoXS5U8DM4yiX7Pu7a0yqXnTcFmRXxULESd XScVPmpCo2jsmsLockwZZNX62g140c7t0cz+JDw2V+y0mDIxlF45hr01ztzdUfbJ KIQITLJCPnHn5n1i58BpwDT5FIZPBQYuQrE/cUdHrCogJgtAq2dEG4PxkQt0hR2+ ijTQ/Jhbv2W59MHaNDMEO/pD5n6AUjZP3Zrs8m963LBH2+RKGdj/9sXTE+acD/+D h6c+bsYCUFS+XwRubzmB1ge8dgHDhxwKmemOai9igQD5UoM7aFQN7b8XZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5M5qdhx4UM3XCHHQg3oaMXwZdjMB8GA1UdIwQY MBaAFOsuyw8pJFKnvpTmlg985yAWvRgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjkt YjU1ZDg4ZjdjOWRlLzEvamt6bXAySEhoUXpkY0ljZENEZWhveGZCbDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjktYjU1ZDg4ZjdjOWRl LzEvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSXEMA0G CSqGSIb3DQEBCwUAA4IBAQBM6lIcgBSeiRWf0FYPhSCJQI5iGUXI2+W6EL002wBc kA9WPB01xkoU/RGzVDK1TLdOYXtBrp2+JAKvqYPh47TaP9LyBPMZTlEmpsgOqTWd 1eAHpnAX0digJgeKzZZG2UvB43YxZ4E1PIJ+hEAsqrWYT272sJyRQ2Rwqp0OEuxS r3YaXIyRT6mGUXXaljYUJzgHfxe5RzG6hFhoRl/QHKN0PNhOLJel5Q2+Cx5Vvo0R 7Wpxwf4AbUAYHQzPMe2CGDQvfWOyGz2s6VQwyPYGGIBJqGxg1D19kWahPWDzM7uP zrEzZehDwZVr7QLi30T3uMBFb2kPd97v0wa0wx/j+yw+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:56 2026 by rpki-client