This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/JNb8qAOe82PBo3QGsaNX-y91s-c.roa File: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (raw, json) Hash identifier: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s= Subject key identifier: 24:D6:FC:A8:03:9E:F3:63:C1:A3:74:06:B1:A3:57:FB:2F:75:B3:E7 Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4 Certificate serial: 019B7DC9FB3B03FBD8FD916081390D54BC5A Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/JNb8qAOe82PBo3QGsaNX-y91s-c.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201736 IP address blocks: 185.67.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fb:3b:03:fb:d8:fd:91:60:81:39:0d:54:bc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d6fca8039ef363c1a37406b1a357fb2f75b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:56:e6:72:73:4a:0b:5b:a2:b6:55:65:c1: 0e:d4:e1:8d:0d:c9:a8:82:96:ad:46:1d:ad:77:3c: 2e:27:4c:c3:11:ba:b1:cc:0c:8f:14:cf:e2:89:10: b9:dd:ab:1c:b1:58:7a:47:b2:80:55:6d:a2:48:ed: 33:33:a4:44:cc:4d:a2:11:e4:47:e8:6c:d5:6c:93: ab:19:4a:7a:e5:67:86:b7:45:c9:af:a0:39:f2:a8: 6d:51:ea:59:3f:ed:5b:30:d0:4d:21:c1:5a:5f:d6: 85:d3:e7:71:4e:e1:d2:b1:b8:36:9a:0c:dc:29:93: 22:d3:de:24:f5:42:c6:b6:43:20:c5:ea:e4:c0:44: a7:40:0a:fa:76:a4:fd:0f:5c:d3:5e:0c:50:24:ed: 33:1b:2e:f0:c7:54:48:ac:ce:2a:14:1f:8b:b2:7a: c9:48:84:93:99:30:97:35:2d:04:30:a9:7a:5d:a2: 69:07:ba:e0:d8:7d:52:47:79:8b:91:a4:0f:fc:8e: f3:bf:3a:60:29:07:fb:0d:1d:8d:ef:5d:a4:a8:0b: e9:1f:5d:3b:70:9f:61:cb:15:a1:be:50:0b:b8:c0: 9f:1e:7d:92:4d:73:44:9d:46:3d:73:92:89:7b:90: e2:22:d8:8f:78:fb:16:80:2f:7d:1a:5b:97:69:a0: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:FC:A8:03:9E:F3:63:C1:A3:74:06:B1:A3:57:FB:2F:75:B3:E7 X509v3 Authority Key Identifier: keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/JNb8qAOe82PBo3QGsaNX-y91s-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.228.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:9b:d5:b8:9e:05:65:68:8d:44:8b:24:d9:c6:8a:97:6b:2b: 3c:c4:07:ee:6a:de:88:6b:c0:04:7e:f1:5b:39:0a:83:41:d4: 8c:7b:a7:24:48:fc:92:54:d8:fe:f5:1b:bd:8b:84:57:a1:6d: 77:1a:b2:38:7e:56:f5:e2:e3:25:a1:4e:72:3e:6a:7e:95:d0: d9:e2:51:61:68:60:82:e7:b4:6c:3d:25:bd:6c:29:bb:04:c3: aa:8f:88:9f:d1:d2:07:6d:53:80:90:7e:32:f3:be:07:d1:56: dd:b7:d4:a3:64:a0:81:ce:49:aa:72:aa:6b:dc:c7:d0:42:1a: 13:7a:e9:36:b6:9e:71:c8:c9:20:a8:12:19:92:ef:c2:e8:c1: 7f:f3:2c:88:1b:35:fa:c0:eb:46:df:cf:20:05:71:30:d5:df: 0d:3e:3d:15:eb:5b:62:e8:ac:ba:e0:9d:34:03:16:d4:ef:81: ca:c1:3f:e8:29:6f:05:5f:72:6f:ee:df:b1:dd:00:89:37:ac: a0:e0:56:c0:d2:4b:8e:15:00:8e:76:41:df:9e:6c:4c:fe:bc: 55:76:b5:d3:f2:6c:a0:83:70:18:da:3f:42:22:a5:b4:e6:e2: 30:0c:08:dc:76:42:aa:6a:98:58:e9:10:39:90:fd:95:73:14: fc:fd:73:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfs7A/vY/ZFggTkNVLxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWE5ZTJjNGFjOGJjMDJiYzNmZjg5MjVhYzEzMTc0ZDJk NDc4YzQwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQ2ZmNhODAzOWVmMzYzYzFhMzc0MDZiMWEzNTdmYjJmNzViM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRW5nJzSgtborZVZcEO1OGNDcmo gpatRh2tdzwuJ0zDEbqxzAyPFM/iiRC53ascsVh6R7KAVW2iSO0zM6REzE2iEeRH 6GzVbJOrGUp65WeGt0XJr6A58qhtUepZP+1bMNBNIcFaX9aF0+dxTuHSsbg2mgzc KZMi094k9ULGtkMgxerkwESnQAr6dqT9D1zTXgxQJO0zGy7wx1RIrM4qFB+LsnrJ SISTmTCXNS0EMKl6XaJpB7rg2H1SR3mLkaQP/I7zvzpgKQf7DR2N712kqAvpH107 cJ9hyxWhvlALuMCfHn2STXNEnUY9c5KJe5DiItiPePsWgC99GluXaaDvrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTW/KgDnvNjwaN0BrGjV/svdbPnMB8GA1UdIwQY MBaAFNJanixKyLwCvD/4klrBMXTS1HjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMt ZTA2OWVlMTA3YWRkLzEvSk5iOHFBT2U4MlBCbzNRR3NhTlgteTkxcy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMtZTA2OWVlMTA3YWRk LzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUPkMA0G CSqGSIb3DQEBCwUAA4IBAQA7m9W4ngVlaI1EiyTZxoqXays8xAfuat6Ia8AEfvFb OQqDQdSMe6ckSPySVNj+9Ru9i4RXoW13GrI4flb14uMloU5yPmp+ldDZ4lFhaGCC 57RsPSW9bCm7BMOqj4if0dIHbVOAkH4y874H0Vbdt9SjZKCBzkmqcqpr3MfQQhoT euk2tp5xyMkgqBIZku/C6MF/8yyIGzX6wOtG388gBXEw1d8NPj0V61ti6Ky64J00 AxbU74HKwT/oKW8FX3Jv7t+x3QCJN6yg4FbA0kuOFQCOdkHfnmxM/rxVdrXT8myg g3AY2j9CIqW05uIwDAjcdkKqaphY6RA5kP2VcxT8/XNe -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:26 2026 by rpki-client