This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/jgptn0oWvPfILsGhYu7AQtAVGQI.roa File: jgptn0oWvPfILsGhYu7AQtAVGQI.roa (raw, json) Hash identifier: esf6xdXJXvTREZt/uQo773kjs6wVF4kHKSB6ECh3KeU= Subject key identifier: 8E:0A:6D:9F:4A:16:BC:F7:C8:2E:C1:A1:62:EE:C0:42:D0:15:19:02 Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1 Certificate serial: 019B78343380A1FED769A951176745EEFA25 Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/jgptn0oWvPfILsGhYu7AQtAVGQI.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41906 IP address blocks: 185.88.116.0/22 maxlen: 22 185.88.116.0/23 maxlen: 23 185.88.118.0/23 maxlen: 23 2a05:ca40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:33:80:a1:fe:d7:69:a9:51:17:67:45:ee:fa:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e0a6d9f4a16bcf7c82ec1a162eec042d0151902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:b1:b2:e1:0a:aa:64:43:49:08:ff:49:a8: d7:73:72:c5:04:d6:32:6f:1e:97:a0:ce:9a:dd:9c: 7f:56:52:65:3d:27:b2:7b:94:22:c7:5d:a6:95:a2: 6e:5f:98:e5:06:48:01:59:e8:b7:48:7a:eb:05:db: 4f:cb:ca:59:bf:4d:3d:cb:12:58:ce:ab:60:87:24: e9:64:4d:18:e6:2d:45:7d:de:bc:1b:e3:29:92:fb: 4c:e8:58:ff:7c:c4:70:00:2a:76:8b:4f:c0:34:19: 39:d3:03:93:19:25:9c:eb:c8:2a:f1:ec:51:56:db: e5:17:c4:d7:06:33:90:3b:ae:d0:82:d9:8d:3e:ac: fb:12:7a:c0:8a:dd:b0:60:cf:b0:e5:89:aa:a0:19: fc:84:e3:b6:1d:d3:56:e8:10:0f:11:60:8b:71:53: 76:90:05:fc:d9:9d:47:ce:48:76:6d:6e:00:3b:f8: 51:3c:b0:cb:29:6b:9d:67:b8:3b:17:37:fd:ea:0f: f3:46:1a:45:83:37:47:85:42:a8:54:8e:f9:cf:ac: 3e:3b:9d:dc:1f:32:89:f4:72:ea:91:e7:8d:e4:3a: 82:63:e3:1a:e4:b3:86:ef:06:d1:26:d2:2c:70:76: 5b:d5:a7:fc:d0:b0:24:72:35:c4:9c:7b:03:2f:7c: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0A:6D:9F:4A:16:BC:F7:C8:2E:C1:A1:62:EE:C0:42:D0:15:19:02 X509v3 Authority Key Identifier: keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/jgptn0oWvPfILsGhYu7AQtAVGQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.116.0/22 IPv6: 2a05:ca40::/29 Signature Algorithm: sha256WithRSAEncryption 28:d9:bc:4e:69:97:69:83:d3:0c:5a:06:39:68:db:56:28:12: 33:bd:f8:9d:2c:cf:76:08:a2:d6:e4:a0:4c:ef:55:3b:2d:4b: 50:2e:4a:68:60:51:d0:44:0e:56:e7:40:e2:fc:b6:0a:0e:1b: 42:7e:e9:7e:2a:cf:ec:c5:19:0b:2a:e6:f2:8d:64:b9:26:f0: 85:16:30:2f:8f:a3:f7:57:86:14:2d:7c:7d:f9:d6:7f:b6:a5: 2f:3a:0b:c9:aa:76:4c:44:bb:9a:81:49:73:63:31:fc:42:c1: 35:4c:16:3a:04:6a:34:69:54:14:e0:fd:df:f1:e6:59:b8:13: ac:20:03:48:6d:1c:2b:0b:f2:73:c7:b2:d2:d7:cd:e9:02:2b: ed:56:b9:69:4e:1f:ef:a2:1c:b1:fd:b5:ea:63:09:02:a9:f6: b1:1d:fb:db:7c:84:a0:50:f8:a0:f8:3a:2c:9a:81:dd:ba:20: 6a:48:4a:e4:51:e1:de:15:b2:f7:78:22:b6:e8:98:1e:65:4b: aa:83:2a:c1:89:39:9a:98:53:53:11:79:e3:80:06:cd:29:e4: 02:00:d9:8b:90:cb:e9:cc:7e:1c:78:d3:be:c8:a1:24:a8:45: 87:51:de:da:d7:9e:41:13:71:20:5d:75:41:61:a7:fc:b3:8e: ee:db:f4:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NDOAof7XaalRF2dF7volMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3 N2JiYzEwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTBhNmQ5ZjRhMTZiY2Y3YzgyZWMxYTE2MmVlYzA0MmQwMTUxOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3GxsuEKqmRDSQj/SajXc3LFBNYy bx6XoM6a3Zx/VlJlPSeye5Qix12mlaJuX5jlBkgBWei3SHrrBdtPy8pZv009yxJY zqtghyTpZE0Y5i1Ffd68G+MpkvtM6Fj/fMRwACp2i0/ANBk50wOTGSWc68gq8exR VtvlF8TXBjOQO67QgtmNPqz7EnrAit2wYM+w5YmqoBn8hOO2HdNW6BAPEWCLcVN2 kAX82Z1Hzkh2bW4AO/hRPLDLKWudZ7g7Fzf96g/zRhpFgzdHhUKoVI75z6w+O53c HzKJ9HLqkeeN5DqCY+Ma5LOG7wbRJtIscHZb1af80LAkcjXEnHsDL3wRQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI4KbZ9KFrz3yC7BoWLuwELQFRkCMB8GA1UdIwQY MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt NGY5ODQwZGVmYTFmLzEvamdwdG4wb1d2UGZJTHNHaFl1N0FRdEFWR1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVh0MA0E AgACMAcDBQMqBcpAMA0GCSqGSIb3DQEBCwUAA4IBAQAo2bxOaZdpg9MMWgY5aNtW KBIzvfidLM92CKLW5KBM71U7LUtQLkpoYFHQRA5W50Di/LYKDhtCful+Ks/sxRkL KubyjWS5JvCFFjAvj6P3V4YULXx9+dZ/tqUvOgvJqnZMRLuagUlzYzH8QsE1TBY6 BGo0aVQU4P3f8eZZuBOsIANIbRwrC/Jzx7LS183pAivtVrlpTh/vohyx/bXqYwkC qfaxHfvbfISgUPig+DosmoHduiBqSErkUeHeFbL3eCK26JgeZUuqgyrBiTmamFNT EXnjgAbNKeQCANmLkMvpzH4ceNO+yKEkqEWHUd7a155BE3EgXXVBYaf8s47u2/Q5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:30 2026 by rpki-client