This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa File: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (raw, json) Hash identifier: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8= Subject key identifier: 8D:9D:C5:3B:F9:95:F5:6A:DC:A0:A4:CB:71:E4:BC:A4:91:96:DF:27 Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee Certificate serial: 019B79ECB34BA72A2DCCA8FA6335A1ED4003 Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49824 IP address blocks: 185.5.252.0/24 maxlen: 24 185.5.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b3:4b:a7:2a:2d:cc:a8:fa:63:35:a1:ed:40:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9dc53bf995f56adca0a4cb71e4bca49196df27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:fd:41:a1:34:2e:d5:21:a6:25:70:31:8e: 61:fa:2e:23:23:31:9f:f3:97:46:b8:c4:22:51:68: 00:31:0a:3e:29:16:16:32:4c:ff:04:a6:16:52:3a: 05:3d:cc:13:41:db:50:a6:be:36:0f:ce:34:75:91: 1d:58:9f:c3:3c:75:a1:10:bb:7a:5d:2d:3b:83:0c: 2c:d3:70:af:50:32:5b:2f:13:8a:3d:2b:ad:2a:a4: fa:16:29:3d:a8:76:3b:b7:9e:28:d4:99:ec:ef:45: 1a:38:7c:f4:19:8a:56:e3:87:a9:f5:37:54:f6:08: d0:9b:31:57:22:2e:f3:d2:90:db:00:4c:57:67:9c: f6:50:8e:65:37:f9:fa:02:1d:1f:cd:5d:8d:cf:35: 41:76:4a:36:5d:e2:90:19:dc:74:12:11:70:22:54: f5:1f:2d:89:a4:93:57:18:48:32:14:d4:34:05:0c: 6f:f7:cc:d0:50:19:de:aa:1a:c5:9c:cc:ae:b4:61: 9b:3d:2e:21:56:01:ae:3e:76:8f:c1:21:90:da:77: fe:3f:35:c5:ab:28:c3:2e:0d:43:4f:dc:d2:58:7a: 71:18:fa:0b:33:80:2c:e2:f3:c0:a5:18:11:b1:91: 17:8d:20:ab:34:9c:f0:75:c2:0e:04:94:e7:50:f5: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9D:C5:3B:F9:95:F5:6A:DC:A0:A4:CB:71:E4:BC:A4:91:96:DF:27 X509v3 Authority Key Identifier: keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.252.0/23 Signature Algorithm: sha256WithRSAEncryption 13:ed:2f:e9:60:f5:2e:c3:ca:4f:3c:26:07:5a:0c:32:81:02: bf:10:24:e5:4f:1f:51:b7:b5:1e:2b:4e:4c:c6:9c:05:24:4b: cf:da:c3:e3:d3:04:9f:0b:ec:33:64:4f:6d:6b:8b:c8:2c:ea: 59:ae:9d:8c:ee:54:64:22:8e:95:e8:30:9c:86:56:c1:af:17: 32:a0:ac:a2:03:09:40:e8:0e:b6:4b:ef:b3:d4:e3:c4:30:3f: 93:24:8d:d7:3e:2f:b7:e5:17:c3:2f:14:84:6b:c3:e3:a7:e3: 41:5d:04:f6:93:ae:83:b3:ed:0e:70:f4:a3:da:1f:38:6c:96: b9:45:1f:71:a1:a5:f6:24:86:0d:03:0b:14:c5:71:3f:44:5e: 7c:37:d0:e1:3e:93:c7:0e:ff:c7:8f:8d:0b:f1:73:34:07:89: cc:cb:e9:05:a1:e8:d2:e6:8c:b7:65:be:54:fb:62:69:0e:c3: ea:75:4d:0f:de:be:ac:7e:66:24:e4:2d:6f:ca:e0:92:93:62: f2:a5:3c:2b:0f:8b:28:ff:12:45:12:5d:75:66:ad:70:a5:b7: a0:2a:42:ed:e7:54:7b:c5:64:db:7e:e9:0b:0d:3d:ac:fc:5a: a1:03:45:b7:e8:52:e4:31:53:5c:4d:7c:06:b3:5f:e6:87:47: 84:7e:25:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LNLpyotzKj6YzWh7UADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5 MDZjZWUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDlkYzUzYmY5OTVmNTZhZGNhMGE0Y2I3MWU0YmNhNDkxOTZkZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtj9QaE0LtUhpiVwMY5h+i4jIzGf 85dGuMQiUWgAMQo+KRYWMkz/BKYWUjoFPcwTQdtQpr42D840dZEdWJ/DPHWhELt6 XS07gwws03CvUDJbLxOKPSutKqT6Fik9qHY7t54o1Jns70UaOHz0GYpW44ep9TdU 9gjQmzFXIi7z0pDbAExXZ5z2UI5lN/n6Ah0fzV2NzzVBdko2XeKQGdx0EhFwIlT1 Hy2JpJNXGEgyFNQ0BQxv98zQUBneqhrFnMyutGGbPS4hVgGuPnaPwSGQ2nf+PzXF qyjDLg1DT9zSWHpxGPoLM4As4vPApRgRsZEXjSCrNJzwdcIOBJTnUPUtnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2dxTv5lfVq3KCky3HkvKSRlt8nMB8GA1UdIwQY MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt MDkwYzQ2ZTlmMmVkLzEvalozRk9fbVY5V3Jjb0tUTGNlUzhwSkdXM3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQX8MA0G CSqGSIb3DQEBCwUAA4IBAQAT7S/pYPUuw8pPPCYHWgwygQK/ECTlTx9Rt7UeK05M xpwFJEvP2sPj0wSfC+wzZE9ta4vILOpZrp2M7lRkIo6V6DCchlbBrxcyoKyiAwlA 6A62S++z1OPEMD+TJI3XPi+35RfDLxSEa8Pjp+NBXQT2k66Ds+0OcPSj2h84bJa5 RR9xoaX2JIYNAwsUxXE/RF58N9DhPpPHDv/Hj40L8XM0B4nMy+kFoejS5oy3Zb5U +2JpDsPqdU0P3r6sfmYk5C1vyuCSk2LypTwrD4so/xJFEl11Zq1wpbegKkLt51R7 xWTbfukLDT2s/FqhA0W36FLkMVNcTXwGs1/mh0eEfiXR -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:41 2026 by rpki-client