This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/jjZr6ibloVwf3j-xPGaypuYc1To.roa File: jjZr6ibloVwf3j-xPGaypuYc1To.roa (raw, json) Hash identifier: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk= Subject key identifier: 8E:36:6B:EA:26:E5:A1:5C:1F:DE:3F:B1:3C:66:B2:A6:E6:1C:D5:3A Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019B7A599BC2BE33D21A0BDB86FA4883509F Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/jjZr6ibloVwf3j-xPGaypuYc1To.roa Signing time: Thu 01 Jan 2026 16:17:31 +0000 ROA not before: Thu 01 Jan 2026 16:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 81.28.112.0/20 maxlen: 24 82.212.64.0/18 maxlen: 24 185.175.248.0/22 maxlen: 24 188.123.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:9b:c2:be:33:d2:1a:0b:db:86:fa:48:83:50:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Jan 1 16:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e366bea26e5a15c1fde3fb13c66b2a6e61cd53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:20:ed:21:ca:df:cb:ed:dc:cb:17:c9:c5: 07:02:3a:26:10:35:89:de:8e:62:c0:b9:82:1c:6a: 1b:9c:79:34:bf:4f:01:64:73:a6:90:56:c9:53:3b: ec:6f:2d:a5:22:7c:1d:dd:75:4d:dd:71:a1:51:b6: a2:57:b3:e1:c7:01:f6:dc:7f:df:1a:77:d3:79:e0: 00:fa:80:0d:f8:b4:20:5d:81:4c:58:7f:37:cf:c6: 9f:f3:01:30:0a:e1:b6:48:03:e9:65:26:85:3b:d0: 8f:cf:2c:db:c0:ad:7a:49:d0:c4:76:83:8e:78:94: 4c:16:b2:bc:ef:8f:f7:c4:78:de:e9:e2:1f:a4:ff: 4d:d5:35:02:f1:46:bf:6a:c0:1a:f9:96:e7:8b:55: d8:2f:41:42:44:2c:d9:17:d4:39:c1:d1:3b:ac:d3: 30:3e:90:1a:f9:0f:10:82:f5:8d:96:6c:06:21:2e: 76:18:8f:ba:71:12:de:e3:1f:39:f3:a7:29:5c:43: 9b:33:f7:35:c5:ce:da:eb:b8:c0:7a:db:e4:6e:55: 44:44:55:b6:2c:b4:dd:3f:d1:21:4d:3f:11:d3:02: 95:eb:36:00:63:ba:d1:ed:c3:38:8d:01:5f:cc:d1: ee:64:71:f4:f7:d2:c3:7c:00:8b:c1:b1:1e:7a:c7: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:36:6B:EA:26:E5:A1:5C:1F:DE:3F:B1:3C:66:B2:A6:E6:1C:D5:3A X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/jjZr6ibloVwf3j-xPGaypuYc1To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.28.112.0/20 82.212.64.0/18 185.175.248.0/22 188.123.160.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:72:54:92:17:38:7d:91:46:0a:34:95:83:a4:cd:62:34:88: 70:84:a3:a1:32:b7:a4:be:62:87:f5:4f:68:03:c2:e1:e5:45: ad:00:2b:97:fe:ed:fd:ff:af:c3:e1:68:19:90:e6:e4:1c:af: da:e6:a8:5c:c8:5e:bc:21:5f:43:05:55:21:7f:c1:6b:4e:71: d6:fa:a2:be:21:68:cf:53:ce:a7:1e:b5:30:7f:7b:a9:fa:d5: 03:c0:31:5d:d2:c2:37:93:33:03:59:cf:3b:0d:ac:96:2b:e1: ce:87:7e:00:b0:54:97:d7:0d:d8:b0:ba:1e:2a:9f:91:e8:f0: bc:aa:d5:07:a9:d2:8f:83:75:dc:dd:78:23:89:0b:bf:88:42: 5d:7d:9b:7a:fc:4b:01:87:fc:c0:28:de:62:b0:69:39:ec:5e: 00:42:3b:1c:5e:ec:8d:a7:20:dd:35:15:c5:04:72:3e:70:a8: 11:87:d5:be:f0:10:f2:1a:d3:e5:64:da:30:01:d1:11:d8:d0: 3a:33:f9:23:cc:f6:da:fb:1f:63:2e:31:0c:4a:bc:8b:b6:03: 16:0e:b0:48:7e:fa:8c:28:9d:bd:3e:27:96:f8:f1:f4:05:d4: b8:75:a9:5b:9b:0f:24:07:97:d4:ff:b2:f7:88:4f:24:36:4e: 64:b5:84:6d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WZvCvjPSGgvbhvpIg1CfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjYwMTAxMTYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTM2NmJlYTI2ZTVhMTVjMWZkZTNmYjEzYzY2YjJhNmU2MWNkNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyEg7SHK38vt3MsXycUHAjomEDWJ 3o5iwLmCHGobnHk0v08BZHOmkFbJUzvsby2lInwd3XVN3XGhUbaiV7PhxwH23H/f GnfTeeAA+oAN+LQgXYFMWH83z8af8wEwCuG2SAPpZSaFO9CPzyzbwK16SdDEdoOO eJRMFrK874/3xHje6eIfpP9N1TUC8Ua/asAa+Zbni1XYL0FCRCzZF9Q5wdE7rNMw PpAa+Q8QgvWNlmwGIS52GI+6cRLe4x8586cpXEObM/c1xc7a67jAetvkblVERFW2 LLTdP9EhTT8R0wKV6zYAY7rR7cM4jQFfzNHuZHH099LDfACLwbEeeseWjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI42a+om5aFcH94/sTxmsqbmHNU6MB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvampacjZpYmxvVndmM2oteFBHYXlwdVljMVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEURxwAwQG UtRAAwQCua/4AwQFvHugMA0GCSqGSIb3DQEBCwUAA4IBAQBuclSSFzh9kUYKNJWD pM1iNIhwhKOhMrekvmKH9U9oA8Lh5UWtACuX/u39/6/D4WgZkObkHK/a5qhcyF68 IV9DBVUhf8FrTnHW+qK+IWjPU86nHrUwf3up+tUDwDFd0sI3kzMDWc87DayWK+HO h34AsFSX1w3YsLoeKp+R6PC8qtUHqdKPg3Xc3XgjiQu/iEJdfZt6/EsBh/zAKN5i sGk57F4AQjscXuyNpyDdNRXFBHI+cKgRh9W+8BDyGtPlZNowAdER2NA6M/kjzPba +x9jLjEMSryLtgMWDrBIfvqMKJ29PieW+PH0BdS4dalbmw8kB5fU/7L3iE8kNk5k tYRt -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:12 2026 by rpki-client