This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/JwfUROw3lqJXIl3DNT5lBc7LOxw.roa File: JwfUROw3lqJXIl3DNT5lBc7LOxw.roa (raw, json) Hash identifier: RwUUyhKUGl1YtmMqC40VRjNNfmuqLqm03MhoJovC+/I= Subject key identifier: 27:07:D4:44:EC:37:96:A2:57:22:5D:C3:35:3E:65:05:CE:CB:3B:1C Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51 Certificate serial: 019B76EB14226932505BE7A774CBF14243F7 Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/JwfUROw3lqJXIl3DNT5lBc7LOxw.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44018 IP address blocks: 195.8.121.0/24 maxlen: 24 195.8.122.0/23 maxlen: 24 2001:67c:2590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:14:22:69:32:50:5b:e7:a7:74:cb:f1:42:43:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2707d444ec3796a257225dc3353e6505cecb3b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:41:3a:06:4e:db:47:6d:85:c5:1e:5b:1d: ad:00:f5:3e:1b:25:5c:bb:36:03:40:f0:9e:7e:41: 31:35:98:28:0d:7c:05:bf:02:4f:f3:0c:02:dc:92: 3b:1d:8f:33:c5:a0:4b:19:ef:bd:7f:27:0f:5f:7d: 6b:d3:ec:b2:01:84:aa:e5:bf:4b:3a:56:6f:8b:12: 4a:da:d5:a2:6c:7e:95:00:e3:5a:65:7a:20:70:55: 10:8a:3b:1c:e9:2f:ac:ef:7c:b9:25:c5:a4:88:4a: 3f:6a:61:e9:1a:3c:e9:ca:f1:82:5a:d7:1d:41:1d: 5f:36:c5:6a:a9:2c:42:ca:2c:e9:ba:27:f4:71:ec: 7d:dd:01:20:03:c2:06:82:17:95:0f:5a:39:66:e8: 33:3c:a1:e1:b1:f8:ca:0e:17:86:10:42:c5:07:10: 84:7f:6d:1b:b9:ca:1c:a7:16:a2:e0:de:ba:eb:4a: fe:67:b9:0c:bf:0b:44:65:18:9f:ad:21:f5:19:d2: f6:10:24:9f:c3:b2:32:45:4d:54:9b:25:22:99:10: f8:4a:0e:0d:3f:80:01:80:c5:5f:f8:9e:3a:32:28: 19:29:38:52:62:26:ba:99:0b:ea:c2:be:c7:28:05: e7:33:cc:04:c9:ac:22:be:f5:4f:e3:c3:5f:40:bc: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:07:D4:44:EC:37:96:A2:57:22:5D:C3:35:3E:65:05:CE:CB:3B:1C X509v3 Authority Key Identifier: keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/JwfUROw3lqJXIl3DNT5lBc7LOxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.121.0-195.8.123.255 IPv6: 2001:67c:2590::/48 Signature Algorithm: sha256WithRSAEncryption 7a:87:67:70:a2:c9:06:83:78:10:5f:08:0e:1d:c3:23:e9:89: f1:f4:bc:aa:40:52:af:6e:6d:f1:b3:2d:09:9d:38:e1:be:b8: 1e:95:24:2b:e0:84:69:5f:04:42:89:5f:c0:f4:02:8f:a0:94: 9b:51:50:90:ed:e3:6b:9e:b0:7f:16:96:d0:ac:0f:ef:c6:70: 3c:0e:7a:58:ae:7d:28:11:ae:aa:48:ac:5d:f0:76:db:01:0c: 74:1b:dd:53:ba:d1:db:3c:75:de:57:55:bb:bc:a3:19:07:8d: a2:79:57:27:58:53:73:20:20:f9:42:44:1d:6e:c0:a4:2d:df: bf:9f:60:54:3b:2c:81:8c:4c:dd:29:cd:64:80:00:a0:c2:55: 33:2f:33:dd:f8:7e:77:fa:24:e6:af:21:e4:ee:df:80:5d:5a: e1:0c:f0:fb:f1:2c:b7:e0:7e:d6:6b:4b:e9:9e:e3:a5:2e:f7: e3:87:c3:df:70:29:39:eb:80:10:76:54:3b:cd:22:3f:37:95: ee:4a:62:2b:e0:c6:61:72:07:2a:d1:13:d6:20:88:cd:99:14: ad:43:d3:a4:5d:1e:4a:15:61:4d:8c:4f:55:98:aa:c1:79:43: 18:0a:13:99:06:95:0e:2a:9b:bd:5a:63:9d:49:4b:dc:7e:61: bd:84:d8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt26xQiaTJQW+endMvxQkP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTk0YTQxNDBlMTliMzIwNjNmYzZlNzc5ZjU5MzE0YTc0 YTBjNTEwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzA3ZDQ0NGVjMzc5NmEyNTcyMjVkYzMzNTNlNjUwNWNlY2IzYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O1BOgZO20dthcUeWx2tAPU+GyVc uzYDQPCefkExNZgoDXwFvwJP8wwC3JI7HY8zxaBLGe+9fycPX31r0+yyAYSq5b9L OlZvixJK2tWibH6VAONaZXogcFUQijsc6S+s73y5JcWkiEo/amHpGjzpyvGCWtcd QR1fNsVqqSxCyizpuif0cex93QEgA8IGgheVD1o5ZugzPKHhsfjKDheGEELFBxCE f20bucocpxai4N6660r+Z7kMvwtEZRifrSH1GdL2ECSfw7IyRU1UmyUimRD4Sg4N P4ABgMVf+J46MigZKThSYia6mQvqwr7HKAXnM8wEyawivvVP48NfQLyh5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcH1ETsN5aiVyJdwzU+ZQXOyzscMB8GA1UdIwQY MBaAFIipSkFA4ZsyBj/G53n1kxSnSgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtsS1FVRGhteklHUDhibmVmV1RGS2RLREZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MWNjZDQtZTA1My00NWUwLWI2MzUt N2ZlYTA2NmYwYjk2LzEvSndmVVJPdzNscUpYSWwzRE5UNWxCYzdMT3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82MWNjZDQtZTA1My00NWUwLWI2MzUtN2ZlYTA2NmYwYjk2 LzEvaUtsS1FVRGhteklHUDhibmVmV1RGS2RLREZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBADDCHkD BALDCHgwDwQCAAIwCQMHACABBnwlkDANBgkqhkiG9w0BAQsFAAOCAQEAeodncKLJ BoN4EF8IDh3DI+mJ8fS8qkBSr25t8bMtCZ044b64HpUkK+CEaV8EQolfwPQCj6CU m1FQkO3ja56wfxaW0KwP78ZwPA56WK59KBGuqkisXfB22wEMdBvdU7rR2zx13ldV u7yjGQeNonlXJ1hTcyAg+UJEHW7ApC3fv59gVDssgYxM3SnNZIAAoMJVMy8z3fh+ d/ok5q8h5O7fgF1a4Qzw+/Est+B+1mtL6Z7jpS7344fD33ApOeuAEHZUO80iPzeV 7kpiK+DGYXIHKtET1iCIzZkUrUPTpF0eShVhTYxPVZiqwXlDGAoTmQaVDiqbvVpj nUlL3H5hvYTYRQ== -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:30 2026 by rpki-client