This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa File: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (raw, json) Hash identifier: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4= Subject key identifier: 72:37:C0:0C:B6:83:10:59:50:2B:CA:AB:54:9E:4D:8A:96:E1:99:84 Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447 Certificate serial: 019B7C80133A047172C000C044393F3DAAA8 Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21430 IP address blocks: 85.209.124.0/23 maxlen: 23 85.209.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:3a:04:71:72:c0:00:c0:44:39:3f:3d:aa:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7237c00cb6831059502bcaab549e4d8a96e19984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:cf:8a:02:37:1d:bf:a5:2e:81:6d:b9:66: 4e:e9:c8:f9:ee:88:a1:64:b2:57:47:02:55:a3:66: 89:d3:b1:1b:ec:1b:6e:0f:27:be:26:fd:a4:3f:e9: 6b:1b:4a:80:d1:c1:31:29:69:81:e8:a3:f5:20:b2: 75:cf:43:27:5d:06:c0:f0:64:4e:2b:0a:a7:05:7b: d7:c2:d2:2b:ff:85:8e:90:ee:02:c0:77:cf:30:48: 00:be:87:b2:64:bf:cd:1d:0b:66:56:8f:00:91:7b: 6f:1b:60:ed:25:10:50:d8:ac:3a:93:72:6f:11:4a: 5f:93:64:0f:89:42:b3:54:6d:bc:86:8a:08:18:93: 2b:cc:d1:f3:57:58:85:3f:d1:69:40:45:ec:4d:94: d2:fe:56:57:9c:33:5c:cf:42:78:8e:20:d7:df:a0: f8:ee:8e:06:72:55:65:31:c5:92:31:14:03:98:12: 6f:d4:40:c5:4e:b2:d7:c2:69:22:1b:53:e2:b4:e1: e5:74:31:c7:28:d3:60:e7:b3:f4:a9:39:f9:97:88: 87:88:d6:b7:10:5d:21:72:10:29:d6:c0:bd:63:03: d4:cc:d4:13:9b:73:82:b5:2f:51:77:df:7a:72:11: 9d:4c:81:b7:31:c2:f3:8a:94:e8:8f:b2:11:cf:af: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:C0:0C:B6:83:10:59:50:2B:CA:AB:54:9E:4D:8A:96:E1:99:84 X509v3 Authority Key Identifier: keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.124.0-85.209.126.255 Signature Algorithm: sha256WithRSAEncryption b8:d3:73:53:e0:e0:19:40:ad:33:8e:c2:86:3f:28:3f:a6:3f: 92:24:8c:21:74:27:00:dc:30:65:50:72:aa:9d:b9:ba:39:53: 55:03:f7:22:89:d2:ed:32:51:ea:58:64:22:55:a7:c5:44:d8: 62:40:e0:c0:5f:f8:c8:61:42:f1:3d:43:f4:15:1d:11:7b:f9: 0f:0c:a4:cc:74:38:2f:a1:a4:68:ab:bd:a8:e4:fc:4d:d0:bc: 2a:ce:e4:20:07:93:c0:3d:89:3d:ea:0c:fb:31:4a:7c:96:0f: 2e:91:a9:72:2d:fa:90:b4:9d:c3:3b:b9:6c:83:fc:c6:8f:da: 12:52:bb:a9:bd:6a:f9:67:fd:40:0f:3e:af:5d:d9:94:75:6a: 4e:97:88:d7:7f:58:1e:ff:92:c1:56:fe:61:16:b0:1e:5d:e1: 08:62:ee:4c:39:3d:64:fc:f7:28:f0:6b:76:aa:60:37:03:a6: a9:06:10:f2:cf:81:c4:37:c6:01:61:c9:53:3b:36:b5:17:f5: 23:9b:8b:8b:0d:32:f5:90:37:b6:b1:12:c9:a7:82:c1:11:ad: fa:c1:5e:38:ac:55:2d:31:cd:30:ef:69:73:6f:8d:12:4c:5a: be:57:37:b8:a8:b8:d4:60:41:c9:d2:32:85:87:37:d2:ca:b3: 10:d4:02:95 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gBM6BHFywADARDk/PaqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5 ZTk0NDcwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjM3YzAwY2I2ODMxMDU5NTAyYmNhYWI1NDllNGQ4YTk2ZTE5OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomzPigI3Hb+lLoFtuWZO6cj57oih ZLJXRwJVo2aJ07Eb7BtuDye+Jv2kP+lrG0qA0cExKWmB6KP1ILJ1z0MnXQbA8GRO KwqnBXvXwtIr/4WOkO4CwHfPMEgAvoeyZL/NHQtmVo8AkXtvG2DtJRBQ2Kw6k3Jv EUpfk2QPiUKzVG28hooIGJMrzNHzV1iFP9FpQEXsTZTS/lZXnDNcz0J4jiDX36D4 7o4GclVlMcWSMRQDmBJv1EDFTrLXwmkiG1PitOHldDHHKNNg57P0qTn5l4iHiNa3 EF0hchAp1sC9YwPUzNQTm3OCtS9Rd996chGdTIG3McLzipToj7IRz6+VawIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHI3wAy2gxBZUCvKq1SeTYqW4ZmEMB8GA1UdIwQY MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt YzI3OTk3NTNjODUzLzEvY2pmQURMYURFRmxRSzhxclZKNU5pcGJobVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJV0XwD BABV0X4wDQYJKoZIhvcNAQELBQADggEBALjTc1Pg4BlArTOOwoY/KD+mP5IkjCF0 JwDcMGVQcqqdubo5U1UD9yKJ0u0yUepYZCJVp8VE2GJA4MBf+MhhQvE9Q/QVHRF7 +Q8MpMx0OC+hpGirvajk/E3QvCrO5CAHk8A9iT3qDPsxSnyWDy6RqXIt+pC0ncM7 uWyD/MaP2hJSu6m9avln/UAPPq9d2ZR1ak6XiNd/WB7/ksFW/mEWsB5d4Qhi7kw5 PWT89yjwa3aqYDcDpqkGEPLPgcQ3xgFhyVM7NrUX9SObi4sNMvWQN7axEsmngsER rfrBXjisVS0xzTDvaXNvjRJMWr5XN7iouNRgQcnSMoWHN9LKsxDUApU= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:31 2026 by rpki-client