This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa File: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (raw, json) Hash identifier: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU= Subject key identifier: 8E:69:9E:1F:71:BE:1A:5E:CE:EC:2C:4E:F5:E3:35:9B:AC:43:7C:C1 Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a Certificate serial: 019B7B36F3C7091C62EBC81238DD7F3270CE Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa Signing time: Thu 01 Jan 2026 20:19:17 +0000 ROA not before: Thu 01 Jan 2026 20:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60722 IP address blocks: 92.255.65.0/24 maxlen: 24 94.101.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f3:c7:09:1c:62:eb:c8:12:38:dd:7f:32:70:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a Validity Not Before: Jan 1 20:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e699e1f71be1a5eceec2c4ef5e3359bac437cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1f:0d:97:07:0c:1e:e4:df:bc:b8:6b:21:5f: 81:42:ec:2d:7a:0f:f6:1f:f5:db:bd:b9:cc:e9:59: 9a:49:b2:18:c4:78:55:38:e6:bb:cd:2c:6c:fb:aa: bc:65:19:35:19:48:48:15:ef:1e:38:4d:8a:1d:d3: 26:6b:8f:b7:fa:c5:0a:43:54:7b:f3:1b:ea:8f:c9: 47:cb:25:d5:f2:63:cb:7d:99:2f:c5:92:20:f1:18: a9:d1:2a:33:a9:8f:19:ce:8d:bb:84:f3:74:1e:bc: 33:93:80:b0:d5:e7:f9:d9:b6:20:b2:bd:02:0e:89: 51:68:83:a8:df:54:48:0f:cb:55:7f:86:fc:78:bb: e5:66:d3:76:a6:e7:55:21:6b:34:e5:9e:8e:53:fb: 2d:e6:60:e2:e5:5d:c0:c0:22:2a:f9:de:fd:5d:27: 85:ff:57:1a:6a:ce:f7:e6:72:8d:90:5a:7a:4c:19: 40:78:e8:b5:c0:7c:cd:0b:97:80:7f:81:a7:1b:7c: 14:5f:87:a2:ac:c3:7e:34:a5:80:22:93:05:3c:dd: f3:b5:77:7c:0e:77:74:95:d9:9e:cc:b8:17:d9:21: 20:9b:6e:eb:ba:8c:25:cf:6a:e7:c0:c5:d3:ba:73: 03:e5:7e:52:f0:96:ef:54:de:c3:9b:58:83:f6:69: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:9E:1F:71:BE:1A:5E:CE:EC:2C:4E:F5:E3:35:9B:AC:43:7C:C1 X509v3 Authority Key Identifier: keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.255.65.0/24 94.101.105.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:66:90:d6:b8:bc:80:90:55:9d:cb:7e:e5:1d:9f:eb:61:c8: 41:d4:14:d4:40:a9:18:9b:fd:13:f2:37:02:1a:c3:49:6c:0d: 6b:0a:e5:1e:0e:a3:05:79:82:ea:b9:dd:37:e7:c9:6f:49:94: 4f:5d:91:ee:6d:b8:e8:03:ad:be:24:ed:52:b6:04:55:a5:39: 96:b1:51:a4:28:b8:cd:66:3f:d1:11:3c:1d:a2:54:a8:ad:eb: 20:e7:54:33:49:55:18:7d:46:2f:a5:22:51:d6:f9:e9:6d:03: 8a:5e:8c:5d:0d:2a:db:7f:b3:71:46:83:50:ed:57:41:ab:fc: 36:ef:b6:53:1d:fb:6f:64:88:e5:fd:74:7e:54:fa:60:0e:66: 58:9f:88:6f:e1:d2:d7:11:64:53:fa:c0:db:9d:1c:6d:d2:db: 97:c4:4f:75:8c:45:fc:d1:09:8e:1c:47:6e:d3:67:d5:c6:26: 11:3b:65:e1:36:ff:74:47:6a:f2:ff:08:98:b3:69:f0:f7:a0: 1e:99:4b:ee:bf:1e:27:f8:67:24:8d:ce:d3:f4:52:4c:ba:02: c4:79:04:ea:53:8d:54:b5:d7:a4:45:a3:5a:7a:6e:c8:51:28: d6:7b:c4:ab:7b:f2:58:fc:a0:6f:b6:56:de:9b:a2:e2:25:28: 7a:18:cc:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NvPHCRxi68gSON1/MnDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOGQzNWVjYWU4YTUyOGNlZWM2NGRlM2JkNjNiNzNmYTQy ZDVmNGEwHhcNMjYwMTAxMjAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTY5OWUxZjcxYmUxYTVlY2VlYzJjNGVmNWUzMzU5YmFjNDM3Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x8NlwcMHuTfvLhrIV+BQuwteg/2 H/XbvbnM6VmaSbIYxHhVOOa7zSxs+6q8ZRk1GUhIFe8eOE2KHdMma4+3+sUKQ1R7 8xvqj8lHyyXV8mPLfZkvxZIg8Rip0SozqY8Zzo27hPN0Hrwzk4Cw1ef52bYgsr0C DolRaIOo31RID8tVf4b8eLvlZtN2pudVIWs05Z6OU/st5mDi5V3AwCIq+d79XSeF /1caas735nKNkFp6TBlAeOi1wHzNC5eAf4GnG3wUX4eirMN+NKWAIpMFPN3ztXd8 Dnd0ldmezLgX2SEgm27ruowlz2rnwMXTunMD5X5S8JbvVN7Dm1iD9mlETwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI5pnh9xvhpezuwsTvXjNZusQ3zBMB8GA1UdIwQY MBaAFFKNNeyuilKM7sZN471jtz+kLV9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWIt N2EzNzIwZDNjZmZjLzEvam1tZUgzRy1HbDdPN0N4TzllTTFtNnhEZk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWItN2EzNzIwZDNjZmZj LzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXP9BAwQA XmVpMA0GCSqGSIb3DQEBCwUAA4IBAQCaZpDWuLyAkFWdy37lHZ/rYchB1BTUQKkY m/0T8jcCGsNJbA1rCuUeDqMFeYLqud0358lvSZRPXZHubbjoA62+JO1StgRVpTmW sVGkKLjNZj/RETwdolSoresg51QzSVUYfUYvpSJR1vnpbQOKXoxdDSrbf7NxRoNQ 7VdBq/w277ZTHftvZIjl/XR+VPpgDmZYn4hv4dLXEWRT+sDbnRxt0tuXxE91jEX8 0QmOHEdu02fVxiYRO2XhNv90R2ry/wiYs2nw96AemUvuvx4n+Gckjc7T9FJMugLE eQTqU41UtdekRaNaem7IUSjWe8Sre/JY/KBvtlbem6LiJSh6GMxa -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:40 2026 by rpki-client