This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa File: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (raw, json) Hash identifier: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0= Subject key identifier: 8C:58:46:D6:12:95:16:FB:83:07:AB:8D:D4:96:2D:A1:72:C5:67:B2 Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41 Certificate serial: 019B7F84C2CFBFE63A150B0738937EC3B6FD Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34752 IP address blocks: 85.116.32.0/19 maxlen: 19 91.102.248.0/21 maxlen: 21 2a01:7b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c2:cf:bf:e6:3a:15:0b:07:38:93:7e:c3:b6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c5846d6129516fb8307ab8dd4962da172c567b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:90:0a:76:d1:e7:f4:d2:fd:69:e0:ad:ee: b8:7d:cd:1d:02:ad:cd:fc:b5:54:30:0f:e3:48:6e: a3:05:aa:2e:b4:df:28:e0:cc:cd:6f:1b:d5:1b:fc: ad:52:dc:e1:12:2d:d0:08:f0:6a:06:03:e1:01:4b: c8:0d:59:88:ec:02:35:79:a5:80:43:76:04:fb:87: 4c:23:df:34:5a:8b:dd:01:f1:b1:50:ad:3f:99:63: 6d:3b:50:ea:7b:da:70:97:01:86:2b:c7:b3:f3:a7: 83:a5:27:c9:b7:df:db:56:1e:2e:28:ca:c1:3d:f4: 17:a0:40:1b:5e:01:30:b4:11:8d:ce:36:02:24:80: b2:67:8c:88:e9:ac:81:5c:6d:5f:27:a1:5b:5b:8d: 51:25:39:05:3b:90:6e:3c:6e:09:43:b1:b8:16:f6: b9:9e:46:c0:b9:68:ae:79:f5:79:db:6a:60:da:a0: 7f:c0:20:ac:2a:ca:9f:2a:f2:e2:65:50:c6:70:5f: 7c:ab:b0:b3:d5:f8:b0:30:f5:63:7f:9c:6e:c1:4b: 93:3b:2d:e9:13:bc:20:96:29:21:87:3f:f2:84:76: f9:5b:52:53:e9:21:98:21:62:6b:de:b7:44:34:21: 63:56:1b:25:42:b2:ef:8f:7e:67:ab:da:91:70:30: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:58:46:D6:12:95:16:FB:83:07:AB:8D:D4:96:2D:A1:72:C5:67:B2 X509v3 Authority Key Identifier: keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.32.0/19 91.102.248.0/21 IPv6: 2a01:7b0::/32 Signature Algorithm: sha256WithRSAEncryption 25:87:89:c7:b3:fd:c6:07:14:d7:a9:cd:83:62:7b:17:3b:3d: 5d:60:cf:74:00:be:41:69:b2:35:c9:0c:31:1a:e0:14:5b:9d: d7:f8:28:12:02:7e:4a:79:ef:6c:69:55:cf:df:20:0d:4b:a2: 92:6a:fb:7b:85:80:8d:35:bb:90:d8:eb:84:b4:1b:39:e8:0f: cc:61:eb:14:7d:30:81:33:d5:02:46:53:f5:93:98:26:e3:6f: d9:50:fb:fb:84:ab:5d:9b:a3:80:c5:ad:6a:6f:15:83:dc:a2: d2:01:0e:0d:f2:12:1d:24:6d:39:1b:13:63:b3:85:b8:08:ca: c7:34:bd:74:88:08:b8:26:06:3e:64:db:14:13:14:fa:67:9b: ae:56:83:ed:3e:e0:63:2a:42:df:45:d7:64:42:15:de:88:e0: fb:38:e5:db:da:64:ba:bd:e1:90:a9:87:db:df:12:3f:16:30: 3c:5c:fc:68:38:28:63:2d:4e:fb:ee:d4:84:2d:c5:97:e1:88: 36:19:37:dd:49:43:94:ae:2c:6e:d3:6f:95:5a:bf:7d:bf:72: 4e:54:ee:63:8c:b5:5d:d2:06:46:2d:1a:63:17:a1:1d:66:65: e7:7e:e1:65:94:71:0f:4e:ee:9d:f9:50:db:88:da:17:04:ea: 84:56:5d:ce -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hMLPv+Y6FQsHOJN+w7b9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTkwMmJkZmJkNzRjMzNlYTc2NDUzZDE0NWU3NmY2YWE4 NTdjNDEwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU4NDZkNjEyOTUxNmZiODMwN2FiOGRkNDk2MmRhMTcyYzU2N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1iQCnbR5/TS/Wngre64fc0dAq3N /LVUMA/jSG6jBaoutN8o4MzNbxvVG/ytUtzhEi3QCPBqBgPhAUvIDVmI7AI1eaWA Q3YE+4dMI980WovdAfGxUK0/mWNtO1Dqe9pwlwGGK8ez86eDpSfJt9/bVh4uKMrB PfQXoEAbXgEwtBGNzjYCJICyZ4yI6ayBXG1fJ6FbW41RJTkFO5BuPG4JQ7G4Fva5 nkbAuWiuefV522pg2qB/wCCsKsqfKvLiZVDGcF98q7Cz1fiwMPVjf5xuwUuTOy3p E7wglikhhz/yhHb5W1JT6SGYIWJr3rdENCFjVhslQrLvj35nq9qRcDBuYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIxYRtYSlRb7gwerjdSWLaFyxWeyMB8GA1UdIwQY MBaAFO1ZAr3710wz6nZFPRRedvaqhXxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDIt NTAzMzZmNWQzNDBlLzEvakZoRzFoS1ZGdnVEQjZ1TjFKWXRvWExGWjdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDItNTAzMzZmNWQzNDBl LzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFVXQgAwQD W2b4MA0EAgACMAcDBQAqAQewMA0GCSqGSIb3DQEBCwUAA4IBAQAlh4nHs/3GBxTX qc2DYnsXOz1dYM90AL5BabI1yQwxGuAUW53X+CgSAn5Kee9saVXP3yANS6KSavt7 hYCNNbuQ2OuEtBs56A/MYesUfTCBM9UCRlP1k5gm42/ZUPv7hKtdm6OAxa1qbxWD 3KLSAQ4N8hIdJG05GxNjs4W4CMrHNL10iAi4JgY+ZNsUExT6Z5uuVoPtPuBjKkLf RddkQhXeiOD7OOXb2mS6veGQqYfb3xI/FjA8XPxoOChjLU777tSELcWX4Yg2GTfd SUOUrixu02+VWr99v3JOVO5jjLVd0gZGLRpjF6EdZmXnfuFllHEPTu6d+VDbiNoX BOqEVl3O -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:03 2026 by rpki-client