This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa File: jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa (raw, json) Hash identifier: zoeDpAsCDg15ZqeXjdLWt/zPvQ+0f3jQu+TzTt0DwhY= Subject key identifier: 8C:93:B4:B3:16:53:71:9E:89:12:DD:05:93:46:9D:43:01:3C:6B:1F Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Certificate serial: 019B7B36D834FE454C50A0C83D0832B77D30 Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44545 IP address blocks: 185.212.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d8:34:fe:45:4c:50:a0:c8:3d:08:32:b7:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c93b4b31653719e8912dd0593469d43013c6b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:68:12:ff:a6:27:e7:72:98:83:30:6e:0c: eb:04:fb:58:03:29:e1:30:82:d6:bb:8a:59:f5:65: d0:22:38:df:a2:e2:57:19:e8:7d:16:ab:94:16:cf: ff:28:20:45:02:66:65:c8:34:17:e1:a8:66:5a:ad: 96:db:9e:43:88:16:08:70:c0:0f:d8:2a:03:9a:5e: 8e:ae:11:a4:ff:07:a4:af:95:5e:5d:9f:a7:fa:2f: a3:72:f4:c0:c1:1b:26:d3:dd:e1:48:0f:eb:5e:f7: 5b:fb:e3:2c:af:73:84:d9:a2:65:14:25:ca:b9:8b: 8d:8b:82:fb:53:de:af:b7:45:4f:01:cf:31:c8:be: 51:99:c3:01:16:ce:6a:1c:04:53:f0:25:32:87:69: 02:8e:d8:d7:90:73:76:b6:e9:a8:d5:14:1f:36:5c: cf:a5:f7:15:02:fa:a9:a0:fd:4b:81:e8:5e:de:74: 79:a5:8d:52:66:ac:23:43:a6:29:99:94:7c:85:e3: 20:1a:fd:5e:0c:ed:9d:ea:b3:20:e3:ee:28:67:04: 43:c8:02:f1:a1:00:cc:36:5a:b9:2b:9f:f3:64:fb: 00:4a:d1:14:51:72:b3:df:d2:57:c7:e4:f1:8f:87: ce:76:dd:5a:44:84:43:91:95:19:34:50:e0:c4:26: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:B4:B3:16:53:71:9E:89:12:DD:05:93:46:9D:43:01:3C:6B:1F X509v3 Authority Key Identifier: keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.92.0/22 Signature Algorithm: sha256WithRSAEncryption ac:7e:d2:4e:ce:97:fc:49:cc:f8:d4:b9:6d:b0:5a:9c:5a:26: a5:6a:f0:cb:67:d2:cb:3e:8a:25:b0:3a:d2:aa:9b:33:64:5b: 2d:54:09:7f:a3:1d:44:67:7c:90:38:f2:6d:b8:dc:54:ae:01: ca:2a:4a:ab:81:02:4a:56:e8:8b:85:87:ab:54:0b:65:a0:1b: bd:42:ee:3f:ef:36:50:de:c9:5e:4c:85:61:cf:d7:85:74:fb: 86:6f:79:44:fb:27:97:01:26:b5:d4:92:be:b9:97:11:7b:8c: fc:f7:77:bd:70:2c:b8:6c:19:2a:f2:2c:97:33:a0:d5:f1:db: d8:6d:86:fd:b1:04:58:45:78:d4:0f:f4:ec:c0:ef:09:58:0a: c4:21:6a:96:98:61:a4:69:83:2e:1d:7c:93:bf:84:6d:14:41: f6:ae:be:f6:d4:c6:a5:93:85:88:ad:0b:7f:b5:cc:46:16:c1: d4:76:8b:fc:02:5b:d2:a2:d1:d0:21:77:1f:e1:c2:90:e0:c1: 34:d2:f8:8a:81:46:d9:fd:61:47:1a:6c:44:26:a8:15:fa:d3: d7:76:fa:1e:60:4d:67:c1:70:b7:91:49:45:fc:ab:49:76:9f: 55:30:d1:28:aa:3f:cc:42:81:9e:3b:69:ef:ea:c1:39:f7:f0: f6:bc:e0:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ntg0/kVMUKDIPQgyt30wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Y2I2NjFhNjQzOTY4ZjNmODFlN2IxMTllZWI5NmM1MGQy ZDM5YzcwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzkzYjRiMzE2NTM3MTllODkxMmRkMDU5MzQ2OWQ0MzAxM2M2YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEdoEv+mJ+dymIMwbgzrBPtYAynh MILWu4pZ9WXQIjjfouJXGeh9FquUFs//KCBFAmZlyDQX4ahmWq2W255DiBYIcMAP 2CoDml6OrhGk/wekr5VeXZ+n+i+jcvTAwRsm093hSA/rXvdb++Msr3OE2aJlFCXK uYuNi4L7U96vt0VPAc8xyL5RmcMBFs5qHART8CUyh2kCjtjXkHN2tumo1RQfNlzP pfcVAvqpoP1Lgehe3nR5pY1SZqwjQ6YpmZR8heMgGv1eDO2d6rMg4+4oZwRDyALx oQDMNlq5K5/zZPsAStEUUXKz39JXx+Txj4fOdt1aRIRDkZUZNFDgxCaeXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyTtLMWU3GeiRLdBZNGnUMBPGsfMB8GA1UdIwQY MBaAFCjLZhpkOWjz+B57EZ7rlsUNLTnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYt N2Q0ZTY4ZGQ0Y2NlLzEvakpPMHN4WlRjWjZKRXQwRmswYWRRd0U4YXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYtN2Q0ZTY4ZGQ0Y2Nl LzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudRcMA0G CSqGSIb3DQEBCwUAA4IBAQCsftJOzpf8Scz41LltsFqcWialavDLZ9LLPoolsDrS qpszZFstVAl/ox1EZ3yQOPJtuNxUrgHKKkqrgQJKVuiLhYerVAtloBu9Qu4/7zZQ 3sleTIVhz9eFdPuGb3lE+yeXASa11JK+uZcRe4z893e9cCy4bBkq8iyXM6DV8dvY bYb9sQRYRXjUD/TswO8JWArEIWqWmGGkaYMuHXyTv4RtFEH2rr721Malk4WIrQt/ tcxGFsHUdov8AlvSotHQIXcf4cKQ4ME00viKgUbZ/WFHGmxEJqgV+tPXdvoeYE1n wXC3kUlF/KtJdp9VMNEoqj/MQoGeO2nv6sE59/D2vOCc -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:06 2026 by rpki-client