This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/rjyccDgFllWxfeQb355Lp_fLXxk.roa File: rjyccDgFllWxfeQb355Lp_fLXxk.roa (raw, json) Hash identifier: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI= Subject key identifier: AE:3C:9C:70:38:05:96:55:B1:7D:E4:1B:DF:9E:4B:A7:F7:CB:5F:19 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80E91CE13E884ECCE9A8A8755FFB0 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/rjyccDgFllWxfeQb355Lp_fLXxk.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 185.221.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0e:91:ce:13:e8:84:ec:ce:9a:8a:87:55:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae3c9c7038059655b17de41bdf9e4ba7f7cb5f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:31:ee:87:24:28:84:fc:c0:2b:6b:9e:b6: 93:bd:35:72:0e:69:21:2b:49:0e:98:e7:1c:0f:53: 2e:a0:39:a3:4b:37:ec:2f:28:d2:38:cd:44:99:e4: bc:20:20:90:0e:ca:f3:9a:b7:f7:af:a7:71:e6:c4: f7:fc:76:48:e2:ae:5f:47:a1:1b:11:90:7d:5d:66: 74:6b:4e:01:84:16:85:4a:fd:aa:33:97:f5:78:fd: 32:5b:72:05:91:23:b4:de:30:5a:d0:6f:38:17:88: 48:7a:1a:11:cf:50:ec:f1:72:05:37:b0:03:06:ee: b0:e6:e5:5a:64:e6:9e:ba:f4:e3:13:e0:02:cb:8e: ab:3c:e4:a1:f3:66:bb:95:9c:d0:68:d5:05:b5:4f: 06:98:57:df:96:d9:88:42:07:79:c4:05:57:2d:bb: 65:f9:2f:e5:2a:19:da:8e:51:76:27:13:fa:98:06: 0b:72:bf:6e:d4:fd:af:13:af:18:b5:f6:87:dc:8c: 0f:81:82:7b:2a:82:94:78:a9:40:c2:66:10:1b:b0: 22:35:a2:64:c6:3d:ca:11:b5:75:92:01:0f:c0:ea: 4c:b7:60:00:ca:a6:aa:88:c5:5c:d4:6d:1a:93:78: 2d:84:64:5a:81:a7:cc:41:45:63:a1:b5:8c:d7:0f: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:9C:70:38:05:96:55:B1:7D:E4:1B:DF:9E:4B:A7:F7:CB:5F:19 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/rjyccDgFllWxfeQb355Lp_fLXxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.197.0/24 Signature Algorithm: sha256WithRSAEncryption 26:9a:5b:b1:16:5e:8e:c9:ce:bd:c8:cf:ba:62:97:1f:76:b7: ea:f5:1b:71:a8:dd:67:a9:06:24:bc:df:a3:0d:70:e7:a4:82: b9:ca:72:fa:f1:fd:3b:b4:78:ee:2a:0a:83:0a:16:10:5e:3e: 4d:6e:c8:65:e7:70:75:3e:24:f0:b0:9f:33:9d:25:a3:ad:b3: e2:cd:e3:ff:b7:48:2c:41:5b:30:f1:85:61:53:e7:88:92:a9: 72:25:ee:2b:21:b8:10:8d:34:f1:19:2d:51:cc:9d:4d:ce:07: 24:33:00:36:18:e1:ba:f3:db:4c:a1:04:5e:0e:c1:9d:e4:53: af:76:b6:43:86:66:01:ac:49:d8:5a:71:e5:64:9a:66:86:b2: 04:23:31:b3:9d:51:08:59:c1:aa:ae:d3:16:53:81:35:16:eb: 25:8b:e0:b9:70:ee:66:ff:b4:53:84:79:92:e4:f4:f9:e0:48: 23:d3:84:ac:95:d5:8d:da:fd:ef:0e:7a:58:9c:fe:57:4d:9a: d1:b7:d3:bb:3e:55:86:dd:27:a3:5b:62:b1:49:2c:28:04:2c: e9:c7:80:f0:c5:96:f3:61:21:aa:f5:74:8c:0d:61:11:2c:a3: ea:0d:f0:d0:64:de:7e:0c:4f:19:c5:c3:e9:e3:68:a9:e4:8b: be:6d:49:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yA6RzhPohOzOmoqHVf+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTNjOWM3MDM4MDU5NjU1YjE3ZGU0MWJkZjllNGJhN2Y3Y2I1ZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgx7ockKIT8wCtrnraTvTVyDmkh K0kOmOccD1MuoDmjSzfsLyjSOM1EmeS8ICCQDsrzmrf3r6dx5sT3/HZI4q5fR6Eb EZB9XWZ0a04BhBaFSv2qM5f1eP0yW3IFkSO03jBa0G84F4hIehoRz1Ds8XIFN7AD Bu6w5uVaZOaeuvTjE+ACy46rPOSh82a7lZzQaNUFtU8GmFffltmIQgd5xAVXLbtl +S/lKhnajlF2JxP6mAYLcr9u1P2vE68YtfaH3IwPgYJ7KoKUeKlAwmYQG7AiNaJk xj3KEbV1kgEPwOpMt2AAyqaqiMVc1G0ak3gthGRagafMQUVjobWM1w+uIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK48nHA4BZZVsX3kG9+eS6f3y18ZMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvcmp5Y2NEZ0ZsbFd4ZmVRYjM1NUxwX2ZMWHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3FMA0G CSqGSIb3DQEBCwUAA4IBAQAmmluxFl6Oyc69yM+6Ypcfdrfq9RtxqN1nqQYkvN+j DXDnpIK5ynL68f07tHjuKgqDChYQXj5Nbshl53B1PiTwsJ8znSWjrbPizeP/t0gs QVsw8YVhU+eIkqlyJe4rIbgQjTTxGS1RzJ1NzgckMwA2GOG689tMoQReDsGd5FOv drZDhmYBrEnYWnHlZJpmhrIEIzGznVEIWcGqrtMWU4E1Fusli+C5cO5m/7RThHmS 5PT54Egj04SsldWN2v3vDnpYnP5XTZrRt9O7PlWG3SejW2KxSSwoBCzpx4DwxZbz YSGq9XSMDWERLKPqDfDQZN5+DE8ZxcPp42ip5Iu+bUmn -----END CERTIFICATE-----Generated at Tue Jan 20 22:01:18 2026 by rpki-client