This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa File: jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa (raw, json) Hash identifier: N3EOZbDfEcrnakBa74+QQELHNWZ9acd9bm7XvC99pnE= Subject key identifier: 8D:66:ED:2E:69:C7:0C:69:28:BA:E3:57:7B:49:D0:84:A4:51:A1:94 Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a Certificate serial: 019B7910367D688D95D6B394E4B694414CF3 Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48417 IP address blocks: 195.210.14.0/24 maxlen: 24 195.210.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:36:7d:68:8d:95:d6:b3:94:e4:b6:94:41:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d66ed2e69c70c6928bae3577b49d084a451a194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:a7:d2:84:37:aa:77:dd:01:27:dc:1c:16: 6e:e2:ba:d9:fa:cd:a9:34:39:f1:6d:a8:00:10:bf: b9:22:e6:94:11:d2:0d:0a:0e:4c:a1:91:8b:42:a6: a2:e1:af:51:d8:4b:70:65:96:1b:8c:80:63:bb:8e: 2a:21:c3:ed:87:86:ce:f1:b7:fc:0f:ef:69:39:da: de:eb:27:a1:8c:de:30:f8:cd:69:f7:c4:02:f8:9f: b3:68:12:44:8b:56:72:e9:33:e4:35:9c:ef:27:ff: d1:f5:53:4e:90:23:21:d8:1f:96:ae:ba:4c:e6:37: 8a:e9:a6:e3:f4:e1:c7:52:c1:75:cd:23:24:2e:2f: ac:a6:56:6d:6d:60:58:a5:11:15:c8:2e:f8:45:03: 9f:b7:c8:19:03:53:ba:61:ae:ed:2e:a3:cd:4d:21: 51:b6:45:3b:80:ab:5a:c2:b7:39:2e:16:cb:27:fd: 81:ef:bf:30:60:97:1b:63:82:56:71:da:6b:18:83: 38:60:1f:42:ac:e9:f7:40:f2:8b:06:26:a7:5b:af: b5:db:49:5f:ee:51:3c:51:43:16:c1:4e:75:23:ff: 59:b4:89:9c:6e:87:d8:f9:86:a5:13:2b:28:14:bf: be:11:32:3e:58:47:aa:de:58:37:f9:a6:2a:36:b9: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:66:ED:2E:69:C7:0C:69:28:BA:E3:57:7B:49:D0:84:A4:51:A1:94 X509v3 Authority Key Identifier: keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/jWbtLmnHDGkouuNXe0nQhKRRoZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.14.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:2c:85:9b:e3:73:a7:f7:5f:ef:d5:ed:33:17:43:bb:1e:63: 8e:61:e6:69:c2:d6:a4:56:63:91:1d:f8:64:af:ab:32:8c:11: 8a:da:53:2a:58:7f:8e:f2:39:4b:86:a1:e0:05:7b:ce:03:10: 30:17:24:f3:82:c7:99:76:b1:18:ab:91:23:e9:5e:d3:83:72: c2:ab:01:ca:d3:71:de:7e:69:8c:67:78:16:1e:12:bb:e0:58: 83:f8:70:31:de:c3:3c:a1:db:2d:02:bc:ff:5b:11:2a:d9:60: 7b:02:17:57:d0:1e:57:b8:fe:53:69:1a:74:40:3f:03:14:51: 45:2c:f5:b5:3f:aa:9e:bd:67:d6:40:35:e3:65:7d:a7:d2:50: a8:90:b8:f0:fc:f7:44:ce:59:23:bb:49:66:af:e3:5c:01:a1: 4d:22:74:1b:b7:0e:49:7e:9c:42:54:b7:b5:8b:4e:bc:91:4f: b2:5a:8c:cd:78:cb:ee:94:e1:ff:71:c1:b2:72:c7:e5:a0:8f: 82:1b:94:d9:af:b4:f4:36:1c:07:b1:72:43:a8:cf:2c:3b:44: 03:33:d0:d2:b3:71:78:02:9c:93:07:a5:4b:19:1e:44:d1:f3: 47:e4:04:bb:c1:cc:3b:ab:68:82:ca:d0:90:4e:e9:f3:62:2f: ad:41:4d:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDZ9aI2V1rOU5LaUQUzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YjdkNWNjZGFmMDMzMDk3NDk3NDU3NjQyMDBhNzI3Mjc2 NDczMGEwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDY2ZWQyZTY5YzcwYzY5MjhiYWUzNTc3YjQ5ZDA4NGE0NTFhMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZan0oQ3qnfdASfcHBZu4rrZ+s2p NDnxbagAEL+5IuaUEdINCg5MoZGLQqai4a9R2EtwZZYbjIBju44qIcPth4bO8bf8 D+9pOdre6yehjN4w+M1p98QC+J+zaBJEi1Zy6TPkNZzvJ//R9VNOkCMh2B+WrrpM 5jeK6abj9OHHUsF1zSMkLi+splZtbWBYpREVyC74RQOft8gZA1O6Ya7tLqPNTSFR tkU7gKtawrc5LhbLJ/2B778wYJcbY4JWcdprGIM4YB9CrOn3QPKLBianW6+120lf 7lE8UUMWwU51I/9ZtImcbofY+YalEysoFL++ETI+WEeq3lg3+aYqNrlaHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1m7S5pxwxpKLrjV3tJ0ISkUaGUMB8GA1UdIwQY MBaAFIW31cza8DMJdJdFdkIApycnZHMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJmVnpOcndNd2wwbDBWMlFnQ25KeWRrY3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTM3ZDgtMWQzNi00MWJiLWI3ZmEt NDA5NDkzNjk0YTUyLzEvaldidExtbkhER2tvdXVOWGUwblFoS1JSb1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMTM3ZDgtMWQzNi00MWJiLWI3ZmEtNDA5NDkzNjk0YTUy LzEvaGJmVnpOcndNd2wwbDBWMlFnQ25KeWRrY3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9IOMA0G CSqGSIb3DQEBCwUAA4IBAQB9LIWb43On91/v1e0zF0O7HmOOYeZpwtakVmORHfhk r6syjBGK2lMqWH+O8jlLhqHgBXvOAxAwFyTzgseZdrEYq5Ej6V7Tg3LCqwHK03He fmmMZ3gWHhK74FiD+HAx3sM8odstArz/WxEq2WB7AhdX0B5XuP5TaRp0QD8DFFFF LPW1P6qevWfWQDXjZX2n0lCokLjw/PdEzlkju0lmr+NcAaFNInQbtw5JfpxCVLe1 i068kU+yWozNeMvulOH/ccGycsfloI+CG5TZr7T0NhwHsXJDqM8sO0QDM9DSs3F4 ApyTB6VLGR5E0fNH5AS7wcw7q2iCytCQTunzYi+tQU3F -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:28 2026 by rpki-client