This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa File: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (raw, json) Hash identifier: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA= Subject key identifier: 25:80:EF:B9:33:4C:B6:38:CA:FB:C2:1A:A8:B8:70:CF:60:9E:73:BB Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a Certificate serial: 019B7BA5379A8B5D9315FC7A9137C7DE788B Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42648 IP address blocks: 195.248.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:9a:8b:5d:93:15:fc:7a:91:37:c7:de:78:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2580efb9334cb638cafbc21aa8b870cf609e73bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:91:4d:fd:e8:80:35:a5:ca:33:f6:09:aa: 77:2c:74:2e:aa:cb:03:f5:f0:86:25:9f:2f:f5:7f: ec:00:50:d7:18:f1:8a:92:cb:27:18:dd:8c:4a:c4: 26:d2:18:82:df:45:9c:10:ac:71:01:d1:70:6e:02: 2b:19:07:45:27:aa:68:f0:5b:c7:35:94:9f:e6:45: 1a:17:c7:3d:54:52:63:59:d8:c1:ee:27:e5:ae:f5: fa:e8:3e:61:3f:0d:bb:3e:46:a7:13:85:04:4d:35: ec:d8:82:fb:e8:4c:4c:97:d9:f9:a7:c3:7e:2d:f4: 04:72:a1:a4:b4:01:c4:a6:76:1a:e0:43:04:22:5b: 75:e9:a3:df:df:5c:a6:ec:b6:bd:a3:10:f9:63:cf: 3c:2d:2f:d0:0a:9d:d0:66:f9:ce:4f:08:0c:b8:81: a6:79:01:c5:19:4e:ce:c2:aa:b1:d5:c3:97:81:7e: 6c:95:b6:64:44:c8:ad:f0:40:bd:13:5f:d8:bf:af: ab:25:9b:4e:52:13:ba:ab:4f:a9:9c:50:86:db:62: c0:a4:ba:59:6c:49:3b:1f:ec:ac:0b:6c:13:ee:ed: f8:10:69:65:2f:83:36:2e:9d:91:67:0b:ca:09:65: 79:80:90:4c:c8:44:c2:38:71:91:86:0f:9d:2a:44: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:EF:B9:33:4C:B6:38:CA:FB:C2:1A:A8:B8:70:CF:60:9E:73:BB X509v3 Authority Key Identifier: keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.225.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:cb:b2:a3:f3:31:0b:31:57:f1:0f:ab:be:6d:2a:ff:89:d5: 31:6b:56:23:24:7c:76:c5:b0:f1:c5:16:2f:82:36:65:51:3c: d8:f1:72:5e:28:2c:62:40:d2:d3:70:cf:4d:3e:02:03:74:cf: f5:f4:39:0f:70:99:7b:f7:f7:fe:c3:19:d5:e5:70:ac:17:bc: 5d:0b:ed:3c:29:71:ff:9c:9b:48:05:d5:24:88:0b:64:88:5e: 8e:b3:6e:12:06:4e:e8:56:ca:80:51:34:01:b7:2f:86:e0:f0: 67:05:3b:94:f1:54:2e:15:51:f2:cb:f8:ec:5c:cf:c0:e1:91: 76:95:83:e0:28:de:8a:d2:19:db:ce:64:51:64:fc:02:e0:b3: 9d:6c:72:01:40:cd:b5:38:7d:5f:16:dd:8e:b7:4c:cb:a2:a1: 55:25:d1:32:d1:c2:56:e7:52:dc:b4:21:aa:5e:e3:b8:d4:bd: 93:8c:8e:5d:81:44:78:7e:34:74:87:f6:b8:68:2a:f4:52:b6: 70:36:dd:cb:ce:cf:6e:87:2e:dd:85:91:45:e5:f8:2e:c5:5b: db:da:59:ff:86:f9:11:96:4e:df:3c:53:a7:0a:52:30:2e:3a: a6:bc:b9:0c:51:3b:03:1b:67:89:f9:dd:e2:ea:df:3a:3b:d2: 9c:55:06:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTeai12TFfx6kTfH3niLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNmZmY2I1YjVlMmRlNDU1MWFjZjliNDVhZjI0MmRiOTQ1 ODRlNWEwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTgwZWZiOTMzNGNiNjM4Y2FmYmMyMWFhOGI4NzBjZjYwOWU3M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZaRTf3ogDWlyjP2Cap3LHQuqssD 9fCGJZ8v9X/sAFDXGPGKkssnGN2MSsQm0hiC30WcEKxxAdFwbgIrGQdFJ6po8FvH NZSf5kUaF8c9VFJjWdjB7iflrvX66D5hPw27PkanE4UETTXs2IL76ExMl9n5p8N+ LfQEcqGktAHEpnYa4EMEIlt16aPf31ym7La9oxD5Y888LS/QCp3QZvnOTwgMuIGm eQHFGU7Owqqx1cOXgX5slbZkRMit8EC9E1/Yv6+rJZtOUhO6q0+pnFCG22LApLpZ bEk7H+ysC2wT7u34EGllL4M2Lp2RZwvKCWV5gJBMyETCOHGRhg+dKkT+zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWA77kzTLY4yvvCGqi4cM9gnnO7MB8GA1UdIwQY MBaAFJxv/LW14t5FUaz5tFryQtuUWE5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2Et ZjJmMDk1NWRhMWFkLzEvSllEdnVUTk10ampLLThJYXFMaHd6MkNlYzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2EtZjJmMDk1NWRhMWFk LzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/jhMA0G CSqGSIb3DQEBCwUAA4IBAQBuy7Kj8zELMVfxD6u+bSr/idUxa1YjJHx2xbDxxRYv gjZlUTzY8XJeKCxiQNLTcM9NPgIDdM/19DkPcJl79/f+wxnV5XCsF7xdC+08KXH/ nJtIBdUkiAtkiF6Os24SBk7oVsqAUTQBty+G4PBnBTuU8VQuFVHyy/jsXM/A4ZF2 lYPgKN6K0hnbzmRRZPwC4LOdbHIBQM21OH1fFt2Ot0zLoqFVJdEy0cJW51LctCGq XuO41L2TjI5dgUR4fjR0h/a4aCr0UrZwNt3Lzs9uhy7dhZFF5fguxVvb2ln/hvkR lk7fPFOnClIwLjqmvLkMUTsDG2eJ+d3i6t86O9KcVQZP -----END CERTIFICATE-----Generated at Tue Jan 20 15:35:30 2026 by rpki-client