This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa File: jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa (raw, json) Hash identifier: pcTgx9nDgIx90gGTJ16PrKl7UPy4GXJVIOHRZSZS2G8= Subject key identifier: 8C:70:7B:C5:04:61:99:EE:48:80:33:D2:22:3B:DC:66:D7:EF:F5:A4 Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Certificate serial: 019B7A5B5A5CAF63EF49F046E6921E14FA7E Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25545 IP address blocks: 217.15.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:5c:af:63:ef:49:f0:46:e6:92:1e:14:fa:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c707bc5046199ee488033d2223bdc66d7eff5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:43:14:ef:c6:d4:10:49:38:f8:d6:07:36: fb:33:b9:38:de:27:19:b0:b5:69:bc:ee:f4:d3:bc: a0:b7:3b:ad:33:18:bf:0f:0f:b8:f9:c2:df:93:8e: c7:31:c8:df:64:50:fa:4d:28:6c:7c:52:e8:b2:df: 3b:29:c2:b5:55:be:f7:15:64:21:1f:42:27:88:6b: 0e:98:3b:c7:08:46:6f:43:b5:2e:df:df:97:fa:d0: 03:af:53:e1:2f:4c:60:e1:f9:f1:e4:80:f0:c0:36: 0c:63:d7:87:74:1f:f1:4d:5e:d3:94:aa:39:17:60: 41:38:f8:10:3e:46:46:5b:ac:98:d5:e5:7a:57:fb: ba:21:51:bb:d0:17:3f:81:17:11:f4:24:cd:b5:43: b5:b8:82:7e:69:ef:54:5b:a9:85:79:22:6a:53:81: 16:b3:c4:67:04:9b:dd:54:98:e8:10:53:a5:c5:04: 2e:a9:3c:4c:8a:ba:e0:ea:92:ca:16:ea:ca:b8:26: 4e:2a:32:58:4b:4a:83:ea:95:ee:3c:37:a2:90:c2: 8e:03:cd:e6:24:5c:c4:ce:ce:8e:d6:54:78:c1:4b: 73:45:79:1b:5b:f4:2c:01:c3:91:f2:6d:55:e1:c8: 52:4d:db:62:cf:54:de:2f:04:b6:2b:71:bd:18:3d: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:7B:C5:04:61:99:EE:48:80:33:D2:22:3B:DC:66:D7:EF:F5:A4 X509v3 Authority Key Identifier: keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.15.240.0/20 Signature Algorithm: sha256WithRSAEncryption 71:b0:0c:dc:b4:81:45:e5:de:fc:1e:c8:62:6a:5f:24:9a:65: 22:d4:f6:92:fe:e5:f2:43:af:b7:9b:1a:ea:13:94:73:38:cf: bf:83:e5:cc:d2:94:cf:a5:9d:d1:1e:20:d7:1d:05:98:75:4e: 4f:c8:d2:30:c9:67:60:86:ed:b8:dd:1d:64:66:d4:c4:48:39: 81:3b:48:16:67:56:94:1c:c3:b8:bb:d5:f0:f6:d7:5e:2a:ba: 4f:2b:42:77:8c:b6:9c:65:2f:92:a2:f2:3d:50:f1:0d:ed:0c: f0:0a:1f:24:a4:63:1e:21:35:6c:92:e2:4f:55:c7:9f:f4:fe: fc:78:e3:b2:78:f2:5b:e3:57:9e:22:57:57:9b:66:22:23:8d: bd:df:7f:17:1b:c2:3c:d6:91:ec:74:9d:3e:18:e2:ce:64:25: 38:a4:13:61:77:84:42:e3:1d:d3:a9:6e:c5:dd:e3:e5:32:6f: 14:63:9a:16:2b:9a:7a:08:b9:f5:ea:e8:98:0b:80:48:ee:f2: 3d:63:bf:e0:b1:08:ee:7f:6b:e3:d5:49:20:64:f4:99:8a:ca: c3:74:1a:7f:07:22:6c:72:40:6d:29:87:70:a6:90:c4:2d:d5: 29:58:56:d8:95:69:8d:35:2c:38:ee:d4:43:cb:dc:5e:f2:5d: 63:26:7e:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1pcr2PvSfBG5pIeFPp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm OTRiODgwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzcwN2JjNTA0NjE5OWVlNDg4MDMzZDIyMjNiZGM2NmQ3ZWZmNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zlDFO/G1BBJOPjWBzb7M7k43icZ sLVpvO7007ygtzutMxi/Dw+4+cLfk47HMcjfZFD6TShsfFLost87KcK1Vb73FWQh H0IniGsOmDvHCEZvQ7Uu39+X+tADr1PhL0xg4fnx5IDwwDYMY9eHdB/xTV7TlKo5 F2BBOPgQPkZGW6yY1eV6V/u6IVG70Bc/gRcR9CTNtUO1uIJ+ae9UW6mFeSJqU4EW s8RnBJvdVJjoEFOlxQQuqTxMirrg6pLKFurKuCZOKjJYS0qD6pXuPDeikMKOA83m JFzEzs6O1lR4wUtzRXkbW/QsAcOR8m1V4chSTdtiz1TeLwS2K3G9GD35OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxwe8UEYZnuSIAz0iI73GbX7/WkMB8GA1UdIwQY MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt MDgxMTExMDNjY2Y5LzEvakhCN3hRUmhtZTVJZ0RQU0lqdmNadGZ2OWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5 LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2Q/wMA0G CSqGSIb3DQEBCwUAA4IBAQBxsAzctIFF5d78Hshial8kmmUi1PaS/uXyQ6+3mxrq E5RzOM+/g+XM0pTPpZ3RHiDXHQWYdU5PyNIwyWdghu243R1kZtTESDmBO0gWZ1aU HMO4u9Xw9tdeKrpPK0J3jLacZS+SovI9UPEN7QzwCh8kpGMeITVskuJPVcef9P78 eOOyePJb41eeIldXm2YiI429338XG8I81pHsdJ0+GOLOZCU4pBNhd4RC4x3TqW7F 3ePlMm8UY5oWK5p6CLn16uiYC4BI7vI9Y7/gsQjuf2vj1UkgZPSZisrDdBp/ByJs ckBtKYdwppDELdUpWFbYlWmNNSw47tRDy9xe8l1jJn63 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:37 2026 by rpki-client