This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/jqrp4A2XhAiKpWgKz5AERQNPI2k.roa File: jqrp4A2XhAiKpWgKz5AERQNPI2k.roa (raw, json) Hash identifier: W7kzwYJcoOuticaS4HLbtKGL58iB45UYEoKBlIElr8o= Subject key identifier: 8E:AA:E9:E0:0D:97:84:08:8A:A5:68:0A:CF:90:04:45:03:4F:23:69 Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e Certificate serial: 019B7A5ADCDB5D6F5F7D1DF04979FA73E125 Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/jqrp4A2XhAiKpWgKz5AERQNPI2k.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35492 IP address blocks: 78.41.112.0/21 maxlen: 21 185.194.20.0/22 maxlen: 22 193.238.156.0/22 maxlen: 22 2a02:60::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:dc:db:5d:6f:5f:7d:1d:f0:49:79:fa:73:e1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eaae9e00d9784088aa5680acf900445034f2369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:1f:ee:c5:dd:44:9b:d3:53:4f:0a:a0:94: 3f:72:18:36:02:18:22:c4:1c:e8:71:20:04:10:7f: 01:57:1f:33:b5:ad:9b:4e:e4:46:71:18:aa:de:eb: 6b:5d:ff:c1:20:7b:e8:27:e7:02:4c:3a:64:93:a4: e2:1e:c2:a3:a9:b3:06:a3:66:d5:ca:62:c4:db:e9: 43:23:83:d5:3f:b2:9a:ad:18:0b:ec:51:21:a8:c4: 84:ee:d1:8f:46:c5:09:25:5d:53:57:ea:4d:74:8b: 72:87:4e:79:8e:0e:bd:b7:b5:85:46:ee:18:0a:dc: aa:1d:f7:db:d4:40:c6:7c:c1:39:a8:eb:22:cb:87: 96:22:10:0a:74:d6:3b:af:77:f5:53:fe:28:fd:1f: 73:2b:4e:17:60:9a:fc:b9:22:4b:c4:05:9d:f5:ec: 6e:5f:73:3a:b3:af:fd:57:2f:75:a1:8b:19:bd:7a: 58:69:bf:72:83:b3:5f:46:30:44:ff:53:38:8f:93: af:eb:49:84:27:8d:cf:3f:a4:02:8d:e7:40:59:a0: b5:ab:a8:e8:fe:1d:8b:67:4f:b7:3c:95:b9:3a:4a: b9:3b:d9:ee:a8:ff:74:5b:38:91:c3:da:d2:9a:b2: 6c:df:d4:01:e1:e7:51:a8:1a:af:76:b9:6a:25:d7: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AA:E9:E0:0D:97:84:08:8A:A5:68:0A:CF:90:04:45:03:4F:23:69 X509v3 Authority Key Identifier: keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/jqrp4A2XhAiKpWgKz5AERQNPI2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.112.0/21 185.194.20.0/22 193.238.156.0/22 IPv6: 2a02:60::/29 Signature Algorithm: sha256WithRSAEncryption 88:4e:41:4a:04:2e:f9:df:dd:78:35:7b:da:94:9c:c6:2b:10: 51:93:22:91:d6:a7:d7:3b:0b:9f:8c:88:f4:b6:91:fa:86:42: 66:a6:f3:8d:a2:63:93:ae:ea:b2:5f:4e:ba:52:72:47:28:76: 3e:11:7b:78:6d:66:e5:f1:1e:e2:b8:82:a7:cc:98:72:ff:04: a4:3a:63:8e:f0:5f:f3:bd:89:c1:e0:1e:77:77:d7:1e:fc:a6: 68:c4:de:3d:b4:bb:bc:1c:6f:61:7f:69:3a:57:49:7f:1a:93: 2e:32:b7:d5:35:d4:37:a9:9d:de:a8:52:1a:f8:b6:71:e8:3b: 1d:d4:0c:33:04:a0:10:22:e9:de:a0:f6:53:9d:48:20:89:eb: 7c:d6:a5:c4:ed:7a:ad:00:7a:5f:0f:7e:de:85:1e:72:fe:30: ee:f3:07:af:1d:51:12:0b:8f:81:c0:2e:6b:fb:19:22:1c:a5: c0:d6:79:6a:c5:cc:b8:a8:8c:7d:3b:c8:2e:1b:f3:fc:d8:5e: b9:2a:4d:eb:f9:40:1c:68:9c:6b:75:36:70:63:15:b3:97:87: 34:fd:26:8b:3c:41:d6:e8:8d:95:eb:23:b3:37:45:44:3c:29: 42:4e:8d:22:45:ab:03:ad:27:c9:07:30:c4:70:84:ca:5e:4c: 52:67:3d:50 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WtzbXW9ffR3wSXn6c+ElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzBmMWY2NTYzZGU0M2ExMWQzNjQ0OTc1NjY3YzFjMjhl Nzk1OWUwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWFhZTllMDBkOTc4NDA4OGFhNTY4MGFjZjkwMDQ0NTAzNGYyMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIAf7sXdRJvTU08KoJQ/chg2Ahgi xBzocSAEEH8BVx8zta2bTuRGcRiq3utrXf/BIHvoJ+cCTDpkk6TiHsKjqbMGo2bV ymLE2+lDI4PVP7KarRgL7FEhqMSE7tGPRsUJJV1TV+pNdItyh055jg69t7WFRu4Y CtyqHffb1EDGfME5qOsiy4eWIhAKdNY7r3f1U/4o/R9zK04XYJr8uSJLxAWd9exu X3M6s6/9Vy91oYsZvXpYab9yg7NfRjBE/1M4j5Ov60mEJ43PP6QCjedAWaC1q6jo /h2LZ0+3PJW5Okq5O9nuqP90WziRw9rSmrJs39QB4edRqBqvdrlqJddG2QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFI6q6eANl4QIiqVoCs+QBEUDTyNpMB8GA1UdIwQY MBaAFD1w8fZWPeQ6EdNkSXVmfBwo55WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQt OGQzMjIyMDcxNWVlLzEvanFycDRBMlhoQWlLcFdnS3o1QUVSUU5QSTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQtOGQzMjIyMDcxNWVl LzEvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTilwAwQC ucIUAwQCwe6cMA0EAgACMAcDBQMqAgBgMA0GCSqGSIb3DQEBCwUAA4IBAQCITkFK BC753914NXvalJzGKxBRkyKR1qfXOwufjIj0tpH6hkJmpvONomOTruqyX066UnJH KHY+EXt4bWbl8R7iuIKnzJhy/wSkOmOO8F/zvYnB4B53d9ce/KZoxN49tLu8HG9h f2k6V0l/GpMuMrfVNdQ3qZ3eqFIa+LZx6Dsd1AwzBKAQIuneoPZTnUggiet81qXE 7XqtAHpfD37ehR5y/jDu8wevHVESC4+BwC5r+xkiHKXA1nlqxcy4qIx9O8guG/P8 2F65Kk3r+UAcaJxrdTZwYxWzl4c0/SaLPEHW6I2V6yOzN0VEPClCTo0iRasDrSfJ BzDEcITKXkxSZz1Q -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:03 2026 by rpki-client