This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jsDYE34UviBew9m4vDFXo1V4oc8.roa File: jsDYE34UviBew9m4vDFXo1V4oc8.roa (raw, json) Hash identifier: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4= Subject key identifier: 8E:C0:D8:13:7E:14:BE:20:5E:C3:D9:B8:BC:31:57:A3:55:78:A1:CF Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Certificate serial: 019B7F8329D46CF5AC5BCADE63AA08A87ED3 Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jsDYE34UviBew9m4vDFXo1V4oc8.roa Signing time: Fri 02 Jan 2026 16:21:00 +0000 ROA not before: Fri 02 Jan 2026 16:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43391 IP address blocks: 185.131.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:29:d4:6c:f5:ac:5b:ca:de:63:aa:08:a8:7e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Validity Not Before: Jan 2 16:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec0d8137e14be205ec3d9b8bc3157a35578a1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:d2:9a:fb:56:da:23:a3:ae:3d:38:fb:62: 55:65:06:86:83:d7:09:1d:27:6c:53:d9:ff:9d:0d: 5f:ac:e2:0e:96:8c:4f:fc:15:6d:a2:74:a2:43:71: e6:14:2b:b3:bd:c0:c6:8a:8d:38:f2:f6:c8:f9:e2: f2:2e:0c:20:44:1c:fa:3b:2f:d2:8a:d1:06:9b:67: c5:7c:4d:e1:29:ca:a1:fd:60:f7:b0:55:0f:39:2f: 3c:b3:9d:13:86:23:9f:48:f5:bd:62:1a:31:a4:2c: 09:e3:c1:06:65:f8:2f:08:20:7d:3a:6d:55:66:4f: 1b:b7:d7:f2:5b:e4:f4:c7:7c:b9:37:57:d6:90:7d: 13:ab:1c:7f:20:dc:61:2c:b6:18:c2:28:ee:5a:2c: d9:57:89:c5:6a:f0:5d:82:b0:b9:3a:e2:2a:a7:72: 34:6b:8e:c1:6a:3d:43:9f:42:98:30:96:e7:0f:b6: 79:3d:a7:59:c0:4d:f8:5d:3a:ee:da:8e:ad:24:53: 8e:2c:f5:f2:36:e1:6f:9a:4f:70:2e:3f:fe:d0:32: 37:71:75:41:b6:57:d3:6d:b8:15:65:e0:06:5c:8c: ef:51:3d:06:45:c7:56:04:d2:6a:87:af:7d:a7:8c: da:ca:3b:df:9d:c5:43:60:9a:83:a3:58:93:4e:6c: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C0:D8:13:7E:14:BE:20:5E:C3:D9:B8:BC:31:57:A3:55:78:A1:CF X509v3 Authority Key Identifier: keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jsDYE34UviBew9m4vDFXo1V4oc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.208.0/22 Signature Algorithm: sha256WithRSAEncryption b0:f4:51:91:60:b6:e1:1a:64:c3:65:8a:fc:b3:2a:eb:7e:b6: 90:6e:b7:ca:5a:99:9b:45:3a:2f:91:5f:77:97:39:de:c0:3b: 0f:4d:24:e1:46:6d:ab:50:43:4a:52:a8:31:f5:2e:ae:b5:6e: 19:b0:c3:7d:c9:be:b9:2a:72:87:bf:f1:b1:bd:ed:4d:cb:82: f2:c3:94:b9:38:a3:de:d0:d5:a7:24:04:cd:e7:24:36:5a:90: 6a:ce:c9:41:64:db:6d:2a:fe:fe:4e:79:bb:2b:cf:04:51:c2: c8:02:ec:90:ee:53:b0:5c:81:31:ea:5c:ca:2e:81:2e:21:bb: 83:2f:38:e8:02:97:25:e4:ac:fd:cc:f6:4c:94:37:50:85:90: d2:f7:85:2d:f9:94:95:da:11:1f:41:ee:45:68:a0:97:d7:36: b3:25:7b:78:67:4f:3b:c6:15:01:78:53:22:63:7c:37:b4:ad: 56:c9:ee:20:0a:3a:3d:13:58:b9:3e:74:a4:97:e3:4a:94:3e: d7:10:06:93:aa:54:27:16:fc:55:ec:f7:14:7a:c4:8d:8a:a1: 43:a5:96:16:b7:77:7a:ba:1f:54:de:14:ae:27:da:0d:c9:fe: b1:df:24:ae:12:8a:bf:b3:eb:25:be:1d:f5:a3:77:18:a7:9b: ab:b8:c6:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gynUbPWsW8reY6oIqH7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjYxMjJiNGNlZWU0MWY5N2ZmYjhjYzIyNTUwYmUzZmEw YTUzZGMwHhcNMjYwMTAyMTYyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWMwZDgxMzdlMTRiZTIwNWVjM2Q5YjhiYzMxNTdhMzU1NzhhMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBrSmvtW2iOjrj04+2JVZQaGg9cJ HSdsU9n/nQ1frOIOloxP/BVtonSiQ3HmFCuzvcDGio048vbI+eLyLgwgRBz6Oy/S itEGm2fFfE3hKcqh/WD3sFUPOS88s50ThiOfSPW9YhoxpCwJ48EGZfgvCCB9Om1V Zk8bt9fyW+T0x3y5N1fWkH0Tqxx/INxhLLYYwijuWizZV4nFavBdgrC5OuIqp3I0 a47Baj1Dn0KYMJbnD7Z5PadZwE34XTru2o6tJFOOLPXyNuFvmk9wLj/+0DI3cXVB tlfTbbgVZeAGXIzvUT0GRcdWBNJqh699p4zayjvfncVDYJqDo1iTTmzRAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7A2BN+FL4gXsPZuLwxV6NVeKHPMB8GA1UdIwQY MBaAFMEmEitM7uQfl/+4zCJVC+P6ClPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQt MTUyYjQ2M2FhM2NhLzEvanNEWUUzNFV2aUJldzltNHZERlhvMVY0b2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQtMTUyYjQ2M2FhM2Nh LzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYPQMA0G CSqGSIb3DQEBCwUAA4IBAQCw9FGRYLbhGmTDZYr8syrrfraQbrfKWpmbRTovkV93 lznewDsPTSThRm2rUENKUqgx9S6utW4ZsMN9yb65KnKHv/Gxve1Ny4Lyw5S5OKPe 0NWnJATN5yQ2WpBqzslBZNttKv7+Tnm7K88EUcLIAuyQ7lOwXIEx6lzKLoEuIbuD LzjoApcl5Kz9zPZMlDdQhZDS94Ut+ZSV2hEfQe5FaKCX1zazJXt4Z087xhUBeFMi Y3w3tK1Wye4gCjo9E1i5PnSkl+NKlD7XEAaTqlQnFvxV7PcUesSNiqFDpZYWt3d6 uh9U3hSuJ9oNyf6x3ySuEoq/s+slvh31o3cYp5uruMZ5 -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:50 2026 by rpki-client