This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/_JmA3MK8G0qpLNQyx391y06vnEs.roa File: _JmA3MK8G0qpLNQyx391y06vnEs.roa (raw, json) Hash identifier: U5oRmfOjkS3ly10lkGGT2q8Cjcu7ymVj/6KBitfSLE0= Subject key identifier: FC:99:80:DC:C2:BC:1B:4A:A9:2C:D4:32:C7:7F:75:CB:4E:AF:9C:4B Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Certificate serial: 019B78A2306A2ADF38C252252393A3FCD022 Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/_JmA3MK8G0qpLNQyx391y06vnEs.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203266 IP address blocks: 185.140.24.0/24 maxlen: 24 185.140.25.0/24 maxlen: 24 185.140.26.0/24 maxlen: 24 185.140.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:30:6a:2a:df:38:c2:52:25:23:93:a3:fc:d0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc9980dcc2bc1b4aa92cd432c77f75cb4eaf9c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:50:e3:50:ba:ce:4f:a3:a9:b0:32:db:e6: 0f:11:f5:a8:e1:d2:dd:29:50:1e:57:11:c9:03:fd: 79:c7:47:25:85:e5:33:97:31:20:6f:e3:19:a3:a3: 13:a5:48:7a:59:e3:b3:60:e1:e6:bb:78:ca:45:75: 14:c1:16:19:67:a0:d2:6e:7e:02:2f:7c:a0:b8:c3: e0:8f:e1:59:df:e6:f2:8d:c4:b7:09:3b:08:4a:10: c0:32:21:ec:7f:44:fa:cf:4a:8d:c2:4d:4a:9c:8e: 63:17:73:b1:9f:75:54:d0:9f:31:4f:39:d8:a0:71: c7:59:8e:55:d9:89:be:0a:52:8c:ea:b8:6f:89:5e: b6:ae:4f:36:73:ce:0b:52:d1:04:0d:ec:8f:41:3b: 3f:ad:78:12:97:4e:6c:b8:28:ce:cd:f0:f4:a8:e7: db:0b:77:73:a3:0f:df:55:cf:c2:b0:f2:66:b8:3b: 1b:b7:8e:be:fb:bf:f6:c0:5d:be:0d:c8:cf:d7:9c: 9e:9f:c0:a7:6b:8c:c4:3d:92:c6:a8:56:a7:13:9a: ea:6c:81:e9:aa:96:cc:d0:3d:72:19:75:40:74:f2: c3:b3:b6:8f:f5:25:20:51:3a:1c:ab:49:a3:2c:3f: 1b:ea:fd:fa:f9:bd:4a:c9:d1:7b:63:f9:ee:c5:15: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:99:80:DC:C2:BC:1B:4A:A9:2C:D4:32:C7:7F:75:CB:4E:AF:9C:4B X509v3 Authority Key Identifier: keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/_JmA3MK8G0qpLNQyx391y06vnEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:03:db:d7:4b:b6:75:0a:11:5d:3c:92:1b:1f:15:71:d9:fd: e4:0f:08:02:3c:8d:ba:b3:1e:5d:6e:7d:41:5b:b7:ca:04:e0: ea:2f:6a:83:a2:da:e8:51:26:04:bb:de:a0:2b:7b:e0:0c:af: bf:38:c3:21:10:a6:48:9f:98:0f:6e:e0:e0:3f:c2:3d:b9:e9: 48:4b:f3:a3:a7:de:47:31:00:eb:2c:1e:aa:39:7a:83:f8:d5: a0:1f:f6:82:45:c5:11:36:45:52:63:31:69:87:f4:3b:33:58: bb:d7:d3:df:f7:09:c9:c5:2d:5a:4b:b3:9b:17:f5:5c:2a:86: f1:92:cb:5c:0b:79:80:c8:4b:90:31:2c:45:e9:4b:91:7a:06: 24:24:cf:3f:ca:78:4b:18:35:35:97:a2:ae:77:02:2f:3d:3c: e7:6f:d5:c5:d6:e1:d1:26:5c:99:33:82:af:41:23:e5:52:e9: 64:26:e0:2c:03:e6:8c:1a:61:e6:69:75:1a:6e:3b:5c:a3:19: e6:75:68:0e:d9:a4:4e:67:c4:6f:08:d9:06:2a:28:fb:6d:d3: 28:27:e8:10:bc:d3:49:5e:57:d1:db:56:79:dd:fc:93:a0:f3: 1f:dd:57:19:6f:70:cb:c9:19:5b:4e:ce:9c:79:74:55:f5:03: f8:6a:cb:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojBqKt84wlIlI5Oj/NAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWNjOWUyOTk5NjQ3ZDgwMWQ0NjA2ZWM5NGQ2YjcyMWY3 YTY0MTQwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzk5ODBkY2MyYmMxYjRhYTkyY2Q0MzJjNzdmNzVjYjRlYWY5YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZVQ41C6zk+jqbAy2+YPEfWo4dLd KVAeVxHJA/15x0clheUzlzEgb+MZo6MTpUh6WeOzYOHmu3jKRXUUwRYZZ6DSbn4C L3yguMPgj+FZ3+byjcS3CTsIShDAMiHsf0T6z0qNwk1KnI5jF3Oxn3VU0J8xTznY oHHHWY5V2Ym+ClKM6rhviV62rk82c84LUtEEDeyPQTs/rXgSl05suCjOzfD0qOfb C3dzow/fVc/CsPJmuDsbt46++7/2wF2+DcjP15yen8Cna4zEPZLGqFanE5rqbIHp qpbM0D1yGXVAdPLDs7aP9SUgUTocq0mjLD8b6v36+b1KydF7Y/nuxRXrpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyZgNzCvBtKqSzUMsd/dctOr5xLMB8GA1UdIwQY MBaAFMSsyeKZlkfYAdRgbslNa3IfemQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEt YTA0YTJjOWFmZGVlLzEvX0ptQTNNSzhHMHFwTE5ReXgzOTF5MDZ2bkVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEtYTA0YTJjOWFmZGVl LzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYwYMA0G CSqGSIb3DQEBCwUAA4IBAQA+A9vXS7Z1ChFdPJIbHxVx2f3kDwgCPI26sx5dbn1B W7fKBODqL2qDotroUSYEu96gK3vgDK+/OMMhEKZIn5gPbuDgP8I9uelIS/Ojp95H MQDrLB6qOXqD+NWgH/aCRcURNkVSYzFph/Q7M1i719Pf9wnJxS1aS7ObF/VcKobx kstcC3mAyEuQMSxF6UuRegYkJM8/ynhLGDU1l6KudwIvPTznb9XF1uHRJlyZM4Kv QSPlUulkJuAsA+aMGmHmaXUabjtcoxnmdWgO2aROZ8RvCNkGKij7bdMoJ+gQvNNJ XlfR21Z53fyToPMf3VcZb3DLyRlbTs6ceXRV9QP4asuC -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:33 2026 by rpki-client