This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jArwDQhgf-OQEPRcAKlO11cnSfU.roa File: jArwDQhgf-OQEPRcAKlO11cnSfU.roa (raw, json) Hash identifier: V4+R7avAqMkdvxIuR210FAGJtjpBNoAuWb9jTKzrVeo= Subject key identifier: 8C:0A:F0:0D:08:60:7F:E3:90:10:F4:5C:00:A9:4E:D7:57:27:49:F5 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFE5B955931147833911CB199C6EE Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jArwDQhgf-OQEPRcAKlO11cnSfU.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12364 IP address blocks: 83.212.88.0/22 maxlen: 22 195.251.208.0/20 maxlen: 20 2001:648:2810::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fe:5b:95:59:31:14:78:33:91:1c:b1:99:c6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c0af00d08607fe39010f45c00a94ed7572749f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:06:5f:18:ca:64:0d:51:c6:73:50:6a:17: d0:82:20:de:57:0d:14:f8:c0:53:0c:a3:3e:5e:df: c6:a2:e9:21:fd:23:1a:2d:8a:45:30:12:ca:34:03: 06:af:d5:b7:e8:ea:3d:e8:ed:a7:8e:40:2e:db:03: 5e:f2:b5:97:37:3c:8b:f2:8c:43:38:37:01:5a:f1: d5:77:98:0c:41:4e:6e:e2:14:2d:ba:93:01:00:3b: 20:83:fb:95:a9:c9:e8:d9:6a:fc:09:65:77:6e:bf: 00:dc:29:e1:89:d1:7b:ec:48:91:27:ec:41:5c:19: 41:85:f3:f8:5b:d7:6f:1a:28:b1:8d:7a:7a:5a:87: 0a:ed:5f:1d:cc:36:2c:a7:13:8c:c7:e7:ba:ce:2f: ab:63:6a:82:45:62:9b:65:30:3b:8a:38:9f:59:9b: 2c:f0:bc:57:31:a3:50:af:d2:18:f2:97:29:d3:fa: bb:87:57:76:f7:94:38:7a:9c:79:df:35:7d:67:d0: 48:bb:8a:6d:3e:58:80:c9:67:0b:5a:7f:f1:7a:3e: cf:64:57:18:25:58:a5:dc:c4:f2:ba:67:10:b1:c5: f9:6b:64:b0:67:12:a0:0d:3a:10:9d:a3:8d:32:5a: 7a:9f:a9:b6:9f:e7:ed:d5:bf:a2:5c:a5:6d:31:ea: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:F0:0D:08:60:7F:E3:90:10:F4:5C:00:A9:4E:D7:57:27:49:F5 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jArwDQhgf-OQEPRcAKlO11cnSfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.88.0/22 195.251.208.0/20 IPv6: 2001:648:2810::/48 Signature Algorithm: sha256WithRSAEncryption 5b:d2:ac:04:87:8b:32:87:a4:c0:3a:59:0d:8e:47:0c:55:74: 30:99:ad:19:25:49:f9:b6:41:87:6f:70:e1:9c:71:e3:03:72: d2:93:a6:b6:b3:0c:dd:4f:20:3f:0e:31:2b:71:8b:b4:86:9f: 48:84:d7:da:b2:3f:7c:d3:9a:7e:3c:4e:38:09:7d:1a:03:69: f2:3c:a3:ce:5e:93:a6:ab:63:40:f3:1c:31:71:b1:ed:18:cb: 08:49:63:bd:99:09:ef:ae:30:33:24:79:0b:b1:81:ba:93:95: fa:6d:7c:2e:ce:22:a7:9c:50:40:2f:a8:07:a1:c6:cf:57:47: 81:4a:1f:22:6b:56:c6:6e:53:f4:d5:d4:9a:65:5f:90:b3:ab: 0d:5b:20:b9:11:23:a4:2f:71:a3:0e:0f:1d:62:df:37:9c:b0: e7:6b:f1:d7:61:74:25:7c:8c:b9:a7:6f:94:75:e5:2c:f5:62: 3c:94:07:84:c2:5d:9b:6c:b9:e0:fb:c6:39:84:86:28:17:6a: 81:4a:7a:e1:ea:72:0c:f2:fe:6b:7c:78:f4:48:99:97:79:23: 64:86:8a:bf:89:48:c8:15:79:8c:1c:c3:21:d5:59:e6:e8:16: a6:95:ee:67:02:59:9c:0d:01:36:ab:d1:2b:31:2d:f8:ef:12: cb:dc:78:a0 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87P5blVkxFHgzkRyxmcbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzBhZjAwZDA4NjA3ZmUzOTAxMGY0NWMwMGE5NGVkNzU3Mjc0OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hAGXxjKZA1RxnNQahfQgiDeVw0U +MBTDKM+Xt/Goukh/SMaLYpFMBLKNAMGr9W36Oo96O2njkAu2wNe8rWXNzyL8oxD ODcBWvHVd5gMQU5u4hQtupMBADsgg/uVqcno2Wr8CWV3br8A3CnhidF77EiRJ+xB XBlBhfP4W9dvGiixjXp6WocK7V8dzDYspxOMx+e6zi+rY2qCRWKbZTA7ijifWZss 8LxXMaNQr9IY8pcp0/q7h1d295Q4epx53zV9Z9BIu4ptPliAyWcLWn/xej7PZFcY JVil3MTyumcQscX5a2SwZxKgDToQnaONMlp6n6m2n+ft1b+iXKVtMeovZQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIwK8A0IYH/jkBD0XACpTtdXJ0n1MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvakFyd0RRaGdmLU9RRVBSY0FLbE8xMWNuU2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCU9RYAwQE w/vQMA8EAgACMAkDBwAgAQZIKBAwDQYJKoZIhvcNAQELBQADggEBAFvSrASHizKH pMA6WQ2ORwxVdDCZrRklSfm2QYdvcOGcceMDctKTprazDN1PID8OMStxi7SGn0iE 19qyP3zTmn48TjgJfRoDafI8o85ek6arY0DzHDFxse0YywhJY72ZCe+uMDMkeQux gbqTlfptfC7OIqecUEAvqAehxs9XR4FKHyJrVsZuU/TV1JplX5Czqw1bILkRI6Qv caMODx1i3zecsOdr8ddhdCV8jLmnb5R15Sz1YjyUB4TCXZtsueD7xjmEhigXaoFK euHqcgzy/mt8ePRImZd5I2SGir+JSMgVeYwcwyHVWeboFqaV7mcCWZwNATar0Ssx LfjvEsvceKA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:27 2026 by rpki-client