This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/JaqR-Q1XpvizwsvI-kPY47fRqMs.roa File: JaqR-Q1XpvizwsvI-kPY47fRqMs.roa (raw, json) Hash identifier: gzQ9Ftm7Gk050dXtwRWunltOfemqcE+EB8R+/Ghu8FE= Subject key identifier: 25:AA:91:F9:0D:57:A6:F8:B3:C2:CB:C8:FA:43:D8:E3:B7:D1:A8:CB Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019B7AC8A67D5D1B6A1435DE4C7F41C54B1D Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/JaqR-Q1XpvizwsvI-kPY47fRqMs.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.180.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a6:7d:5d:1b:6a:14:35:de:4c:7f:41:c5:4b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25aa91f90d57a6f8b3c2cbc8fa43d8e3b7d1a8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:23:5f:e5:0c:77:2b:64:43:f6:d9:99:de: cb:5e:03:f2:9e:ec:6c:a1:62:8c:45:92:c9:ec:1b: 7d:d3:ff:35:80:26:da:59:de:66:25:3c:1e:b2:5a: 59:e5:66:80:f2:0a:41:50:f4:19:4e:db:ac:e6:90: f8:1a:5c:ee:d6:62:42:0f:da:4c:36:bc:2f:bc:e6: 34:42:36:b5:f9:f6:44:df:21:10:6c:cb:c1:24:bb: 80:df:de:c7:eb:29:dd:fb:60:2f:f5:cd:2b:40:ad: ab:ed:5e:4a:27:8d:5d:dd:8a:ed:05:23:c3:b3:6f: fd:af:51:e0:f9:ee:18:df:f5:7c:b0:2a:02:a6:8a: 41:6d:a8:66:db:e1:27:32:cc:46:48:36:15:b7:6e: 8a:40:1c:b9:ff:98:44:4a:9f:cb:f3:10:ea:ca:ab: 23:6a:2e:07:43:c3:63:81:20:77:84:1a:de:97:6f: 15:f4:03:e2:bc:1b:1d:82:27:9c:f0:86:ca:b5:e1: 3d:35:ad:8e:f3:3d:fc:83:17:ea:3b:7d:53:4c:36: 17:cf:05:0d:05:6c:c3:1e:66:70:a5:bf:0c:90:a5: ce:0c:fd:fa:b7:0a:47:83:4d:c8:7b:65:d3:17:61: 2b:40:4b:28:72:61:06:72:2b:95:82:89:7e:c1:b8: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AA:91:F9:0D:57:A6:F8:B3:C2:CB:C8:FA:43:D8:E3:B7:D1:A8:CB X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/JaqR-Q1XpvizwsvI-kPY47fRqMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.195.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c3:06:73:5a:dc:09:91:df:bd:6c:1c:67:de:e3:f3:31:41: 97:89:91:00:53:38:f6:8c:b7:80:9b:89:89:c6:87:6c:bf:1b: 45:1e:54:33:d1:34:4c:8c:b4:45:54:3b:68:a4:4c:1f:e2:3c: a9:87:0b:2e:49:49:77:2f:cf:45:8c:59:21:2c:2e:55:ac:03: dd:d1:62:0a:9b:f8:54:02:cb:8a:97:e9:04:08:1a:2b:92:d7: ed:2e:15:d0:72:ed:46:d0:f3:92:1c:e8:8b:3d:c0:0f:be:61: 9c:d1:80:c3:63:1e:d4:72:cf:39:df:05:9d:37:3d:7b:9b:54: a8:26:97:00:73:55:10:d0:c8:1b:76:0b:99:1b:58:c8:82:48: 68:cb:45:84:9c:10:67:a1:fe:44:36:b8:b0:00:8f:33:32:6e: e1:2b:74:96:32:f9:75:85:39:db:68:f9:c8:1b:84:87:d4:68: 91:9b:b6:86:d7:60:cf:f4:1b:56:94:44:ef:19:1f:01:45:c5: 30:e7:c5:39:cd:9e:2a:c9:c3:b4:a3:09:f7:56:07:f4:54:5a: 67:a3:b5:24:a8:48:d8:46:3f:50:d3:fe:de:9b:d9:c4:11:a6: ba:4c:00:96:c0:f7:08:4e:91:2d:ba:69:9e:6b:55:38:59:99: f2:ef:85:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKZ9XRtqFDXeTH9BxUsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWFhOTFmOTBkNTdhNmY4YjNjMmNiYzhmYTQzZDhlM2I3ZDFhOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXMjX+UMdytkQ/bZmd7LXgPynuxs oWKMRZLJ7Bt90/81gCbaWd5mJTweslpZ5WaA8gpBUPQZTtus5pD4Glzu1mJCD9pM NrwvvOY0Qja1+fZE3yEQbMvBJLuA397H6ynd+2Av9c0rQK2r7V5KJ41d3YrtBSPD s2/9r1Hg+e4Y3/V8sCoCpopBbahm2+EnMsxGSDYVt26KQBy5/5hESp/L8xDqyqsj ai4HQ8NjgSB3hBrel28V9APivBsdgiec8IbKteE9Na2O8z38gxfqO31TTDYXzwUN BWzDHmZwpb8MkKXODP36twpHg03Ie2XTF2ErQEsocmEGciuVgol+wbgsHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWqkfkNV6b4s8LLyPpD2OO30ajLMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvSmFxUi1RMVhwdml6d3N2SS1rUFk0N2ZScU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubTDMA0G CSqGSIb3DQEBCwUAA4IBAQAlwwZzWtwJkd+9bBxn3uPzMUGXiZEAUzj2jLeAm4mJ xodsvxtFHlQz0TRMjLRFVDtopEwf4jyphwsuSUl3L89FjFkhLC5VrAPd0WIKm/hU AsuKl+kECBorktftLhXQcu1G0POSHOiLPcAPvmGc0YDDYx7Ucs853wWdNz17m1So JpcAc1UQ0MgbdguZG1jIgkhoy0WEnBBnof5ENriwAI8zMm7hK3SWMvl1hTnbaPnI G4SH1GiRm7aG12DP9BtWlETvGR8BRcUw58U5zZ4qycO0own3Vgf0VFpno7UkqEjY Rj9Q0/7em9nEEaa6TACWwPcITpEtummea1U4WZny74Vw -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client