This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jj0kQI6yg8bBxws973JitM7Vylc.roa File: Jj0kQI6yg8bBxws973JitM7Vylc.roa (raw, json) Hash identifier: nvdRW7fyMParYWN+M7Ro/33lJvPvfnMF2GNihFT+Wjk= Subject key identifier: 26:3D:24:40:8E:B2:83:C6:C1:C7:0B:3D:EF:72:62:B4:CE:D5:CA:57 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138399D5F1F7CA8A4AEA797E5D4664 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jj0kQI6yg8bBxws973JitM7Vylc.roa Signing time: Fri 02 Jan 2026 00:20:12 +0000 ROA not before: Fri 02 Jan 2026 00:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 185.194.30.0/24 maxlen: 24 185.218.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:83:99:d5:f1:f7:ca:8a:4a:ea:79:7e:5d:46:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=263d24408eb283c6c1c70b3def7262b4ced5ca57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:a4:72:89:53:3d:61:fa:f3:87:cf:ca:f4: 0e:45:23:f1:39:25:fc:a4:2d:0c:70:d4:b2:c6:89: 3e:e3:ff:73:a6:04:73:a2:3a:2f:a7:df:d4:d3:a6: 42:b8:bd:80:5c:94:2d:78:6e:bb:a8:23:82:ba:e8: 7d:29:6b:e2:04:f6:fa:ed:46:a0:9a:41:40:a0:cd: c8:39:49:ce:44:f9:99:b1:28:b6:2f:d1:aa:92:6c: 03:63:fb:34:aa:42:bb:a6:b8:c3:fc:88:b4:79:6f: 19:23:3d:07:fb:9d:d5:c9:38:48:35:b0:24:14:64: 1d:65:86:11:fa:ca:90:c2:0a:12:65:f9:48:3b:96: 5a:ff:a4:2d:3b:d4:3a:68:39:cd:2a:c2:cc:52:1a: 22:29:36:4f:a8:a5:a3:2e:0a:c5:b7:52:4d:7f:9a: b0:53:52:64:26:0c:3b:4b:c7:ea:25:7d:cf:90:9c: be:99:21:a0:f0:b1:35:30:00:d6:ff:d3:cf:af:9b: 49:8c:18:93:03:8e:3a:1f:01:82:e4:ca:60:61:ab: 83:f9:5e:90:b7:f7:05:a1:a5:fc:85:04:08:c0:d4: 3b:23:95:99:ba:f3:f5:6a:24:10:34:0b:a1:ba:f2: f7:50:3e:e1:be:1d:58:3c:60:e0:d7:73:7f:19:5e: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:24:40:8E:B2:83:C6:C1:C7:0B:3D:EF:72:62:B4:CE:D5:CA:57 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jj0kQI6yg8bBxws973JitM7Vylc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.30.0/24 185.218.101.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b5:a0:c2:25:8b:f6:54:4d:12:a9:a9:32:08:91:07:15:c2: 50:b2:a7:10:bc:f1:ac:e5:f6:af:1e:5e:53:0a:a7:6c:7b:0e: fe:d3:76:e3:84:f5:e4:41:8b:48:64:74:f0:c8:60:1a:0a:b1: a3:52:31:ee:e9:b5:6d:33:2f:12:6d:1a:69:6b:a0:d3:30:86: 64:28:0c:db:e2:df:8d:30:9f:76:5a:27:03:18:3e:83:2f:ca: a2:68:22:bb:23:4e:f8:a9:3a:1e:27:71:4c:ee:df:42:78:12: 06:f9:40:18:70:ed:40:9a:6d:30:87:4f:e4:36:88:f0:57:c7: e7:7a:6d:3f:34:57:10:dc:e4:b2:b4:59:a7:9e:86:7a:0a:18: 4a:ad:59:84:a2:f9:96:64:41:5c:18:ee:a7:57:77:a1:f4:d8: 69:69:44:46:c6:6f:f0:e0:ad:39:32:39:ea:3d:b2:2c:d7:93: 8d:0d:ff:a5:29:4e:d6:e8:a4:74:06:47:39:74:a2:95:4d:ac: 6d:9d:69:32:b0:84:0f:3a:ee:d0:6f:cf:89:4f:26:a4:37:65: 8b:40:d0:d2:3c:0c:c7:69:67:7e:1f:6f:da:5b:ff:94:33:98: 15:de:0f:08:91:3e:20:6d:22:50:10:b9:54:1d:e5:eb:5f:95: 3d:04:ef:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E4OZ1fH3yopK6nl+XUZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjNkMjQ0MDhlYjI4M2M2YzFjNzBiM2RlZjcyNjJiNGNlZDVjYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzamkcolTPWH684fPyvQORSPxOSX8 pC0McNSyxok+4/9zpgRzojovp9/U06ZCuL2AXJQteG67qCOCuuh9KWviBPb67Uag mkFAoM3IOUnORPmZsSi2L9GqkmwDY/s0qkK7prjD/Ii0eW8ZIz0H+53VyThINbAk FGQdZYYR+sqQwgoSZflIO5Za/6QtO9Q6aDnNKsLMUhoiKTZPqKWjLgrFt1JNf5qw U1JkJgw7S8fqJX3PkJy+mSGg8LE1MADW/9PPr5tJjBiTA446HwGC5MpgYauD+V6Q t/cFoaX8hQQIwNQ7I5WZuvP1aiQQNAuhuvL3UD7hvh1YPGDg13N/GV61lQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCY9JECOsoPGwccLPe9yYrTO1cpXMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvSmowa1FJNnlnOGJCeHdzOTczSml0TTdWeWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucIeAwQA udplMA0GCSqGSIb3DQEBCwUAA4IBAQBQtaDCJYv2VE0SqakyCJEHFcJQsqcQvPGs 5favHl5TCqdsew7+03bjhPXkQYtIZHTwyGAaCrGjUjHu6bVtMy8SbRppa6DTMIZk KAzb4t+NMJ92WicDGD6DL8qiaCK7I074qToeJ3FM7t9CeBIG+UAYcO1Amm0wh0/k NojwV8fnem0/NFcQ3OSytFmnnoZ6ChhKrVmEovmWZEFcGO6nV3eh9NhpaURGxm/w 4K05MjnqPbIs15ONDf+lKU7W6KR0Bkc5dKKVTaxtnWkysIQPOu7Qb8+JTyakN2WL QNDSPAzHaWd+H2/aW/+UM5gV3g8IkT4gbSJQELlUHeXrX5U9BO9t -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:22 2026 by rpki-client