This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/jBWcdrxGs1WBnTMg4supmnaZvqw.roa File: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (raw, json) Hash identifier: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY= Subject key identifier: 8C:15:9C:76:BC:46:B3:55:81:9D:33:20:E2:CB:A9:9A:76:99:BE:AC Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758C9EB7761A9857EBFA2BF2DB3C444 Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/jBWcdrxGs1WBnTMg4supmnaZvqw.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 185.231.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c9:eb:77:61:a9:85:7e:bf:a2:bf:2d:b3:c4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c159c76bc46b355819d3320e2cba99a7699beac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:1f:62:2e:f2:bf:f3:13:48:89:a9:2c:70: 66:41:88:c7:28:e5:df:ec:0c:8e:0d:a1:5c:6a:a7: ff:d8:29:02:b2:74:a4:c6:1e:d4:40:d4:26:ae:44: df:76:4a:ea:25:70:e6:7f:21:a2:4a:6a:be:bf:f6: 10:c2:fb:6e:4a:9f:85:fc:89:58:5d:60:ce:87:2c: 3d:5f:15:43:2a:e2:86:dd:ad:ac:90:d3:ca:3a:a7: a7:dc:97:0e:e2:3f:3b:aa:2f:b4:43:c2:be:46:83: 79:ac:a1:ac:76:88:94:74:22:96:db:ed:34:8c:d2: c0:38:cd:26:b9:f9:38:b9:9f:cb:a3:31:28:6e:fb: bb:3f:1c:1e:37:93:1b:23:cc:5c:aa:12:d1:88:e1: ff:28:dc:bb:8d:e5:3d:b4:24:46:d7:30:30:1f:d9: b2:87:73:3b:34:3e:08:4d:57:ba:ea:85:88:1c:ab: 8e:c3:17:2f:d9:c3:cf:05:93:fe:cd:b5:ff:64:1b: e9:89:a5:1f:9d:7c:e8:27:49:4a:45:db:ae:7f:c1: 6d:ef:e4:5b:29:cd:a5:5c:b1:69:dd:ec:87:5c:ee: f5:b2:db:74:0b:fc:1a:f1:52:a6:85:82:aa:ad:ae: 7b:ce:83:10:9e:8b:ec:e4:39:c8:ba:5f:60:5f:00: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:15:9C:76:BC:46:B3:55:81:9D:33:20:E2:CB:A9:9A:76:99:BE:AC X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/jBWcdrxGs1WBnTMg4supmnaZvqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.220.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:68:59:66:f6:38:ff:b8:76:3b:82:60:3a:0e:67:e4:81:5f: 14:67:03:34:1b:2f:2b:1b:77:8a:b6:93:20:bc:97:d2:7a:58: 59:6a:2a:2a:4a:65:f5:57:f9:39:84:86:05:c0:7b:f4:1c:8f: cb:cb:92:5d:fe:e7:cb:a7:09:58:83:f7:12:5b:83:54:ad:aa: 68:eb:a4:14:32:49:de:ea:b3:42:a6:5e:2c:0f:ab:16:ba:45: 32:5c:54:ad:3d:ab:eb:be:ae:f7:74:d6:aa:23:e6:62:88:1f: c6:1a:63:e6:46:74:80:1a:4e:08:93:7f:2e:d9:42:db:da:14: c7:cf:61:29:ca:12:41:a0:4a:d1:3b:98:eb:42:17:ae:d2:e5: 7a:d6:d0:bd:7d:56:a4:a0:d1:82:0d:c9:e4:55:9e:2b:b6:26: 79:39:84:9d:a8:c5:b6:7c:4f:41:57:49:9f:63:ae:70:1c:97: ef:69:04:90:4d:1c:3d:a5:2e:da:54:de:3f:9e:79:f3:21:89: f2:3c:b9:81:85:58:60:65:13:05:12:4c:f3:00:38:09:2d:3c: 93:82:0c:84:ea:c9:aa:ca:eb:6c:a0:52:32:df:79:5c:e5:32: f0:94:28:0a:a0:63:95:d1:b0:f8:61:35:e9:ba:06:79:0c:f0: 18:27:b8:aa -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMnrd2GphX6/or8ts8REMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzE1OWM3NmJjNDZiMzU1ODE5ZDMzMjBlMmNiYTk5YTc2OTliZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLYfYi7yv/MTSImpLHBmQYjHKOXf 7AyODaFcaqf/2CkCsnSkxh7UQNQmrkTfdkrqJXDmfyGiSmq+v/YQwvtuSp+F/IlY XWDOhyw9XxVDKuKG3a2skNPKOqen3JcO4j87qi+0Q8K+RoN5rKGsdoiUdCKW2+00 jNLAOM0mufk4uZ/LozEobvu7PxweN5MbI8xcqhLRiOH/KNy7jeU9tCRG1zAwH9my h3M7ND4ITVe66oWIHKuOwxcv2cPPBZP+zbX/ZBvpiaUfnXzoJ0lKRduuf8Ft7+Rb Kc2lXLFp3eyHXO71stt0C/wa8VKmhYKqra57zoMQnovs5DnIul9gXwC10wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIwVnHa8RrNVgZ0zIOLLqZp2mb6sMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL2pCV2NkcnhHczFXQm5UTWc0c3VwbW5hWnZxdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC559ww DQYJKoZIhvcNAQELBQADggEBAIpoWWb2OP+4djuCYDoOZ+SBXxRnAzQbLysbd4q2 kyC8l9J6WFlqKipKZfVX+TmEhgXAe/Qcj8vLkl3+58unCViD9xJbg1StqmjrpBQy Sd7qs0KmXiwPqxa6RTJcVK09q+u+rvd01qoj5mKIH8YaY+ZGdIAaTgiTfy7ZQtva FMfPYSnKEkGgStE7mOtCF67S5XrW0L19VqSg0YINyeRVniu2Jnk5hJ2oxbZ8T0FX SZ9jrnAcl+9pBJBNHD2lLtpU3j+eefMhifI8uYGFWGBlEwUSTPMAOAktPJOCDITq yarK62ygUjLfeVzlMvCUKAqgY5XRsPhhNem6BnkM8BgnuKo= -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:05 2026 by rpki-client