This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/JnE4Lg8gZszPyBEEsb8Gcs719KY.roa File: JnE4Lg8gZszPyBEEsb8Gcs719KY.roa (raw, json) Hash identifier: cYlzg817hk5wGuQLOu2zo0n6vchezuch2Wu1c/2JAng= Subject key identifier: 26:71:38:2E:0F:20:66:CC:CF:C8:11:04:B1:BF:06:72:CE:F5:F4:A6 Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300 Certificate serial: 019B797ED1DD413CF5E12ADF87AEA544309E Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/JnE4Lg8gZszPyBEEsb8Gcs719KY.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62024 IP address blocks: 185.50.96.0/24 maxlen: 24 185.50.97.0/24 maxlen: 24 185.50.98.0/24 maxlen: 24 2a01:a3e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:dd:41:3c:f5:e1:2a:df:87:ae:a5:44:30:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2671382e0f2066cccfc81104b1bf0672cef5f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:e9:fa:c5:2e:a7:7f:55:9a:57:97:64:e5: 43:29:f3:27:b2:cd:ba:5b:af:d1:40:50:a5:f1:2e: f4:e6:b0:af:0a:64:49:53:40:5c:df:ea:85:35:89: 42:7d:a6:2c:ad:da:d7:90:65:8d:4b:3c:f1:ee:7a: ee:1a:c3:0c:ff:1d:19:e8:c0:a8:6b:51:0d:72:5f: a0:1a:71:82:2f:8b:73:b0:94:ce:a8:80:30:c4:22: 55:de:0f:f6:16:7c:0d:0f:48:8d:6b:9a:f8:a9:f1: 5b:04:f2:2d:47:f0:74:51:c7:6d:82:c2:20:5e:bc: 36:29:2c:4c:8a:bf:ad:2b:98:86:32:f3:1e:84:c3: 24:8d:0a:35:da:15:cd:e1:6c:49:19:cb:29:11:38: 6b:7c:96:c1:1a:17:52:50:d5:cf:59:77:2b:16:40: 85:e6:74:2e:b8:cc:6a:e3:e1:ee:3d:98:c6:5e:19: 95:51:c8:ba:9e:31:10:d9:76:f2:0a:b3:1d:9f:95: 3c:6f:41:4f:49:57:35:fa:93:93:e3:3a:a7:2a:04: 9f:31:61:9f:12:b1:43:ad:ae:71:c8:5b:82:1d:10: be:f9:c0:f3:0c:0c:fd:db:08:da:ea:b9:b8:37:ad: 14:9d:56:d9:89:92:f2:3a:af:50:5c:dc:3f:3e:60: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:38:2E:0F:20:66:CC:CF:C8:11:04:B1:BF:06:72:CE:F5:F4:A6 X509v3 Authority Key Identifier: keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/JnE4Lg8gZszPyBEEsb8Gcs719KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.96.0-185.50.98.255 IPv6: 2a01:a3e0::/32 Signature Algorithm: sha256WithRSAEncryption 29:5e:83:5d:3d:0c:17:72:41:bc:e4:8d:81:ca:4c:ae:d3:4b: 3c:30:6a:d6:15:44:9b:4d:b8:4e:86:53:0e:52:73:48:51:fc: f3:8b:a5:3f:33:82:2a:ce:03:5b:a6:e2:2d:fa:e7:b6:b7:e0: 6c:57:f4:91:d1:c8:1b:72:2f:51:82:fc:0f:78:8b:7f:d8:03: 26:ac:8d:41:99:b0:8d:76:a1:bf:12:40:f2:42:c5:7c:fd:f6: 3c:57:e6:d4:67:59:dd:49:96:2e:08:74:00:8d:74:0b:35:a5: 6c:8d:27:ae:d1:a5:49:09:91:8a:f2:6c:21:94:63:e5:0b:b5: 57:04:74:f5:da:1d:d6:a2:ef:1d:74:04:b0:25:a8:57:b3:9e: 98:fe:7c:69:b4:45:34:3d:1f:62:a3:66:2f:1b:9d:02:bd:9b: ed:b7:04:8b:34:ca:62:9e:96:06:69:98:34:e0:45:61:a7:81: 71:16:59:ce:85:a1:70:e6:73:54:4a:f3:61:2d:b2:ae:32:7a: 58:6c:e0:8b:db:82:47:12:aa:af:7a:d7:fc:0b:0f:85:f5:b6: f9:7a:6c:c0:94:a8:9a:bb:82:63:ae:41:af:3c:c0:d8:87:10: 56:f0:54:9e:64:eb:ca:6f:fd:e1:27:87:87:d2:3e:39:86:1e: a9:c1:dc:6c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5ftHdQTz14Srfh66lRDCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzUxMjYyZmU4N2Y0ZTI5NWVmOWU3Zjg3YTFmOWU0OWY1 N2MzMDAwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjcxMzgyZTBmMjA2NmNjY2ZjODExMDRiMWJmMDY3MmNlZjVmNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulzp+sUup39VmleXZOVDKfMnss26 W6/RQFCl8S705rCvCmRJU0Bc3+qFNYlCfaYsrdrXkGWNSzzx7nruGsMM/x0Z6MCo a1ENcl+gGnGCL4tzsJTOqIAwxCJV3g/2FnwND0iNa5r4qfFbBPItR/B0UcdtgsIg Xrw2KSxMir+tK5iGMvMehMMkjQo12hXN4WxJGcspEThrfJbBGhdSUNXPWXcrFkCF 5nQuuMxq4+HuPZjGXhmVUci6njEQ2XbyCrMdn5U8b0FPSVc1+pOT4zqnKgSfMWGf ErFDra5xyFuCHRC++cDzDAz92wja6rm4N60UnVbZiZLyOq9QXNw/PmB18wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFCZxOC4PIGbMz8gRBLG/BnLO9fSmMB8GA1UdIwQY MBaAFBTFEmL+h/Tile+ef4eh+eSfV8MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1VU1l2Nkg5T0tWNzU1X2g2SDU1SjlYd3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iZGZkMTktMjAxYS00NDRkLThkODgt NmVmNGM3Yzc0NzBiLzEvSm5FNExnOGdac3pQeUJFRXNiOEdjczcxOUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iZGZkMTktMjAxYS00NDRkLThkODgtNmVmNGM3Yzc0NzBi LzEvRk1VU1l2Nkg5T0tWNzU1X2g2SDU1SjlYd3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAW5MmAD BAC5MmIwDQQCAAIwBwMFACoBo+AwDQYJKoZIhvcNAQELBQADggEBACleg109DBdy QbzkjYHKTK7TSzwwatYVRJtNuE6GUw5Sc0hR/POLpT8zgirOA1um4i3657a34GxX 9JHRyBtyL1GC/A94i3/YAyasjUGZsI12ob8SQPJCxXz99jxX5tRnWd1Jli4IdACN dAs1pWyNJ67RpUkJkYrybCGUY+ULtVcEdPXaHdai7x10BLAlqFeznpj+fGm0RTQ9 H2KjZi8bnQK9m+23BIs0ymKelgZpmDTgRWGngXEWWc6FoXDmc1RK82Etsq4yelhs 4IvbgkcSqq961/wLD4X1tvl6bMCUqJq7gmOuQa88wNiHEFbwVJ5k68pv/eEnh4fS PjmGHqnB3Gw= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client