This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa File: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (raw, json) Hash identifier: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY= Subject key identifier: 22:01:10:11:0C:4A:17:82:40:FD:8B:F0:8E:DD:FD:65:1A:BE:F2:DA Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Certificate serial: 019B7FF22D7B54D261EA181D3EAA13AE873C Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa Signing time: Fri 02 Jan 2026 18:22:16 +0000 ROA not before: Fri 02 Jan 2026 18:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.75.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:2d:7b:54:d2:61:ea:18:1d:3e:aa:13:ae:87:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Validity Not Before: Jan 2 18:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220110110c4a178240fd8bf08eddfd651abef2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:7d:a7:81:25:d7:4e:eb:06:8b:c5:40:f5: f0:2f:2a:f0:84:41:75:b2:92:96:4f:6f:3c:56:59: 93:1d:64:32:ea:76:2f:eb:c8:c4:88:ec:46:07:cb: 53:12:a1:50:f0:30:4d:f3:75:80:81:e2:11:67:d2: bb:2f:43:2f:72:fd:07:bc:5a:69:b3:02:24:c9:30: 70:01:ac:b8:b9:85:e6:6a:98:c8:5b:d5:64:1c:3f: 0e:49:93:91:e5:09:11:57:c7:bb:50:69:2a:f0:20: 92:17:19:c6:1f:f3:b1:ac:1a:f1:50:7c:ce:b9:29: 5f:09:2f:29:18:d8:c3:f5:11:5b:a0:52:e5:b1:0f: d5:74:c8:54:00:5d:9d:a9:61:b0:0b:97:34:9d:34: a1:06:8b:f6:ad:f1:0e:5a:7d:e7:e4:13:10:2b:95: 3e:a7:fe:7b:80:21:d5:a0:3d:1d:2f:9f:8b:d4:bc: bd:17:62:ab:cf:a6:96:6b:8e:e3:a8:4a:a3:cc:9c: cc:7e:2f:3d:d9:00:ee:f3:5e:79:73:3b:01:b2:76: 5d:16:0f:ed:ff:7e:8f:e8:4c:5d:2e:91:91:f0:9d: 30:97:8c:02:54:8b:3e:a7:68:8f:16:2c:fc:38:1e: 67:ee:89:19:3b:37:75:60:39:dd:f2:99:56:d1:9d: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:10:11:0C:4A:17:82:40:FD:8B:F0:8E:DD:FD:65:1A:BE:F2:DA X509v3 Authority Key Identifier: keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.60.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:ed:7d:79:30:55:a3:8e:eb:ad:a7:89:6e:22:88:81:76:eb: 12:0e:50:87:21:c6:99:5b:a0:94:12:e3:6a:fc:2c:6b:9e:be: 87:75:99:34:e9:50:98:1a:a4:cd:27:f7:f7:8b:0f:7e:45:fb: 47:77:00:ed:ae:0d:5f:d6:bc:db:3a:16:3e:e1:1e:a1:95:6b: af:be:82:de:68:35:13:5d:89:d8:bb:65:8d:3c:ad:b3:7e:f8: 64:11:69:69:14:85:1b:f9:c5:89:91:3c:37:5d:8d:e0:27:6f: 86:af:6b:5c:4a:d6:f0:5c:5f:41:fd:5f:88:0d:75:19:f9:dd: 41:36:91:8a:f7:c7:00:0b:60:6a:a0:97:0f:bf:75:c1:6b:29: 53:b6:bd:2d:9a:07:88:ca:f9:7e:02:75:fe:bd:bb:0b:94:2f: be:fc:31:5b:cd:12:65:2b:f8:a2:98:4f:12:12:81:e4:eb:bc: c2:30:72:c6:4d:f5:5c:5b:d4:34:38:9a:a6:d6:80:72:5c:dd: db:c6:1d:5f:f5:b5:96:16:9f:17:d9:f9:00:e3:eb:20:78:b1: a1:f1:dd:f2:c4:2a:7e:00:92:97:4f:b9:5f:d8:05:a8:d6:bd: 90:0a:3a:29:d4:38:46:e1:ac:a1:92:ac:24:85:f5:bd:5d:d3: 85:c5:5d:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8i17VNJh6hgdPqoTroc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTBiZmJmNzk4ZmFlYWE3ZDZhMzYwNThkMDEzZTI0ZDRi YjFkOWQwHhcNMjYwMTAyMTgyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjAxMTAxMTBjNGExNzgyNDBmZDhiZjA4ZWRkZmQ2NTFhYmVmMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8N9p4El107rBovFQPXwLyrwhEF1 spKWT288VlmTHWQy6nYv68jEiOxGB8tTEqFQ8DBN83WAgeIRZ9K7L0Mvcv0HvFpp swIkyTBwAay4uYXmapjIW9VkHD8OSZOR5QkRV8e7UGkq8CCSFxnGH/OxrBrxUHzO uSlfCS8pGNjD9RFboFLlsQ/VdMhUAF2dqWGwC5c0nTShBov2rfEOWn3n5BMQK5U+ p/57gCHVoD0dL5+L1Ly9F2Krz6aWa47jqEqjzJzMfi892QDu8155czsBsnZdFg/t /36P6ExdLpGR8J0wl4wCVIs+p2iPFiz8OB5n7okZOzd1YDnd8plW0Z3x8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIBEBEMSheCQP2L8I7d/WUavvLaMB8GA1UdIwQY MBaAFCRQv795j66qfWo2BY0BPiTUux2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUt ZGQ1NDlmM2I4M2JmLzEvSWdFUUVReEtGNEpBX1l2d2p0MzlaUnEtOHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUtZGQ1NDlmM2I4M2Jm LzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUs8MA0G CSqGSIb3DQEBCwUAA4IBAQCa7X15MFWjjuutp4luIoiBdusSDlCHIcaZW6CUEuNq /Cxrnr6HdZk06VCYGqTNJ/f3iw9+RftHdwDtrg1f1rzbOhY+4R6hlWuvvoLeaDUT XYnYu2WNPK2zfvhkEWlpFIUb+cWJkTw3XY3gJ2+Gr2tcStbwXF9B/V+IDXUZ+d1B NpGK98cAC2BqoJcPv3XBaylTtr0tmgeIyvl+AnX+vbsLlC++/DFbzRJlK/iimE8S EoHk67zCMHLGTfVcW9Q0OJqm1oByXN3bxh1f9bWWFp8X2fkA4+sgeLGh8d3yxCp+ AJKXT7lf2AWo1r2QCjop1DhG4ayhkqwkhfW9XdOFxV3h -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:08 2026 by rpki-client