This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/rjFiZX9o3ArJ1rugyyZuxb1sokU.roa File: rjFiZX9o3ArJ1rugyyZuxb1sokU.roa (raw, json) Hash identifier: r4J1TWI4add8GW4SQXIu7FFlCfkE6KASxXoykw82k+A= Subject key identifier: AE:31:62:65:7F:68:DC:0A:C9:D6:BB:A0:CB:26:6E:C5:BD:6C:A2:45 Certificate issuer: /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d Certificate serial: 019B7F153A89CD38E368551CAE0F23124CD9 Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/rjFiZX9o3ArJ1rugyyZuxb1sokU.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6779 IP address blocks: 185.13.48.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3a:89:cd:38:e3:68:55:1c:ae:0f:23:12:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae3162657f68dc0ac9d6bba0cb266ec5bd6ca245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:44:7a:de:a0:73:cb:ad:08:77:3e:2d:c3: 28:34:98:4b:57:9e:15:76:4b:8e:c7:17:20:22:06: 32:ed:d3:60:37:40:4a:6e:1f:a6:99:5e:85:4b:be: 50:9e:e7:02:c2:2a:8a:29:f3:45:be:d8:70:35:2d: 3d:e4:98:36:8b:ce:1b:60:77:b8:50:72:36:6a:79: ea:00:50:ce:2a:57:0c:ef:42:f5:3b:69:3b:b6:41: a3:0f:55:f5:a5:dc:20:9c:6c:c5:6d:61:69:7a:b8: b3:fb:bf:1c:e8:f2:b6:96:da:00:34:b9:f4:a8:ed: 41:ee:7e:52:fd:e3:d1:71:4f:06:a2:1d:ee:8d:c8: ef:8e:41:6f:81:f7:ea:36:50:8a:c8:92:b3:a9:8b: 46:6d:c7:0b:b8:f3:c0:9c:73:24:96:ac:ab:31:d2: a2:0d:1b:ae:96:f1:3c:38:37:49:c2:e7:2d:2d:39: ba:66:37:c8:d0:59:01:b2:be:ea:49:ab:ba:23:15: 31:63:fa:04:de:51:0f:e0:d8:40:36:f0:f2:2f:82: ba:b9:8d:eb:fb:86:f8:76:c5:44:fe:99:1d:6a:89: e1:4f:93:68:6f:1c:7e:52:c6:85:03:89:70:da:b0: 01:bb:36:84:5d:29:2c:ab:7b:1d:22:b0:a3:76:35: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:62:65:7F:68:DC:0A:C9:D6:BB:A0:CB:26:6E:C5:BD:6C:A2:45 X509v3 Authority Key Identifier: keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/rjFiZX9o3ArJ1rugyyZuxb1sokU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.48.0/23 Signature Algorithm: sha256WithRSAEncryption 45:9d:47:c8:7c:12:7e:0c:fe:c8:21:4b:fa:d7:80:5f:bc:4a: b4:f8:b9:c5:a2:5e:f0:e2:05:54:1c:99:7f:40:3b:6a:cc:d8: e2:07:51:96:06:37:fb:8f:b2:72:1a:ba:30:d2:2d:76:24:ee: ef:39:ef:cf:98:40:4f:c1:03:54:ac:c3:99:0c:68:42:46:01: 3d:b7:8e:dc:2b:8f:ee:73:e1:13:b4:eb:3f:37:4e:11:4f:a2: 25:d4:16:63:79:5a:a3:e8:22:56:e2:58:40:aa:f4:77:25:5a: 8a:81:cf:e4:73:fb:5e:da:97:c0:b3:69:cf:c4:5f:7e:0b:42: 8a:bb:2d:f0:2c:df:85:68:f5:60:30:7a:68:a4:55:f3:8f:f2: 39:2f:4b:20:20:4a:00:0c:99:fc:c6:a2:8d:bc:6d:c2:fd:41: c0:e2:98:ad:cd:06:fe:1d:26:68:2d:1a:d3:f3:4e:69:f6:93: 03:56:8d:7c:d1:ca:fb:2a:d8:15:66:48:39:05:a2:fe:28:27: 03:91:70:76:46:72:10:63:0a:3f:24:52:13:cc:58:f2:b5:11: 7f:44:49:05:88:50:a1:cb:57:a4:de:7a:ec:9b:95:5f:a7:41: 31:6c:78:72:e2:0f:d4:8c:65:28:cd:6d:5b:ab:bd:42:cd:23: 85:df:5f:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTqJzTjjaFUcrg8jEkzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTc5ZTIwZmZlZDlmODlkMDdjZWE1OGM0YzQxMDY4MTlj ZTY2MmQwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTMxNjI2NTdmNjhkYzBhYzlkNmJiYTBjYjI2NmVjNWJkNmNhMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S5Eet6gc8utCHc+LcMoNJhLV54V dkuOxxcgIgYy7dNgN0BKbh+mmV6FS75QnucCwiqKKfNFvthwNS095Jg2i84bYHe4 UHI2annqAFDOKlcM70L1O2k7tkGjD1X1pdwgnGzFbWFperiz+78c6PK2ltoANLn0 qO1B7n5S/ePRcU8Goh3ujcjvjkFvgffqNlCKyJKzqYtGbccLuPPAnHMklqyrMdKi DRuulvE8ODdJwuctLTm6ZjfI0FkBsr7qSau6IxUxY/oE3lEP4NhANvDyL4K6uY3r +4b4dsVE/pkdaonhT5Nobxx+UsaFA4lw2rABuzaEXSksq3sdIrCjdjUEQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK4xYmV/aNwKyda7oMsmbsW9bKJFMB8GA1UdIwQY MBaAFMCXniD/7Z+J0HzqWMTEEGgZzmYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMt NWQ0YzlmZWM3Y2UzLzEvcmpGaVpYOW8zQXJKMXJ1Z3l5WnV4YjFzb2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMtNWQ0YzlmZWM3Y2Uz LzEvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQ0wMA0G CSqGSIb3DQEBCwUAA4IBAQBFnUfIfBJ+DP7IIUv614BfvEq0+LnFol7w4gVUHJl/ QDtqzNjiB1GWBjf7j7JyGrow0i12JO7vOe/PmEBPwQNUrMOZDGhCRgE9t47cK4/u c+ETtOs/N04RT6Il1BZjeVqj6CJW4lhAqvR3JVqKgc/kc/te2pfAs2nPxF9+C0KK uy3wLN+FaPVgMHpopFXzj/I5L0sgIEoADJn8xqKNvG3C/UHA4pitzQb+HSZoLRrT 805p9pMDVo180cr7KtgVZkg5BaL+KCcDkXB2RnIQYwo/JFITzFjytRF/REkFiFCh y1ek3nrsm5Vfp0ExbHhy4g/UjGUozW1bq71CzSOF3190 -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:40 2026 by rpki-client