This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/JfiKnbeqPSQWrccipxHIV5asnZc.roa File: JfiKnbeqPSQWrccipxHIV5asnZc.roa (raw, json) Hash identifier: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8= Subject key identifier: 25:F8:8A:9D:B7:AA:3D:24:16:AD:C7:22:A7:11:C8:57:96:AC:9D:97 Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39 Certificate serial: 019B7C122B93D4E910588E3D1F7E64BB708F Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/JfiKnbeqPSQWrccipxHIV5asnZc.roa Signing time: Fri 02 Jan 2026 00:18:44 +0000 ROA not before: Fri 02 Jan 2026 00:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24904 IP address blocks: 45.87.180.0/22 maxlen: 24 45.128.40.0/22 maxlen: 24 94.103.120.0/22 maxlen: 24 185.97.100.0/22 maxlen: 24 185.210.108.0/22 maxlen: 24 185.212.212.0/22 maxlen: 24 194.110.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2b:93:d4:e9:10:58:8e:3d:1f:7e:64:bb:70:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7401e0249418b357547268824f6244925d8db39 Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25f88a9db7aa3d2416adc722a711c85796ac9d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:fd:a5:56:3d:31:54:25:52:3f:db:d1:86: 01:c6:bd:4b:c9:bf:bb:d1:bb:e1:15:11:4c:3f:66: 05:0d:28:6c:b4:45:ec:66:4b:64:8f:11:ba:ca:95: 50:20:de:e2:47:21:37:c9:02:31:45:5a:42:7a:0f: f0:ca:9b:08:bd:30:59:dc:84:91:94:8d:53:a5:35: 1a:f8:f5:40:90:c6:46:19:c7:6e:b2:4f:fd:e4:3b: aa:2f:2a:5b:05:25:28:77:e5:c0:cd:2f:4d:37:f0: f9:8c:0c:13:44:e6:d1:84:a6:be:08:2c:a4:86:3d: 66:f1:86:92:b4:e8:3a:bc:a0:97:b1:a9:fc:7c:5b: 68:25:08:ae:31:df:4f:d5:9a:a2:2a:f3:75:65:f5: 71:4e:b4:b2:e0:bc:6d:9e:4e:35:d6:dc:dd:f5:ef: 47:be:7b:0b:22:55:59:56:bb:6b:c6:9e:37:82:e9: a0:56:73:e1:bc:c9:75:8b:72:10:38:54:78:6c:19: 67:89:4a:28:62:fb:45:d4:e2:58:a6:5c:8d:3a:62: 09:d6:fb:84:8d:19:15:d3:82:d1:02:0b:68:dc:31: eb:77:c3:e4:3d:5b:ca:b7:f3:b2:1b:07:84:7b:47: 8c:7f:dd:16:b8:c4:ab:74:80:4e:5a:e6:76:fb:be: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:8A:9D:B7:AA:3D:24:16:AD:C7:22:A7:11:C8:57:96:AC:9D:97 X509v3 Authority Key Identifier: keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/JfiKnbeqPSQWrccipxHIV5asnZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.180.0/22 45.128.40.0/22 94.103.120.0/22 185.97.100.0/22 185.210.108.0/22 185.212.212.0/22 194.110.120.0/22 Signature Algorithm: sha256WithRSAEncryption a6:a2:79:71:ca:3c:22:cb:42:b4:bc:0e:f1:d5:0e:62:12:ac: 30:33:3b:a0:db:13:24:9a:76:5c:2d:5d:60:d0:64:57:ad:52: d0:d5:ee:fb:ee:5a:5e:ca:89:4a:a2:b6:a3:96:00:f2:6a:a9: 2a:aa:89:81:30:4a:d5:00:7a:66:34:d1:cf:42:20:3d:7f:9c: de:f1:fe:35:2e:73:fb:d4:72:57:ba:db:09:e1:09:89:a9:78: fc:00:6f:d5:3d:ae:1e:08:68:3c:0e:ec:e6:47:f5:c9:8a:18: 04:c2:37:38:84:95:64:84:0e:92:6d:b2:f3:c0:18:cc:aa:70: a1:9d:ff:ac:81:bf:2a:45:ab:21:51:ae:3c:f1:70:78:bd:85: 55:ec:b6:8d:e6:31:d2:4b:07:ec:d3:c5:42:be:45:e6:a5:e2: f3:9b:41:f7:90:fc:1d:18:07:57:0e:ec:17:0d:3d:38:ac:30: da:17:d8:ce:29:40:b6:77:b6:f7:e8:e3:e4:25:15:3b:b6:ea: cd:72:30:42:f3:e2:b6:9a:14:b0:80:a8:b8:3f:a1:2c:ab:dc: 31:ea:0c:b9:41:45:56:50:6f:39:c8:b9:e0:b3:c4:15:a3:f0: 43:54:61:92:3d:ff:e8:20:fe:92:43:3d:74:26:d4:b0:70:ab: 39:76:21:1f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8EiuT1OkQWI49H35ku3CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk OGRiMzkwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWY4OGE5ZGI3YWEzZDI0MTZhZGM3MjJhNzExYzg1Nzk2YWM5ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyff9pVY9MVQlUj/b0YYBxr1Lyb+7 0bvhFRFMP2YFDShstEXsZktkjxG6ypVQIN7iRyE3yQIxRVpCeg/wypsIvTBZ3ISR lI1TpTUa+PVAkMZGGcdusk/95DuqLypbBSUod+XAzS9NN/D5jAwTRObRhKa+CCyk hj1m8YaStOg6vKCXsan8fFtoJQiuMd9P1ZqiKvN1ZfVxTrSy4Lxtnk411tzd9e9H vnsLIlVZVrtrxp43gumgVnPhvMl1i3IQOFR4bBlniUooYvtF1OJYplyNOmIJ1vuE jRkV04LRAgto3DHrd8PkPVvKt/OyGweEe0eMf90WuMSrdIBOWuZ2+740RwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCX4ip23qj0kFq3HIqcRyFeWrJ2XMB8GA1UdIwQY MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt NTA3ODkxMzk1NDE3LzEvSmZpS25iZXFQU1FXcmNjaXB4SElWNWFzblpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3 LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLVe0AwQC LYAoAwQCXmd4AwQCuWFkAwQCudJsAwQCudTUAwQCwm54MA0GCSqGSIb3DQEBCwUA A4IBAQCmonlxyjwiy0K0vA7x1Q5iEqwwMzug2xMkmnZcLV1g0GRXrVLQ1e777lpe yolKorajlgDyaqkqqomBMErVAHpmNNHPQiA9f5ze8f41LnP71HJXutsJ4QmJqXj8 AG/VPa4eCGg8DuzmR/XJihgEwjc4hJVkhA6SbbLzwBjMqnChnf+sgb8qRashUa48 8XB4vYVV7LaN5jHSSwfs08VCvkXmpeLzm0H3kPwdGAdXDuwXDT04rDDaF9jOKUC2 d7b36OPkJRU7turNcjBC8+K2mhSwgKi4P6Esq9wx6gy5QUVWUG85yLngs8QVo/BD VGGSPf/oIP6SQz10JtSwcKs5diEf -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:53 2026 by rpki-client