This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jukHSiQ6Jcwm3pz2uNOhK5rXdj4.roa File: jukHSiQ6Jcwm3pz2uNOhK5rXdj4.roa (raw, json) Hash identifier: FKpdGNhBEsAM8D+t/0C1VC5jpIvfOuf0jK1Mv9rHMZI= Subject key identifier: 8E:E9:07:4A:24:3A:25:CC:26:DE:9C:F6:B8:D3:A1:2B:9A:D7:76:3E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F4BC8BBDD967DE44F6B110E580FF Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jukHSiQ6Jcwm3pz2uNOhK5rXdj4.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 80.71.154.0/24 maxlen: 24 91.198.230.0/24 maxlen: 24 91.199.3.0/24 maxlen: 24 94.103.178.0/24 maxlen: 24 94.103.189.0/24 maxlen: 24 94.103.191.0/24 maxlen: 24 193.33.66.0/24 maxlen: 24 193.37.133.0/24 maxlen: 24 193.109.221.0/24 maxlen: 24 193.135.13.0/24 maxlen: 24 193.176.237.0/24 maxlen: 24 193.193.164.0/24 maxlen: 24 194.56.255.0/24 maxlen: 24 194.107.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f4:bc:8b:bd:d9:67:de:44:f6:b1:10:e5:80:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ee9074a243a25cc26de9cf6b8d3a12b9ad7763e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ba:dc:75:d4:22:9d:c9:ea:a9:d9:db:b2:0d: b6:71:73:c1:dc:3d:c6:ff:e6:99:c7:2d:29:d8:20: d3:8e:65:b7:20:2e:0d:09:1a:68:e6:31:94:86:c8: 9c:de:c0:4d:b1:5e:9b:b1:c2:02:28:87:d8:40:75: dd:0c:3f:a7:05:80:1e:ee:0d:fb:63:43:c6:3f:3d: 4e:18:9e:26:1b:fb:50:54:09:87:e7:bd:a2:f2:13: 55:01:2b:66:84:0f:3d:f5:f2:7f:bf:e8:8b:f0:05: e7:e2:a7:02:b6:5c:73:84:84:7c:4d:7e:81:6a:ee: 08:f9:ba:8c:42:ec:53:c0:22:d9:03:b4:33:b9:ee: f1:07:5f:d4:c1:95:ba:ce:d1:05:c4:36:d3:d3:72: c8:01:48:fc:4e:94:d6:9a:d8:1d:75:b9:42:56:c3: 60:59:13:7d:80:e8:ed:f7:c5:82:49:bf:c7:f7:7c: a0:b3:67:21:f0:8c:90:a1:d8:07:59:e9:94:6a:b8: c4:7b:79:bf:78:c4:56:20:95:b0:55:8c:b1:00:be: 2a:d0:fd:f2:65:15:33:23:85:35:f3:9b:63:f6:57: 3d:00:97:3e:6e:e6:5b:4e:89:fe:5f:7a:e4:1c:2c: 4a:86:25:2b:06:a7:8b:45:60:34:e7:ef:3f:bc:70: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:07:4A:24:3A:25:CC:26:DE:9C:F6:B8:D3:A1:2B:9A:D7:76:3E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jukHSiQ6Jcwm3pz2uNOhK5rXdj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.154.0/24 91.198.230.0/24 91.199.3.0/24 94.103.178.0/24 94.103.189.0/24 94.103.191.0/24 193.33.66.0/24 193.37.133.0/24 193.109.221.0/24 193.135.13.0/24 193.176.237.0/24 193.193.164.0/24 194.56.255.0/24 194.107.125.0/24 Signature Algorithm: sha256WithRSAEncryption 34:4b:c5:55:05:58:f3:f2:24:d4:d8:63:20:10:26:1f:1f:b7: 38:df:41:a8:2a:89:58:4c:7e:db:98:91:9b:25:21:b6:7e:5c: 4a:1e:fe:64:c7:c2:89:98:3d:1a:a0:20:55:6e:10:de:5b:6b: e6:85:ee:63:ff:dd:34:8f:90:94:e0:d6:cc:69:1b:61:60:e3: 1c:9d:0d:37:e4:eb:29:5d:d8:91:6b:ac:79:aa:55:2a:18:10: 10:df:e4:17:c1:58:6d:19:b7:10:28:ae:d2:c9:f5:5b:e0:fc: e9:04:fa:f6:89:54:a6:36:23:7e:fd:a8:0c:78:b8:23:5a:32: 0b:8a:b6:5d:9c:31:5a:8b:ac:31:7a:00:a4:bc:fb:0b:c6:c6: bd:24:c0:20:42:da:54:14:a2:eb:b6:e2:09:f2:da:9a:3b:66: b1:ef:ff:39:88:74:44:bf:93:87:8c:cc:50:bd:50:ed:de:96: 27:e0:8b:f6:73:04:68:7a:7c:1f:de:94:95:14:c3:72:d2:c7: ec:2f:03:70:a9:db:85:89:7f:78:4c:ab:06:be:03:63:38:7e: ca:97:e4:ce:0c:6d:02:3d:bd:6b:73:6a:1c:05:f9:3a:3b:e0: 32:9b:f7:eb:6b:ef:6c:33:e8:93:08:d9:2c:84:eb:f2:e9:3a: 79:08:25:23 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt7NfS8i73ZZ95E9rEQ5YD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWU5MDc0YTI0M2EyNWNjMjZkZTljZjZiOGQzYTEyYjlhZDc3NjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7rcddQincnqqdnbsg22cXPB3D3G /+aZxy0p2CDTjmW3IC4NCRpo5jGUhsic3sBNsV6bscICKIfYQHXdDD+nBYAe7g37 Y0PGPz1OGJ4mG/tQVAmH572i8hNVAStmhA899fJ/v+iL8AXn4qcCtlxzhIR8TX6B au4I+bqMQuxTwCLZA7Qzue7xB1/UwZW6ztEFxDbT03LIAUj8TpTWmtgddblCVsNg WRN9gOjt98WCSb/H93ygs2ch8IyQodgHWemUarjEe3m/eMRWIJWwVYyxAL4q0P3y ZRUzI4U185tj9lc9AJc+buZbTon+X3rkHCxKhiUrBqeLRWA05+8/vHBceQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFI7pB0okOiXMJt6c9rjToSua13Y+MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvanVrSFNpUTZKY3dtM3B6MnVOT2hLNXJYZGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAUEeaAwQA W8bmAwQAW8cDAwQAXmeyAwQAXme9AwQAXme/AwQAwSFCAwQAwSWFAwQAwW3dAwQA wYcNAwQAwbDtAwQAwcGkAwQAwjj/AwQAwmt9MA0GCSqGSIb3DQEBCwUAA4IBAQA0 S8VVBVjz8iTU2GMgECYfH7c430GoKolYTH7bmJGbJSG2flxKHv5kx8KJmD0aoCBV bhDeW2vmhe5j/900j5CU4NbMaRthYOMcnQ035OspXdiRa6x5qlUqGBAQ3+QXwVht GbcQKK7SyfVb4PzpBPr2iVSmNiN+/agMeLgjWjILirZdnDFai6wxegCkvPsLxsa9 JMAgQtpUFKLrtuIJ8tqaO2ax7/85iHREv5OHjMxQvVDt3pYn4Iv2cwRoenwf3pSV FMNy0sfsLwNwqduFiX94TKsGvgNjOH7Kl+TODG0CPb1rc2ocBfk6O+Aym/fra+9s M+iTCNkshOvy6Tp5CCUj -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:45 2026 by rpki-client