This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa File: jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa (raw, json) Hash identifier: PYUXYUIOFwhoZ+QPr8MK2mvgKDuZumcu7LyDXuRa6e0= Subject key identifier: 8E:33:61:61:43:B4:5A:45:D4:BC:D6:EF:25:93:73:47:0B:BB:6C:36 Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Certificate serial: 019B7D5BAF33587F5F16EEF4E261DE7E95B0 Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa Signing time: Fri 02 Jan 2026 06:18:39 +0000 ROA not before: Fri 02 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34917 IP address blocks: 62.182.112.0/21 maxlen: 21 83.143.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:af:33:58:7f:5f:16:ee:f4:e2:61:de:7e:95:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e33616143b45a45d4bcd6ef259373470bbb6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:bf:9b:1f:03:e2:a1:47:cf:68:3a:e1:53: 00:6a:28:10:74:3d:99:9d:da:e3:2d:40:9f:26:1c: 73:73:d8:0b:e9:c7:d2:bf:72:68:60:5a:51:91:e4: 02:46:e2:44:73:35:37:4a:6f:11:03:e0:ba:a4:06: b0:2d:d4:17:08:05:6f:07:ef:3f:d8:36:aa:00:36: 8f:98:b3:63:41:c8:e6:2d:ed:d3:d2:24:1b:5b:4b: c8:ae:ab:4a:87:21:86:2c:fb:5b:85:16:de:11:3e: ed:69:06:fa:40:5f:06:17:8f:b5:fe:0d:41:24:93: dd:10:3e:d8:80:2e:d3:4b:4e:e1:7f:28:19:f1:2e: a2:5d:a7:74:ea:a1:39:31:17:0c:c1:c9:30:da:76: bf:e3:9e:53:ff:41:67:80:a5:fa:3e:11:7c:04:a6: 27:94:a9:42:75:4c:94:71:3b:95:91:7c:63:8f:6a: de:ff:83:2a:77:2c:12:8a:60:a4:79:f4:82:d7:42: 9d:59:0a:19:22:ac:e3:09:11:18:cb:93:81:3e:70: b7:e7:d7:1b:55:ec:26:ab:e0:e4:a9:00:67:1d:17: 13:bb:14:54:e0:77:b6:74:3f:29:6d:e5:e3:89:b8: 45:0b:93:d2:60:ad:da:d7:b7:61:0a:17:02:f0:ad: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:33:61:61:43:B4:5A:45:D4:BC:D6:EF:25:93:73:47:0B:BB:6C:36 X509v3 Authority Key Identifier: keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.112.0/21 83.143.144.0/21 Signature Algorithm: sha256WithRSAEncryption c9:46:da:c8:82:c6:b7:5b:cb:5d:59:84:32:42:ea:4d:ce:c4: 08:ba:be:b3:16:21:40:7b:a3:34:bc:69:8c:62:bf:71:6f:c5: 07:59:2c:c1:61:1c:0b:ec:8e:30:74:f4:31:5b:5a:14:dc:86: 42:83:b0:58:ac:46:02:b8:1b:7f:fe:3e:af:a2:d6:19:ec:4b: 9e:e9:7d:1e:37:55:48:cf:46:d2:14:1b:a1:0b:1a:1b:d3:6b: f1:e2:f9:b7:2d:ef:6e:88:18:05:69:6c:f8:7e:3b:3e:54:c4: 7d:a4:cd:61:8b:4a:9b:f3:41:61:07:11:93:b8:2d:3e:15:00: d0:30:85:e1:cb:5c:c0:5e:34:87:37:c7:60:7d:07:1c:f3:99: 8b:98:c1:ea:89:59:a7:70:44:86:83:36:8b:0d:41:80:e8:41: 9d:35:33:0b:7c:54:40:a5:da:f8:5d:a0:1b:fb:fa:57:5a:d2: 9e:cd:7d:07:08:15:ab:91:61:4e:37:fc:12:9c:f6:74:be:2d: ca:96:0b:26:c6:ba:04:fe:62:59:7d:62:40:da:52:c0:f6:b3: a1:e3:31:0f:8c:fd:ca:65:ce:c1:2e:f2:8b:81:3c:8d:97:9d: b2:3b:9d:f4:f9:54:a2:44:16:75:ce:11:f4:a1:d4:e4:ee:6b: c1:a1:42:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W68zWH9fFu704mHefpWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZGExMGQ2NjVjMTBlMWNiNmVjNmMyMTUwZTNlNjAyNDA0 NWI5ZGEwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTMzNjE2MTQzYjQ1YTQ1ZDRiY2Q2ZWYyNTkzNzM0NzBiYmI2YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1K/mx8D4qFHz2g64VMAaigQdD2Z ndrjLUCfJhxzc9gL6cfSv3JoYFpRkeQCRuJEczU3Sm8RA+C6pAawLdQXCAVvB+8/ 2DaqADaPmLNjQcjmLe3T0iQbW0vIrqtKhyGGLPtbhRbeET7taQb6QF8GF4+1/g1B JJPdED7YgC7TS07hfygZ8S6iXad06qE5MRcMwckw2na/455T/0FngKX6PhF8BKYn lKlCdUyUcTuVkXxjj2re/4MqdywSimCkefSC10KdWQoZIqzjCREYy5OBPnC359cb Vewmq+DkqQBnHRcTuxRU4He2dD8pbeXjibhFC5PSYK3a17dhChcC8K0rMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI4zYWFDtFpF1LzW7yWTc0cLu2w2MB8GA1UdIwQY MBaAFEHaENZlwQ4ctuxsIVDj5gJARbnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQt YmIxZmM0NTQ3MDMzLzEvampOaFlVTzBXa1hVdk5idkpaTnpSd3U3YkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQtYmIxZmM0NTQ3MDMz LzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPrZwAwQD U4+QMA0GCSqGSIb3DQEBCwUAA4IBAQDJRtrIgsa3W8tdWYQyQupNzsQIur6zFiFA e6M0vGmMYr9xb8UHWSzBYRwL7I4wdPQxW1oU3IZCg7BYrEYCuBt//j6votYZ7Eue 6X0eN1VIz0bSFBuhCxob02vx4vm3Le9uiBgFaWz4fjs+VMR9pM1hi0qb80FhBxGT uC0+FQDQMIXhy1zAXjSHN8dgfQcc85mLmMHqiVmncESGgzaLDUGA6EGdNTMLfFRA pdr4XaAb+/pXWtKezX0HCBWrkWFON/wSnPZ0vi3KlgsmxroE/mJZfWJA2lLA9rOh 4zEPjP3KZc7BLvKLgTyNl52yO530+VSiRBZ1zhH0odTk7mvBoUKn -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:34 2026 by rpki-client