This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa File: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (raw, json) Hash identifier: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q= Subject key identifier: 25:C4:77:60:38:B4:E8:94:FA:5A:5F:DE:41:8B:28:2F:FF:B8:5D:E6 Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Certificate serial: 019B7BA4C47888E74C775E26E9C4EA695EB0 Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212024 IP address blocks: 209.112.97.0/24 maxlen: 24 2001:67c:17fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c4:78:88:e7:4c:77:5e:26:e9:c4:ea:69:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c4776038b4e894fa5a5fde418b282fffb85de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a8:17:bc:e0:80:f8:e2:ae:a3:58:16:a0:1f: 75:c4:ac:47:1c:82:5b:46:43:aa:82:a1:f3:91:11: 04:45:c8:a9:e3:29:aa:36:47:4a:ed:6f:7c:da:de: 9d:6f:b8:4a:11:f8:b8:72:06:5a:93:fb:00:0e:b7: 42:8f:99:bb:9d:a5:27:4f:90:78:ae:28:7b:01:55: 62:26:bb:c5:b4:80:48:b6:0c:ed:23:48:7a:57:42: 01:93:a5:18:c7:d8:00:32:09:aa:09:74:ec:35:fa: 7e:03:1d:3a:ad:79:8f:1c:91:74:32:68:b3:5c:ac: ed:6d:fc:d4:f8:b3:be:d0:26:c5:8e:04:42:9d:04: 48:9c:83:f0:eb:76:6f:19:6a:7c:f0:6e:05:49:70: 2a:51:7b:b0:1c:ff:30:e9:c8:8e:d2:11:a5:d1:89: c1:67:d2:6b:58:e1:0d:36:7f:c8:22:b2:e5:b9:2e: f1:1d:26:bd:d7:71:59:e0:c4:ba:ca:98:37:ae:a7: df:6d:19:68:5e:13:15:a0:d5:92:b5:93:e4:a5:09: 0c:28:63:6b:83:4a:f5:7a:91:08:58:18:d3:ee:82: 80:f2:23:1a:ec:d5:48:9a:92:da:4b:5c:13:2c:70: 93:2c:17:d0:af:dc:1c:1a:d3:ed:97:c4:e5:9d:98: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:77:60:38:B4:E8:94:FA:5A:5F:DE:41:8B:28:2F:FF:B8:5D:E6 X509v3 Authority Key Identifier: keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.112.97.0/24 IPv6: 2001:67c:17fc::/48 Signature Algorithm: sha256WithRSAEncryption 34:dc:6e:6c:36:38:1b:3d:c4:1a:2c:68:ad:78:37:ba:24:d7: 6c:19:8e:11:26:cd:c0:94:9f:08:f0:48:64:59:b2:d7:5d:58: bc:2b:db:40:ae:37:f3:26:92:cf:eb:3a:12:5c:6e:a3:ef:54: ac:d1:cc:51:67:78:32:af:17:aa:42:35:4d:7f:ba:df:c3:a0: 43:71:3e:4a:10:47:0e:b5:d1:35:c3:89:00:0e:c8:86:6b:c4: 7e:79:5f:a2:90:fa:5c:6d:e0:eb:19:09:78:e5:01:8a:c5:fe: dc:23:e0:92:2c:b4:3a:65:49:e3:cb:49:cc:af:c3:7c:f2:2f: 78:0b:80:62:57:9d:0a:f8:b1:46:63:a5:50:0b:e9:7f:86:08: d3:a1:94:8c:d8:2d:2a:72:c3:8f:9a:51:bb:e0:4f:8f:a2:80: ff:6a:95:6d:cf:da:ac:dd:6f:94:cf:57:bc:c2:fa:0d:ba:c3: f1:03:7a:a8:79:3b:6c:2c:ed:82:55:21:a7:73:63:dc:c6:1f: b5:17:ae:02:3d:76:5a:6a:b0:84:92:7d:ba:ad:67:f4:ae:a1: 0a:7b:4f:af:70:aa:72:c8:63:c5:9b:b0:fe:f7:79:7e:f0:2c: 32:61:45:bd:44:da:77:94:c7:10:d4:28:98:70:7b:6f:b8:c0: ea:56:17:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pMR4iOdMd14m6cTqaV6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3 NDUyY2YwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM0Nzc2MDM4YjRlODk0ZmE1YTVmZGU0MThiMjgyZmZmYjg1ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KgXvOCA+OKuo1gWoB91xKxHHIJb RkOqgqHzkREERcip4ymqNkdK7W982t6db7hKEfi4cgZak/sADrdCj5m7naUnT5B4 rih7AVViJrvFtIBItgztI0h6V0IBk6UYx9gAMgmqCXTsNfp+Ax06rXmPHJF0Mmiz XKztbfzU+LO+0CbFjgRCnQRInIPw63ZvGWp88G4FSXAqUXuwHP8w6ciO0hGl0YnB Z9JrWOENNn/IIrLluS7xHSa913FZ4MS6ypg3rqffbRloXhMVoNWStZPkpQkMKGNr g0r1epEIWBjT7oKA8iMa7NVImpLaS1wTLHCTLBfQr9wcGtPtl8TlnZhVbQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCXEd2A4tOiU+lpf3kGLKC//uF3mMB8GA1UdIwQY MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt YjAzYzJmYmRjNjQ0LzEvSmNSM1lEaTA2SlQ2V2xfZVFZc29MXy00WGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0 LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0XBhMA8E AgACMAkDBwAgAQZ8F/wwDQYJKoZIhvcNAQELBQADggEBADTcbmw2OBs9xBosaK14 N7ok12wZjhEmzcCUnwjwSGRZstddWLwr20CuN/Mmks/rOhJcbqPvVKzRzFFneDKv F6pCNU1/ut/DoENxPkoQRw610TXDiQAOyIZrxH55X6KQ+lxt4OsZCXjlAYrF/twj 4JIstDplSePLScyvw3zyL3gLgGJXnQr4sUZjpVAL6X+GCNOhlIzYLSpyw4+aUbvg T4+igP9qlW3P2qzdb5TPV7zC+g26w/EDeqh5O2ws7YJVIadzY9zGH7UXrgI9dlpq sISSfbqtZ/SuoQp7T69wqnLIY8WbsP73eX7wLDJhRb1E2neUxxDUKJhwe2+4wOpW F8g= -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:15 2026 by rpki-client