This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa File: Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa (raw, json) Hash identifier: GDfbVOyE0Py9w2hVGKPYN/f02RSF/cLpQ/kkLYZ8PZc= Subject key identifier: 26:3A:76:28:5C:2D:30:FC:52:2E:C4:96:E1:DD:5B:F8:9B:E8:8E:A4 Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585 Certificate serial: 019B7BA3A670C207EB9B453B8B757A103D93 Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa Signing time: Thu 01 Jan 2026 22:18:01 +0000 ROA not before: Thu 01 Jan 2026 22:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206530 IP address blocks: 185.180.146.0/24 maxlen: 24 194.26.198.0/24 maxlen: 24 2a13:ab80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a6:70:c2:07:eb:9b:45:3b:8b:75:7a:10:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585 Validity Not Before: Jan 1 22:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=263a76285c2d30fc522ec496e1dd5bf89be88ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:30:52:91:12:c5:b8:2a:b9:ed:5d:8a:cb: ce:ac:57:cc:98:a2:d8:7e:fa:55:ac:e3:db:1a:ba: c6:2e:4c:45:52:22:98:55:b7:a7:be:1a:b2:4a:58: 09:8f:0f:1d:b6:aa:25:a8:92:8b:93:c0:de:78:9a: c4:ae:60:bb:69:43:27:0c:a5:68:6c:d7:f7:5f:97: a7:c9:72:af:dc:35:4f:81:bb:b4:34:18:97:ee:91: cc:c0:e1:3d:4e:cc:34:66:2e:56:2d:82:1e:51:e0: 9c:06:18:f4:d4:14:6a:d0:d5:14:cb:da:75:83:45: 39:13:1a:fc:be:96:c7:84:10:77:cc:ea:c3:95:6a: 19:aa:6c:2e:fe:07:85:d9:1c:47:96:d9:58:1c:6d: bf:18:42:e5:5e:0d:05:bc:50:f0:a8:e0:e2:28:bf: 74:93:93:a8:63:7a:be:3d:4c:68:b0:9f:0e:a8:33: b2:51:28:ea:0a:68:2d:c3:4d:8d:36:68:9b:17:54: 07:42:ef:b8:bb:a0:ec:f1:65:e8:e6:df:17:41:eb: a9:4c:1d:48:64:54:fb:48:80:74:63:c5:6b:de:9a: fd:b8:02:c0:1f:86:37:a8:80:de:8d:f0:45:2b:4e: c1:23:85:d6:31:bf:f1:7e:54:b6:71:a3:db:98:56: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3A:76:28:5C:2D:30:FC:52:2E:C4:96:E1:DD:5B:F8:9B:E8:8E:A4 X509v3 Authority Key Identifier: keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Jjp2KFwtMPxSLsSW4d1b-JvojqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.146.0/24 194.26.198.0/24 IPv6: 2a13:ab80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:72:56:82:34:e4:e9:56:11:dd:e5:36:8e:52:70:13:1b:98: b6:92:9c:eb:a0:37:23:92:a9:a4:e7:6c:b3:9c:0e:8c:a2:69: 11:33:ed:71:19:32:17:d4:75:fb:13:eb:41:be:81:ea:65:47: c4:f0:95:5d:71:dd:99:90:e2:55:ec:bc:1c:1d:11:31:6b:31: 79:f2:50:87:ff:3c:2c:7f:41:b9:e7:ab:a7:57:56:bf:89:5a: 8c:12:2c:f0:12:50:87:5f:4d:f0:7c:b9:76:5f:1d:26:bb:00: 4b:cf:76:a1:95:c0:34:07:76:98:e2:80:13:3e:9d:ff:b1:43: 23:d8:46:d3:89:9e:48:8d:1f:79:cb:99:cf:63:b3:4e:8f:8e: 10:ed:77:a1:f9:66:a5:82:41:b9:8a:4d:39:7f:3d:fa:4e:08: 79:b4:98:30:47:5d:28:1d:36:9a:48:2b:94:46:35:7d:31:c7: 84:ff:94:05:b1:d4:fe:f6:d9:a9:55:50:8c:22:3c:53:bb:93: b8:6b:f5:f6:ea:ea:49:1e:28:11:db:87:6d:92:96:07:6a:66: b0:64:56:f4:f1:39:5b:d1:f7:db:41:90:13:2e:14:2e:41:fc: 54:ef:ba:5d:e7:8e:7e:df:75:06:9d:e8:f9:02:ce:f9:71:e9: 9e:77:a8:7c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o6Zwwgfrm0U7i3V6ED2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj YmE1ODUwHhcNMjYwMTAxMjIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjNhNzYyODVjMmQzMGZjNTIyZWM0OTZlMWRkNWJmODliZTg4ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4kwUpESxbgque1disvOrFfMmKLY fvpVrOPbGrrGLkxFUiKYVbenvhqySlgJjw8dtqolqJKLk8DeeJrErmC7aUMnDKVo bNf3X5enyXKv3DVPgbu0NBiX7pHMwOE9Tsw0Zi5WLYIeUeCcBhj01BRq0NUUy9p1 g0U5Exr8vpbHhBB3zOrDlWoZqmwu/geF2RxHltlYHG2/GELlXg0FvFDwqODiKL90 k5OoY3q+PUxosJ8OqDOyUSjqCmgtw02NNmibF1QHQu+4u6Ds8WXo5t8XQeupTB1I ZFT7SIB0Y8Vr3pr9uALAH4Y3qIDejfBFK07BI4XWMb/xflS2caPbmFZuQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCY6dihcLTD8Ui7EluHdW/ib6I6kMB8GA1UdIwQY MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct MDA4YTgwZjZmZjExLzEvSmpwMktGd3RNUHhTTHNTVzRkMWItSnZvanFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAubSSAwQA whrGMA0EAgACMAcDBQAqE6uAMA0GCSqGSIb3DQEBCwUAA4IBAQBsclaCNOTpVhHd 5TaOUnATG5i2kpzroDcjkqmk52yznA6MomkRM+1xGTIX1HX7E+tBvoHqZUfE8JVd cd2ZkOJV7LwcHRExazF58lCH/zwsf0G556unV1a/iVqMEizwElCHX03wfLl2Xx0m uwBLz3ahlcA0B3aY4oATPp3/sUMj2EbTiZ5IjR95y5nPY7NOj44Q7Xeh+WalgkG5 ik05fz36Tgh5tJgwR10oHTaaSCuURjV9MceE/5QFsdT+9tmpVVCMIjxTu5O4a/X2 6upJHigR24dtkpYHamawZFb08Tlb0ffbQZATLhQuQfxU77pd545+33UGnej5As75 cemed6h8 -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:09 2026 by rpki-client