This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/jM-7nkDS5qjlb3w33JvghnsyuJw.roa File: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (raw, json) Hash identifier: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM= Subject key identifier: 8C:CF:BB:9E:40:D2:E6:A8:E5:6F:7C:37:DC:9B:E0:86:7B:32:B8:9C Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Certificate serial: 019B76EB5271053C8E86F78D10255DC2C73D Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/jM-7nkDS5qjlb3w33JvghnsyuJw.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.117.8.0/24 maxlen: 24 185.117.9.0/24 maxlen: 24 185.117.10.0/24 maxlen: 24 185.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:52:71:05:3c:8e:86:f7:8d:10:25:5d:c2:c7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ccfbb9e40d2e6a8e56f7c37dc9be0867b32b89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:ef:e9:3c:92:2e:23:c7:b1:7d:c2:60:02: 94:9d:62:39:42:c4:8b:1a:cd:e3:60:b0:b7:21:6e: 5c:cc:0d:77:02:ac:bb:0f:b1:7a:7c:1d:ee:b4:87: a3:a9:63:b0:d3:32:ad:37:a9:2e:58:73:79:99:3c: 80:a1:2a:8a:c0:15:2d:fa:98:bd:4c:45:e3:42:5d: cb:d7:5d:ce:e5:88:a7:d2:93:85:02:c9:cc:4a:e3: 74:69:92:c7:ff:a5:55:de:49:ff:5b:3d:2f:f3:15: aa:06:21:b4:62:1d:e6:33:9e:78:e8:db:73:9d:d1: a5:c9:09:f0:92:1a:d0:18:2e:75:e5:d1:15:9b:09: f8:6c:a0:a9:8e:2b:26:64:ff:27:a2:69:bc:07:81: 15:f6:28:64:68:ef:64:b0:09:13:15:db:76:d0:73: 4e:f1:19:41:ac:63:c6:d7:3a:4d:96:e2:7e:52:59: 7d:c5:c0:96:e0:f4:a6:b8:c5:17:32:34:03:f8:f8: 95:d8:bd:39:88:e8:d7:4b:11:1c:63:88:52:19:fc: 1f:a4:38:d0:5e:11:01:f4:0c:08:61:fd:b7:e6:a7: 82:b9:d8:34:47:9c:0b:0d:99:28:4e:6c:5d:62:5b: b4:8d:67:f9:55:69:b1:07:b8:d8:49:70:27:b7:cc: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:BB:9E:40:D2:E6:A8:E5:6F:7C:37:DC:9B:E0:86:7B:32:B8:9C X509v3 Authority Key Identifier: keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/jM-7nkDS5qjlb3w33JvghnsyuJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.8.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:f1:28:c9:71:28:e5:ba:7c:43:67:86:5b:f5:5f:d9:a4:b9: 0c:23:d5:c0:84:6a:64:91:3d:94:2b:77:f1:c1:c5:51:cb:2f: 54:a2:71:01:24:10:14:4f:45:db:81:69:03:80:d4:a9:f4:7b: 54:9b:4a:df:83:96:84:c8:2c:a7:15:8c:27:5c:ed:1e:27:ac: b8:53:b8:b6:cc:af:08:86:74:8e:4b:1f:87:30:1b:3b:6d:2e: 55:f9:42:4b:b6:a3:62:12:3b:a4:0c:ce:53:6d:bb:75:14:e9: f0:44:36:89:e3:e8:b2:a3:62:a5:2c:55:f6:92:44:05:a2:5e: 50:c4:34:9a:b4:91:c0:04:bd:11:0b:77:4a:4a:5b:b3:bc:86: b6:2d:36:57:6a:76:1d:42:e8:35:59:18:3b:9e:30:ff:f5:45: 12:f4:99:a6:f9:d5:f6:fe:bd:71:73:d7:9b:cd:9e:cc:f3:62: 54:c8:0a:c5:d2:16:f9:35:91:0f:62:56:e0:d9:76:af:fd:ba: 88:e8:53:68:1f:4c:f4:e0:7c:92:88:8e:44:3e:a5:5f:93:5b: 1e:0b:d7:64:aa:b3:e9:2c:a0:e0:29:99:f6:de:3b:5b:fa:c2: bb:6b:fd:1b:50:0c:e3:14:10:f8:1d:20:c8:28:eb:1b:b8:28: 68:e4:94:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261JxBTyOhveNECVdwsc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw OTJlYzIwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2NmYmI5ZTQwZDJlNmE4ZTU2ZjdjMzdkYzliZTA4NjdiMzJiODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uDv6TySLiPHsX3CYAKUnWI5QsSL Gs3jYLC3IW5czA13Aqy7D7F6fB3utIejqWOw0zKtN6kuWHN5mTyAoSqKwBUt+pi9 TEXjQl3L113O5Yin0pOFAsnMSuN0aZLH/6VV3kn/Wz0v8xWqBiG0Yh3mM5546Ntz ndGlyQnwkhrQGC515dEVmwn4bKCpjismZP8nomm8B4EV9ihkaO9ksAkTFdt20HNO 8RlBrGPG1zpNluJ+Ull9xcCW4PSmuMUXMjQD+PiV2L05iOjXSxEcY4hSGfwfpDjQ XhEB9AwIYf235qeCudg0R5wLDZkoTmxdYlu0jWf5VWmxB7jYSXAnt8ykOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzPu55A0uao5W98N9yb4IZ7MricMB8GA1UdIwQY MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt YmRmNTVkYjRhOTBhLzEvak0tN25rRFM1cWpsYjN3MzNKdmdobnN5dUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXUIMA0G CSqGSIb3DQEBCwUAA4IBAQAd8SjJcSjlunxDZ4Zb9V/ZpLkMI9XAhGpkkT2UK3fx wcVRyy9UonEBJBAUT0XbgWkDgNSp9HtUm0rfg5aEyCynFYwnXO0eJ6y4U7i2zK8I hnSOSx+HMBs7bS5V+UJLtqNiEjukDM5Tbbt1FOnwRDaJ4+iyo2KlLFX2kkQFol5Q xDSatJHABL0RC3dKSluzvIa2LTZXanYdQug1WRg7njD/9UUS9Jmm+dX2/r1xc9eb zZ7M82JUyArF0hb5NZEPYlbg2Xav/bqI6FNoH0z04HySiI5EPqVfk1seC9dkqrPp LKDgKZn23jtb+sK7a/0bUAzjFBD4HSDIKOsbuCho5JQL -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:20 2026 by rpki-client