This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jGcgfjX-2VLeT-thJNq_EhCsLOs.roa File: jGcgfjX-2VLeT-thJNq_EhCsLOs.roa (raw, json) Hash identifier: vfhUER+MVyFd4cICZOxhLKN285pUX1g3EDDwGeuEuY0= Subject key identifier: 8C:67:20:7E:35:FE:D9:52:DE:4F:EB:61:24:DA:BF:12:10:AC:2C:EB Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019BE0AD933E95B5EE4CB3127EC9D9FBD2E0 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jGcgfjX-2VLeT-thJNq_EhCsLOs.roa Signing time: Wed 21 Jan 2026 13:10:30 +0000 ROA not before: Wed 21 Jan 2026 13:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215305 IP address blocks: 195.78.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:ad:93:3e:95:b5:ee:4c:b3:12:7e:c9:d9:fb:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jan 21 13:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c67207e35fed952de4feb6124dabf1210ac2ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:a1:c6:dd:2a:3c:40:a7:04:5d:16:c8:d9: 62:89:ca:f6:38:3e:86:18:e7:8e:95:a6:f4:95:18: 04:95:c4:fa:a6:39:3f:e3:bb:39:a0:76:2e:82:69: 28:99:bc:e6:ac:09:5e:5b:3e:f9:25:16:76:9d:58: ad:11:2d:d5:cb:0b:01:81:93:3f:24:fe:a6:64:21: cd:e4:d8:83:88:aa:48:8b:c3:6e:bc:19:09:05:1c: cc:a3:55:ef:20:72:5b:5e:3b:30:c8:5f:c9:ef:30: 0f:79:97:0b:97:5a:ef:4a:a5:d5:39:16:e3:1b:1d: 60:f5:d1:d1:a6:53:7d:53:ca:d7:48:df:d2:25:61: dc:ef:79:56:4e:09:15:85:1b:a9:2b:18:24:0e:ff: 7c:1b:7a:18:8d:b7:9d:1b:f1:ce:a8:33:49:3d:05: 98:97:09:aa:1b:e6:41:12:d9:ad:86:66:e5:18:ed: c2:53:87:74:a6:db:a7:65:e2:e2:7e:36:fa:50:3f: 83:98:bf:3e:31:4c:f3:18:b5:d1:4b:60:7f:5d:5c: 71:8d:79:c2:a1:f9:c1:85:29:4f:a0:e3:99:aa:14: 7b:68:9e:eb:7f:6b:ce:da:ed:db:ca:f5:fc:6c:1d: dc:f3:7d:1b:0f:55:b9:52:d1:8a:69:e6:7a:e0:99: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:20:7E:35:FE:D9:52:DE:4F:EB:61:24:DA:BF:12:10:AC:2C:EB X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/jGcgfjX-2VLeT-thJNq_EhCsLOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.49.0/24 Signature Algorithm: sha256WithRSAEncryption 37:86:13:47:6a:ca:e8:e0:96:fa:02:3f:b7:42:32:b4:bf:eb: e0:94:bd:5d:01:b0:36:1e:7a:b7:25:54:ed:85:0b:8c:59:b1: a2:f6:b0:b9:1b:be:8b:97:17:b0:87:93:39:15:60:a5:a1:e6: 7a:f0:cf:1f:c2:3b:dc:f3:6c:3b:f0:cb:84:61:63:ef:f1:e3: 01:75:1e:cd:09:5f:29:50:a6:9f:5d:4f:e8:89:a0:45:b1:ee: 8f:9a:06:26:f4:cf:6d:e5:8f:14:02:ef:59:af:e7:5e:ff:ad: 65:cd:36:1e:85:fd:44:c3:fc:42:74:cf:52:41:3d:6e:b8:4f: b4:e8:51:46:de:26:2a:9e:40:08:6d:2d:60:25:d4:66:37:94: f8:f8:74:1a:c3:e8:44:e3:1f:08:2d:b8:fa:1f:7e:a2:e8:3f: 74:f2:5a:b8:91:7d:e3:93:a5:21:b4:1c:39:0f:c2:54:00:1e: c7:c2:58:ad:c5:31:5a:a5:27:a4:1c:9b:31:b2:df:2c:b8:85: 7c:72:2e:40:66:5a:84:61:d3:49:b9:5d:b8:ac:32:4f:c7:c7: de:8a:9c:64:95:c4:b7:be:31:64:f9:a2:c6:94:20:bb:11:94: 35:6f:b5:1e:99:0d:4b:1f:1f:05:61:d4:24:1a:e8:d4:74:96: 06:eb:12:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgrZM+lbXuTLMSfsnZ+9LgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwMTIxMTMxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzY3MjA3ZTM1ZmVkOTUyZGU0ZmViNjEyNGRhYmYxMjEwYWMyY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAmhxt0qPECnBF0WyNliicr2OD6G GOeOlab0lRgElcT6pjk/47s5oHYugmkombzmrAleWz75JRZ2nVitES3VywsBgZM/ JP6mZCHN5NiDiKpIi8NuvBkJBRzMo1XvIHJbXjswyF/J7zAPeZcLl1rvSqXVORbj Gx1g9dHRplN9U8rXSN/SJWHc73lWTgkVhRupKxgkDv98G3oYjbedG/HOqDNJPQWY lwmqG+ZBEtmthmblGO3CU4d0ptunZeLifjb6UD+DmL8+MUzzGLXRS2B/XVxxjXnC ofnBhSlPoOOZqhR7aJ7rf2vO2u3byvX8bB3c830bD1W5UtGKaeZ64JnnSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxnIH41/tlS3k/rYSTavxIQrCzrMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvakdjZ2ZqWC0yVkxlVC10aEpOcV9FaENzTE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw04xMA0G CSqGSIb3DQEBCwUAA4IBAQA3hhNHasro4Jb6Aj+3QjK0v+vglL1dAbA2Hnq3JVTt hQuMWbGi9rC5G76Llxewh5M5FWCloeZ68M8fwjvc82w78MuEYWPv8eMBdR7NCV8p UKafXU/oiaBFse6PmgYm9M9t5Y8UAu9Zr+de/61lzTYehf1Ew/xCdM9SQT1uuE+0 6FFG3iYqnkAIbS1gJdRmN5T4+HQaw+hE4x8ILbj6H36i6D908lq4kX3jk6UhtBw5 D8JUAB7HwlitxTFapSekHJsxst8suIV8ci5AZlqEYdNJuV24rDJPx8feipxklcS3 vjFk+aLGlCC7EZQ1b7UemQ1LHx8FYdQkGujUdJYG6xIE -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:15 2026 by rpki-client