This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa File: jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa (raw, json) Hash identifier: NnQHdGOV+Y72Fq5VRgEhZrBnuzQZy/8YU6VukVFGbMo= Subject key identifier: 8D:74:D2:93:42:A9:CE:6C:0A:1A:54:FC:73:45:A3:47:01:06:19:96 Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Certificate serial: 019B7CEE2F59BB5E7C1A5B7E959FCAE1F49F Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60325 IP address blocks: 185.75.49.0/24 maxlen: 24 185.75.50.0/24 maxlen: 24 185.75.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:59:bb:5e:7c:1a:5b:7e:95:9f:ca:e1:f4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d74d29342a9ce6c0a1a54fc7345a34701061996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:ee:d7:d6:36:2f:ac:9c:25:38:bf:cb:e5: e5:6e:ad:82:25:fc:d1:ab:12:da:f0:8b:88:51:4b: 4a:49:c7:34:f9:95:bb:50:c9:88:d1:e8:e6:56:48: 15:62:c4:80:b9:4a:f7:10:70:6f:b4:ba:8c:40:0a: b7:24:0f:64:c6:b1:0a:52:0e:56:63:a5:ee:14:c4: d5:43:d5:9f:2a:1b:bc:f0:cb:7e:45:59:49:3e:a8: ff:7a:cd:11:d5:e0:8c:20:97:ad:e7:d3:bd:63:e9: 6c:99:2b:e9:54:af:f6:50:62:ff:f1:37:32:1c:60: f9:95:e0:3d:de:8c:74:ce:56:92:e6:87:d0:2d:09: 95:e7:ec:8c:96:8a:a9:da:38:40:c2:02:5e:6d:04: 9b:a4:1e:4b:7f:a5:56:1c:05:b1:25:7a:87:de:fc: a3:7d:af:7b:9f:36:66:c3:a5:e1:16:78:18:0f:5e: 37:59:13:76:dc:40:e8:a1:60:38:11:bc:58:9a:57: 07:ad:a2:df:4d:6c:3c:b5:fc:b9:82:0f:1c:57:89: c1:c8:1c:21:ee:e0:eb:c2:c3:22:c9:94:fb:13:33: 53:73:23:02:11:4b:fe:3e:66:4d:e4:54:d5:cc:fb: 3b:32:b0:89:ee:b8:e6:18:05:28:c4:e6:b5:f1:11: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:D2:93:42:A9:CE:6C:0A:1A:54:FC:73:45:A3:47:01:06:19:96 X509v3 Authority Key Identifier: keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.49.0-185.75.51.255 Signature Algorithm: sha256WithRSAEncryption 64:3e:e0:b5:6f:de:61:ff:bc:3c:9e:ee:2c:02:61:28:78:fe: 1d:87:ac:e8:83:5c:a4:5f:ce:b9:e1:a0:25:87:cb:60:10:be: 08:50:11:61:aa:c5:31:c1:b4:cf:e9:4e:64:05:91:7f:f6:a9: 83:a6:b8:b5:cd:2e:41:d9:47:cb:2f:73:e4:ce:6d:38:cf:4e: cc:8e:9e:85:65:16:9e:04:df:18:70:68:17:0a:ed:fd:0f:37: ff:20:9b:42:7b:91:13:71:d8:bf:98:cf:87:8c:80:b9:17:c6: 11:f7:3e:d9:ac:fb:3d:b7:3c:28:9a:d3:92:9a:05:e6:11:16: 1a:95:5c:2c:29:2d:d3:5c:19:bc:75:08:3f:c4:bf:2e:57:98: c3:ef:76:c9:26:89:26:68:2d:ab:18:eb:1a:ea:12:e5:26:a4: 83:ba:e8:24:a5:5e:b2:bd:6c:31:5d:c8:1d:93:d7:7b:d3:29: 22:25:4f:e5:e5:b6:14:22:c6:cb:1b:f0:3c:47:4b:2f:2e:10: 62:9e:75:b3:12:15:73:40:c5:d9:69:3c:2e:fe:c5:1d:a4:f9: 5b:77:ac:06:bd:a3:7a:c2:50:1a:8b:0a:aa:4a:21:1c:f2:6e: 5a:52:2a:c9:fe:43:ac:7f:a8:3b:b8:61:af:06:fc:98:4e:64: 41:c2:0f:60 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87i9Zu158Glt+lZ/K4fSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh ODJlZDUwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc0ZDI5MzQyYTljZTZjMGExYTU0ZmM3MzQ1YTM0NzAxMDYxOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/ju19Y2L6ycJTi/y+Xlbq2CJfzR qxLa8IuIUUtKScc0+ZW7UMmI0ejmVkgVYsSAuUr3EHBvtLqMQAq3JA9kxrEKUg5W Y6XuFMTVQ9WfKhu88Mt+RVlJPqj/es0R1eCMIJet59O9Y+lsmSvpVK/2UGL/8Tcy HGD5leA93ox0zlaS5ofQLQmV5+yMloqp2jhAwgJebQSbpB5Lf6VWHAWxJXqH3vyj fa97nzZmw6XhFngYD143WRN23EDooWA4EbxYmlcHraLfTWw8tfy5gg8cV4nByBwh 7uDrwsMiyZT7EzNTcyMCEUv+PmZN5FTVzPs7MrCJ7rjmGAUoxOa18RFvywIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFI100pNCqc5sChpU/HNFo0cBBhmWMB8GA1UdIwQY MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt NWEzN2FmNDM5MDRjLzEvalhUU2swS3B6bXdLR2xUOGMwV2pSd0VHR1pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5SzED BAK5SzAwDQYJKoZIhvcNAQELBQADggEBAGQ+4LVv3mH/vDye7iwCYSh4/h2HrOiD XKRfzrnhoCWHy2AQvghQEWGqxTHBtM/pTmQFkX/2qYOmuLXNLkHZR8svc+TObTjP TsyOnoVlFp4E3xhwaBcK7f0PN/8gm0J7kRNx2L+Yz4eMgLkXxhH3Ptms+z23PCia 05KaBeYRFhqVXCwpLdNcGbx1CD/Evy5XmMPvdskmiSZoLasY6xrqEuUmpIO66CSl XrK9bDFdyB2T13vTKSIlT+XlthQixssb8DxHSy8uEGKedbMSFXNAxdlpPC7+xR2k +Vt3rAa9o3rCUBqLCqpKIRzyblpSKsn+Q6x/qDu4Ya8G/JhOZEHCD2A= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:48 2026 by rpki-client