This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/jmSRD5Pbhaie_b0T8NixTJfcSnc.roa File: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (raw, json) Hash identifier: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE= Subject key identifier: 8E:64:91:0F:93:DB:85:A8:9E:FD:BD:13:F0:D8:B1:4C:97:DC:4A:77 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B79103E7235F92F0344158D521D39EEA1 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/jmSRD5Pbhaie_b0T8NixTJfcSnc.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213990 IP address blocks: 195.216.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:72:35:f9:2f:03:44:15:8d:52:1d:39:ee:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e64910f93db85a89efdbd13f0d8b14c97dc4a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:a6:a9:1a:42:22:67:4e:98:7c:2e:f3:5b: 8a:d7:3e:16:08:24:ce:a8:be:7d:60:3c:f9:af:89: c7:f2:aa:ef:af:2f:1e:65:04:be:09:67:13:fa:ed: 07:72:97:f8:02:5a:37:22:7f:e1:4e:3b:a0:92:3b: be:68:c3:ef:f5:50:ac:77:8a:0e:1f:e0:f4:25:15: 2d:44:ad:08:7b:6e:bb:48:94:85:a5:b3:1b:66:f8: e5:af:0c:85:51:52:7a:f5:70:26:59:f8:9d:d1:eb: e2:3e:60:4a:47:c7:d0:75:57:7f:1e:96:d2:c8:a3: f7:51:25:46:9c:ce:a2:3b:d8:72:58:74:3a:0e:eb: da:17:1f:a6:f4:10:e6:a0:a1:05:fa:ed:ee:70:82: 71:b0:09:cd:1a:be:c6:c4:b2:0a:1b:0f:80:72:d6: b9:41:bd:ae:81:7f:77:8e:ea:37:11:77:8d:af:31: e2:a8:e9:b7:1c:be:a0:20:06:8a:50:ab:eb:9b:b6: ae:fe:7f:b6:2e:43:e5:cf:dd:04:4e:cb:c5:c5:3c: b4:8e:75:20:dd:3a:95:2a:d8:aa:15:20:89:52:70: 54:2b:8f:79:a5:86:76:44:30:43:43:71:03:9f:f0: d7:2a:02:f8:c7:68:b6:1a:40:31:35:2e:05:a7:b0: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:91:0F:93:DB:85:A8:9E:FD:BD:13:F0:D8:B1:4C:97:DC:4A:77 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/jmSRD5Pbhaie_b0T8NixTJfcSnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.182.0/24 Signature Algorithm: sha256WithRSAEncryption 15:4d:23:ca:b8:b3:24:7c:dc:f6:6d:a6:23:6c:d3:61:d2:43: 45:3e:db:2a:a2:5d:57:18:3e:64:43:96:63:04:91:b7:4d:a1: 12:f7:5f:cd:cd:ac:71:cf:f2:a0:21:ef:4d:5e:e9:9f:15:49: 8c:2a:f0:33:d1:99:68:36:a1:c0:db:c7:fa:8d:80:3b:65:ae: a8:90:9e:2e:96:35:c1:bd:22:a2:93:a6:34:3c:55:ef:b5:4d: 56:aa:c7:bc:1d:b7:fb:dc:1f:ba:5c:9d:df:fa:bd:d1:1a:7c: 41:13:a0:46:e5:c3:1f:1f:17:dc:08:98:ff:d6:a1:7d:c3:8d: 67:ca:45:22:87:5c:0e:a9:4b:49:50:58:8f:85:7f:2c:88:be: b0:58:1e:5f:21:7c:dc:ad:37:90:ab:40:69:58:3a:22:4f:5c: b3:6b:90:a9:f1:b7:53:5f:4c:07:75:d6:b7:c2:95:9b:69:4c: 83:0e:56:e8:10:62:fb:bc:92:b0:41:f3:53:d9:2c:fb:86:b2: 87:c5:ec:b4:fb:fb:5a:84:c4:12:0b:28:61:71:d2:14:52:17: ff:b8:6c:7e:81:09:47:02:37:6d:a3:c9:0c:b8:a9:b2:5a:f7: cf:15:3f:45:ee:74:21:4f:0c:1b:5e:35:67:78:c8:49:ff:0f: 77:d3:e1:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ED5yNfkvA0QVjVIdOe6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTY0OTEwZjkzZGI4NWE4OWVmZGJkMTNmMGQ4YjE0Yzk3ZGM0YTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDemqRpCImdOmHwu81uK1z4WCCTO qL59YDz5r4nH8qrvry8eZQS+CWcT+u0Hcpf4Alo3In/hTjugkju+aMPv9VCsd4oO H+D0JRUtRK0Ie267SJSFpbMbZvjlrwyFUVJ69XAmWfid0eviPmBKR8fQdVd/HpbS yKP3USVGnM6iO9hyWHQ6DuvaFx+m9BDmoKEF+u3ucIJxsAnNGr7GxLIKGw+Acta5 Qb2ugX93juo3EXeNrzHiqOm3HL6gIAaKUKvrm7au/n+2LkPlz90ETsvFxTy0jnUg 3TqVKtiqFSCJUnBUK495pYZ2RDBDQ3EDn/DXKgL4x2i2GkAxNS4Fp7DAGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5kkQ+T24Wonv29E/DYsUyX3Ep3MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvam1TUkQ1UGJoYWllX2IwVDhOaXhUSmZjU25jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i2MA0G CSqGSIb3DQEBCwUAA4IBAQAVTSPKuLMkfNz2baYjbNNh0kNFPtsqol1XGD5kQ5Zj BJG3TaES91/Nzaxxz/KgIe9NXumfFUmMKvAz0ZloNqHA28f6jYA7Za6okJ4uljXB vSKik6Y0PFXvtU1Wqse8Hbf73B+6XJ3f+r3RGnxBE6BG5cMfHxfcCJj/1qF9w41n ykUih1wOqUtJUFiPhX8siL6wWB5fIXzcrTeQq0BpWDoiT1yza5Cp8bdTX0wHdda3 wpWbaUyDDlboEGL7vJKwQfNT2Sz7hrKHxey0+/tahMQSCyhhcdIUUhf/uGx+gQlH Ajdto8kMuKmyWvfPFT9F7nQhTwwbXjVneMhJ/w930+Ga -----END CERTIFICATE-----Generated at Tue Jan 20 12:09:38 2026 by rpki-client