This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa File: jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa (raw, json) Hash identifier: YqzUoI4bHyTW6BYWw7GMg/Wlqugt8gZRXRL0jSMxthQ= Subject key identifier: 8C:29:04:F6:18:E8:A7:D0:00:23:D2:86:1E:B0:2E:F4:E8:FB:2C:D2 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDB8FA0DE19A1714FF89035A799DA Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39885 IP address blocks: 212.183.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:db:8f:a0:de:19:a1:71:4f:f8:90:35:a7:99:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c2904f618e8a7d00023d2861eb02ef4e8fb2cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:67:49:ba:f0:01:fe:3a:36:3e:21:44:65: 5a:5d:58:3d:fc:81:a7:46:db:c2:9f:cb:e0:c2:d8: 12:a9:cd:14:08:52:7c:4c:42:3b:d3:97:98:75:81: cb:e3:cc:d6:76:bc:94:20:06:6e:65:74:a0:aa:5b: df:59:d1:12:05:50:9c:02:b5:6a:13:05:c2:aa:e8: ff:76:36:a1:f1:a2:27:5a:ac:cc:74:ba:59:d4:09: 6c:cd:8c:33:0d:46:03:f2:3b:ef:59:fe:cc:c0:07: 2b:b6:66:06:5f:fc:dc:c3:7d:3b:6e:d5:0d:ec:3d: 9b:93:41:c5:08:a1:c3:3a:f1:39:c2:2b:40:8d:33: 02:f9:03:90:97:2e:dd:b4:59:93:60:ef:28:1d:b6: f0:08:45:ad:59:d4:3c:58:d0:ea:b2:1b:52:a1:9c: cc:ab:b1:5d:19:c8:05:46:82:c1:27:34:ae:01:84: 11:2c:a8:af:2e:24:dd:ce:5c:4f:c1:f3:fe:79:29: ff:eb:6a:ed:09:0c:98:18:fc:86:28:fb:28:50:b0: 99:03:c9:c8:ba:2b:fe:18:e6:8c:39:31:13:4c:46: 97:40:a3:79:86:ea:fe:1a:3a:0a:bf:bb:ff:27:c3: c6:04:e0:e7:65:57:4f:32:7a:37:81:e8:9d:f4:83: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:04:F6:18:E8:A7:D0:00:23:D2:86:1E:B0:2E:F4:E8:FB:2C:D2 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.183.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ca:e7:4b:a5:34:23:89:01:17:7c:53:e0:85:75:74:90:1d: 9d:7a:fa:11:12:1b:ec:4b:5d:89:d7:6e:58:4b:73:cf:f5:b9: 85:dc:44:27:49:ef:b4:9a:ab:97:f8:31:fb:4a:cd:d8:7f:21: 74:41:92:98:3c:32:ab:40:02:54:ae:c5:83:fe:8e:b3:57:92: 71:30:1e:16:dd:f7:4e:85:65:ab:a8:c5:d8:e8:44:bd:a5:58: e6:37:4e:b3:a7:6a:a7:98:ee:f3:7c:59:a6:20:14:fb:bc:81: 15:a6:0c:2a:ab:f0:a6:fc:60:fb:fe:7a:fb:f2:c5:73:31:cb: f1:34:38:57:bb:09:31:88:9a:83:be:30:7a:08:ce:14:d6:07: 67:c1:66:74:07:a1:5f:2f:b2:19:ab:f6:17:8f:40:a3:fb:15: 66:87:1f:9b:7b:9f:7d:20:20:d2:63:a6:f7:5a:1c:2c:bd:01: e8:db:d5:16:a2:00:60:93:2d:9b:fc:6d:aa:6e:ef:fd:f1:5e: a7:c7:1c:a3:6b:5a:54:97:e7:d8:91:b8:a0:b0:73:63:7d:b7: 46:7e:f8:fd:80:56:57:9a:20:23:35:da:bd:e0:c0:a0:42:2f: d9:0b:a8:58:2a:39:d1:63:0b:9a:42:15:82:7c:e7:43:89:9b: 2a:27:6d:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569uPoN4ZoXFP+JA1p5naMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzI5MDRmNjE4ZThhN2QwMDAyM2QyODYxZWIwMmVmNGU4ZmIyY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKJnSbrwAf46Nj4hRGVaXVg9/IGn RtvCn8vgwtgSqc0UCFJ8TEI705eYdYHL48zWdryUIAZuZXSgqlvfWdESBVCcArVq EwXCquj/djah8aInWqzMdLpZ1AlszYwzDUYD8jvvWf7MwAcrtmYGX/zcw307btUN 7D2bk0HFCKHDOvE5witAjTMC+QOQly7dtFmTYO8oHbbwCEWtWdQ8WNDqshtSoZzM q7FdGcgFRoLBJzSuAYQRLKivLiTdzlxPwfP+eSn/62rtCQyYGPyGKPsoULCZA8nI uiv+GOaMOTETTEaXQKN5hur+GjoKv7v/J8PGBODnZVdPMno3geid9IOcuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwpBPYY6KfQACPShh6wLvTo+yzSMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvakNrRTloam9wOUFBSTlLR0hyQXU5T2o3TE5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LcXMA0G CSqGSIb3DQEBCwUAA4IBAQCMyudLpTQjiQEXfFPghXV0kB2devoREhvsS12J125Y S3PP9bmF3EQnSe+0mquX+DH7Ss3YfyF0QZKYPDKrQAJUrsWD/o6zV5JxMB4W3fdO hWWrqMXY6ES9pVjmN06zp2qnmO7zfFmmIBT7vIEVpgwqq/Cm/GD7/nr78sVzMcvx NDhXuwkxiJqDvjB6CM4U1gdnwWZ0B6FfL7IZq/YXj0Cj+xVmhx+be599ICDSY6b3 WhwsvQHo29UWogBgky2b/G2qbu/98V6nxxyja1pUl+fYkbigsHNjfbdGfvj9gFZX miAjNdq94MCgQi/ZC6hYKjnRYwuaQhWCfOdDiZsqJ22y -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:01 2026 by rpki-client