This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa File: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (raw, json) Hash identifier: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk= Subject key identifier: 8C:26:86:15:64:46:D2:4F:DC:7E:69:40:C5:86:5C:8D:42:30:FD:8A Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614 Certificate serial: 019B7C11C48A583D9ED00CF2C138D088B9EF Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24685 IP address blocks: 91.202.108.0/24 maxlen: 32 194.28.198.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c4:8a:58:3d:9e:d0:0c:f2:c1:38:d0:88:b9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0032534e8d560d73553c632bba10344a7c816614 Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c2686156446d24fdc7e6940c5865c8d4230fd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:00:1b:22:36:e6:52:07:33:5b:87:9f:f9: 1c:5b:b5:d7:5f:29:06:6b:57:4e:b5:6e:40:23:b4: 06:70:68:c5:7b:7c:87:3b:d2:1d:9c:84:57:16:7e: 62:c3:2c:92:4b:74:a2:2b:1b:e8:f3:ed:45:8b:0a: bd:30:1a:62:23:28:7b:03:fb:49:fd:c9:81:5d:79: 35:22:58:59:9f:bf:5e:b6:26:b4:9d:9e:a0:c1:63: 93:40:5d:9e:ef:30:47:f6:1f:02:5c:d5:8e:71:fc: 78:c0:f7:e2:4a:6d:16:ab:32:8c:52:45:98:04:63: 71:a2:d5:21:2e:70:32:aa:9d:00:97:58:d1:08:ef: 3c:03:31:a7:25:a8:b5:2e:34:f2:c7:1d:78:05:c0: 77:eb:f9:c1:4c:d2:1b:b6:dc:dd:5b:0d:07:8d:67: d3:d6:12:48:3a:c2:89:ee:ad:4d:c4:a0:cc:02:67: a0:3b:4d:29:5c:15:83:65:4a:c4:76:84:80:05:83: 1f:04:72:40:3a:c8:af:4c:e1:e8:43:b8:53:14:85: 9f:c1:bf:80:fa:fc:b6:97:22:4d:29:15:82:4d:15: 61:c4:c0:8a:33:a0:5d:21:a5:99:c1:75:8d:2f:35: ce:f0:bd:56:bd:c2:60:99:9e:34:21:00:32:3c:07: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:86:15:64:46:D2:4F:DC:7E:69:40:C5:86:5C:8D:42:30:FD:8A X509v3 Authority Key Identifier: keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.108.0/24 194.28.198.0/24 Signature Algorithm: sha256WithRSAEncryption 45:de:d3:6a:06:d1:a2:45:98:ad:7e:ec:63:e1:06:28:46:56: 0a:f6:8f:14:ea:28:b6:dd:ed:e7:fe:d7:65:9d:41:ac:89:33: 4a:66:a3:82:bb:37:da:70:48:dc:80:e0:9e:c8:de:8d:32:d2: b4:bc:32:16:c7:23:62:a9:f8:79:39:34:1c:ab:75:58:b0:6e: 87:10:fa:88:2d:3f:a7:b2:80:86:12:23:c6:10:4f:70:1f:69: a1:6c:6b:92:24:cd:cb:4c:5e:82:ef:66:23:3a:75:cd:d3:06: 78:60:72:c0:23:b9:0d:a3:d7:5b:d1:ab:eb:69:a4:a7:f2:f5: ad:6f:44:68:9c:46:e4:6d:e7:85:4f:d4:8a:9c:ec:35:84:51: 9e:64:11:e6:4b:ad:d1:b9:94:f1:68:ff:e3:1a:5b:75:20:cb: 5e:bd:17:b1:92:c2:c0:ff:86:f2:87:1e:5e:90:e2:07:7a:c2: 66:15:23:c4:c4:ea:c9:0b:14:d0:88:21:3e:f8:4d:87:76:18: 7b:4c:44:0a:1c:e3:df:45:ac:f1:ac:9a:37:34:4a:4e:dc:e9: b9:63:1e:7f:ea:03:49:4a:3e:ad:f0:ea:7c:6c:7a:0b:72:bf: 1c:2d:7a:14:8e:c3:8c:d3:c5:09:7e:78:cf:8b:7a:d4:59:02: 81:18:1b:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EcSKWD2e0AzywTjQiLnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMzI1MzRlOGQ1NjBkNzM1NTNjNjMyYmJhMTAzNDRhN2M4 MTY2MTQwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzI2ODYxNTY0NDZkMjRmZGM3ZTY5NDBjNTg2NWM4ZDQyMzBmZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiwAGyI25lIHM1uHn/kcW7XXXykG a1dOtW5AI7QGcGjFe3yHO9IdnIRXFn5iwyySS3SiKxvo8+1Fiwq9MBpiIyh7A/tJ /cmBXXk1IlhZn79etia0nZ6gwWOTQF2e7zBH9h8CXNWOcfx4wPfiSm0WqzKMUkWY BGNxotUhLnAyqp0Al1jRCO88AzGnJai1LjTyxx14BcB36/nBTNIbttzdWw0HjWfT 1hJIOsKJ7q1NxKDMAmegO00pXBWDZUrEdoSABYMfBHJAOsivTOHoQ7hTFIWfwb+A +vy2lyJNKRWCTRVhxMCKM6BdIaWZwXWNLzXO8L1WvcJgmZ40IQAyPAfu5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIwmhhVkRtJP3H5pQMWGXI1CMP2KMB8GA1UdIwQY MBaAFAAyU06NVg1zVTxjK7oQNEp8gWYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEt NWVhZTZlZDU4Mzc1LzEvakNhR0ZXUkcwa19jZm1sQXhZWmNqVUl3X1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEtNWVhZTZlZDU4Mzc1 LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8psAwQA whzGMA0GCSqGSIb3DQEBCwUAA4IBAQBF3tNqBtGiRZitfuxj4QYoRlYK9o8U6ii2 3e3n/tdlnUGsiTNKZqOCuzfacEjcgOCeyN6NMtK0vDIWxyNiqfh5OTQcq3VYsG6H EPqILT+nsoCGEiPGEE9wH2mhbGuSJM3LTF6C72YjOnXN0wZ4YHLAI7kNo9db0avr aaSn8vWtb0RonEbkbeeFT9SKnOw1hFGeZBHmS63RuZTxaP/jGlt1IMtevRexksLA /4byhx5ekOIHesJmFSPExOrJCxTQiCE++E2Hdhh7TEQKHOPfRazxrJo3NEpO3Om5 Yx5/6gNJSj6t8Op8bHoLcr8cLXoUjsOM08UJfnjPi3rUWQKBGBtR -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:14 2026 by rpki-client