This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/JfzkG74hCuXipueYiQnJYRqjhXc.roa File: JfzkG74hCuXipueYiQnJYRqjhXc.roa (raw, json) Hash identifier: /UjZLGM2bizX+MblKNId48l/mey7CKbKk+KDmswLAkY= Subject key identifier: 25:FC:E4:1B:BE:21:0A:E5:E2:A6:E7:98:89:09:C9:61:1A:A3:85:77 Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f Certificate serial: 019B7C135721DC01C5E3CB80C7F528FF7910 Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/JfzkG74hCuXipueYiQnJYRqjhXc.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215081 IP address blocks: 94.154.8.0/24 maxlen: 24 178.211.157.0/24 maxlen: 24 185.234.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:21:dc:01:c5:e3:cb:80:c7:f5:28:ff:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25fce41bbe210ae5e2a6e7988909c9611aa38577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:b0:f6:03:97:15:1c:01:b5:3b:38:49:7b: 0b:5a:af:59:cf:9f:7a:76:1b:53:5c:3a:25:0f:d2: b2:a3:e3:b2:19:f7:37:d9:7a:7b:71:7f:94:32:9b: bc:35:ce:13:8b:8e:bd:44:eb:d6:00:e8:20:59:02: 8c:8b:cc:0f:5a:7b:88:00:2e:4c:d5:50:4c:76:5e: 6a:a5:be:1c:68:36:23:e2:8d:5c:a4:ae:dd:da:1f: f9:fe:83:02:5e:79:cd:ed:d4:2a:d1:70:b0:21:21: da:92:d1:92:dd:63:d1:65:d8:05:2d:be:c3:4d:42: 20:62:50:66:c5:2a:02:57:20:f5:58:16:71:a7:92: 07:00:94:93:78:ec:83:ca:81:fa:81:42:8a:54:1a: e3:5a:79:06:9a:ac:59:a9:d0:ed:84:f1:1e:78:23: e3:f9:4a:89:99:d9:20:54:a5:f6:14:d9:44:c4:b4: 09:a3:9d:11:17:53:ac:6c:14:cb:12:19:19:85:01: 87:93:01:65:1c:5d:d4:cf:2b:03:2e:38:02:5f:33: 31:ea:5e:e3:78:2d:a6:25:3e:07:48:25:3c:b3:5e: fd:6e:37:4a:fd:54:2a:63:9f:86:6a:69:2b:60:04: af:48:40:8e:7e:e8:03:1e:d2:c0:be:b4:b7:e5:77: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:E4:1B:BE:21:0A:E5:E2:A6:E7:98:89:09:C9:61:1A:A3:85:77 X509v3 Authority Key Identifier: keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/JfzkG74hCuXipueYiQnJYRqjhXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.8.0/24 178.211.157.0/24 185.234.115.0/24 Signature Algorithm: sha256WithRSAEncryption 60:7d:99:63:3e:f7:45:0a:29:36:0d:2f:bb:47:04:b0:86:5d: a8:c1:bd:a0:0f:d0:8b:60:9f:54:db:37:27:5c:50:f3:c4:1c: 6a:63:81:85:77:5b:00:11:f5:e8:92:45:0d:0b:64:37:f1:3c: f6:48:6d:ad:76:7b:99:de:a2:e7:2b:bd:c2:21:01:21:bf:26: f8:65:66:46:07:1f:f1:ba:25:a9:2f:48:9a:b2:5d:80:2a:4d: 68:e6:f4:97:26:86:a0:38:21:32:ae:ca:8e:f9:87:39:85:be: a8:30:bc:ee:0c:a8:16:60:14:08:77:a1:3b:33:a9:77:eb:71: 01:5b:4c:83:53:71:46:17:48:37:09:a5:aa:9a:67:41:3d:96: b3:32:63:1a:f3:7f:26:95:f6:fe:84:fa:d2:b7:fd:89:80:3e: 3f:9e:0f:09:38:73:fa:4a:08:2c:79:30:87:5d:3a:95:fb:e0: 5b:61:15:94:c7:f6:a8:3c:0c:14:20:7c:f1:ef:3a:ef:62:e4: bb:2b:59:00:cd:35:50:d2:b3:10:21:84:94:fa:a3:ba:ea:cc: ce:ed:c5:15:33:b2:8a:a2:bb:48:f9:57:18:82:ef:2e:e0:df: 8d:49:a6:f8:58:ca:7f:b4:60:24:cf:97:af:aa:69:cf:8c:79: a9:20:8d:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E1ch3AHF48uAx/Uo/3kQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3 NGJmMWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZjZTQxYmJlMjEwYWU1ZTJhNmU3OTg4OTA5Yzk2MTFhYTM4NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgKw9gOXFRwBtTs4SXsLWq9Zz596 dhtTXDolD9Kyo+OyGfc32Xp7cX+UMpu8Nc4Ti469ROvWAOggWQKMi8wPWnuIAC5M 1VBMdl5qpb4caDYj4o1cpK7d2h/5/oMCXnnN7dQq0XCwISHaktGS3WPRZdgFLb7D TUIgYlBmxSoCVyD1WBZxp5IHAJSTeOyDyoH6gUKKVBrjWnkGmqxZqdDthPEeeCPj +UqJmdkgVKX2FNlExLQJo50RF1OsbBTLEhkZhQGHkwFlHF3UzysDLjgCXzMx6l7j eC2mJT4HSCU8s179bjdK/VQqY5+GamkrYASvSECOfugDHtLAvrS35Xd8+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCX85Bu+IQrl4qbnmIkJyWEao4V3MB8GA1UdIwQY MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt ZTQ3MzUzMWY2ZmU4LzEvSmZ6a0c3NGhDdVhpcHVlWWlRbkpZUnFqaFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4 LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXpoIAwQA stOdAwQAuepzMA0GCSqGSIb3DQEBCwUAA4IBAQBgfZljPvdFCik2DS+7RwSwhl2o wb2gD9CLYJ9U2zcnXFDzxBxqY4GFd1sAEfXokkUNC2Q38Tz2SG2tdnuZ3qLnK73C IQEhvyb4ZWZGBx/xuiWpL0iasl2AKk1o5vSXJoagOCEyrsqO+Yc5hb6oMLzuDKgW YBQId6E7M6l363EBW0yDU3FGF0g3CaWqmmdBPZazMmMa838mlfb+hPrSt/2JgD4/ ng8JOHP6SggseTCHXTqV++BbYRWUx/aoPAwUIHzx7zrvYuS7K1kAzTVQ0rMQIYSU +qO66szO7cUVM7KKortI+VcYgu8u4N+NSab4WMp/tGAkz5evqmnPjHmpII3F -----END CERTIFICATE-----Generated at Fri Jan 9 19:42:30 2026 by rpki-client