This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/jjz54tPWsuXjHrsRR3lGh9uQu6o.roa File: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (raw, json) Hash identifier: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM= Subject key identifier: 8E:3C:F9:E2:D3:D6:B2:E5:E3:1E:BB:11:47:79:46:87:DB:90:BB:AA Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Certificate serial: 019B78A356AD0E86BF71E98A8E6F51E2BC4B Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/jjz54tPWsuXjHrsRR3lGh9uQu6o.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 185.77.208.0/22 maxlen: 22 2a05:6440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:ad:0e:86:bf:71:e9:8a:8e:6f:51:e2:bc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e3cf9e2d3d6b2e5e31ebb1147794687db90bbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:99:09:32:bf:13:4c:ab:5e:fc:01:cd:97: 1b:14:b1:57:fc:ff:31:bd:d2:f4:bd:7a:31:d5:0c: d2:3d:48:a8:bc:bd:b5:1f:b9:05:e8:ae:9c:bf:ad: 76:1a:b0:30:a8:82:8c:89:0a:96:45:a9:a1:9d:84: d9:cc:9f:b2:4e:2b:2b:87:a1:1e:65:67:df:08:b8: 63:31:b4:46:48:51:45:40:34:7f:3c:c4:ad:83:0c: 47:3c:83:8b:70:f6:4c:dd:c8:3e:28:64:31:a8:1b: 2e:40:4f:99:fb:b1:ef:be:d0:c9:aa:f4:e2:0c:77: 6d:a2:9f:39:81:33:24:eb:4a:a6:1c:97:d8:13:27: f4:65:43:7b:ae:99:03:1d:3e:a0:79:93:cc:06:ce: ef:12:be:d4:03:9b:1e:b7:9c:da:5e:56:b6:e3:8a: d7:bb:19:1c:20:8c:de:b3:c8:5e:58:f2:26:82:33: df:3c:c6:ff:1e:89:67:3a:1d:93:6b:60:c3:bf:58: b8:5e:f1:19:ed:24:9b:92:81:cf:c6:f3:cd:55:41: 5c:ee:51:2b:10:f0:d5:ef:43:f9:82:73:eb:54:4b: 20:29:ea:3c:f1:2c:45:c9:f7:c1:5d:9a:32:87:99: 73:c3:57:84:3c:ce:b6:46:5a:4b:b0:43:d9:24:50: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:F9:E2:D3:D6:B2:E5:E3:1E:BB:11:47:79:46:87:DB:90:BB:AA X509v3 Authority Key Identifier: keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/jjz54tPWsuXjHrsRR3lGh9uQu6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.208.0/22 IPv6: 2a05:6440::/29 Signature Algorithm: sha256WithRSAEncryption 2a:3f:af:a5:ca:c4:29:ac:d2:0b:81:59:d3:a4:37:fe:14:34: 10:bb:5b:bc:52:3d:13:5b:0e:97:19:c5:f5:17:5d:3b:82:31: 96:da:06:2d:28:08:2f:17:f8:26:ea:9c:a9:b2:45:06:32:c3: 52:b3:7e:a4:44:e4:84:34:3c:1a:68:3b:69:22:d7:69:8d:29: 43:0a:e3:79:41:c0:a6:85:cd:20:95:0b:56:40:c1:02:c1:ed: 9b:d4:c5:e5:b9:b4:ab:12:8a:65:96:dd:00:17:80:8f:e2:01: 2e:fa:3b:04:d7:03:34:96:fd:6a:b8:3b:2b:12:9b:93:6b:ab: 77:9f:8a:9f:0f:91:88:31:e7:17:a7:ab:98:d3:3c:d7:73:5a: eb:b3:d3:6d:cb:6c:92:ae:ae:4a:5a:5f:59:7c:28:1a:a9:b6: 39:71:2d:14:05:e7:5b:ea:cc:70:cf:ec:6d:57:5c:62:be:d5: 18:f0:f4:c6:3b:06:3c:f1:d4:a4:c9:c6:17:5f:58:77:76:42: 70:35:e2:ad:ac:64:c9:07:f1:ae:11:0d:01:81:90:13:d3:bc: d4:0b:d2:60:c6:50:94:eb:20:2a:1f:8d:8b:2d:59:65:5b:c5: ec:70:81:43:98:05:18:a9:38:37:db:96:44:d7:4e:bf:9c:8b: c2:e6:43:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o1atDoa/cemKjm9R4rxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3 YzkxMDEwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTNjZjllMmQzZDZiMmU1ZTMxZWJiMTE0Nzc5NDY4N2RiOTBiYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j+ZCTK/E0yrXvwBzZcbFLFX/P8x vdL0vXox1QzSPUiovL21H7kF6K6cv612GrAwqIKMiQqWRamhnYTZzJ+yTisrh6Ee ZWffCLhjMbRGSFFFQDR/PMStgwxHPIOLcPZM3cg+KGQxqBsuQE+Z+7HvvtDJqvTi DHdtop85gTMk60qmHJfYEyf0ZUN7rpkDHT6geZPMBs7vEr7UA5set5zaXla244rX uxkcIIzes8heWPImgjPfPMb/HolnOh2Ta2DDv1i4XvEZ7SSbkoHPxvPNVUFc7lEr EPDV70P5gnPrVEsgKeo88SxFyffBXZoyh5lzw1eEPM62RlpLsEPZJFCyEwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI48+eLT1rLl4x67EUd5RofbkLuqMB8GA1UdIwQY MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt OGY1NGFiMTM0ZDgzLzEvamp6NTR0UFdzdVhqSHJzUlIzbEdoOXVRdTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU3QMA0E AgACMAcDBQMqBWRAMA0GCSqGSIb3DQEBCwUAA4IBAQAqP6+lysQprNILgVnTpDf+ FDQQu1u8Uj0TWw6XGcX1F107gjGW2gYtKAgvF/gm6pypskUGMsNSs36kROSENDwa aDtpItdpjSlDCuN5QcCmhc0glQtWQMECwe2b1MXlubSrEopllt0AF4CP4gEu+jsE 1wM0lv1quDsrEpuTa6t3n4qfD5GIMecXp6uY0zzXc1rrs9Nty2ySrq5KWl9ZfCga qbY5cS0UBedb6sxwz+xtV1xivtUY8PTGOwY88dSkycYXX1h3dkJwNeKtrGTJB/Gu EQ0BgZAT07zUC9JgxlCU6yAqH42LLVllW8XscIFDmAUYqTg325ZE106/nIvC5kP8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:13 2026 by rpki-client