This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa File: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (raw, json) Hash identifier: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI= Subject key identifier: 8D:41:C8:6E:A7:EA:F3:2A:C6:28:25:19:DC:AF:E6:45:DC:B6:F0:E0 Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Certificate serial: 019B7F136C5FC3A7636DB2C20E5D56B207C9 Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa Signing time: Fri 02 Jan 2026 14:18:57 +0000 ROA not before: Fri 02 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.233.61.0/24 maxlen: 24 185.179.176.0/24 maxlen: 24 213.5.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6c:5f:c3:a7:63:6d:b2:c2:0e:5d:56:b2:07:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Validity Not Before: Jan 2 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d41c86ea7eaf32ac6282519dcafe645dcb6f0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:cd:06:c1:aa:6e:41:01:98:c1:13:73:c0: 1d:28:10:7e:a2:a6:34:26:cc:6b:f6:3f:f0:df:db: 93:2f:2c:1b:20:b3:60:fd:93:2e:eb:b4:78:9f:f2: 3b:5d:90:5c:e6:f9:64:64:eb:42:38:dc:cf:eb:bf: 3b:e6:63:2e:2b:76:25:23:ed:cf:87:90:84:99:4d: 74:2c:bc:8c:bd:46:34:33:15:d0:4d:0b:1c:0f:c3: 81:cf:5a:88:59:47:01:43:c0:da:b8:f1:c6:9f:b2: 4b:59:71:2d:ec:74:ad:09:89:d1:87:c3:56:41:a8: b5:5f:c8:19:2a:ba:6b:3a:55:68:99:47:72:f2:1d: 2e:d8:a2:18:0c:79:77:b0:3d:11:9c:61:7d:ba:78: 53:22:bf:81:7c:72:22:a8:11:6d:8a:69:0c:3d:e8: 1d:bc:64:be:61:12:95:f3:bd:e6:d2:b8:8e:23:8f: 75:49:03:17:dd:61:b6:5c:a0:ba:10:a5:4a:28:3d: 30:f5:bb:b4:54:fc:85:6c:3b:a2:05:55:25:ca:0e: 26:a0:49:50:36:87:6b:19:00:37:f5:e0:e7:f0:c8: a1:7e:b3:dc:81:c4:54:50:27:33:08:5d:4c:0c:e2: 55:41:06:c6:60:b3:d4:4d:d6:1f:c5:00:e5:de:16: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:C8:6E:A7:EA:F3:2A:C6:28:25:19:DC:AF:E6:45:DC:B6:F0:E0 X509v3 Authority Key Identifier: keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.61.0/24 185.179.176.0/24 213.5.226.0/24 Signature Algorithm: sha256WithRSAEncryption 41:62:c0:ce:91:6d:a2:50:6e:41:88:45:c1:f3:d5:f6:ba:ab: 2b:f2:94:18:36:ec:f7:42:14:d0:e9:20:e9:d8:ec:60:c5:ca: 2a:8d:26:c2:6f:e7:f1:5b:3a:17:9a:3f:d0:46:2f:09:fa:4a: 9b:0e:bc:d8:53:fa:b2:0d:97:72:33:1f:0a:1f:d0:e5:bd:e8: f4:f4:37:75:19:63:ce:1a:b6:63:bd:2b:92:d7:21:33:e6:13: 6d:68:ef:12:01:27:16:25:73:f4:a9:54:86:16:a8:59:23:c4: c2:22:aa:5b:29:01:67:84:9f:0d:2f:b9:54:2d:c9:b0:2d:bf: 8c:c1:71:ef:a8:af:75:c0:de:89:ff:89:be:4d:af:b8:da:79: fb:5a:bc:a4:19:c7:89:33:df:64:92:50:9a:45:52:f5:86:8d: 45:c4:93:71:91:e6:18:d1:ce:80:0e:68:0e:f9:8b:55:f3:b7: 6a:f5:94:90:dd:35:8b:f8:23:2d:88:4a:57:ff:06:ab:51:22: 59:d2:4b:49:39:44:13:c4:99:89:48:66:9a:d4:5f:5e:f3:8a: 5b:75:dc:83:22:8d:fb:7d:58:55:96:c4:8b:84:3d:f8:df:e3: 1e:2d:9d:f2:a0:bd:4c:12:56:19:b5:70:f3:87:aa:92:1f:d2: f8:75:91:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E2xfw6djbbLCDl1WsgfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz YmUyNjcwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQxYzg2ZWE3ZWFmMzJhYzYyODI1MTlkY2FmZTY0NWRjYjZmMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLNBsGqbkEBmMETc8AdKBB+oqY0 Jsxr9j/w39uTLywbILNg/ZMu67R4n/I7XZBc5vlkZOtCONzP67875mMuK3YlI+3P h5CEmU10LLyMvUY0MxXQTQscD8OBz1qIWUcBQ8DauPHGn7JLWXEt7HStCYnRh8NW Qai1X8gZKrprOlVomUdy8h0u2KIYDHl3sD0RnGF9unhTIr+BfHIiqBFtimkMPegd vGS+YRKV873m0riOI491SQMX3WG2XKC6EKVKKD0w9bu0VPyFbDuiBVUlyg4moElQ NodrGQA39eDn8MihfrPcgcRUUCczCF1MDOJVQQbGYLPUTdYfxQDl3haUCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI1ByG6n6vMqxiglGdyv5kXctvDgMB8GA1UdIwQY MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt MjQ1MTVhMTRjNDU2LzEvalVISWJxZnE4eXJHS0NVWjNLX21SZHkyOE9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2 LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+k9AwQA ubOwAwQA1QXiMA0GCSqGSIb3DQEBCwUAA4IBAQBBYsDOkW2iUG5BiEXB89X2uqsr 8pQYNuz3QhTQ6SDp2OxgxcoqjSbCb+fxWzoXmj/QRi8J+kqbDrzYU/qyDZdyMx8K H9Dlvej09Dd1GWPOGrZjvSuS1yEz5hNtaO8SAScWJXP0qVSGFqhZI8TCIqpbKQFn hJ8NL7lULcmwLb+MwXHvqK91wN6J/4m+Ta+42nn7WrykGceJM99kklCaRVL1ho1F xJNxkeYY0c6ADmgO+YtV87dq9ZSQ3TWL+CMtiEpX/warUSJZ0ktJOUQTxJmJSGaa 1F9e84pbddyDIo37fVhVlsSLhD343+MeLZ3yoL1MElYZtXDzh6qSH9L4dZFM -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:46 2026 by rpki-client