This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwJxYatClcbt43OGOtdT6tAuR5U.roa File: jwJxYatClcbt43OGOtdT6tAuR5U.roa (raw, json) Hash identifier: hjjHhsbLgg+jKyHvceIYdLvShvL+Obm+FwHBBJlpoTg= Subject key identifier: 8F:02:71:61:AB:42:95:C6:ED:E3:73:86:3A:D7:53:EA:D0:2E:47:95 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC1C0AF8A92A039CA4662AADFB78E Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwJxYatClcbt43OGOtdT6tAuR5U.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21840 IP address blocks: 188.255.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:c0:af:8a:92:a0:39:ca:46:62:aa:df:b7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f027161ab4295c6ede373863ad753ead02e4795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:5b:42:81:64:39:97:a1:87:14:e9:d4:66: 78:d9:08:9c:14:de:74:e6:cc:ca:bb:01:7a:e6:97: cd:d2:6f:48:9a:c1:1c:a1:cb:61:33:31:fd:40:bc: c9:6b:f1:c6:66:bf:f3:7c:b7:2d:1d:33:05:26:73: 38:ef:33:28:fb:5d:8e:d5:92:e6:8f:83:b2:06:21: f1:15:c5:a0:55:bc:c1:e4:89:00:47:81:ae:d5:59: a6:aa:55:41:bc:be:4a:11:77:63:22:38:8a:df:36: 1f:49:c1:fe:86:34:a8:71:14:3e:bf:41:f9:7d:c3: 6a:62:c0:8b:21:d5:ca:3e:9e:76:63:0b:be:c7:0e: e7:14:a6:85:78:0c:a1:dc:35:44:c4:a2:ff:39:83: 8e:9a:04:88:ca:84:38:6c:1b:9a:b6:28:c4:d0:3f: 01:ed:54:b7:fb:b8:a0:39:2e:5a:15:e8:1d:d8:8a: 44:a8:43:2d:b6:f0:74:4c:78:6c:02:26:fd:dd:f5: 48:c6:37:6c:b4:00:64:c6:58:f3:1f:c2:22:83:e9: 7c:35:a8:ea:fc:f4:50:97:f3:96:14:44:2a:a6:01: 1c:f4:e7:f8:35:69:8a:48:2f:50:71:d1:13:57:9e: 25:6d:d7:15:0c:d6:8f:ca:12:f4:79:34:9d:35:de: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:71:61:AB:42:95:C6:ED:E3:73:86:3A:D7:53:EA:D0:2E:47:95 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jwJxYatClcbt43OGOtdT6tAuR5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.236.0/24 Signature Algorithm: sha256WithRSAEncryption a2:87:ca:97:22:b8:aa:3b:e6:53:ec:a1:20:b5:1f:71:e9:10: 3a:04:8e:05:65:19:fc:3f:7d:13:ea:7b:12:d9:f7:3f:1c:10: b9:20:83:c0:67:98:92:22:d3:3d:02:d6:65:9e:10:4d:78:60: 5b:30:42:88:dc:39:10:77:ed:10:bc:79:5d:f7:6a:93:ed:81: a3:f2:e3:0d:cf:88:3e:64:a2:a1:59:a8:6d:d9:91:1b:47:a4: 81:72:d3:93:93:52:f2:b4:a8:bb:7e:11:dc:1f:c0:f9:47:09: ab:76:b8:e6:71:2d:82:8a:83:d6:d1:9f:22:d3:b4:78:ae:eb: 1b:2a:4e:12:8f:85:c2:0c:86:48:bc:af:b3:46:49:8d:e6:5b: 01:e5:2f:8b:53:a1:b1:f6:e8:ed:70:0d:7d:d6:3b:7b:3b:64: 8b:c8:c8:b7:3d:ab:df:15:28:b6:ea:f5:53:a4:1d:67:7e:85: fa:e5:14:5a:da:81:ae:45:c8:d4:d6:50:35:8c:42:75:89:85: d9:60:14:f3:35:96:49:2b:3c:5c:42:20:32:4f:67:28:0e:19: 48:0b:b6:65:37:2f:63:a2:07:f8:db:66:fe:e5:cd:6a:b8:51: a7:c2:a9:58:ca:00:a1:13:1d:a0:8f:9a:fc:d2:1f:97:ae:cb: 2a:fa:c4:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsHAr4qSoDnKRmKq37eOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjAyNzE2MWFiNDI5NWM2ZWRlMzczODYzYWQ3NTNlYWQwMmU0Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsZbQoFkOZehhxTp1GZ42QicFN50 5szKuwF65pfN0m9ImsEcocthMzH9QLzJa/HGZr/zfLctHTMFJnM47zMo+12O1ZLm j4OyBiHxFcWgVbzB5IkAR4Gu1VmmqlVBvL5KEXdjIjiK3zYfScH+hjSocRQ+v0H5 fcNqYsCLIdXKPp52Ywu+xw7nFKaFeAyh3DVExKL/OYOOmgSIyoQ4bBuatijE0D8B 7VS3+7igOS5aFegd2IpEqEMttvB0THhsAib93fVIxjdstABkxljzH8Iig+l8Najq /PRQl/OWFEQqpgEc9Of4NWmKSC9QcdETV54lbdcVDNaPyhL0eTSdNd6vdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8CcWGrQpXG7eNzhjrXU+rQLkeVMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvandKeFlhdENsY2J0NDNPR090ZFQ2dEF1UjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/sMA0G CSqGSIb3DQEBCwUAA4IBAQCih8qXIriqO+ZT7KEgtR9x6RA6BI4FZRn8P30T6nsS 2fc/HBC5IIPAZ5iSItM9AtZlnhBNeGBbMEKI3DkQd+0QvHld92qT7YGj8uMNz4g+ ZKKhWaht2ZEbR6SBctOTk1LytKi7fhHcH8D5RwmrdrjmcS2CioPW0Z8i07R4rusb Kk4Sj4XCDIZIvK+zRkmN5lsB5S+LU6Gx9ujtcA191jt7O2SLyMi3PavfFSi26vVT pB1nfoX65RRa2oGuRcjU1lA1jEJ1iYXZYBTzNZZJKzxcQiAyT2coDhlIC7ZlNy9j ogf422b+5c1quFGnwqlYygChEx2gj5r80h+Xrssq+sSD -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client