This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/JmZj8qDrXrymgP7QAB2LP_aAP9Q.roa File: JmZj8qDrXrymgP7QAB2LP_aAP9Q.roa (raw, json) Hash identifier: dTcvA8GDUBchh0nw7jX+gocFU8/KjN2foS9nkRp7Lr8= Subject key identifier: 26:66:63:F2:A0:EB:5E:BC:A6:80:FE:D0:00:1D:8B:3F:F6:80:3F:D4 Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Certificate serial: 019C0F4C6353A018A6D4985387BC56E37E77 Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/JmZj8qDrXrymgP7QAB2LP_aAP9Q.roa Signing time: Fri 30 Jan 2026 14:26:30 +0000 ROA not before: Fri 30 Jan 2026 14:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204457 IP address blocks: 185.34.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:4c:63:53:a0:18:a6:d4:98:53:87:bc:56:e3:7e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Validity Not Before: Jan 30 14:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266663f2a0eb5ebca680fed0001d8b3ff6803fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:66:1d:5c:4b:03:38:c0:44:5b:56:63:35: fa:95:64:93:21:a9:7a:9b:9e:72:ad:09:da:aa:94: d8:7a:b5:84:97:c7:ee:9c:7b:f2:c4:cf:95:5c:57: 43:c8:9f:86:28:a7:79:55:fa:a8:b1:2f:c5:7f:df: 8f:d7:e2:57:d4:09:b3:ea:86:ba:bc:13:4a:da:60: c1:cb:96:70:08:60:ca:f8:eb:bf:3f:e6:c2:89:cb: e4:a8:f6:f0:1b:ab:8f:d7:15:bc:36:c4:97:d4:e2: 87:b0:7a:a0:11:48:e5:79:45:5a:31:02:a5:78:52: f6:e8:5f:be:16:17:db:4c:d8:54:a3:1b:81:e1:23: 71:4e:44:f4:01:3a:4e:29:74:b2:7a:a8:82:fd:6b: 21:04:b0:bd:68:dc:7a:06:3e:63:02:02:85:fc:50: 89:b1:b1:8c:66:4c:02:5c:c8:89:6e:e0:a3:34:b3: b3:c4:9d:4d:df:74:d1:69:8e:df:bc:9b:2c:75:1f: f5:ff:4f:21:fe:53:c2:66:ce:d3:6b:db:01:41:e4: 6f:97:35:2f:64:bc:32:81:bb:16:ad:25:4c:19:11: 5c:b0:b5:68:6b:87:79:68:f6:6a:21:58:3e:c4:a8: 88:39:1f:88:7c:14:b0:38:71:5d:fe:54:62:fb:6f: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:66:63:F2:A0:EB:5E:BC:A6:80:FE:D0:00:1D:8B:3F:F6:80:3F:D4 X509v3 Authority Key Identifier: keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/JmZj8qDrXrymgP7QAB2LP_aAP9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.129.0/24 Signature Algorithm: sha256WithRSAEncryption 52:34:87:91:68:dc:d1:ca:78:b5:09:39:64:d4:92:94:d7:4a: 8c:33:c2:f3:69:19:f2:4d:35:8e:b7:22:93:3f:a7:e0:45:7d: 98:c3:29:7f:fb:59:41:81:af:44:9c:43:29:e4:67:69:f3:f1: c8:47:cd:37:39:6b:bb:fa:06:70:d1:28:44:d0:10:ed:34:31: 72:e9:af:fb:c8:f2:34:a2:d5:78:20:d4:b8:4a:81:5f:73:3d: f6:83:ea:f4:09:0b:5f:94:72:97:4d:0b:ea:36:d3:69:be:19: fa:f0:ea:b4:18:96:97:a8:4b:f1:80:d3:2f:fc:ee:b2:0c:88: a5:db:ff:f6:ba:36:b6:a9:69:b3:e8:af:df:41:6e:7c:37:4c: 7b:02:fa:b7:c8:bd:3e:5b:a2:d9:3e:c9:56:96:90:ef:5f:02: d1:30:68:46:9d:e3:28:db:a7:06:63:39:b8:19:1f:ee:27:6c: fe:fb:b6:a1:74:1e:b5:87:e3:f6:13:62:ed:96:3b:10:2c:97: 59:54:3f:c3:f1:95:42:35:35:a2:bd:dd:98:f6:7e:78:f4:e8: 69:9a:90:8d:91:b5:f4:84:43:54:82:89:99:23:7c:75:73:f0: 55:11:88:03:62:8a:84:e6:fa:6a:ea:d8:8f:70:71:73:f8:d7: 92:03:2d:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwPTGNToBim1JhTh7xW4353MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWQ2NzAwMmRjNzMwN2U4NTYzYjZlNDkzNGNjZDU3MjNh NDRmM2UwHhcNMjYwMTMwMTQyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjY2NjNmMmEwZWI1ZWJjYTY4MGZlZDAwMDFkOGIzZmY2ODAzZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16lmHVxLAzjARFtWYzX6lWSTIal6 m55yrQnaqpTYerWEl8funHvyxM+VXFdDyJ+GKKd5VfqosS/Ff9+P1+JX1Amz6oa6 vBNK2mDBy5ZwCGDK+Ou/P+bCicvkqPbwG6uP1xW8NsSX1OKHsHqgEUjleUVaMQKl eFL26F++FhfbTNhUoxuB4SNxTkT0ATpOKXSyeqiC/WshBLC9aNx6Bj5jAgKF/FCJ sbGMZkwCXMiJbuCjNLOzxJ1N33TRaY7fvJssdR/1/08h/lPCZs7Ta9sBQeRvlzUv ZLwygbsWrSVMGRFcsLVoa4d5aPZqIVg+xKiIOR+IfBSwOHFd/lRi+2/BEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZmY/Kg6168poD+0AAdiz/2gD/UMB8GA1UdIwQY MBaAFDLtZwAtxzB+hWO25JNMzVcjpE8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMt ZjFlOWJjNDFkOTJmLzEvSm1aajhxRHJYcnltZ1A3UUFCMkxQX2FBUDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMtZjFlOWJjNDFkOTJm LzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSKBMA0G CSqGSIb3DQEBCwUAA4IBAQBSNIeRaNzRyni1CTlk1JKU10qMM8LzaRnyTTWOtyKT P6fgRX2Ywyl/+1lBga9EnEMp5Gdp8/HIR803OWu7+gZw0ShE0BDtNDFy6a/7yPI0 otV4INS4SoFfcz32g+r0CQtflHKXTQvqNtNpvhn68Oq0GJaXqEvxgNMv/O6yDIil 2//2uja2qWmz6K/fQW58N0x7Avq3yL0+W6LZPslWlpDvXwLRMGhGneMo26cGYzm4 GR/uJ2z++7ahdB61h+P2E2LtljsQLJdZVD/D8ZVCNTWivd2Y9n549OhpmpCNkbX0 hENUgomZI3x1c/BVEYgDYoqE5vpq6tiPcHFz+NeSAy3b -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:52 2026 by rpki-client