This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JQIJAqHegHCQyzaCZFHuH74gi_8.roa File: JQIJAqHegHCQyzaCZFHuH74gi_8.roa (raw, json) Hash identifier: 0xZEfIJiUk3oII0JxGfSyCRlo9bVsklFZbXoetN+f4w= Subject key identifier: 25:02:09:02:A1:DE:80:70:90:CB:36:82:64:51:EE:1F:BE:20:8B:FF Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105E459E6C9B1BB83BB40118596C35 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JQIJAqHegHCQyzaCZFHuH74gi_8.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 188.132.130.0/24 maxlen: 24 188.132.165.0/24 maxlen: 24 188.132.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:45:9e:6c:9b:1b:b8:3b:b4:01:18:59:6c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25020902a1de807090cb36826451ee1fbe208bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:01:9a:99:a7:1e:99:7a:11:4d:ea:42:12: 96:59:69:f5:71:af:33:12:71:f8:01:81:f0:03:cc: 97:8e:84:69:71:64:2f:3f:14:88:2b:b9:44:bc:8e: 0d:00:91:f0:01:59:01:b0:47:50:dc:ed:b9:8c:e9: 30:ab:04:7b:c0:c3:ba:3d:3f:58:2b:16:5e:b8:63: 5c:b8:90:24:3e:4c:12:b6:03:e1:64:0f:73:34:ac: 3b:82:a5:b0:7f:80:ca:d4:15:dd:8d:8a:02:74:00: 2a:6f:df:45:45:56:d3:78:99:d0:08:ff:2f:19:36: 51:1d:d2:0d:74:7b:4b:11:e5:62:48:40:73:5e:94: cf:10:6f:af:4a:74:80:a4:c4:47:e3:82:b2:3c:34: 93:2e:58:83:48:1a:f6:45:8a:6c:6c:45:85:da:c2: ce:02:08:c2:01:68:6d:15:e5:ec:a6:c5:1f:d0:83: fe:fb:bc:c7:34:70:9d:84:24:4d:c8:99:66:a0:30: 94:13:78:ad:4c:bc:5e:2d:87:5c:74:1c:30:6f:7a: 5d:c0:b2:8b:cc:31:59:6e:43:cd:13:63:46:19:49: 2d:a1:d4:7b:43:56:93:6b:72:53:ab:5a:a1:73:4d: df:9b:1e:f4:e2:50:ee:23:f2:11:0a:4e:91:ad:16: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:09:02:A1:DE:80:70:90:CB:36:82:64:51:EE:1F:BE:20:8B:FF X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JQIJAqHegHCQyzaCZFHuH74gi_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.130.0/24 188.132.165.0/24 188.132.202.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f3:7b:3a:8e:30:8d:c5:b4:de:53:b9:71:77:dd:08:16:50: c5:36:23:e2:8f:95:b7:c6:7e:43:90:5e:2d:99:20:cf:9e:76: 31:2f:13:de:af:7f:89:61:8e:4a:13:a5:a6:58:e6:a8:f6:64: 4b:48:93:d7:2e:b6:fe:be:3d:03:ab:3f:66:4c:ef:65:4c:fe: 47:83:88:57:c5:8f:15:09:29:88:12:62:8c:93:b9:62:43:94: 83:e2:21:b2:78:f4:34:aa:c3:1a:48:dc:13:00:f4:47:39:ce: 05:aa:12:79:0c:87:0c:ce:9a:a1:b8:4c:9a:60:55:80:57:4a: 26:aa:d3:84:e8:65:c6:17:73:0a:a4:c3:43:3e:73:8e:ff:57: e5:c7:ef:ba:05:83:1e:e7:62:e3:f7:1c:33:1f:44:f8:42:a5: a4:75:d3:0f:8a:67:32:e9:37:e4:b6:d4:67:e5:5e:66:a8:22: 31:9c:3d:42:62:6b:86:2b:de:e5:e6:9e:fa:a2:11:fe:de:77: 99:3c:98:70:68:d1:75:1e:f6:2e:40:03:7d:2e:ac:f7:2d:70: f3:b4:b0:3b:37:aa:b2:0a:ba:a3:32:33:e2:a5:67:6c:dd:9d: d2:60:24:93:2e:48:6a:b7:4a:c5:fd:6c:d9:f4:ea:e8:0c:19: ee:7a:79:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EF5FnmybG7g7tAEYWWw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTAyMDkwMmExZGU4MDcwOTBjYjM2ODI2NDUxZWUxZmJlMjA4YmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb0BmpmnHpl6EU3qQhKWWWn1ca8z EnH4AYHwA8yXjoRpcWQvPxSIK7lEvI4NAJHwAVkBsEdQ3O25jOkwqwR7wMO6PT9Y KxZeuGNcuJAkPkwStgPhZA9zNKw7gqWwf4DK1BXdjYoCdAAqb99FRVbTeJnQCP8v GTZRHdINdHtLEeViSEBzXpTPEG+vSnSApMRH44KyPDSTLliDSBr2RYpsbEWF2sLO AgjCAWhtFeXspsUf0IP++7zHNHCdhCRNyJlmoDCUE3itTLxeLYdcdBwwb3pdwLKL zDFZbkPNE2NGGUktodR7Q1aTa3JTq1qhc03fmx704lDuI/IRCk6RrRZh0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCUCCQKh3oBwkMs2gmRR7h++IIv/MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvSlFJSkFxSGVnSENReXphQ1pGSHVINzRnaV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvISCAwQA vISlAwQAvITKMA0GCSqGSIb3DQEBCwUAA4IBAQAC83s6jjCNxbTeU7lxd90IFlDF NiPij5W3xn5DkF4tmSDPnnYxLxPer3+JYY5KE6WmWOao9mRLSJPXLrb+vj0Dqz9m TO9lTP5Hg4hXxY8VCSmIEmKMk7liQ5SD4iGyePQ0qsMaSNwTAPRHOc4FqhJ5DIcM zpqhuEyaYFWAV0omqtOE6GXGF3MKpMNDPnOO/1flx++6BYMe52Lj9xwzH0T4QqWk ddMPimcy6TfkttRn5V5mqCIxnD1CYmuGK97l5p76ohH+3neZPJhwaNF1HvYuQAN9 Lqz3LXDztLA7N6qyCrqjMjPipWds3Z3SYCSTLkhqt0rF/WzZ9OroDBnuenl7 -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:14 2026 by rpki-client