This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/jcjuL1I-OfryfxagoMIECR7PHIk.roa File: jcjuL1I-OfryfxagoMIECR7PHIk.roa (raw, json) Hash identifier: 5XSd5VpigrDBs0g/CxzhzwapRFsuoQY90r59IHVRXrA= Subject key identifier: 8D:C8:EE:2F:52:3E:39:FA:F2:7F:16:A0:A0:C2:04:09:1E:CF:1C:89 Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Certificate serial: 019B78346F1D986CCFEC8DA9FF569437CA88 Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/jcjuL1I-OfryfxagoMIECR7PHIk.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25081 IP address blocks: 195.234.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6f:1d:98:6c:cf:ec:8d:a9:ff:56:94:37:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dc8ee2f523e39faf27f16a0a0c204091ecf1c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:a8:17:d9:71:64:34:bf:3f:e3:08:ba:c5: e6:a6:6d:a2:22:37:96:96:a6:4d:c9:44:22:0d:98: d1:41:c8:64:5e:01:7f:5c:01:78:40:05:cc:4e:3d: fe:21:f7:66:58:f6:66:cf:b3:41:a1:54:b1:bb:3c: 15:8c:a6:c9:93:8a:e5:46:8b:83:18:86:dd:94:e8: 15:d4:22:0d:2b:de:01:dc:a7:81:6f:9e:42:a8:c7: d0:1e:86:44:b9:44:62:d7:25:ef:df:26:ed:52:04: f0:21:a1:e5:24:de:16:85:e0:d6:aa:2d:cd:48:96: 96:85:3b:c8:1d:be:27:d5:b6:0d:f9:b1:61:b0:10: 3a:8c:e6:cb:27:ba:51:59:f2:26:60:cf:99:c5:fe: cd:7f:7c:94:c3:4f:98:82:a6:1e:fb:fe:b5:7e:bb: 2e:d1:b2:25:e4:2b:0b:c7:8c:d1:27:42:be:66:1c: 56:ad:00:27:f4:7b:e4:51:1d:ca:6b:33:2c:8c:65: 22:b8:f5:da:47:77:ec:6e:51:87:cc:50:5d:e0:76: ee:0d:ed:9f:ab:d8:ea:dc:50:e9:db:69:2a:fc:29: 9c:ab:a7:42:bb:ff:d7:94:9c:6e:1f:f2:e9:2d:5f: 9b:55:e2:b3:9e:70:ff:81:64:34:de:d8:bf:74:e1: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:EE:2F:52:3E:39:FA:F2:7F:16:A0:A0:C2:04:09:1E:CF:1C:89 X509v3 Authority Key Identifier: keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/jcjuL1I-OfryfxagoMIECR7PHIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.216.0/22 Signature Algorithm: sha256WithRSAEncryption 10:61:38:42:f1:cd:55:39:78:0e:4d:54:7f:82:0f:91:9c:ab: 9d:fe:7b:51:ac:ca:67:de:2f:eb:79:f8:96:d0:fd:70:e8:82: e4:11:6c:83:ed:2b:e7:bc:2b:40:bd:2e:54:a3:27:21:84:32: 30:74:80:66:a0:b4:36:40:57:03:ca:80:0e:91:74:d6:37:53: 80:b2:c1:18:77:bc:78:f3:18:c4:87:91:7f:27:04:38:61:35: 81:03:49:24:7c:16:fc:58:fc:10:be:54:69:f3:48:22:28:fc: ba:46:1b:13:b4:f9:67:22:5f:43:09:7b:bf:98:fb:73:48:82: 44:2a:61:07:18:d5:a9:fb:9a:04:3b:e1:d9:a6:d2:16:72:83: 6a:c0:a7:99:47:3e:4a:2b:03:b8:d6:20:9b:ac:44:6e:83:5a: c6:2b:d9:32:60:cc:4e:dc:a8:0d:45:03:dc:5b:fd:d9:30:e1: 25:c4:cc:c5:f1:dc:24:75:3c:dd:1f:86:36:ae:bc:de:ff:3b: 18:61:6d:fa:31:f5:a8:58:39:63:78:4c:5e:f4:59:9d:48:57: ee:0a:1f:68:24:4f:e8:64:72:64:0b:d2:41:fc:d7:5e:15:dc: 9f:b1:58:a1:38:e0:cc:98:7a:35:5c:0d:75:19:3f:98:a3:a3: 34:c6:ea:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NG8dmGzP7I2p/1aUN8qIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4 NmViYjEwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGM4ZWUyZjUyM2UzOWZhZjI3ZjE2YTBhMGMyMDQwOTFlY2YxYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUioF9lxZDS/P+MIusXmpm2iIjeW lqZNyUQiDZjRQchkXgF/XAF4QAXMTj3+IfdmWPZmz7NBoVSxuzwVjKbJk4rlRouD GIbdlOgV1CINK94B3KeBb55CqMfQHoZEuURi1yXv3ybtUgTwIaHlJN4WheDWqi3N SJaWhTvIHb4n1bYN+bFhsBA6jObLJ7pRWfImYM+Zxf7Nf3yUw0+YgqYe+/61frsu 0bIl5CsLx4zRJ0K+ZhxWrQAn9HvkUR3KazMsjGUiuPXaR3fsblGHzFBd4HbuDe2f q9jq3FDp22kq/Cmcq6dCu//XlJxuH/LpLV+bVeKznnD/gWQ03ti/dOH6MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI3I7i9SPjn68n8WoKDCBAkezxyJMB8GA1UdIwQY MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt YzRkNDJiN2Y2MjcwLzEvamNqdUwxSS1PZnJ5ZnhhZ29NSUVDUjdQSElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+rYMA0G CSqGSIb3DQEBCwUAA4IBAQAQYThC8c1VOXgOTVR/gg+RnKud/ntRrMpn3i/refiW 0P1w6ILkEWyD7SvnvCtAvS5UoychhDIwdIBmoLQ2QFcDyoAOkXTWN1OAssEYd7x4 8xjEh5F/JwQ4YTWBA0kkfBb8WPwQvlRp80giKPy6RhsTtPlnIl9DCXu/mPtzSIJE KmEHGNWp+5oEO+HZptIWcoNqwKeZRz5KKwO41iCbrERug1rGK9kyYMxO3KgNRQPc W/3ZMOElxMzF8dwkdTzdH4Y2rrze/zsYYW36MfWoWDljeExe9FmdSFfuCh9oJE/o ZHJkC9JB/NdeFdyfsVihOODMmHo1XA11GT+Yo6M0xuoD -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:37 2026 by rpki-client