This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/j0mWI7cQWBCGiDlGDSGVoZj238E.roa File: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (raw, json) Hash identifier: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE= Subject key identifier: 8F:49:96:23:B7:10:58:10:86:88:39:46:0D:21:95:A1:98:F6:DF:C1 Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a Certificate serial: 019B7B355A61AADF46351F3EEA1BA39D0201 Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/j0mWI7cQWBCGiDlGDSGVoZj238E.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215718 IP address blocks: 185.206.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5a:61:aa:df:46:35:1f:3e:ea:1b:a3:9d:02:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f499623b7105810868839460d2195a198f6dfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6b:cc:ef:dc:4b:3b:14:b4:ac:f8:48:cf:4b: ff:cd:e8:a1:f5:c3:05:3d:3a:1f:49:1a:ef:a5:fd: 3b:88:71:28:8a:ac:9e:9e:e8:17:db:1d:3c:38:27: d6:44:d9:00:32:70:8f:0e:a4:f4:34:3c:29:a9:38: ae:95:b0:20:90:0d:18:f3:bf:3d:e0:c0:89:18:e8: e9:25:80:18:c8:c1:8a:11:86:bb:22:61:5e:41:e9: f2:0f:04:0d:c5:45:4a:3d:18:f0:50:f2:64:55:7a: 5a:cb:25:e0:7e:0a:bb:98:63:2f:20:2d:f5:85:3a: 6d:27:cf:30:a6:e0:9a:dc:a3:75:53:67:5d:29:44: 1e:84:de:09:db:be:64:0e:0c:e9:40:82:89:d5:77: 9f:e7:af:63:dd:23:59:35:ed:23:c5:cd:00:10:81: ca:93:34:ef:cd:00:a3:52:07:d3:df:55:d7:59:d2: de:eb:6b:dd:be:48:7f:df:79:43:b7:cd:b3:a5:27: 63:44:e9:ed:3a:7e:02:d8:27:b5:bd:27:dc:a9:7b: ea:55:13:bd:81:1c:ae:1a:ff:3e:eb:93:50:5e:77: e9:c8:59:08:55:7a:9d:7b:ef:ca:8a:d8:6a:7c:d5: df:30:90:5b:ed:91:09:34:e7:88:62:af:d0:9b:51: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:96:23:B7:10:58:10:86:88:39:46:0D:21:95:A1:98:F6:DF:C1 X509v3 Authority Key Identifier: keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/j0mWI7cQWBCGiDlGDSGVoZj238E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.255.0/24 Signature Algorithm: sha256WithRSAEncryption 84:62:ae:a4:05:06:63:7a:c2:52:19:fb:0e:4d:2a:c5:be:0b: 6f:61:63:d5:70:ca:b0:92:25:d4:4c:fd:0b:bb:a4:0a:be:1f: 92:97:f9:06:af:59:e3:19:d5:88:bf:42:12:21:f5:04:2c:1c: 21:9b:9b:93:29:58:dc:65:82:39:49:77:2d:39:46:6e:c4:df: 30:e7:1b:f8:87:e0:af:11:61:57:05:59:41:20:02:9e:c2:fc: 6e:e2:d9:da:ab:28:5d:4e:b2:02:3e:b4:c6:6f:9a:44:b3:20: 60:e2:44:39:90:c0:34:45:8a:ad:8b:bf:6a:91:46:1a:51:81: e0:31:10:00:24:be:55:3c:ea:ca:7d:76:43:d2:d9:9c:af:8b: 6c:95:e4:0b:bf:89:b9:74:fb:c0:bd:75:d6:49:70:71:8b:32: d9:ec:8b:8d:5e:89:e0:0e:10:64:87:af:aa:c0:fa:25:44:4c: 5b:6b:83:15:53:68:0d:bd:00:a5:a9:ba:cb:9b:be:9b:93:aa: 8a:5d:e9:5a:c9:c0:58:96:d0:51:b0:9b:c5:5f:e6:33:4e:23: ad:83:1d:a0:55:15:61:30:b0:7d:26:1d:72:99:f8:88:4a:c2: 96:f0:58:58:b2:fa:79:61:ed:d5:91:1d:85:29:b2:80:e2:9c: 68:04:f7:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVphqt9GNR8+6hujnQIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm NzI3MmEwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQ5OTYyM2I3MTA1ODEwODY4ODM5NDYwZDIxOTVhMTk4ZjZkZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mvM79xLOxS0rPhIz0v/zeih9cMF PTofSRrvpf07iHEoiqyenugX2x08OCfWRNkAMnCPDqT0NDwpqTiulbAgkA0Y8789 4MCJGOjpJYAYyMGKEYa7ImFeQenyDwQNxUVKPRjwUPJkVXpayyXgfgq7mGMvIC31 hTptJ88wpuCa3KN1U2ddKUQehN4J275kDgzpQIKJ1Xef569j3SNZNe0jxc0AEIHK kzTvzQCjUgfT31XXWdLe62vdvkh/33lDt82zpSdjROntOn4C2Ce1vSfcqXvqVRO9 gRyuGv8+65NQXnfpyFkIVXqde+/KithqfNXfMJBb7ZEJNOeIYq/Qm1FM9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9JliO3EFgQhog5Rg0hlaGY9t/BMB8GA1UdIwQY MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It ZTUyMmNhZTYzNDcwLzEvajBtV0k3Y1FXQkNHaURsR0RTR1ZvWmoyMzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc7/MA0G CSqGSIb3DQEBCwUAA4IBAQCEYq6kBQZjesJSGfsOTSrFvgtvYWPVcMqwkiXUTP0L u6QKvh+Sl/kGr1njGdWIv0ISIfUELBwhm5uTKVjcZYI5SXctOUZuxN8w5xv4h+Cv EWFXBVlBIAKewvxu4tnaqyhdTrICPrTGb5pEsyBg4kQ5kMA0RYqti79qkUYaUYHg MRAAJL5VPOrKfXZD0tmcr4tsleQLv4m5dPvAvXXWSXBxizLZ7IuNXongDhBkh6+q wPolRExba4MVU2gNvQClqbrLm76bk6qKXelaycBYltBRsJvFX+YzTiOtgx2gVRVh MLB9Jh1ymfiISsKW8FhYsvp5Ye3VkR2FKbKA4pxoBPdU -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:49 2026 by rpki-client