This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/jMWE95cdXToEzGHRnrJGNVd_shY.roa File: jMWE95cdXToEzGHRnrJGNVd_shY.roa (raw, json) Hash identifier: ggn3Fl2wZwmOiQ6vfdHYpUj0Mg0aJO8O6vjWtwjQjkU= Subject key identifier: 8C:C5:84:F7:97:1D:5D:3A:04:CC:61:D1:9E:B2:46:35:57:7F:B2:16 Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Certificate serial: 019B7F153076864F0D3F50432F8414A596D7 Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/jMWE95cdXToEzGHRnrJGNVd_shY.roa Signing time: Fri 02 Jan 2026 14:20:53 +0000 ROA not before: Fri 02 Jan 2026 14:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216210 IP address blocks: 91.216.112.0/24 maxlen: 24 185.171.88.0/24 maxlen: 24 185.171.91.0/24 maxlen: 24 2a14:f580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:30:76:86:4f:0d:3f:50:43:2f:84:14:a5:96:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cc584f7971d5d3a04cc61d19eb24635577fb216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:ce:49:c8:50:56:4a:c2:b7:b9:c3:3a:d0: d7:99:23:3d:6a:29:5d:42:c8:ad:1e:51:b6:af:c9: 93:58:8b:31:fc:66:51:72:0a:23:1c:d3:6c:8c:05: 34:bb:01:ff:bf:e9:26:6f:84:e9:28:67:ec:09:f3: fa:fb:d1:5b:86:29:fb:b3:98:0f:4d:c4:19:e7:6d: 21:ca:75:ba:59:de:a9:c6:5b:ca:6a:f9:e4:e7:fd: 62:e0:1c:c5:95:75:42:8a:d9:59:25:5c:c0:1e:46: 83:77:5c:74:97:79:9c:07:a3:f0:05:a3:0a:0c:d8: df:12:f7:42:89:07:2a:dc:a4:fe:45:90:95:82:fe: 1c:cf:a5:03:cf:3b:b0:d9:75:85:92:ce:16:9d:7f: 78:da:af:dc:fa:c5:64:59:9c:9d:2b:87:bf:4c:e2: 96:3a:f9:c8:72:65:2b:3a:fe:e6:3c:5d:15:7a:1f: 6d:b1:bc:12:6f:8a:dd:c2:1e:fa:66:eb:c6:9a:f6: 9b:9d:0d:18:fd:c8:42:7a:fc:42:47:75:a3:ad:92: f5:dc:b0:e7:12:43:b6:b8:e3:b3:93:42:3c:3c:83: 83:f7:a3:1b:1b:8c:a0:83:c3:d9:39:19:05:33:78: a8:5c:df:b3:b3:c0:59:a1:63:b7:59:f4:7c:8f:b8: 6e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:84:F7:97:1D:5D:3A:04:CC:61:D1:9E:B2:46:35:57:7F:B2:16 X509v3 Authority Key Identifier: keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/jMWE95cdXToEzGHRnrJGNVd_shY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.112.0/24 185.171.88.0/24 185.171.91.0/24 IPv6: 2a14:f580::/29 Signature Algorithm: sha256WithRSAEncryption 9d:52:c6:0f:2d:63:3d:51:16:28:95:3d:be:55:46:d0:6e:b3: 73:c0:3d:69:1d:ec:b8:65:41:4e:d6:41:1c:5d:33:a9:54:7a: 20:82:e2:d5:d5:cb:0e:bc:37:b3:0d:0b:7b:e6:3b:5b:06:d2: 3f:f3:23:5b:12:46:8b:5b:ea:5a:7c:34:99:7d:43:09:01:42: 86:76:15:8f:76:2e:50:a2:d8:d5:42:a1:04:bc:e8:28:3f:63: 69:10:bf:65:7f:b7:6b:21:62:dc:cd:7f:6e:b9:53:1b:e0:81: 8a:c5:53:3a:26:99:b6:2a:70:d3:e1:ea:40:eb:ef:de:54:8d: 23:f2:61:0e:a5:27:44:c5:fc:07:e3:54:23:05:20:89:f2:92: ed:4c:b6:01:c2:ac:7f:c0:2c:20:7e:eb:f3:bf:0d:b0:84:f0: 47:54:c8:a6:9a:93:e3:9c:62:b2:c8:59:55:df:1f:2b:e5:26: 8d:60:8c:2b:8c:91:9b:da:d7:60:9a:1e:a7:6e:b4:43:28:d8: 30:72:96:09:cd:52:be:a8:99:b9:bb:bf:fa:6a:79:e9:22:b6: 83:8a:67:99:6e:ba:77:26:bf:2b:c4:65:12:8b:0d:63:29:d3: e0:46:29:3f:29:58:4c:74:f2:40:14:b5:81:20:b4:7b:96:94: 4f:9c:c9:22 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FTB2hk8NP1BDL4QUpZbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTU4ZGNiMjkwZWM1YWU3ZjY2YzFmYTBmOGQ5NjMyMTFk ZWVhNTQwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2M1ODRmNzk3MWQ1ZDNhMDRjYzYxZDE5ZWIyNDYzNTU3N2ZiMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubfOSchQVkrCt7nDOtDXmSM9aild QsitHlG2r8mTWIsx/GZRcgojHNNsjAU0uwH/v+kmb4TpKGfsCfP6+9Fbhin7s5gP TcQZ520hynW6Wd6pxlvKavnk5/1i4BzFlXVCitlZJVzAHkaDd1x0l3mcB6PwBaMK DNjfEvdCiQcq3KT+RZCVgv4cz6UDzzuw2XWFks4WnX942q/c+sVkWZydK4e/TOKW OvnIcmUrOv7mPF0Veh9tsbwSb4rdwh76ZuvGmvabnQ0Y/chCevxCR3WjrZL13LDn EkO2uOOzk0I8PIOD96MbG4ygg8PZORkFM3ioXN+zs8BZoWO3WfR8j7huEQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIzFhPeXHV06BMxh0Z6yRjVXf7IWMB8GA1UdIwQY MBaAFN8VjcspDsWuf2bB+g+NljIR3upUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTct YzQxNDJkZjM1Y2MzLzEvak1XRTk1Y2RYVG9FekdIUm5ySkdOVmRfc2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTctYzQxNDJkZjM1Y2Mz LzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9hwAwQA uatYAwQAuatbMA0EAgACMAcDBQMqFPWAMA0GCSqGSIb3DQEBCwUAA4IBAQCdUsYP LWM9URYolT2+VUbQbrNzwD1pHey4ZUFO1kEcXTOpVHogguLV1csOvDezDQt75jtb BtI/8yNbEkaLW+pafDSZfUMJAUKGdhWPdi5QotjVQqEEvOgoP2NpEL9lf7drIWLc zX9uuVMb4IGKxVM6Jpm2KnDT4epA6+/eVI0j8mEOpSdExfwH41QjBSCJ8pLtTLYB wqx/wCwgfuvzvw2whPBHVMimmpPjnGKyyFlV3x8r5SaNYIwrjJGb2tdgmh6nbrRD KNgwcpYJzVK+qJm5u7/6annpIraDimeZbrp3Jr8rxGUSiw1jKdPgRik/KVhMdPJA FLWBILR7lpRPnMki -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:31 2026 by rpki-client