This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JmRgYa21B6cMnCug8uGhasnQcYs.roa File: JmRgYa21B6cMnCug8uGhasnQcYs.roa (raw, json) Hash identifier: O6dpGHx1tUkZrfi4B4XE25qCbl9f6Zicmws71NjkXTM= Subject key identifier: 26:64:60:61:AD:B5:07:A7:0C:9C:2B:A0:F2:E1:A1:6A:C9:D0:71:8B Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B8A09D19B0FDFFBD6891BB4A2D19FA48F Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JmRgYa21B6cMnCug8uGhasnQcYs.roa Signing time: Sun 04 Jan 2026 17:24:17 +0000 ROA not before: Sun 04 Jan 2026 17:24:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.197.135.0/24 maxlen: 24 2a06:e881:7340::/42 maxlen: 48 2a06:e881:73ff::/48 maxlen: 48 2a06:e881:9200::/45 maxlen: 48 2a06:e881:9600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:09:d1:9b:0f:df:fb:d6:89:1b:b4:a2:d1:9f:a4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 4 17:24:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26646061adb507a70c9c2ba0f2e1a16ac9d0718b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:9e:21:06:b5:d8:ec:cf:0b:ae:7d:0d:54:01: 3e:2b:d8:fd:55:67:00:bd:25:41:ef:1c:c3:35:b0: d2:46:e0:59:18:f2:19:d7:db:fe:3b:19:06:06:88: ef:a8:5f:15:e8:35:89:11:68:21:e2:b1:fb:8f:aa: 61:da:91:bf:4f:9d:d5:fd:67:46:ee:c3:3b:b2:36: cf:84:37:9c:4b:b7:66:7e:a8:34:0a:1b:e1:b2:ce: e6:63:96:c9:23:f3:f5:00:d1:3a:9d:4b:5c:12:cc: 3f:eb:7a:94:9b:8a:24:9e:0b:c9:ca:0b:1c:51:9d: 2b:5d:a2:f6:f7:92:98:6a:4a:0c:23:c0:6b:df:be: ed:72:4b:b6:5a:15:85:d1:7d:30:b5:8b:4e:ea:a9: ea:ec:dd:fa:df:24:0a:74:f1:82:c1:1c:fc:a6:f8: db:0e:4c:5c:fc:36:91:13:61:27:b7:e4:44:f0:5a: e2:a9:2b:7a:ca:03:24:d6:32:0b:2e:8d:ab:99:8b: 48:3b:b8:5a:7e:7a:2c:5b:4e:54:b6:ad:01:b7:be: 0c:30:59:c4:d8:de:9f:7a:7f:e3:87:78:8e:c2:1d: 4a:cf:d0:2c:8d:de:ed:3b:73:bc:49:3c:de:98:1e: 4d:40:19:ee:07:75:9a:e7:6a:66:bd:1b:13:71:36: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:60:61:AD:B5:07:A7:0C:9C:2B:A0:F2:E1:A1:6A:C9:D0:71:8B X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JmRgYa21B6cMnCug8uGhasnQcYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.135.0/24 IPv6: 2a06:e881:7340::/42 2a06:e881:73ff::/48 2a06:e881:9200::/45 2a06:e881:9600::/48 Signature Algorithm: sha256WithRSAEncryption ba:63:0b:32:8d:aa:c5:21:da:e6:36:1a:43:7b:79:96:17:82: b1:df:cf:1b:6e:4d:57:64:db:6e:2c:0d:71:6e:20:ca:dc:a5: ec:3a:3d:72:e6:a9:0d:46:ef:48:7e:7d:fd:75:67:fb:86:1b: 42:29:aa:40:9b:99:45:98:4d:68:ac:a9:f2:c9:1e:28:bf:8d: 91:f1:4c:da:35:2d:8b:79:9d:cc:e8:06:a9:13:36:b6:a3:c6: 2d:39:88:f1:1f:7a:07:78:49:9e:a1:89:99:84:4c:19:e5:bd: 35:2f:f4:c6:cc:f2:b8:a0:2e:82:1c:66:b0:ae:0e:73:d3:5b: 1e:53:71:45:3c:17:46:b4:06:67:03:c0:37:3c:3c:61:b5:05: 57:1b:49:f5:b1:97:4b:d4:77:f6:23:df:20:7d:97:91:53:8a: 8f:e1:c4:41:e8:0d:2f:db:3c:9b:25:c9:ce:8a:37:c4:c3:94: 9f:59:34:c5:3e:68:39:6e:4c:e2:74:75:d0:02:b6:ea:44:af: 4e:83:c3:eb:b0:ee:36:95:b4:2f:da:8b:ab:94:6e:15:50:e7: d0:1f:ef:2f:00:70:05:2b:4f:10:41:c9:da:f5:de:e6:90:b6: af:bb:1e:c0:6a:79:92:e2:30:01:26:fc:a9:24:a4:6b:f2:ee: b2:10:0d:af -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZuKCdGbD9/71okbtKLRn6SPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTA0MTcyNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjY0NjA2MWFkYjUwN2E3MGM5YzJiYTBmMmUxYTE2YWM5ZDA3MThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Z4hBrXY7M8Lrn0NVAE+K9j9VWcA vSVB7xzDNbDSRuBZGPIZ19v+OxkGBojvqF8V6DWJEWgh4rH7j6ph2pG/T53V/WdG 7sM7sjbPhDecS7dmfqg0Chvhss7mY5bJI/P1ANE6nUtcEsw/63qUm4okngvJygsc UZ0rXaL295KYakoMI8Br377tcku2WhWF0X0wtYtO6qnq7N363yQKdPGCwRz8pvjb Dkxc/DaRE2Ent+RE8FriqSt6ygMk1jILLo2rmYtIO7hafnosW05Utq0Bt74MMFnE 2N6fen/jh3iOwh1Kz9Asjd7tO3O8STzemB5NQBnuB3Wa52pmvRsTcTZRXwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFCZkYGGttQenDJwroPLhoWrJ0HGLMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvSm1SZ1lhMjFCNmNNbkN1Zzh1R2hhc25RY1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAucWHMCoE AgACMCQDBwYqBuiBc0ADBwAqBuiBc/8DBwMqBuiBkgADBwAqBuiBlgAwDQYJKoZI hvcNAQELBQADggEBALpjCzKNqsUh2uY2GkN7eZYXgrHfzxtuTVdk224sDXFuIMrc pew6PXLmqQ1G70h+ff11Z/uGG0IpqkCbmUWYTWisqfLJHii/jZHxTNo1LYt5nczo BqkTNrajxi05iPEfegd4SZ6hiZmETBnlvTUv9MbM8rigLoIcZrCuDnPTWx5TcUU8 F0a0BmcDwDc8PGG1BVcbSfWxl0vUd/Yj3yB9l5FTio/hxEHoDS/bPJslyc6KN8TD lJ9ZNMU+aDluTOJ0ddACtupEr06Dw+uw7jaVtC/ai6uUbhVQ59Af7y8AcAUrTxBB ydr13uaQtq+7HsBqeZLiMAEm/KkkpGvy7rIQDa8= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:32 2026 by rpki-client