This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jIeFhJZd4hnKN5qOPFYJyLelG2U.roa File: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (raw, json) Hash identifier: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM= Subject key identifier: 8C:87:85:84:96:5D:E2:19:CA:37:9A:8E:3C:56:09:C8:B7:A5:1B:65 Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Certificate serial: 019BCC6E99AF6F3F60739B450572D2855EE5 Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jIeFhJZd4hnKN5qOPFYJyLelG2U.roa Signing time: Sat 17 Jan 2026 14:49:18 +0000 ROA not before: Sat 17 Jan 2026 14:49:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59639 IP address blocks: 91.199.199.0/24 maxlen: 24 193.200.89.0/24 maxlen: 24 2a0c:e887::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cc:6e:99:af:6f:3f:60:73:9b:45:05:72:d2:85:5e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Validity Not Before: Jan 17 14:49:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c878584965de219ca379a8e3c5609c8b7a51b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:49:aa:f5:af:c4:cf:3a:db:e0:b8:8d:7b: c8:5b:70:09:14:61:cc:96:6f:9b:05:dc:de:41:d9: 2e:85:0b:bc:08:62:a2:d1:7e:37:9b:0e:26:75:00: 23:b0:17:f6:44:b4:2c:e3:4d:ab:74:07:72:53:cd: 90:76:0f:76:51:c0:a9:6e:ab:d3:66:84:c7:3f:a4: f9:d4:30:94:13:dd:76:80:91:ce:af:bd:50:6d:07: 6e:4e:3e:43:da:11:32:fd:71:2c:56:57:b0:3d:4c: 3e:0b:82:9e:80:f9:43:15:95:ac:fe:e4:50:0c:56: dd:fd:f5:b0:c6:9f:8f:fe:80:e3:13:ca:e6:a6:8f: 37:7f:21:2e:90:d6:17:b4:48:64:5f:d6:f2:30:aa: 99:f5:dc:c1:b2:42:2a:de:fb:6d:5a:9c:2d:c1:96: 45:b5:e3:b9:30:1e:3c:b9:27:9d:83:5e:e4:69:68: d8:d4:95:36:09:bb:cb:9a:31:37:5a:ef:eb:be:36: 8e:bf:c8:49:2e:3c:4e:46:0c:10:a0:03:d4:02:78: 32:6f:34:dc:37:5d:2a:73:96:f4:26:a6:c4:f1:14: 57:ee:e6:81:3e:bf:c5:b6:8b:19:87:a7:96:27:f8: 3e:ff:ec:c7:5f:82:4d:7f:57:56:66:e8:75:92:ff: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:87:85:84:96:5D:E2:19:CA:37:9A:8E:3C:56:09:C8:B7:A5:1B:65 X509v3 Authority Key Identifier: keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jIeFhJZd4hnKN5qOPFYJyLelG2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.199.0/24 193.200.89.0/24 IPv6: 2a0c:e887::/32 Signature Algorithm: sha256WithRSAEncryption 4c:e7:f5:74:09:df:20:2e:5c:5c:b4:40:ba:92:5e:fa:4c:06: 4f:7a:99:38:5c:26:1e:36:4e:8c:aa:c7:4b:14:37:0d:16:a4: 38:9a:a2:95:95:19:91:64:01:c7:4f:a5:6a:7b:6a:a7:81:da: c5:0a:9d:bf:8e:22:1c:38:d9:22:68:4d:bf:25:9d:11:a4:39: 91:33:6a:fa:59:88:cb:c6:8c:1d:82:7c:38:d8:27:55:27:61: 1d:fd:fd:d6:c4:6c:bf:d8:f6:1b:45:3a:23:5d:73:9b:da:44: ab:46:da:bf:f1:01:8f:8d:6b:70:3a:14:2d:58:15:ad:21:d9: c9:94:df:ac:41:18:38:82:fb:97:73:ff:55:63:91:eb:99:13: a6:28:a0:c2:d9:4d:8b:25:e5:4b:7a:ba:49:7b:1b:7d:47:47: 03:9c:a7:c5:f0:6f:6e:32:16:ac:87:a6:ab:f4:49:96:f2:21: d6:a9:a5:a4:65:39:60:0d:da:af:26:63:be:26:c0:98:ac:76: 5d:e1:be:04:1c:a0:5b:74:9b:64:c4:c0:d6:32:29:ac:c8:8f: 67:55:f9:27:41:64:9b:58:25:c3:0b:88:31:c6:f7:ad:d6:e9: f7:4b:db:26:95:67:75:02:56:2c:9b:e9:79:ee:2e:11:f1:ed: 6c:72:8c:cf -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvMbpmvbz9gc5tFBXLShV7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjJmODFiOGM0N2MyYjU4OGY0NTFkNDAzN2M2ODM3ODcw YjM5N2YwHhcNMjYwMTE3MTQ0OTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzg3ODU4NDk2NWRlMjE5Y2EzNzlhOGUzYzU2MDljOGI3YTUxYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/VJqvWvxM862+C4jXvIW3AJFGHM lm+bBdzeQdkuhQu8CGKi0X43mw4mdQAjsBf2RLQs402rdAdyU82Qdg92UcCpbqvT ZoTHP6T51DCUE912gJHOr71QbQduTj5D2hEy/XEsVlewPUw+C4KegPlDFZWs/uRQ DFbd/fWwxp+P/oDjE8rmpo83fyEukNYXtEhkX9byMKqZ9dzBskIq3vttWpwtwZZF teO5MB48uSedg17kaWjY1JU2CbvLmjE3Wu/rvjaOv8hJLjxORgwQoAPUAngybzTc N10qc5b0JqbE8RRX7uaBPr/FtosZh6eWJ/g+/+zHX4JNf1dWZuh1kv/iAQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIyHhYSWXeIZyjeajjxWCci3pRtlMB8GA1UdIwQY MBaAFI6y+BuMR8K1iPRR1AN8aDeHCzl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgt NDgzZmM5MDcwOGQ1LzEvakllRmhKWmQ0aG5LTjVxT1BGWUp5TGVsRzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgtNDgzZmM5MDcwOGQ1 LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8fHAwQA wchZMA0EAgACMAcDBQAqDOiHMA0GCSqGSIb3DQEBCwUAA4IBAQBM5/V0Cd8gLlxc tEC6kl76TAZPepk4XCYeNk6MqsdLFDcNFqQ4mqKVlRmRZAHHT6Vqe2qngdrFCp2/ jiIcONkiaE2/JZ0RpDmRM2r6WYjLxowdgnw42CdVJ2Ed/f3WxGy/2PYbRTojXXOb 2kSrRtq/8QGPjWtwOhQtWBWtIdnJlN+sQRg4gvuXc/9VY5HrmROmKKDC2U2LJeVL erpJext9R0cDnKfF8G9uMhash6ar9EmW8iHWqaWkZTlgDdqvJmO+JsCYrHZd4b4E HKBbdJtkxMDWMimsyI9nVfknQWSbWCXDC4gxxvet1un3S9smlWd1AlYsm+l57i4R 8e1scozP -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:29 2026 by rpki-client