This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jl7QDhibiq_JOYv1vjDrL8Omz9o.roa File: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (raw, json) Hash identifier: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo= Subject key identifier: 8E:5E:D0:0E:18:9B:8A:AF:C9:39:8B:F5:BE:30:EB:2F:C3:A6:CF:DA Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA8006C98A82432C426CB97C569E55 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jl7QDhibiq_JOYv1vjDrL8Omz9o.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.217.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:80:06:c9:8a:82:43:2c:42:6c:b9:7c:56:9e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5ed00e189b8aafc9398bf5be30eb2fc3a6cfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:1a:d9:af:50:be:57:19:af:ad:61:38:75: 7b:e9:16:51:ee:8d:7a:6d:f7:90:c9:1d:bf:c1:f9: d8:2f:23:81:34:41:c0:a0:fb:e1:3c:6a:c2:a6:f1: c9:d9:16:fb:cb:83:67:58:17:ca:48:ed:be:02:21: 0f:85:76:ca:dd:cc:7f:eb:ac:64:20:e5:e0:37:3f: fc:1e:78:34:51:0b:f5:06:25:11:b5:a1:50:bf:e5: 29:9c:1e:8c:d0:b9:74:e3:db:dc:16:fe:41:39:94: 00:d8:7f:29:30:90:80:1e:7c:e8:3f:b9:11:e9:ee: 9e:84:5d:d6:ce:7d:35:62:55:ce:26:9f:7b:54:c8: 22:55:93:e0:45:3c:40:e8:76:0b:83:ef:a4:2d:b3: 4b:5b:ad:c1:a4:78:ed:14:e7:a2:a9:49:01:81:5f: 53:e2:63:88:96:7b:e7:41:22:46:6a:4f:d2:3b:bf: 5a:a7:2f:e0:2d:1b:aa:b9:4e:30:b3:ed:e4:8e:cb: 03:44:d9:92:cb:6e:bd:7b:5c:ad:4e:da:07:46:75: 25:c3:ad:9c:84:68:4a:34:07:2f:8d:5f:98:d8:2b: 39:66:a7:77:cf:81:2b:d4:fe:1c:c9:57:d0:60:d8: 49:64:c7:36:bc:97:0c:64:37:5a:66:64:d1:e5:d1: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5E:D0:0E:18:9B:8A:AF:C9:39:8B:F5:BE:30:EB:2F:C3:A6:CF:DA X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jl7QDhibiq_JOYv1vjDrL8Omz9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.192.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:e9:55:42:41:2a:0d:f8:47:92:09:51:61:0c:ad:21:bf:b4: bf:1a:8b:af:dd:62:b0:af:d2:39:d1:8f:4b:95:35:91:42:d3: 20:a5:ee:e8:52:a1:07:cc:de:1f:d3:fc:b2:18:f5:c1:dc:f8: 6e:20:5f:db:e8:39:3d:f3:2c:ae:15:1e:72:9c:54:53:e1:2f: 3a:f9:6d:ca:a0:b5:e2:57:38:28:4e:45:4d:c3:a3:e4:3c:c5: 42:99:9c:60:62:e6:3a:48:6a:fd:18:db:d6:91:4b:60:f1:e6: 56:b2:df:82:64:aa:c3:8a:b1:e7:62:b4:9d:ed:f7:54:1c:28: 2c:dd:14:c4:57:42:f2:f5:e7:81:ec:b6:7a:1e:e4:a7:35:f1: 91:14:c2:fa:91:08:fb:c6:14:0f:27:37:03:74:f5:2e:0d:d5: d1:17:77:12:4f:96:a5:e2:b3:cf:8c:e9:14:ea:ea:1f:ad:c3: d4:db:2e:62:ca:32:87:20:23:30:73:ae:a1:94:62:8c:7a:08: 50:39:a1:7b:44:61:4c:65:af:4f:ed:aa:40:45:b7:dd:62:ab: a4:a7:ee:0b:cc:5f:d2:6c:1e:5a:ce:36:08:db:0e:69:d7:eb: b4:39:7f:b3:88:0f:62:56:f8:5b:b7:23:96:5c:80:36:de:47: e8:26:b2:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoAGyYqCQyxCbLl8Vp5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTVlZDAwZTE4OWI4YWFmYzkzOThiZjViZTMwZWIyZmMzYTZjZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqMa2a9QvlcZr61hOHV76RZR7o16 bfeQyR2/wfnYLyOBNEHAoPvhPGrCpvHJ2Rb7y4NnWBfKSO2+AiEPhXbK3cx/66xk IOXgNz/8Hng0UQv1BiURtaFQv+UpnB6M0Ll049vcFv5BOZQA2H8pMJCAHnzoP7kR 6e6ehF3Wzn01YlXOJp97VMgiVZPgRTxA6HYLg++kLbNLW63BpHjtFOeiqUkBgV9T 4mOIlnvnQSJGak/SO79apy/gLRuquU4ws+3kjssDRNmSy269e1ytTtoHRnUlw62c hGhKNAcvjV+Y2Cs5Zqd3z4Er1P4cyVfQYNhJZMc2vJcMZDdaZmTR5dFWPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5e0A4Ym4qvyTmL9b4w6y/Dps/aMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvamw3UURoaWJpcV9KT1l2MXZqRHJMOE9tejlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudnAMA0G CSqGSIb3DQEBCwUAA4IBAQCO6VVCQSoN+EeSCVFhDK0hv7S/Gouv3WKwr9I50Y9L lTWRQtMgpe7oUqEHzN4f0/yyGPXB3PhuIF/b6Dk98yyuFR5ynFRT4S86+W3KoLXi VzgoTkVNw6PkPMVCmZxgYuY6SGr9GNvWkUtg8eZWst+CZKrDirHnYrSd7fdUHCgs 3RTEV0Ly9eeB7LZ6HuSnNfGRFML6kQj7xhQPJzcDdPUuDdXRF3cST5al4rPPjOkU 6uofrcPU2y5iyjKHICMwc66hlGKMeghQOaF7RGFMZa9P7apARbfdYqukp+4LzF/S bB5azjYI2w5p1+u0OX+ziA9iVvhbtyOWXIA23kfoJrKv -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:57 2026 by rpki-client