This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/JFPJOrPs9dXx9GwdhX115yKBrlc.roa File: JFPJOrPs9dXx9GwdhX115yKBrlc.roa (raw, json) Hash identifier: xcbSy3Zef1nqQuOhrN3INeMT7qcWiLG9Wjm4R+KTz98= Subject key identifier: 24:53:C9:3A:B3:EC:F5:D5:F1:F4:6C:1D:85:7D:75:E7:22:81:AE:57 Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455 Certificate serial: 019B7EA46AAF93F1508D246C20D001BBD939 Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/JFPJOrPs9dXx9GwdhX115yKBrlc.roa Signing time: Fri 02 Jan 2026 12:17:43 +0000 ROA not before: Fri 02 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43326 IP address blocks: 185.124.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:6a:af:93:f1:50:8d:24:6c:20:d0:01:bb:d9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455 Validity Not Before: Jan 2 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2453c93ab3ecf5d5f1f46c1d857d75e72281ae57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:a8:26:62:c3:57:dd:02:aa:73:df:50:90: 63:d5:93:ae:bd:53:30:e1:ab:4b:47:de:bb:a5:b3: d0:8f:b9:b2:ee:cd:d6:7a:6a:b8:4b:29:75:54:94: 8f:fa:b0:84:70:86:fe:aa:e6:6f:45:83:13:21:e6: 7a:58:b0:c7:8e:6a:a2:a0:17:79:0d:b9:e6:52:33: 34:d4:81:10:c3:20:a2:d7:55:13:c8:58:f4:45:11: 1b:08:1a:79:83:84:b2:ce:37:87:8e:2b:50:81:fd: 02:bc:c6:7e:1f:35:3d:78:c1:e1:84:f8:b7:eb:a5: 04:2e:a7:2a:ae:bb:df:3e:f5:78:7e:b5:84:c5:64: 31:e0:47:c3:32:6c:99:b3:07:aa:bd:88:ea:82:29: 48:87:cd:59:4e:ee:5b:cd:2d:f8:b8:d5:24:6a:a7: a3:8d:71:2b:dc:f5:21:15:96:88:0c:db:d2:ff:41: f9:95:89:bc:d3:66:9c:48:c6:63:b5:ed:9b:a6:c7: ef:6b:24:29:ad:e5:0e:3a:fa:c1:43:43:6f:c4:c4: e2:a1:09:3a:ba:5c:7a:b5:a2:06:03:fe:ac:cf:1a: 13:68:be:c3:43:18:c2:f1:db:75:41:44:37:ff:27: 25:92:55:5a:88:5d:9b:ac:db:c7:a6:1d:0c:3e:15: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:C9:3A:B3:EC:F5:D5:F1:F4:6C:1D:85:7D:75:E7:22:81:AE:57 X509v3 Authority Key Identifier: keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/JFPJOrPs9dXx9GwdhX115yKBrlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.242.0/24 Signature Algorithm: sha256WithRSAEncryption 38:a5:1d:8f:7c:60:00:ce:8f:2a:48:10:f0:b3:78:d6:37:80: a1:3c:99:09:5b:a7:d4:c5:4e:1a:5a:32:2c:e8:c9:4a:41:d5: fd:82:95:d3:5b:fc:ef:c1:96:14:9a:23:1b:05:33:30:63:83: 71:bd:1d:27:33:b2:05:f4:1a:27:76:b0:5a:a7:c2:69:34:af: 54:96:b6:d5:0b:3d:83:89:ab:86:c9:4c:5d:0e:fd:a2:02:e1: cd:bd:a7:54:da:8b:ac:a7:9d:83:9d:52:b9:8e:b3:40:0f:8d: 38:2c:9b:57:2b:fb:65:81:d5:52:e8:a5:66:d8:72:30:7a:4e: 10:8f:30:14:46:b0:48:5a:ce:a4:10:1e:e4:74:40:3f:10:2e: 5d:8f:be:5a:e6:30:de:cc:81:9f:a4:f9:1e:4e:e3:27:4e:6d: 71:b2:08:83:fb:fe:5d:28:b8:fa:6b:8c:ec:ce:31:6b:17:3d: 96:89:9f:61:f7:bc:5c:fb:31:2b:bd:e0:d2:0c:4b:75:6d:9f: 2a:b7:18:a0:93:4f:13:66:f6:ea:e5:07:44:a3:f5:52:96:4b: bc:fb:7b:46:74:6e:bd:f7:7b:99:03:32:47:eb:82:d0:5e:e7: a1:0d:91:a2:a6:91:fa:7c:f4:fc:a1:e5:5a:a0:76:98:32:e4: ae:5f:b3:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pGqvk/FQjSRsINABu9k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw MTc0NTUwHhcNMjYwMTAyMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDUzYzkzYWIzZWNmNWQ1ZjFmNDZjMWQ4NTdkNzVlNzIyODFhZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJSoJmLDV90CqnPfUJBj1ZOuvVMw 4atLR967pbPQj7my7s3Wemq4Syl1VJSP+rCEcIb+quZvRYMTIeZ6WLDHjmqioBd5 DbnmUjM01IEQwyCi11UTyFj0RREbCBp5g4SyzjeHjitQgf0CvMZ+HzU9eMHhhPi3 66UELqcqrrvfPvV4frWExWQx4EfDMmyZsweqvYjqgilIh81ZTu5bzS34uNUkaqej jXEr3PUhFZaIDNvS/0H5lYm802acSMZjte2bpsfvayQpreUOOvrBQ0NvxMTioQk6 ulx6taIGA/6szxoTaL7DQxjC8dt1QUQ3/yclklVaiF2brNvHph0MPhUTpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCRTyTqz7PXV8fRsHYV9deciga5XMB8GA1UdIwQY MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt Y2UyOWZkMzUyNmE4LzEvSkZQSk9yUHM5ZFh4OUd3ZGhYMTE1eUtCcmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4 LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXzyMA0G CSqGSIb3DQEBCwUAA4IBAQA4pR2PfGAAzo8qSBDws3jWN4ChPJkJW6fUxU4aWjIs 6MlKQdX9gpXTW/zvwZYUmiMbBTMwY4NxvR0nM7IF9BondrBap8JpNK9UlrbVCz2D iauGyUxdDv2iAuHNvadU2ousp52DnVK5jrNAD404LJtXK/tlgdVS6KVm2HIwek4Q jzAURrBIWs6kEB7kdEA/EC5dj75a5jDezIGfpPkeTuMnTm1xsgiD+/5dKLj6a4zs zjFrFz2WiZ9h97xc+zErveDSDEt1bZ8qtxigk08TZvbq5QdEo/VSlku8+3tGdG69 93uZAzJH64LQXuehDZGippH6fPT8oeVaoHaYMuSuX7Mi -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:15 2026 by rpki-client