This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fja8EDLSj-GXWp-ja1-kSk00taQ.roa File: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (raw, json) Hash identifier: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU= Subject key identifier: 7E:36:BC:10:32:D2:8F:E1:97:5A:9F:A3:6B:5F:A4:4A:4D:34:B5:A4 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69A0C2E2DA3694692018224D9AEB3 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fja8EDLSj-GXWp-ja1-kSk00taQ.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216050 IP address blocks: 185.100.169.0/24 maxlen: 24 185.100.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9a:0c:2e:2d:a3:69:46:92:01:82:24:d9:ae:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e36bc1032d28fe1975a9fa36b5fa44a4d34b5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:1d:76:ca:5c:04:4e:6c:5f:c2:c0:00:f1: 8c:61:b5:44:ba:4d:9f:4a:82:fa:3f:7d:1d:dd:d3: be:4a:9c:93:ba:06:fd:34:86:d3:e0:e4:e8:fd:0e: c9:cc:c8:f6:9d:3c:0a:20:2e:36:4a:b9:79:08:6c: 3d:ec:3d:97:29:8e:fe:a6:bc:dc:fe:7b:42:92:f7: 32:3c:ad:1d:a2:44:1e:6f:d8:d1:ba:2c:03:17:0a: 7b:c4:c2:d8:cc:d8:50:67:ce:90:d7:b8:94:5e:b4: e7:92:5a:d5:53:57:3b:e1:03:9d:10:bb:f6:84:e1: 2f:7e:8c:51:b4:37:1f:fd:a4:50:6e:2e:7e:b5:6a: 67:ce:cc:df:18:b3:c7:06:65:a4:30:e1:e2:6d:08: 03:7a:50:b8:75:f6:5f:42:98:0a:0b:5e:e6:b5:3b: 02:63:c4:43:6d:d7:69:f0:9c:45:38:df:9c:86:58: ee:86:a4:96:67:4e:8e:ee:65:bb:df:1e:44:35:0b: ba:ab:4d:5a:3c:4d:87:f8:92:41:f5:0c:b5:a2:70: c4:9a:f4:7f:d6:97:62:ac:54:3c:c1:50:ca:d8:1e: 3c:65:4a:9b:14:0c:49:3b:e4:12:83:7f:f3:e2:2c: ca:a9:23:85:79:36:60:bd:0b:cc:8e:a9:62:0f:34: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:36:BC:10:32:D2:8F:E1:97:5A:9F:A3:6B:5F:A4:4A:4D:34:B5:A4 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fja8EDLSj-GXWp-ja1-kSk00taQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.169.0-185.100.170.255 Signature Algorithm: sha256WithRSAEncryption 5b:27:46:9f:e2:5e:19:cc:e4:0c:e8:08:9a:e3:b3:15:21:eb: 87:72:73:3a:6c:df:f1:be:4c:93:d1:5c:9a:0a:b3:21:31:93: 1d:72:97:aa:4d:4c:20:82:d8:a1:6a:ec:77:3c:cf:24:ba:2e: 12:49:96:35:14:1a:7d:3f:5d:b4:18:92:a4:85:11:62:30:74: 45:0d:97:be:c9:b4:b9:8c:10:4b:04:12:bf:d8:e5:b5:b0:a0: 37:61:a4:14:e6:3e:40:6f:35:cc:62:e3:6b:77:64:36:94:fe: d9:18:0c:41:ab:d1:2f:ce:76:90:d6:3e:63:6a:8c:97:83:90: 85:8b:18:b0:62:e7:7c:d2:77:f9:c1:58:cf:83:8c:d0:c5:29: 93:6e:a1:da:f1:b7:c3:9e:31:91:a4:69:ac:7d:e2:a0:ca:b6: c6:0a:30:7b:da:45:17:be:8b:55:0c:10:2d:81:7c:d8:4e:b0: 25:bc:65:71:0f:f0:70:f3:16:31:2b:b8:85:ba:8d:8b:8f:d1: 73:0a:f8:d1:36:86:c6:95:17:9e:41:bb:cb:5b:36:44:eb:b8: 2e:f8:3a:eb:89:1b:58:ff:3a:d9:59:9c:10:45:7e:0f:46:d4: 48:dc:01:33:3a:4f:b0:80:c0:0c:c8:04:ea:4c:9e:57:4a:84: 94:86:78:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+ppoMLi2jaUaSAYIk2a6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTM2YmMxMDMyZDI4ZmUxOTc1YTlmYTM2YjVmYTQ0YTRkMzRiNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wwddspcBE5sX8LAAPGMYbVEuk2f SoL6P30d3dO+SpyTugb9NIbT4OTo/Q7JzMj2nTwKIC42Srl5CGw97D2XKY7+przc /ntCkvcyPK0dokQeb9jRuiwDFwp7xMLYzNhQZ86Q17iUXrTnklrVU1c74QOdELv2 hOEvfoxRtDcf/aRQbi5+tWpnzszfGLPHBmWkMOHibQgDelC4dfZfQpgKC17mtTsC Y8RDbddp8JxFON+chljuhqSWZ06O7mW73x5ENQu6q01aPE2H+JJB9Qy1onDEmvR/ 1pdirFQ8wVDK2B48ZUqbFAxJO+QSg3/z4izKqSOFeTZgvQvMjqliDzRa3wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH42vBAy0o/hl1qfo2tfpEpNNLWkMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvZmphOEVETFNqLUdYV3AtamExLWtTazAwdGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ZKkD BAC5ZKowDQYJKoZIhvcNAQELBQADggEBAFsnRp/iXhnM5AzoCJrjsxUh64dyczps 3/G+TJPRXJoKsyExkx1yl6pNTCCC2KFq7Hc8zyS6LhJJljUUGn0/XbQYkqSFEWIw dEUNl77JtLmMEEsEEr/Y5bWwoDdhpBTmPkBvNcxi42t3ZDaU/tkYDEGr0S/OdpDW PmNqjJeDkIWLGLBi53zSd/nBWM+DjNDFKZNuodrxt8OeMZGkaax94qDKtsYKMHva RRe+i1UMEC2BfNhOsCW8ZXEP8HDzFjEruIW6jYuP0XMK+NE2hsaVF55Bu8tbNkTr uC74OuuJG1j/OtlZnBBFfg9G1EjcATM6T7CAwAzIBOpMnldKhJSGeE8= -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:53 2026 by rpki-client