This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/jczQ46bhJ-baFzt6CdYsHNkjf2o.roa File: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (raw, json) Hash identifier: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg= Subject key identifier: 8D:CC:D0:E3:A6:E1:27:E6:DA:17:3B:7A:09:D6:2C:1C:D9:23:7F:6A Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2 Certificate serial: 019B7D5C0158A8EB239E7A96E2F55715731A Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/jczQ46bhJ-baFzt6CdYsHNkjf2o.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.53.60.0/24 maxlen: 24 185.53.61.0/24 maxlen: 24 185.53.62.0/24 maxlen: 24 185.53.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:01:58:a8:eb:23:9e:7a:96:e2:f5:57:15:73:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2 Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dccd0e3a6e127e6da173b7a09d62c1cd9237f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:16:e5:a7:84:d1:db:01:fd:bc:fc:cc:c1: 62:11:b3:26:b4:de:cd:28:08:30:48:70:17:23:e5: 0a:cc:94:2a:10:85:28:8d:15:45:25:9f:83:ce:da: b0:84:fd:1a:d4:d9:0c:f3:dc:42:33:ba:40:d1:d6: f6:e2:44:d8:84:2e:54:3f:d9:63:1c:40:2a:d8:ff: 71:95:5a:21:a4:8e:a6:10:34:dd:1e:69:f7:d4:67: a3:df:ab:ed:f8:e9:db:a9:52:bb:33:b4:8a:cb:16: c6:e9:c6:05:9d:42:1a:16:21:17:d5:34:8e:1b:4f: f3:5b:ba:06:77:12:86:ca:47:9c:22:48:f4:24:05: 4e:f4:6e:a2:52:9d:ef:5a:4a:c8:28:11:a8:75:b4: 5f:16:af:a0:0e:b1:65:b4:6b:73:d5:e3:74:29:16: 44:15:89:67:21:93:62:1b:86:bc:74:e6:90:21:e8: 4e:1a:0e:57:81:cc:2b:a6:98:c4:16:6e:67:1f:a6: e9:22:b3:81:a3:18:42:b4:aa:17:dd:48:82:ba:6d: 92:b0:5b:e3:95:8d:e6:e9:18:fb:ba:86:ea:73:9e: fd:9d:7a:f1:06:58:80:c1:0f:d6:19:df:72:7d:a5: 5d:7e:1e:f1:ba:ea:cd:7c:8f:ee:c1:97:b0:61:95: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CC:D0:E3:A6:E1:27:E6:DA:17:3B:7A:09:D6:2C:1C:D9:23:7F:6A X509v3 Authority Key Identifier: keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/jczQ46bhJ-baFzt6CdYsHNkjf2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.60.0/22 Signature Algorithm: sha256WithRSAEncryption 93:55:2e:0d:4c:ef:fe:53:55:c9:cd:34:b6:fc:d0:6b:9d:2d: b3:e1:66:38:ea:66:1e:04:88:e4:18:60:b8:0d:03:e0:73:17: 43:d0:29:02:be:25:5a:e3:0f:49:7c:05:bf:dc:ab:6e:28:5b: 4e:45:cd:a1:a0:87:56:f4:6f:f4:7c:a7:2f:86:31:4d:f3:e9: 57:c0:ab:72:3a:66:8d:8a:11:50:1f:8d:a8:57:b2:94:8f:bb: d5:6b:46:d9:06:fd:2c:8a:71:0a:d7:7e:49:60:ea:16:c3:36: 99:d2:f3:5c:33:fe:d2:15:56:66:f6:75:87:8b:78:94:3c:9c: 05:5a:2a:66:b9:a9:e2:79:57:bf:72:e9:27:93:60:96:91:81: cd:71:f2:bc:a8:e8:09:07:fa:97:92:ec:9e:fe:57:fc:f4:ad: 34:00:f8:7e:ed:7a:10:a0:48:24:90:48:85:7b:f8:51:78:0d: 23:25:42:50:29:cf:c3:6b:8f:87:3d:9b:e3:8b:53:07:38:98: 62:86:b3:95:2c:50:d1:7f:1b:cc:d9:3c:cf:84:cc:dc:31:61: c0:4a:42:17:20:0e:41:98:ba:9b:7f:c1:57:3d:c0:b9:1a:a7: 60:a6:c5:2b:78:10:11:47:90:ab:89:4d:65:0d:04:48:47:e5: 67:7d:12:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAFYqOsjnnqW4vVXFXMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy MjE0YjIwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGNjZDBlM2E2ZTEyN2U2ZGExNzNiN2EwOWQ2MmMxY2Q5MjM3ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPYW5aeE0dsB/bz8zMFiEbMmtN7N KAgwSHAXI+UKzJQqEIUojRVFJZ+DztqwhP0a1NkM89xCM7pA0db24kTYhC5UP9lj HEAq2P9xlVohpI6mEDTdHmn31Gej36vt+OnbqVK7M7SKyxbG6cYFnUIaFiEX1TSO G0/zW7oGdxKGykecIkj0JAVO9G6iUp3vWkrIKBGodbRfFq+gDrFltGtz1eN0KRZE FYlnIZNiG4a8dOaQIehOGg5XgcwrppjEFm5nH6bpIrOBoxhCtKoX3UiCum2SsFvj lY3m6Rj7uobqc579nXrxBliAwQ/WGd9yfaVdfh7xuurNfI/uwZewYZX+MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI3M0OOm4Sfm2hc7egnWLBzZI39qMB8GA1UdIwQY MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt ZmQ5OGZkNzBmMzRmLzEvamN6UTQ2YmhKLWJhRnp0NkNkWXNITmtqZjJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTU8MA0G CSqGSIb3DQEBCwUAA4IBAQCTVS4NTO/+U1XJzTS2/NBrnS2z4WY46mYeBIjkGGC4 DQPgcxdD0CkCviVa4w9JfAW/3KtuKFtORc2hoIdW9G/0fKcvhjFN8+lXwKtyOmaN ihFQH42oV7KUj7vVa0bZBv0sinEK135JYOoWwzaZ0vNcM/7SFVZm9nWHi3iUPJwF WipmuanieVe/cuknk2CWkYHNcfK8qOgJB/qXkuye/lf89K00APh+7XoQoEgkkEiF e/hReA0jJUJQKc/Da4+HPZvji1MHOJhihrOVLFDRfxvM2TzPhMzcMWHASkIXIA5B mLqbf8FXPcC5GqdgpsUreBARR5CriU1lDQRIR+VnfRIw -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:52 2026 by rpki-client