This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa File: jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa (raw, json) Hash identifier: E6oHGy8IhhcshyaYtATT6go1WUadzT652DZ7kyPwmPQ= Subject key identifier: 8D:31:9C:46:8D:E1:85:7F:8F:59:5A:B9:74:95:63:73:6B:90:6E:BE Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Certificate serial: 019B7A5B8804F93A89E84634AFA263BC25FC Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208719 IP address blocks: 185.127.240.0/22 maxlen: 23 2a03:9960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:04:f9:3a:89:e8:46:34:af:a2:63:bc:25:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d319c468de1857f8f595ab9749563736b906ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:fe:76:28:ec:ed:c8:72:5b:00:a1:cd:45: 89:c6:c6:4d:b2:59:df:9f:42:21:35:92:c5:e2:e1: 63:49:08:bc:5b:b9:eb:ff:16:ab:d6:4e:7d:3d:c9: ba:af:21:9d:d7:42:c7:03:6c:ed:4a:d2:09:d2:f8: b2:a8:47:93:7a:48:7d:cf:cc:c6:1a:6f:a1:f6:c1: 7f:73:68:cf:0a:a7:72:2c:1d:53:4a:ee:36:a7:c2: df:31:12:99:54:a1:f7:6d:68:65:9f:74:b7:93:41: 1e:d2:2f:25:38:36:e2:41:41:6d:08:ce:f9:26:c2: 02:5a:01:48:50:e3:81:4e:a5:fc:58:8d:ad:33:5b: 55:d3:21:dc:65:6e:b7:d5:f8:54:c2:c6:57:0d:ac: ec:47:21:70:a9:c7:7b:8d:03:44:94:7e:b5:40:a6: c7:da:5f:ec:25:ac:23:d0:9f:5a:66:a8:18:88:2a: 3f:82:c1:41:b8:78:44:24:6a:61:29:45:d1:59:1d: fe:9b:3e:30:6a:56:9a:4a:d3:a2:f6:b0:39:6a:0b: 44:39:a0:fd:8a:54:59:49:11:00:7d:cf:c4:28:31: e0:6c:03:76:ad:8e:92:89:90:f3:b7:3a:82:a3:7b: 6e:46:51:1e:da:5f:0d:c3:38:50:2c:63:fe:5f:3c: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:9C:46:8D:E1:85:7F:8F:59:5A:B9:74:95:63:73:6B:90:6E:BE X509v3 Authority Key Identifier: keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/jTGcRo3hhX-PWVq5dJVjc2uQbr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.240.0/22 IPv6: 2a03:9960::/32 Signature Algorithm: sha256WithRSAEncryption 54:40:11:65:65:c5:7e:9a:2c:01:7e:e6:12:11:3c:73:7a:6c: 53:57:d0:3e:73:bb:08:99:c7:5e:ae:97:ab:90:d9:b5:ef:58: a3:74:d8:c6:d1:e3:b4:2a:1c:03:1f:34:f7:be:5a:3c:0a:ee: fb:2d:05:85:e5:56:e0:d2:21:27:41:97:c3:16:ed:67:ca:4b: ec:61:53:50:9f:50:27:ce:83:50:64:8c:c9:08:b4:d5:72:f0: a2:0c:88:a6:e8:5a:6e:64:12:36:f9:94:71:4d:0a:9e:9c:11: 53:6e:79:fd:c9:19:e8:de:2e:b0:03:3a:7e:48:fe:90:89:19: 98:46:c6:5e:fd:9b:57:f5:d4:22:3f:25:45:d1:14:2c:60:a6: 28:af:a5:1a:1b:37:04:ae:89:7c:79:be:49:4d:4a:04:bd:2f: 07:76:8f:77:d2:9d:3e:d5:06:0c:81:8c:b8:03:e8:c1:90:81: bc:04:d7:76:3f:e8:d7:d4:95:bc:b6:42:b8:99:bd:b7:01:17: 5a:aa:dd:b5:49:59:23:a6:df:34:2e:1f:57:8e:8e:41:e2:7f: 3b:0d:7a:22:42:38:96:3b:9f:0f:58:e1:9a:92:4f:d6:99:9f: dc:56:2e:d1:cb:9d:64:e4:0e:76:d0:f0:7b:f6:11:c2:38:c4: 1a:4a:a5:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W4gE+TqJ6EY0r6JjvCX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1 NTc2ODYwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMxOWM0NjhkZTE4NTdmOGY1OTVhYjk3NDk1NjM3MzZiOTA2ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kv+dijs7chyWwChzUWJxsZNslnf n0IhNZLF4uFjSQi8W7nr/xar1k59Pcm6ryGd10LHA2ztStIJ0viyqEeTekh9z8zG Gm+h9sF/c2jPCqdyLB1TSu42p8LfMRKZVKH3bWhln3S3k0Ee0i8lODbiQUFtCM75 JsICWgFIUOOBTqX8WI2tM1tV0yHcZW631fhUwsZXDazsRyFwqcd7jQNElH61QKbH 2l/sJawj0J9aZqgYiCo/gsFBuHhEJGphKUXRWR3+mz4walaaStOi9rA5agtEOaD9 ilRZSREAfc/EKDHgbAN2rY6SiZDztzqCo3tuRlEe2l8NwzhQLGP+XzxfawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI0xnEaN4YV/j1lauXSVY3NrkG6+MB8GA1UdIwQY MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk LWZhYWM5MDgwMjkwOC8xL2pUR2NSbzNoaFgtUFdWcTVkSlZqYzJ1UWJyNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5f/Aw DQQCAAIwBwMFACoDmWAwDQYJKoZIhvcNAQELBQADggEBAFRAEWVlxX6aLAF+5hIR PHN6bFNX0D5zuwiZx16ul6uQ2bXvWKN02MbR47QqHAMfNPe+WjwK7vstBYXlVuDS ISdBl8MW7WfKS+xhU1CfUCfOg1BkjMkItNVy8KIMiKboWm5kEjb5lHFNCp6cEVNu ef3JGejeLrADOn5I/pCJGZhGxl79m1f11CI/JUXRFCxgpiivpRobNwSuiXx5vklN SgS9Lwd2j3fSnT7VBgyBjLgD6MGQgbwE13Y/6NfUlby2QriZvbcBF1qq3bVJWSOm 3zQuH1eOjkHifzsNeiJCOJY7nw9Y4ZqST9aZn9xWLtHLnWTkDnbQ8Hv2EcI4xBpK pXo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:39 2026 by rpki-client