This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa File: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (raw, json) Hash identifier: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU= Subject key identifier: 8E:47:03:4C:36:4B:7E:43:F3:8F:DB:88:45:8A:7C:51:39:E1:C1:02 Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45 Certificate serial: 019B78A36C6D9C1832C0121CB254ACBC5C11 Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59699 IP address blocks: 85.208.241.0/24 maxlen: 24 85.208.242.0/24 maxlen: 24 185.4.152.0/22 maxlen: 24 185.30.188.0/22 maxlen: 24 185.63.161.0/24 maxlen: 24 185.63.162.0/24 maxlen: 24 185.63.163.0/24 maxlen: 24 2a02:c7c0::/29 maxlen: 48 2a04:4bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:6d:9c:18:32:c0:12:1c:b2:54:ac:bc:5c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e47034c364b7e43f38fdb88458a7c5139e1c102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:82:4c:c5:95:25:9f:11:ed:f6:71:4e:68: 67:03:7e:a9:61:31:19:ff:f3:de:c1:1b:70:c7:51: f0:a3:0d:c0:76:a7:64:c9:1e:74:7d:ee:74:9b:dd: 14:90:14:30:e1:8b:55:43:9f:61:35:a7:11:26:bd: 25:31:74:c0:bf:04:20:a5:85:c1:2c:37:94:0e:42: 6d:88:dc:e0:39:c2:23:35:cc:03:fc:7b:65:50:38: 20:00:6c:0d:91:59:08:ad:bb:37:1d:97:ed:8f:bb: 35:ab:1c:4a:91:24:23:43:70:d9:e9:2f:c9:81:98: 85:34:31:1a:54:93:9a:11:45:07:97:9a:9f:07:05: 4f:70:25:fa:b0:f0:2b:b9:b9:85:94:27:44:81:ac: e8:9e:ec:ab:50:32:11:e6:2a:2d:13:2d:d0:06:5e: 27:9b:55:b6:90:85:e3:4f:df:23:d8:b6:cf:eb:8f: bd:5e:15:f0:c4:89:fb:43:27:3b:6a:82:61:13:08: f6:c6:1f:40:48:61:14:97:1e:ff:20:8f:c7:6c:53: 67:ee:d9:b5:f2:84:7f:48:f3:8a:0e:15:f0:05:36: 67:19:0d:f5:72:84:13:c1:50:4c:cf:a1:a3:bb:4e: 9b:df:d3:0e:1f:35:8b:96:e3:29:3b:9b:5e:7d:5a: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:03:4C:36:4B:7E:43:F3:8F:DB:88:45:8A:7C:51:39:E1:C1:02 X509v3 Authority Key Identifier: keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.241.0-85.208.242.255 185.4.152.0/22 185.30.188.0/22 185.63.161.0-185.63.163.255 IPv6: 2a02:c7c0::/29 2a04:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption a2:26:8d:b9:a0:f8:6f:b1:5f:24:cf:ac:3d:4e:52:87:e8:43: cc:3c:ab:fd:e3:ff:e0:04:0a:14:0b:3e:c5:d5:7f:f1:1f:ef: 00:cb:cd:da:67:b2:38:1b:0f:a3:89:86:38:27:e4:fe:0e:8c: 07:83:3d:d9:9b:bd:d0:d8:d8:47:c9:00:dd:bb:ac:f1:d0:8e: 66:6e:86:50:05:68:fb:f5:53:e7:08:b9:6c:00:b7:5a:56:9a: f4:77:58:d6:64:85:5d:94:43:ad:d5:7a:cb:fb:d0:c8:ed:87: fc:fd:2c:e3:32:f4:c1:d6:d8:ab:9c:44:63:49:9c:7b:0f:9e: b7:4c:df:a1:fd:4b:8c:e8:86:7c:d7:3a:84:60:6c:1a:ea:90: 38:12:d7:11:71:17:67:a1:d6:0d:eb:56:46:58:5e:68:9d:54: 26:05:cd:a5:ca:95:36:37:ef:f3:04:2e:93:b6:fc:5d:2c:de: 8f:51:b2:23:e6:ea:54:81:12:4c:ed:04:af:02:a8:36:e0:10: de:5e:e7:26:8d:3d:74:c0:9b:7f:47:58:88:76:71:06:f1:d3: 5e:04:fd:6e:89:4b:f0:a0:af:5f:1a:78:61:9c:45:22:d1:69: 8f:40:56:24:45:48:6c:f6:7d:0e:35:d0:53:bb:e3:7b:1a:b1: 73:fe:2a:53 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt4o2xtnBgywBIcslSsvFwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw NzZkNDUwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ3MDM0YzM2NGI3ZTQzZjM4ZmRiODg0NThhN2M1MTM5ZTFjMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQiCTMWVJZ8R7fZxTmhnA36pYTEZ //PewRtwx1Hwow3AdqdkyR50fe50m90UkBQw4YtVQ59hNacRJr0lMXTAvwQgpYXB LDeUDkJtiNzgOcIjNcwD/HtlUDggAGwNkVkIrbs3HZftj7s1qxxKkSQjQ3DZ6S/J gZiFNDEaVJOaEUUHl5qfBwVPcCX6sPArubmFlCdEgazonuyrUDIR5iotEy3QBl4n m1W2kIXjT98j2LbP64+9XhXwxIn7Qyc7aoJhEwj2xh9ASGEUlx7/II/HbFNn7tm1 8oR/SPOKDhXwBTZnGQ31coQTwVBMz6Gju06b39MOHzWLluMpO5tefVp61QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFI5HA0w2S35D84/biEWKfFE54cECMB8GA1UdIwQY MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt MTI1NTAwZDJiZTk0LzEvamtjRFREWkxma1B6ajl1SVJZcDhVVG5od1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0 LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAuBAIAATAoMAwDBABV0PED BABV0PIDBAK5BJgDBAK5HrwwDAMEALk/oQMEArk/oDAUBAIAAjAOAwUDKgLHwAMF AyoES8AwDQYJKoZIhvcNAQELBQADggEBAKImjbmg+G+xXyTPrD1OUofoQ8w8q/3j /+AEChQLPsXVf/Ef7wDLzdpnsjgbD6OJhjgn5P4OjAeDPdmbvdDY2EfJAN27rPHQ jmZuhlAFaPv1U+cIuWwAt1pWmvR3WNZkhV2UQ63Vesv70Mjth/z9LOMy9MHW2Kuc RGNJnHsPnrdM36H9S4zohnzXOoRgbBrqkDgS1xFxF2eh1g3rVkZYXmidVCYFzaXK lTY37/MELpO2/F0s3o9RsiPm6lSBEkztBK8CqDbgEN5e5yaNPXTAm39HWIh2cQbx 014E/W6JS/Cgr18aeGGcRSLRaY9AViRFSGz2fQ410FO743sasXP+KlM= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:38 2026 by rpki-client