This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jIMqY7snwKcVll6pNg08z_Mqfgo.roa File: jIMqY7snwKcVll6pNg08z_Mqfgo.roa (raw, json) Hash identifier: CPx8ujKVpCilbCNBBZEL0m50f6eFV0D5WThfqaq1JKE= Subject key identifier: 8C:83:2A:63:BB:27:C0:A7:15:96:5E:A9:36:0D:3C:CF:F3:2A:7E:0A Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE49CE0D25E74F06F344D0C268C16 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jIMqY7snwKcVll6pNg08z_Mqfgo.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 87.254.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e4:9c:e0:d2:5e:74:f0:6f:34:4d:0c:26:8c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c832a63bb27c0a715965ea9360d3ccff32a7e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:2b:fc:37:19:ad:47:5a:b8:74:d8:35:30: 4b:ac:28:0d:83:e6:ef:9a:18:f7:ec:76:21:03:6b: dd:08:b4:fe:00:16:28:55:6d:00:67:33:2c:16:5f: 3b:c2:45:32:cd:aa:5a:9d:ba:25:d9:f5:40:1a:7d: f0:04:10:83:cc:b9:a9:6e:7b:cd:ed:fc:be:c5:1c: bd:77:60:b0:99:8c:54:7b:80:d0:d5:5d:67:f8:42: 57:7d:df:5f:ff:2f:c3:4e:c1:84:98:f0:d4:02:c5: 87:57:74:8c:db:78:fe:9c:2b:e8:30:18:fc:b9:b3: 77:9c:f5:7b:52:58:e2:ba:41:97:fe:b6:92:43:d3: 73:98:55:26:34:cc:74:ef:6f:42:81:58:17:f7:dc: cf:01:14:73:53:47:6b:eb:37:5e:62:28:94:c0:db: 7e:69:02:a1:c4:18:28:d5:1e:77:7b:9d:87:57:c2: f7:b1:35:5b:ab:af:28:e6:46:8f:05:d3:9f:80:83: fb:cf:46:09:e0:bf:ac:e5:f5:1b:64:0e:74:69:90: 7c:84:4d:67:79:3a:e8:01:d7:17:74:2a:b3:b4:8e: be:f4:0b:b3:f6:14:fd:03:dd:2a:02:82:bc:9e:66: e5:70:d6:58:62:78:69:58:df:38:da:ce:dd:af:af: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:2A:63:BB:27:C0:A7:15:96:5E:A9:36:0D:3C:CF:F3:2A:7E:0A X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jIMqY7snwKcVll6pNg08z_Mqfgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.23.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5a:b9:ac:f3:11:cb:20:e4:c4:95:32:09:bc:7a:07:67:97: d2:7c:3f:f0:43:c7:5e:c9:7c:fa:89:b1:a4:d5:cb:1e:36:87: 3a:f2:01:fd:55:78:a2:0c:49:db:c3:2a:84:03:51:a6:07:b4: f3:51:f2:89:81:83:3a:cf:6c:7c:4b:35:bb:80:2c:42:35:91: 4c:d1:09:6e:c5:65:91:65:ed:9a:cc:01:1d:f1:95:ed:c3:a6: db:d8:54:de:5d:c1:f6:e7:aa:ea:4b:71:09:bb:78:3b:7b:b1: f6:19:b8:22:9f:6f:8f:15:d4:06:06:64:a2:82:c4:fe:d1:93: 4d:4a:19:5c:28:20:8b:1a:0b:37:c5:6d:6f:2d:3e:70:11:fb: 58:ac:0a:e3:7f:e4:cb:9c:7d:f3:3e:21:6e:3a:15:36:25:79: bf:ae:44:cd:53:bd:14:b1:26:ea:83:af:32:fc:fd:d3:93:25: 31:01:50:b4:bb:81:5a:3b:88:3c:58:16:be:91:37:14:1b:0f: 12:5d:f2:bc:2b:fa:e2:2d:33:86:d5:74:d5:bd:77:fd:6f:1b: c6:3b:06:65:72:ac:c2:07:fa:02:c1:5e:84:53:07:8e:0f:64: 1c:05:31:e3:d5:31:43:d4:50:2c:fb:7d:e2:f4:93:ef:d8:bc: 68:7e:9e:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuSc4NJedPBvNE0MJowWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzgzMmE2M2JiMjdjMGE3MTU5NjVlYTkzNjBkM2NjZmYzMmE3ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nor/DcZrUdauHTYNTBLrCgNg+bv mhj37HYhA2vdCLT+ABYoVW0AZzMsFl87wkUyzapanbol2fVAGn3wBBCDzLmpbnvN 7fy+xRy9d2CwmYxUe4DQ1V1n+EJXfd9f/y/DTsGEmPDUAsWHV3SM23j+nCvoMBj8 ubN3nPV7UljiukGX/raSQ9NzmFUmNMx0729CgVgX99zPARRzU0dr6zdeYiiUwNt+ aQKhxBgo1R53e52HV8L3sTVbq68o5kaPBdOfgIP7z0YJ4L+s5fUbZA50aZB8hE1n eTroAdcXdCqztI6+9Auz9hT9A90qAoK8nmblcNZYYnhpWN842s7dr6877QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyDKmO7J8CnFZZeqTYNPM/zKn4KMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvaklNcVk3c253S2NWbGw2cE5nMDh6X01xZmdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4XMA0G CSqGSIb3DQEBCwUAA4IBAQB2Wrms8xHLIOTElTIJvHoHZ5fSfD/wQ8deyXz6ibGk 1cseNoc68gH9VXiiDEnbwyqEA1GmB7TzUfKJgYM6z2x8SzW7gCxCNZFM0QluxWWR Ze2azAEd8ZXtw6bb2FTeXcH256rqS3EJu3g7e7H2Gbgin2+PFdQGBmSigsT+0ZNN ShlcKCCLGgs3xW1vLT5wEftYrArjf+TLnH3zPiFuOhU2JXm/rkTNU70UsSbqg68y /P3TkyUxAVC0u4FaO4g8WBa+kTcUGw8SXfK8K/riLTOG1XTVvXf9bxvGOwZlcqzC B/oCwV6EUweOD2QcBTHj1TFD1FAs+33i9JPv2Lxofp6C -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:22 2026 by rpki-client