This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/jUh5kPqCBDpArkt6K7K31qvOD8c.roa File: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (raw, json) Hash identifier: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4= Subject key identifier: 8D:48:79:90:FA:82:04:3A:40:AE:4B:7A:2B:B2:B7:D6:AB:CE:0F:C7 Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9 Certificate serial: 019B7F826746F3A5882366CF313931DBB35C Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/jUh5kPqCBDpArkt6K7K31qvOD8c.roa Signing time: Fri 02 Jan 2026 16:20:11 +0000 ROA not before: Fri 02 Jan 2026 16:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4913 IP address blocks: 185.7.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:67:46:f3:a5:88:23:66:cf:31:39:31:db:b3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9 Validity Not Before: Jan 2 16:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d487990fa82043a40ae4b7a2bb2b7d6abce0fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:b8:df:62:bf:f6:92:73:f0:dc:4f:df:0c: 4b:4d:c4:6f:d4:87:49:19:48:50:ec:d6:f7:52:74: 09:50:35:76:dd:e3:bf:bb:6b:8f:2a:89:20:91:40: a1:c9:1a:42:36:99:29:b4:31:67:11:b0:02:50:3b: 57:2b:ac:a6:9f:c6:f1:3d:b8:64:d7:6d:b5:35:11: ef:19:3e:d8:f0:52:c0:5f:9b:bd:aa:21:e9:64:9a: 9c:b1:c6:cf:66:e1:a8:42:0c:31:58:09:94:51:8b: d4:25:1c:a8:ec:f5:e6:fa:bf:e6:02:bb:68:29:ac: 06:27:00:0f:2e:75:69:e7:7e:da:a1:d9:ac:ab:58: c7:8c:83:71:ac:ba:c8:7c:41:b5:9c:0b:2f:df:67: ee:eb:a7:21:80:ee:d0:1c:d2:a8:b4:61:1d:f2:b9: 65:30:14:9f:b6:ca:b9:e1:88:b0:97:9e:0d:c2:69: be:4a:b0:a8:c5:62:c8:ae:26:ee:cb:ec:6e:58:73: a5:af:90:50:98:09:7c:36:ce:9e:d6:7b:93:cc:93: a0:61:d1:29:25:b6:6e:d4:3b:a2:63:ff:57:2f:fa: a5:d6:53:39:e0:eb:c6:90:4c:56:3d:13:7e:c2:3b: 5d:f9:f4:f4:01:98:45:60:ac:24:1e:e1:82:42:25: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:48:79:90:FA:82:04:3A:40:AE:4B:7A:2B:B2:B7:D6:AB:CE:0F:C7 X509v3 Authority Key Identifier: keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/jUh5kPqCBDpArkt6K7K31qvOD8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.15.0/24 Signature Algorithm: sha256WithRSAEncryption 22:c0:07:28:26:47:e4:35:48:39:c4:5a:67:20:44:4a:57:14: 61:c0:d7:6c:6a:c9:21:d6:0d:bf:1b:f5:53:dd:19:d0:57:4e: 3c:4d:0a:d6:8f:56:01:9b:f2:7d:8c:ac:9d:4e:a5:99:97:5e: a1:85:e8:ca:e9:4b:63:19:a1:d1:bb:a1:08:e4:52:1b:fc:6b: 49:23:bf:8a:18:d1:ae:35:40:27:3e:cc:eb:2b:10:46:63:45: 3e:20:32:94:9a:76:92:fb:36:68:d4:47:00:c3:57:6b:49:86: ce:ac:94:93:f1:b2:66:69:5d:a2:dc:9f:61:3c:c8:54:f5:1f: a3:43:98:44:b7:21:4c:e1:2b:c4:29:48:09:08:55:26:a1:ff: 6d:3b:70:10:6b:8e:a0:df:c7:a3:47:bb:4b:ec:f6:ab:9b:48: 52:71:31:e9:a7:31:d8:d0:41:ac:55:57:9a:30:9b:f8:1c:e2: 0d:d8:24:dd:0e:06:b0:30:16:ba:99:1d:c4:e0:00:c1:c4:e5: c4:3e:fa:84:3e:49:f6:2e:7c:af:44:1e:fe:10:d9:a9:83:38: bb:69:db:36:d3:45:6c:53:b4:4a:03:7c:44:f7:c7:58:58:e2: 5d:2d:f7:a6:78:22:c3:50:54:5e:63:51:91:3e:7f:51:12:b1: 91:cf:99:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gmdG86WII2bPMTkx27NcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1 MDUxYjkwHhcNMjYwMTAyMTYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQ4Nzk5MGZhODIwNDNhNDBhZTRiN2EyYmIyYjdkNmFiY2UwZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+432K/9pJz8NxP3wxLTcRv1IdJ GUhQ7Nb3UnQJUDV23eO/u2uPKokgkUChyRpCNpkptDFnEbACUDtXK6ymn8bxPbhk 1221NRHvGT7Y8FLAX5u9qiHpZJqcscbPZuGoQgwxWAmUUYvUJRyo7PXm+r/mArto KawGJwAPLnVp537aodmsq1jHjINxrLrIfEG1nAsv32fu66chgO7QHNKotGEd8rll MBSftsq54Yiwl54Nwmm+SrCoxWLIribuy+xuWHOlr5BQmAl8Ns6e1nuTzJOgYdEp JbZu1DuiY/9XL/ql1lM54OvGkExWPRN+wjtd+fT0AZhFYKwkHuGCQiVCnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1IeZD6ggQ6QK5Leiuyt9arzg/HMB8GA1UdIwQY MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et ODNlNDc1ODBiM2VjLzEvalVoNWtQcUNCRHBBcmt0Nks3SzMxcXZPRDhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQcPMA0G CSqGSIb3DQEBCwUAA4IBAQAiwAcoJkfkNUg5xFpnIERKVxRhwNdsaskh1g2/G/VT 3RnQV048TQrWj1YBm/J9jKydTqWZl16hhejK6UtjGaHRu6EI5FIb/GtJI7+KGNGu NUAnPszrKxBGY0U+IDKUmnaS+zZo1EcAw1drSYbOrJST8bJmaV2i3J9hPMhU9R+j Q5hEtyFM4SvEKUgJCFUmof9tO3AQa46g38ejR7tL7Parm0hScTHppzHY0EGsVVea MJv4HOIN2CTdDgawMBa6mR3E4ADBxOXEPvqEPkn2LnyvRB7+ENmpgzi7ads200Vs U7RKA3xE98dYWOJdLfemeCLDUFReY1GRPn9RErGRz5mx -----END CERTIFICATE-----Generated at Tue Jan 20 14:41:24 2026 by rpki-client