This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jp6ZQnEGGE2BUCPcugJIbI4JDJQ.roa File: jp6ZQnEGGE2BUCPcugJIbI4JDJQ.roa (raw, json) Hash identifier: JmyXZR4ac6Xxm7p5K41gBSznBVN0bQQXJodtYjxfpc4= Subject key identifier: 8E:9E:99:42:71:06:18:4D:81:50:23:DC:BA:02:48:6C:8E:09:0C:94 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B16FE5223095B3E4059322553FFC Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jp6ZQnEGGE2BUCPcugJIbI4JDJQ.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 188.130.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b1:6f:e5:22:30:95:b3:e4:05:93:22:55:3f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9e99427106184d815023dcba02486c8e090c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:f1:18:a8:69:81:b9:ec:b1:6e:65:d6:03: 29:30:3b:3b:1a:df:57:fb:d7:57:9d:79:5c:a9:d4: 37:fd:0e:fc:dd:07:37:eb:97:4e:a0:4f:3c:e6:12: 4c:b0:f6:13:d8:76:b3:e6:53:e8:1c:6d:4b:5e:df: 9c:14:6f:55:37:1a:06:cb:1a:3c:a0:88:c3:79:c0: 39:3c:96:0a:61:31:fc:b0:57:e4:fb:01:67:b8:98: ce:59:05:2a:09:c3:11:c0:31:19:a8:b2:18:fd:9c: d8:1c:76:4e:aa:65:3a:c6:15:d2:27:92:62:97:bb: c7:5a:cc:96:ad:3b:db:b4:7d:2a:e2:69:06:26:b0: c9:0c:63:d1:ad:7e:28:1d:ae:6c:cd:1c:c5:bd:c4: 67:3c:45:50:1b:72:2d:c6:53:96:08:2b:53:95:97: 69:24:c0:55:48:c3:f6:98:e4:78:88:99:69:f0:57: ae:85:08:49:2c:38:e0:d1:0c:f7:08:e1:d0:b0:96: 34:ad:8f:a0:f6:b0:c4:e5:7f:7f:06:64:79:f9:f5: 98:67:dd:b5:2f:19:aa:f3:cf:ef:10:3c:59:c4:74: 7e:03:c7:45:f8:28:0e:3d:54:78:7d:be:8c:b3:b7: 3f:4d:b4:a5:f9:67:08:e3:ec:82:2d:66:21:7e:95: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:99:42:71:06:18:4D:81:50:23:DC:BA:02:48:6C:8E:09:0C:94 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jp6ZQnEGGE2BUCPcugJIbI4JDJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.196.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:1a:cd:b3:72:e3:a5:3c:bc:0f:c3:eb:51:17:70:6b:b7:0c: 78:9b:b9:10:8f:05:28:05:91:c8:94:50:2a:29:ec:d1:3b:d3: f8:a5:b8:9e:1e:68:3b:26:d5:5b:7c:b9:3f:75:a9:4f:fa:74: eb:39:c2:4e:23:99:db:1f:80:bb:1a:b8:31:5f:c5:c2:e8:fc: ca:59:29:e3:1f:f3:88:14:37:72:a9:22:dc:38:0b:6b:04:84: 44:ad:64:96:0e:74:24:b2:9f:4c:11:9c:d6:6d:36:37:21:25: 55:02:2c:0a:0e:5f:e8:db:0b:78:aa:a8:14:c6:43:e9:80:10: 58:ec:31:4c:86:d4:55:00:b2:b5:fd:31:03:a2:ea:36:e1:6f: df:c1:be:02:d1:58:1b:1c:90:a9:12:e3:2d:79:00:be:93:d9: e9:5d:d7:e2:9b:bd:2c:8c:1b:16:b7:18:4a:94:83:f5:84:f7: 34:6c:2e:f1:ab:bb:4b:5f:02:cf:bf:c9:12:7f:ec:58:e7:14: 7c:58:95:e4:b2:79:56:bd:53:3d:10:29:27:08:dc:1a:6b:f6: 57:2b:37:eb:e8:6e:2a:fd:a6:52:68:75:da:82:4a:61:85:b3: 32:d5:ef:05:a5:c5:97:01:69:dd:49:e5:7b:7b:3c:f6:20:2f: eb:74:12:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrFv5SIwlbPkBZMiVT/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTllOTk0MjcxMDYxODRkODE1MDIzZGNiYTAyNDg2YzhlMDkwYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0TxGKhpgbnssW5l1gMpMDs7Gt9X +9dXnXlcqdQ3/Q783Qc365dOoE885hJMsPYT2Haz5lPoHG1LXt+cFG9VNxoGyxo8 oIjDecA5PJYKYTH8sFfk+wFnuJjOWQUqCcMRwDEZqLIY/ZzYHHZOqmU6xhXSJ5Ji l7vHWsyWrTvbtH0q4mkGJrDJDGPRrX4oHa5szRzFvcRnPEVQG3ItxlOWCCtTlZdp JMBVSMP2mOR4iJlp8FeuhQhJLDjg0Qz3COHQsJY0rY+g9rDE5X9/BmR5+fWYZ921 Lxmq88/vEDxZxHR+A8dF+CgOPVR4fb6Ms7c/TbSl+WcI4+yCLWYhfpWfjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6emUJxBhhNgVAj3LoCSGyOCQyUMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvanA2WlFuRUdHRTJCVUNQY3VnSkliSTRKREpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvILEMA0G CSqGSIb3DQEBCwUAA4IBAQA7Gs2zcuOlPLwPw+tRF3Brtwx4m7kQjwUoBZHIlFAq KezRO9P4pbieHmg7JtVbfLk/dalP+nTrOcJOI5nbH4C7GrgxX8XC6PzKWSnjH/OI FDdyqSLcOAtrBIRErWSWDnQksp9MEZzWbTY3ISVVAiwKDl/o2wt4qqgUxkPpgBBY 7DFMhtRVALK1/TEDouo24W/fwb4C0VgbHJCpEuMteQC+k9npXdfim70sjBsWtxhK lIP1hPc0bC7xq7tLXwLPv8kSf+xY5xR8WJXksnlWvVM9ECknCNwaa/ZXKzfr6G4q /aZSaHXagkphhbMy1e8FpcWXAWndSeV7ezz2IC/rdBJ0 -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:06 2026 by rpki-client