This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jdECG7KzTcPN9YPIoXCcXM3HMjc.roa File: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (raw, json) Hash identifier: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo= Subject key identifier: 8D:D1:02:1B:B2:B3:4D:C3:CD:F5:83:C8:A1:70:9C:5C:CD:C7:32:37 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019C04E2616F9AC20288A80CDE80C5C7C3B2 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jdECG7KzTcPN9YPIoXCcXM3HMjc.roa Signing time: Wed 28 Jan 2026 13:54:30 +0000 ROA not before: Wed 28 Jan 2026 13:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 212.16.81.0/24 maxlen: 24 212.80.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:e2:61:6f:9a:c2:02:88:a8:0c:de:80:c5:c7:c3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 28 13:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dd1021bb2b34dc3cdf583c8a1709c5ccdc73237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:74:4a:cb:89:62:74:9e:55:1e:6d:4f:2f: 3e:4a:30:bf:b4:3e:a6:1a:5d:04:a0:48:13:a2:8e: de:c2:b0:29:a3:23:a6:e8:38:f4:f8:4a:c9:c3:f8: 29:f5:8d:d7:63:ac:39:ef:3e:ea:a6:f9:2b:d5:e4: 3b:7f:0d:0d:72:40:ad:6e:3a:50:91:9c:7e:b9:75: 1d:37:10:50:c6:d5:9d:38:70:b0:b0:83:af:77:d3: f0:53:f2:38:28:25:e5:7a:d9:b0:ec:71:99:cd:65: 38:14:ab:19:0e:69:89:20:07:5c:fa:d9:cc:6f:c7: cc:7b:be:24:e8:8f:23:fc:0b:60:fd:69:36:01:81: 80:5a:ae:7d:b7:17:44:fa:26:71:b3:7d:1a:f9:5c: b3:e9:0d:ad:79:2c:7b:80:e7:19:69:fa:f2:cd:5c: 9e:50:76:99:76:fa:46:e5:f3:ce:f1:93:3a:10:38: a3:35:70:01:84:e1:e7:9e:9c:d3:3d:87:d8:23:89: f2:04:f0:f1:ef:b4:75:b5:13:00:0f:90:45:31:89: 51:b4:b4:76:a5:7f:88:b3:a2:35:c0:c8:c2:e9:9d: 61:18:d8:50:cb:52:b0:5f:24:db:42:9a:fb:4c:9e: d3:be:e1:1f:0d:15:e7:86:1a:9e:07:12:52:2d:3a: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:02:1B:B2:B3:4D:C3:CD:F5:83:C8:A1:70:9C:5C:CD:C7:32:37 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jdECG7KzTcPN9YPIoXCcXM3HMjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.81.0/24 212.80.11.0/24 Signature Algorithm: sha256WithRSAEncryption 84:08:eb:08:f1:62:b2:97:99:b0:3c:d0:b7:85:b0:70:14:a6: 74:4f:50:f5:3f:25:c1:af:1b:d6:19:fd:50:96:11:d1:ea:02: 88:07:f5:87:8b:4a:ef:8a:78:3e:bb:aa:d1:d7:03:32:3d:bd: 67:9e:37:92:f3:37:6c:4c:c5:d0:fe:fe:53:47:ba:43:46:dd: 81:f1:23:eb:51:d5:6a:35:9a:12:79:c2:8c:3e:5f:58:6e:9a: 55:39:29:1b:dd:70:35:b4:1a:59:6c:1e:eb:ae:05:78:51:29: 78:94:97:8e:59:6f:37:cb:62:db:92:20:81:e5:b3:9d:94:8b: 6d:3f:eb:c7:8c:8e:1d:2a:86:11:12:5f:d4:33:e5:ef:a9:fd: e0:fc:78:32:72:b0:57:76:70:ba:85:aa:71:6a:17:c1:6c:74: 97:02:ea:c7:f3:9b:de:d3:00:bc:3a:23:70:de:fc:63:39:51: 2b:df:6f:85:69:0e:f4:f8:5a:8c:74:9e:1f:7f:7d:59:44:37: 2d:4c:28:12:cf:17:cb:64:83:93:11:7f:fb:a4:47:ef:ba:fb: 67:d6:09:42:98:a5:5f:eb:59:01:f5:3e:01:df:fd:2d:dd:6d: 36:5a:80:68:95:e3:7f:7a:9c:84:08:12:74:29:f2:8f:fb:e5: 99:20:7c:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwE4mFvmsICiKgM3oDFx8OyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTI4MTM1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGQxMDIxYmIyYjM0ZGMzY2RmNTgzYzhhMTcwOWM1Y2NkYzczMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpZ0SsuJYnSeVR5tTy8+SjC/tD6m Gl0EoEgToo7ewrApoyOm6Dj0+ErJw/gp9Y3XY6w57z7qpvkr1eQ7fw0NckCtbjpQ kZx+uXUdNxBQxtWdOHCwsIOvd9PwU/I4KCXletmw7HGZzWU4FKsZDmmJIAdc+tnM b8fMe74k6I8j/Atg/Wk2AYGAWq59txdE+iZxs30a+Vyz6Q2teSx7gOcZafryzVye UHaZdvpG5fPO8ZM6EDijNXABhOHnnpzTPYfYI4nyBPDx77R1tRMAD5BFMYlRtLR2 pX+Is6I1wMjC6Z1hGNhQy1KwXyTbQpr7TJ7TvuEfDRXnhhqeBxJSLToPmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI3RAhuys03DzfWDyKFwnFzNxzI3MB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvamRFQ0c3S3pUY1BOOVlQSW9YQ2NYTTNITWpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1BBRAwQA 1FALMA0GCSqGSIb3DQEBCwUAA4IBAQCECOsI8WKyl5mwPNC3hbBwFKZ0T1D1PyXB rxvWGf1QlhHR6gKIB/WHi0rving+u6rR1wMyPb1nnjeS8zdsTMXQ/v5TR7pDRt2B 8SPrUdVqNZoSecKMPl9YbppVOSkb3XA1tBpZbB7rrgV4USl4lJeOWW83y2LbkiCB 5bOdlIttP+vHjI4dKoYREl/UM+Xvqf3g/HgycrBXdnC6hapxahfBbHSXAurH85ve 0wC8OiNw3vxjOVEr32+FaQ70+FqMdJ4ff31ZRDctTCgSzxfLZIOTEX/7pEfvuvtn 1glCmKVf61kB9T4B3/0t3W02WoBoleN/epyECBJ0KfKP++WZIHzE -----END CERTIFICATE-----Generated at Sun Feb 1 17:08:09 2026 by rpki-client