This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/jNP4lkkfBvGwQninx6yZc-naqo8.roa File: jNP4lkkfBvGwQninx6yZc-naqo8.roa (raw, json) Hash identifier: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM= Subject key identifier: 8C:D3:F8:96:49:1F:06:F1:B0:42:78:A7:C7:AC:99:73:E9:DA:AA:8F Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Certificate serial: 019B797DE58CDCD1D3F42B933FA133C03E3F Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/jNP4lkkfBvGwQninx6yZc-naqo8.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48797 IP address blocks: 95.128.232.0/22 maxlen: 22 95.128.236.0/22 maxlen: 22 185.130.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e5:8c:dc:d1:d3:f4:2b:93:3f:a1:33:c0:3e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cd3f896491f06f1b04278a7c7ac9973e9daaa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:e5:0e:5e:07:76:e8:1c:de:1c:ae:24:fd: 65:e7:91:1a:c1:7e:5e:c4:e7:3d:18:c2:9d:f0:9a: 04:38:08:24:8b:ed:59:60:3d:20:22:4a:47:ec:fc: 19:5c:c9:95:01:23:08:88:66:f7:d7:01:85:40:03: 0d:07:3c:5e:6d:4e:6e:b6:3c:71:78:0b:b7:43:41: 70:3f:6f:9c:ff:4a:5c:28:cb:df:47:97:0d:3e:08: fd:41:23:c9:80:c8:e9:27:31:f0:a0:da:a5:c3:7e: 52:33:82:69:13:c8:5b:48:56:e6:0d:7f:b3:61:3b: 16:6d:d1:60:da:1d:f1:eb:5b:3e:2f:8b:68:d6:ee: 13:d7:47:94:67:85:44:0b:aa:51:39:72:e6:62:ac: 19:0f:4e:d1:f2:61:bb:2b:db:f3:fb:3c:d9:55:44: fb:83:84:f6:2f:17:96:99:f3:0a:f2:ba:68:e9:db: 34:3d:b2:ac:4f:69:fa:02:7a:b9:ea:4e:03:d3:7b: 49:b7:ed:2e:27:e6:dd:59:31:83:e0:98:34:cd:13: 23:f4:f9:f2:2e:9a:f9:92:97:e3:76:d6:2e:f3:de: 75:01:0b:5a:31:77:e2:be:eb:a4:80:e1:7a:09:40: 13:f0:b0:db:76:e2:f1:b5:9f:c6:93:0b:4e:d8:e9: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:F8:96:49:1F:06:F1:B0:42:78:A7:C7:AC:99:73:E9:DA:AA:8F X509v3 Authority Key Identifier: keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/jNP4lkkfBvGwQninx6yZc-naqo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.232.0/21 185.130.16.0/22 Signature Algorithm: sha256WithRSAEncryption 50:68:33:74:70:3c:e0:80:db:8f:19:35:60:e8:c5:ce:30:a7: 7c:12:24:d0:e3:59:70:8f:df:66:8f:91:d0:fb:a3:51:e6:79: 33:d4:f4:b3:96:5c:3a:fa:cf:21:fc:43:58:eb:79:ea:bf:2a: d7:37:1c:9c:48:95:c2:12:ba:9d:50:d9:f9:98:c8:48:97:f7: 9c:20:c3:3f:08:b9:51:c6:74:36:78:f0:c8:8a:31:49:61:1e: d9:6d:50:30:97:e5:52:c0:99:61:da:07:f7:29:c6:9d:fa:9c: 9d:ee:f2:94:1a:d4:8c:ab:f5:ca:34:c9:fd:a5:34:3c:4a:78: 0f:b7:91:47:e2:9b:0c:ae:54:20:c9:38:4f:66:b9:30:9c:21: f3:74:20:f6:87:f7:ed:ee:9d:42:b9:a4:6b:24:4d:60:00:74: bf:eb:99:03:83:29:f0:83:a2:77:36:24:08:db:43:93:eb:c8: 9a:7e:28:89:8c:50:25:49:15:b7:b6:d9:a7:b0:14:d9:87:45: da:5a:bc:d5:d8:6d:b8:d6:2e:f3:99:9a:19:33:32:11:b3:df: d6:f8:c3:9a:56:f3:a2:1c:64:15:ce:2f:33:88:1e:fa:85:bc: 0d:88:cd:fc:c0:fc:ff:a7:a0:64:97:54:11:7f:57:54:ae:e8: 25:80:2e:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5feWM3NHT9CuTP6EzwD4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDY2NmZiYjY0YzRkYThjYjg5OTJiZjBkYTk3YjhiMDEx N2VhYzYwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2QzZjg5NjQ5MWYwNmYxYjA0Mjc4YTdjN2FjOTk3M2U5ZGFhYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN/lDl4Hdugc3hyuJP1l55EawX5e xOc9GMKd8JoEOAgki+1ZYD0gIkpH7PwZXMmVASMIiGb31wGFQAMNBzxebU5utjxx eAu3Q0FwP2+c/0pcKMvfR5cNPgj9QSPJgMjpJzHwoNqlw35SM4JpE8hbSFbmDX+z YTsWbdFg2h3x61s+L4to1u4T10eUZ4VEC6pROXLmYqwZD07R8mG7K9vz+zzZVUT7 g4T2LxeWmfMK8rpo6ds0PbKsT2n6Anq56k4D03tJt+0uJ+bdWTGD4Jg0zRMj9Pny Lpr5kpfjdtYu8951AQtaMXfivuukgOF6CUAT8LDbduLxtZ/GkwtO2On+7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIzT+JZJHwbxsEJ4p8esmXPp2qqPMB8GA1UdIwQY MBaAFPFGZvu2TE2oy4mSvw2pe4sBF+rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQt ZDQ0NjQ1NWRjNWJhLzEvak5QNGxra2ZCdkd3UW5pbng2eVpjLW5hcW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQtZDQ0NjQ1NWRjNWJh LzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX4DoAwQC uYIQMA0GCSqGSIb3DQEBCwUAA4IBAQBQaDN0cDzggNuPGTVg6MXOMKd8EiTQ41lw j99mj5HQ+6NR5nkz1PSzllw6+s8h/ENY63nqvyrXNxycSJXCErqdUNn5mMhIl/ec IMM/CLlRxnQ2ePDIijFJYR7ZbVAwl+VSwJlh2gf3Kcad+pyd7vKUGtSMq/XKNMn9 pTQ8SngPt5FH4psMrlQgyThPZrkwnCHzdCD2h/ft7p1CuaRrJE1gAHS/65kDgynw g6J3NiQI20OT68iafiiJjFAlSRW3ttmnsBTZh0XaWrzV2G241i7zmZoZMzIRs9/W +MOaVvOiHGQVzi8ziB76hbwNiM38wPz/p6Bkl1QRf1dUruglgC7m -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:52 2026 by rpki-client