This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa File: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (raw, json) Hash identifier: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k= Subject key identifier: 8D:A1:6E:F6:90:5F:33:C9:AE:C4:46:BA:67:53:3B:6E:A3:D5:E5:36 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019B7E3923E8F9BEDE63105BC1DFF8593FF9 Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213812 IP address blocks: 185.146.138.0/24 maxlen: 24 185.146.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:e8:f9:be:de:63:10:5b:c1:df:f8:59:3f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8da16ef6905f33c9aec446ba67533b6ea3d5e536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:90:c2:89:c6:41:00:38:a6:f2:fb:3b:0e: 0a:3b:9a:9a:94:cc:e8:1e:b3:9c:80:0a:41:9a:8d: 2d:42:ea:db:60:27:d1:b8:07:8a:61:20:cd:43:c6: c8:fa:73:bb:13:ed:99:91:5b:89:37:3c:2d:f0:ca: aa:af:0d:0e:e1:e6:d9:e4:97:89:c3:ec:a1:5e:72: 7d:1a:cd:48:ab:90:22:b5:6e:1d:87:5f:b6:be:99: eb:2c:9e:4e:00:db:50:48:a6:3d:f5:40:b9:ec:f4: e4:10:45:1e:19:42:3a:45:ba:65:f5:22:a6:c4:48: a6:61:04:5d:18:df:c1:ab:9d:0a:7d:c9:6a:85:37: e2:9c:09:0d:d9:39:46:7c:7b:ce:58:65:30:22:36: 92:4a:91:50:e6:55:66:67:b1:da:4d:df:d5:38:fd: 7f:5f:9a:04:56:ab:e8:d4:09:dc:c1:b7:80:fa:d8: 15:58:7b:2e:f5:26:87:1b:dd:ab:84:1b:73:ae:57: 3d:79:cd:4c:5e:e7:d5:df:a0:de:39:fc:46:18:b8: f9:df:40:0a:77:e9:81:a1:d3:74:d7:e2:b2:f3:0a: 1e:19:3f:f5:9b:dc:84:c1:db:ef:ae:62:fa:b8:9f: 7f:f3:ee:ff:fa:e5:6d:8f:b1:41:6b:40:6d:1c:97: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A1:6E:F6:90:5F:33:C9:AE:C4:46:BA:67:53:3B:6E:A3:D5:E5:36 X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.138.0/23 Signature Algorithm: sha256WithRSAEncryption cd:e3:3c:9f:42:7e:48:45:74:08:0c:b9:b0:e6:6e:00:ad:d2: be:ea:04:73:8d:0a:7c:d6:b4:40:c4:6a:ed:db:dd:1a:46:45: 2a:68:39:7e:f2:7f:02:05:0a:d7:26:46:32:c8:06:e9:96:47: 8d:bd:ab:6e:ca:34:02:56:ef:16:77:be:d6:a9:2b:18:1f:5b: c9:c6:f2:26:96:41:92:12:28:cd:15:2d:f8:5c:c1:ac:f5:b4: 27:2f:e9:5e:c5:ee:cc:3a:75:83:90:70:d0:79:c7:6f:a0:28: 91:0a:9a:1b:ef:af:2b:ea:d0:ed:b6:c0:82:27:ab:73:c7:11: ef:a2:f4:de:89:49:72:db:88:42:64:96:21:c5:36:dc:ac:75: 8c:7f:e4:33:3e:a4:1b:45:1b:03:c2:e2:c9:ed:3f:0c:98:0b: 1f:0a:39:b2:76:ce:08:01:d8:55:41:08:12:71:7d:cb:d3:80: 86:cd:30:ab:36:b4:b0:cb:73:12:0e:23:93:db:3a:1e:07:d0: e6:1d:10:cd:3c:00:53:a3:fe:a9:f9:93:8d:85:f0:c8:66:3f: 9c:41:dd:51:4c:89:c0:e3:e1:96:ef:08:23:d1:d6:9b:bf:b9: 29:af:da:11:86:dd:98:6a:3c:e9:d9:74:03:ca:40:e6:7d:86: 73:a2:e6:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSPo+b7eYxBbwd/4WT/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGExNmVmNjkwNWYzM2M5YWVjNDQ2YmE2NzUzM2I2ZWEzZDVlNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSOQwonGQQA4pvL7Ow4KO5qalMzo HrOcgApBmo0tQurbYCfRuAeKYSDNQ8bI+nO7E+2ZkVuJNzwt8Mqqrw0O4ebZ5JeJ w+yhXnJ9Gs1Iq5AitW4dh1+2vpnrLJ5OANtQSKY99UC57PTkEEUeGUI6Rbpl9SKm xEimYQRdGN/Bq50KfclqhTfinAkN2TlGfHvOWGUwIjaSSpFQ5lVmZ7HaTd/VOP1/ X5oEVqvo1AncwbeA+tgVWHsu9SaHG92rhBtzrlc9ec1MXufV36DeOfxGGLj530AK d+mBodN01+Ky8woeGT/1m9yEwdvvrmL6uJ9/8+7/+uVtj7FBa0BtHJdNXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2hbvaQXzPJrsRGumdTO26j1eU2MB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvamFGdTlwQmZNOG11eEVhNloxTTdicVBWNVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZKKMA0G CSqGSIb3DQEBCwUAA4IBAQDN4zyfQn5IRXQIDLmw5m4ArdK+6gRzjQp81rRAxGrt 290aRkUqaDl+8n8CBQrXJkYyyAbplkeNvatuyjQCVu8Wd77WqSsYH1vJxvImlkGS EijNFS34XMGs9bQnL+lexe7MOnWDkHDQecdvoCiRCpob768r6tDttsCCJ6tzxxHv ovTeiUly24hCZJYhxTbcrHWMf+QzPqQbRRsDwuLJ7T8MmAsfCjmyds4IAdhVQQgS cX3L04CGzTCrNrSwy3MSDiOT2zoeB9DmHRDNPABTo/6p+ZONhfDIZj+cQd1RTInA 4+GW7wgj0dabv7kpr9oRht2Yajzp2XQDykDmfYZzoubb -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:30 2026 by rpki-client