This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/jG7UljAuuxYHX96gS0QyREMzdRQ.roa File: jG7UljAuuxYHX96gS0QyREMzdRQ.roa (raw, json) Hash identifier: 19kVtm64m/XsZnVHfeflpspzTQFT7lMVc8YGmtMpmeY= Subject key identifier: 8C:6E:D4:96:30:2E:BB:16:07:5F:DE:A0:4B:44:32:44:43:33:75:14 Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Certificate serial: 019B7834F1B694E9D26495B3F17C6EF67A94 Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/jG7UljAuuxYHX96gS0QyREMzdRQ.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49225 IP address blocks: 195.160.172.0/23 maxlen: 24 195.160.172.0/24 maxlen: 24 195.160.173.0/24 maxlen: 24 2001:678:560::/48 maxlen: 48 2001:678:760::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f1:b6:94:e9:d2:64:95:b3:f1:7c:6e:f6:7a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c6ed496302ebb16075fdea04b44324443337514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:86:d5:34:de:16:59:9a:4d:ac:8e:bd:74:47: d6:70:76:ed:2f:84:3e:74:f5:97:9e:1c:d3:65:1d: 05:3f:ea:ba:c9:4a:bc:16:7e:e4:db:97:dd:77:74: f0:69:12:8b:09:78:9c:a4:fe:cd:42:21:2b:ab:75: cc:5b:15:a4:e6:6b:ff:0e:bc:4c:52:36:f9:2a:35: 71:6d:c9:9b:7c:e0:ca:4d:ac:e3:68:25:0b:95:ba: 0f:31:21:0d:d4:45:3e:20:68:3c:a6:ad:3c:34:68: 81:12:3d:14:af:39:99:b5:8f:7d:c1:ee:2a:eb:ce: c8:9f:8c:08:2e:96:c5:6a:60:c8:19:c0:5b:4d:4a: 8e:62:e6:d8:5f:68:4e:13:ea:e6:cf:87:b1:e7:75: 22:ae:7d:2e:ee:87:b0:ac:ee:66:07:7b:91:d1:cc: 18:7f:51:83:0b:00:45:37:ea:41:2f:37:88:78:23: 06:69:fb:52:46:32:03:92:cd:52:5b:31:e6:f9:19: 13:dc:e6:15:e9:22:96:16:f2:48:bb:0b:d5:f0:75: fb:54:85:35:a5:f3:4a:7a:bc:f5:7b:75:d3:6b:f6: 84:7f:cd:80:ef:a2:a3:50:69:fd:6d:6a:cb:98:5b: c2:2f:ae:ae:02:02:15:77:c9:c8:4d:eb:43:0d:af: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6E:D4:96:30:2E:BB:16:07:5F:DE:A0:4B:44:32:44:43:33:75:14 X509v3 Authority Key Identifier: keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/jG7UljAuuxYHX96gS0QyREMzdRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.172.0/23 IPv6: 2001:678:560::/48 2001:678:760::/48 Signature Algorithm: sha256WithRSAEncryption 98:85:69:f3:84:a6:e3:7f:cb:e5:bc:64:d9:9e:bc:0d:fc:37: a3:c5:19:9c:6f:d7:6c:1d:15:6d:9a:86:f1:a9:89:01:a6:24: 87:f1:f9:ba:00:58:5b:85:22:ec:80:50:c1:1d:3b:d1:bf:c6: b0:f5:89:43:e1:1f:9e:1a:b6:4f:fd:10:71:64:3b:55:7f:8d: 04:51:f6:df:11:27:9c:d1:87:16:66:15:63:e2:39:54:2f:78: 68:82:bd:f5:e8:2f:e1:ac:64:13:7d:40:12:da:12:48:73:92: 6f:47:4d:97:53:08:ec:e6:15:e3:40:4d:a4:5b:26:11:4e:da: 34:cb:37:ec:4c:81:0f:b0:52:e6:ab:0d:82:a4:2a:36:02:2f: ec:1c:59:2e:a9:98:73:a7:ef:f9:d0:fb:a4:5e:1e:0f:64:74: 7f:e7:6b:db:52:4d:61:18:7f:df:9d:94:45:04:41:22:0e:56: 31:ba:a4:07:5b:eb:94:24:bf:ab:60:4a:d0:71:3c:06:9c:93: 04:fb:3b:a0:81:cd:cf:7c:a9:66:0e:81:26:7b:20:bf:f6:27: 95:86:7a:87:3b:a1:c0:cf:e6:cb:b7:82:c1:45:12:a7:c2:ad: 98:6b:5c:b4:06:62:d9:26:74:a4:d1:d4:93:0a:49:66:31:2e: 46:38:c4:d7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4NPG2lOnSZJWz8Xxu9nqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5 NjRiZmMwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzZlZDQ5NjMwMmViYjE2MDc1ZmRlYTA0YjQ0MzI0NDQzMzM3NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44bVNN4WWZpNrI69dEfWcHbtL4Q+ dPWXnhzTZR0FP+q6yUq8Fn7k25fdd3TwaRKLCXicpP7NQiErq3XMWxWk5mv/DrxM Ujb5KjVxbcmbfODKTazjaCULlboPMSEN1EU+IGg8pq08NGiBEj0UrzmZtY99we4q 687In4wILpbFamDIGcBbTUqOYubYX2hOE+rmz4ex53Uirn0u7oewrO5mB3uR0cwY f1GDCwBFN+pBLzeIeCMGaftSRjIDks1SWzHm+RkT3OYV6SKWFvJIuwvV8HX7VIU1 pfNKerz1e3XTa/aEf82A76KjUGn9bWrLmFvCL66uAgIVd8nITetDDa83ywIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIxu1JYwLrsWB1/eoEtEMkRDM3UUMB8GA1UdIwQY MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt NDVjNTY4ZjhhMjdjLzEvakc3VWxqQXV1eFlIWDk2Z1MwUXlSRU16ZFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBw6CsMBgE AgACMBIDBwAgAQZ4BWADBwAgAQZ4B2AwDQYJKoZIhvcNAQELBQADggEBAJiFafOE puN/y+W8ZNmevA38N6PFGZxv12wdFW2ahvGpiQGmJIfx+boAWFuFIuyAUMEdO9G/ xrD1iUPhH54atk/9EHFkO1V/jQRR9t8RJ5zRhxZmFWPiOVQveGiCvfXoL+GsZBN9 QBLaEkhzkm9HTZdTCOzmFeNATaRbJhFO2jTLN+xMgQ+wUuarDYKkKjYCL+wcWS6p mHOn7/nQ+6ReHg9kdH/na9tSTWEYf9+dlEUEQSIOVjG6pAdb65Qkv6tgStBxPAac kwT7O6CBzc98qWYOgSZ7IL/2J5WGeoc7ocDP5su3gsFFEqfCrZhrXLQGYtkmdKTR 1JMKSWYxLkY4xNc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:42 2026 by rpki-client