This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa File: JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa (raw, json) Hash identifier: l3rRARSXe/Kv5HUcutLJRW5ribdNSHw4ggpcG9Mw0ro= Subject key identifier: 25:72:E4:4F:A5:67:22:9F:92:07:92:3D:10:C4:59:3B:0D:03:61:92 Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Certificate serial: 019B7CED440BADC35CEB494F25463BA632C5 Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62119 IP address blocks: 185.137.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:44:0b:ad:c3:5c:eb:49:4f:25:46:3b:a6:32:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2572e44fa567229f9207923d10c4593b0d036192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:70:7f:30:f3:f8:bb:fa:11:0d:c1:82:57: 07:b8:30:80:dd:b4:3f:f0:09:5a:74:82:92:dd:58: ef:8c:5f:72:e1:ba:c1:51:0a:a0:e6:08:c6:cf:d0: 47:64:85:b2:10:8a:f2:bd:b8:be:a8:41:14:63:e6: 83:a6:17:9f:81:05:67:c2:b0:08:7d:dd:9f:94:b2: 6c:50:95:78:1e:88:06:e0:2d:72:d7:8b:78:9f:1e: b1:f1:37:35:37:ed:ac:97:06:00:a6:68:9b:ff:01: 74:03:9a:78:c7:02:6c:75:7f:79:62:d9:e0:2a:22: d5:1a:e8:5e:37:9f:3e:f0:7f:e9:e3:c1:1d:d5:54: 66:b2:d1:f4:79:67:a1:22:22:ca:18:97:0b:24:b7: 0a:e2:1c:67:73:77:ed:ac:0a:5d:6e:01:b0:58:c6: 36:9c:6e:3a:de:a3:72:aa:67:a3:0a:0b:dc:3f:45: 0a:97:34:b0:f2:8b:94:2f:c4:db:e9:64:1c:f5:c3: 57:e7:03:1e:2b:6f:2d:97:77:7d:02:ee:29:2c:3d: e8:8d:3d:f0:06:76:a8:05:41:e9:b8:28:61:84:28: cd:cf:47:d9:87:a7:06:74:31:d4:27:4d:91:bf:cb: ca:ab:a4:d8:d4:03:70:6c:d2:db:45:a8:b2:37:df: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:E4:4F:A5:67:22:9F:92:07:92:3D:10:C4:59:3B:0D:03:61:92 X509v3 Authority Key Identifier: keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.96.0/24 Signature Algorithm: sha256WithRSAEncryption 39:25:aa:cc:1c:f1:53:1f:8b:39:53:b4:6f:ab:d1:de:68:68: c2:d9:73:61:6c:23:0e:7b:1b:27:83:62:9e:a4:81:da:e4:04: a1:c6:ef:a5:43:a9:3f:88:b1:46:00:e4:e6:08:de:33:77:46: 47:59:1a:b2:69:b7:6b:34:2c:5b:79:4b:07:b5:72:9f:06:93: c1:4a:45:d8:35:7b:83:24:62:e2:77:73:83:53:18:72:a9:e9: ef:b4:89:34:6d:c9:85:6f:49:20:c1:4a:bf:62:6b:8f:83:01: c5:16:e0:92:52:5a:f9:66:4a:36:34:8e:f9:52:02:ae:14:63: ab:f6:4f:c3:46:45:ff:cd:8b:bf:1a:05:99:ee:07:32:c8:bd: 95:09:1b:ed:58:7b:61:45:76:e8:3d:1b:33:ae:44:8d:8c:40: 59:e0:9e:4f:d6:d2:57:82:e8:76:3d:b1:f0:a0:9b:42:94:1c: 28:49:49:a0:cd:b9:20:57:c0:db:62:a7:64:73:bc:08:f1:d9: 09:e4:9b:52:c5:ff:bb:3c:d0:ca:e1:3d:10:1c:1b:2c:b1:a5: 44:28:9b:5b:af:16:b4:d4:ad:c0:2e:a9:aa:f5:8a:cf:b8:a9: ee:bd:73:3c:0e:ea:65:84:f7:a3:d6:10:1a:85:fc:92:92:06: 4c:bf:21:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87UQLrcNc60lPJUY7pjLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0 NTI2OGMwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTcyZTQ0ZmE1NjcyMjlmOTIwNzkyM2QxMGM0NTkzYjBkMDM2MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sJwfzDz+Lv6EQ3BglcHuDCA3bQ/ 8AladIKS3VjvjF9y4brBUQqg5gjGz9BHZIWyEIryvbi+qEEUY+aDphefgQVnwrAI fd2flLJsUJV4HogG4C1y14t4nx6x8Tc1N+2slwYApmib/wF0A5p4xwJsdX95Ytng KiLVGuheN58+8H/p48Ed1VRmstH0eWehIiLKGJcLJLcK4hxnc3ftrApdbgGwWMY2 nG463qNyqmejCgvcP0UKlzSw8ouUL8Tb6WQc9cNX5wMeK28tl3d9Au4pLD3ojT3w BnaoBUHpuChhhCjNz0fZh6cGdDHUJ02Rv8vKq6TY1ANwbNLbRaiyN9+knQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVy5E+lZyKfkgeSPRDEWTsNA2GSMB8GA1UdIwQY MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt Njg4ZDUxYTQ0NDQ4LzEvSlhMa1Q2Vm5JcC1TQjVJOUVNUlpPdzBEWVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4 LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYlgMA0G CSqGSIb3DQEBCwUAA4IBAQA5JarMHPFTH4s5U7Rvq9HeaGjC2XNhbCMOexsng2Ke pIHa5AShxu+lQ6k/iLFGAOTmCN4zd0ZHWRqyabdrNCxbeUsHtXKfBpPBSkXYNXuD JGLid3ODUxhyqenvtIk0bcmFb0kgwUq/YmuPgwHFFuCSUlr5Zko2NI75UgKuFGOr 9k/DRkX/zYu/GgWZ7gcyyL2VCRvtWHthRXboPRszrkSNjEBZ4J5P1tJXguh2PbHw oJtClBwoSUmgzbkgV8DbYqdkc7wI8dkJ5JtSxf+7PNDK4T0QHBsssaVEKJtbrxa0 1K3ALqmq9YrPuKnuvXM8DuplhPej1hAahfySkgZMvyGd -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:25 2026 by rpki-client