This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JcapaBByGfg1r869CgLSe-5w-C0.roa File: JcapaBByGfg1r869CgLSe-5w-C0.roa (raw, json) Hash identifier: U5B93AFtlrsiQ6jcGPHG5OSN9KDq19UojlE1/dcuDeI= Subject key identifier: 25:C6:A9:68:10:72:19:F8:35:AF:CE:BD:0A:02:D2:7B:EE:70:F8:2D Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Certificate serial: 019B775915907AC518BBF91833BE19ED0D86 Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JcapaBByGfg1r869CgLSe-5w-C0.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 87.237.168.0/21 maxlen: 21 87.237.172.0/22 maxlen: 22 94.126.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:90:7a:c5:18:bb:f9:18:33:be:19:ed:0d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c6a968107219f835afcebd0a02d27bee70f82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:78:70:ef:a4:0a:0a:11:6c:14:49:5f:0b: 16:78:b9:68:84:2e:a3:15:cc:3e:1b:4b:89:94:70: d2:23:f5:1d:92:06:a7:37:45:ed:2b:5a:60:de:62: 0a:e2:be:91:2a:9f:6c:0b:90:49:ee:27:8a:fa:41: 66:11:db:eb:17:c2:ad:de:6e:47:9f:55:9e:93:36: 00:ff:4a:4a:74:e1:80:e2:bb:9a:69:4a:f3:3e:b2: dd:98:e2:63:4a:c2:94:2e:6a:28:4d:ed:62:61:d1: a0:91:4f:27:af:69:7b:00:f5:4f:bc:52:5e:44:59: 5d:e7:fe:ef:6d:4d:b1:09:ae:d6:81:22:24:48:67: ef:bc:ad:14:a0:c5:f4:21:9f:a9:b3:2d:9c:3a:03: 3b:96:1d:54:5a:8c:19:08:02:1b:48:e9:77:e6:a8: 46:6e:58:72:af:38:40:c8:ca:37:c3:9c:84:58:8f: ce:21:bd:a8:6c:46:93:a3:e5:3d:2c:ed:75:29:a0: 41:02:76:1d:79:00:4b:58:05:96:e0:e3:a2:3f:51: 31:1b:13:cf:97:4b:a2:2b:37:c6:82:fc:12:de:45: 24:8b:ad:34:2e:ae:6c:44:32:29:9c:53:ab:7e:8d: ad:33:6f:65:28:55:d7:01:fc:ce:19:c3:ed:8e:34: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C6:A9:68:10:72:19:F8:35:AF:CE:BD:0A:02:D2:7B:EE:70:F8:2D X509v3 Authority Key Identifier: keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JcapaBByGfg1r869CgLSe-5w-C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.168.0/21 94.126.248.0/21 Signature Algorithm: sha256WithRSAEncryption cf:1d:ac:b6:c7:8f:27:11:31:02:ae:53:13:d4:37:a5:5a:e7: 11:cd:eb:7e:18:50:56:60:d4:ea:5f:ab:dc:6d:ce:48:96:b6: 8c:52:06:96:17:17:53:45:66:5c:d1:be:33:85:80:e6:06:96: 85:74:1a:c8:ac:83:63:53:d9:a4:5a:da:7d:8a:e1:6c:75:c2: 8b:3b:bd:ad:8f:68:e3:79:8a:4b:d4:fc:49:1d:1b:cc:05:8f: c4:49:d2:1d:87:66:19:b3:80:84:f1:4b:a2:77:b7:fc:4d:98: e9:62:bc:6e:fc:aa:59:7e:1a:74:6c:f5:aa:24:16:b6:16:fe: 1e:6f:48:b5:e7:df:22:4b:08:43:d0:6a:12:d8:56:93:5c:1e: 2b:61:75:71:00:db:fa:c3:54:0f:05:4f:5a:db:02:cc:ac:f8: 3a:92:d8:eb:2d:7e:44:04:ba:37:48:e4:c2:c4:98:8f:96:fd: 96:f1:6b:a7:f0:bc:cc:50:07:5f:e0:59:53:be:bd:0e:4d:da: c7:17:f3:ee:11:7a:cf:04:c3:8a:51:1c:ee:d8:1d:ca:7d:30: f1:fd:c4:86:6b:a7:86:87:aa:0e:e8:e9:4f:b8:15:32:d8:3d: ce:63:8f:7f:86:2b:c0:10:cc:3b:f6:5d:d3:d0:3a:3a:68:9f: 2a:fc:1d:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WRWQesUYu/kYM74Z7Q2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy YTdiZGUwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM2YTk2ODEwNzIxOWY4MzVhZmNlYmQwYTAyZDI3YmVlNzBmODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlN4cO+kCgoRbBRJXwsWeLlohC6j Fcw+G0uJlHDSI/UdkganN0XtK1pg3mIK4r6RKp9sC5BJ7ieK+kFmEdvrF8Kt3m5H n1WekzYA/0pKdOGA4ruaaUrzPrLdmOJjSsKULmooTe1iYdGgkU8nr2l7APVPvFJe RFld5/7vbU2xCa7WgSIkSGfvvK0UoMX0IZ+psy2cOgM7lh1UWowZCAIbSOl35qhG blhyrzhAyMo3w5yEWI/OIb2obEaTo+U9LO11KaBBAnYdeQBLWAWW4OOiP1ExGxPP l0uiKzfGgvwS3kUki600Lq5sRDIpnFOrfo2tM29lKFXXAfzOGcPtjjRleQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCXGqWgQchn4Na/OvQoC0nvucPgtMB8GA1UdIwQY MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw LWNiYjdkMmJmNmZhMS8xL0pjYXBhQkJ5R2ZnMXI4NjlDZ0xTZS01dy1DMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2IwLWNiYjdkMmJmNmZh MS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBANX7agD BANefvgwDQYJKoZIhvcNAQELBQADggEBAM8drLbHjycRMQKuUxPUN6Va5xHN634Y UFZg1Opfq9xtzkiWtoxSBpYXF1NFZlzRvjOFgOYGloV0Gsisg2NT2aRa2n2K4Wx1 wos7va2PaON5ikvU/EkdG8wFj8RJ0h2HZhmzgITxS6J3t/xNmOlivG78qll+GnRs 9aokFrYW/h5vSLXn3yJLCEPQahLYVpNcHithdXEA2/rDVA8FT1rbAsys+DqS2Ost fkQEujdI5MLEmI+W/Zbxa6fwvMxQB1/gWVO+vQ5N2scX8+4Res8Ew4pRHO7YHcp9 MPH9xIZrp4aHqg7o6U+4FTLYPc5jj3+GK8AQzDv2XdPQOjponyr8HaY= -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client