This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/jcfKGbQz1qnhTGap3aNlvjbY_PE.roa File: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (raw, json) Hash identifier: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4= Subject key identifier: 8D:C7:CA:19:B4:33:D6:A9:E1:4C:66:A9:DD:A3:65:BE:36:D8:FC:F1 Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf Certificate serial: 019B7DCB02E20C7FF9527C81FF491165F05B Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/jcfKGbQz1qnhTGap3aNlvjbY_PE.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.175.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:02:e2:0c:7f:f9:52:7c:81:ff:49:11:65:f0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dc7ca19b433d6a9e14c66a9dda365be36d8fcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:32:34:85:4c:cc:bf:34:73:88:63:9d:51: f6:f0:d5:5a:3a:98:e7:89:49:91:57:67:1a:d6:b3: 9a:75:1f:4f:8e:a2:22:fe:94:81:d9:4a:89:e0:1d: 7e:89:8a:9d:41:7f:7d:e6:c1:65:0b:b8:9c:97:86: 58:91:4b:12:75:94:e2:29:de:4a:57:01:23:1d:bf: 96:2e:32:ad:4d:bc:5b:ae:9c:7b:ae:ba:f4:5a:12: 8c:a7:7d:13:88:49:6c:1b:57:37:59:45:44:9f:3b: e6:2d:ef:5a:35:74:28:4b:b7:e7:6f:82:09:ac:ae: 78:e5:b3:16:04:f6:04:c3:10:e1:d7:95:17:70:3b: d2:d1:ea:0e:be:d5:a0:1e:2a:9a:dd:17:83:27:1e: ad:90:21:74:f2:43:6d:41:06:84:5c:c8:69:f9:87: 20:1c:e3:b5:e8:b1:df:d9:5f:14:05:d4:db:0f:76: 64:af:19:50:cc:be:63:6c:cc:2e:c5:97:8f:90:2f: 50:91:23:9d:11:67:4c:8c:27:df:8c:8e:0b:0a:08: af:bc:58:fb:96:f0:1c:ec:b2:02:c0:08:5f:14:34: b2:1d:d2:87:34:4f:8e:cb:e7:fd:5e:57:b8:02:d8: 01:85:c1:ab:c9:f7:05:df:46:91:9e:d5:22:a1:17: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:CA:19:B4:33:D6:A9:E1:4C:66:A9:DD:A3:65:BE:36:D8:FC:F1 X509v3 Authority Key Identifier: keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/jcfKGbQz1qnhTGap3aNlvjbY_PE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.188.0/22 Signature Algorithm: sha256WithRSAEncryption 49:f3:a7:c7:6e:d7:de:09:d4:16:75:6d:24:39:cf:0f:bd:cf: 9f:20:07:8c:6d:f1:d4:34:c8:a1:1b:5c:65:e7:fe:b6:71:29: 38:cd:f3:95:ee:07:53:3a:79:7e:b0:22:e0:65:e9:d5:a9:d3: 17:36:47:32:30:6a:55:78:d4:e8:22:ff:72:8f:e8:df:e5:42: 64:d8:b6:0d:cc:e0:51:04:dc:ca:c2:29:09:b6:37:09:9a:b3: 92:f1:83:4b:3a:b9:7e:b3:aa:26:b9:e7:63:53:2e:00:5a:8a: 82:6d:9a:0b:4e:17:bb:b5:1f:03:ac:92:aa:03:54:a1:93:99: 3f:4b:3e:59:52:aa:6f:32:f9:b0:07:e6:3b:39:1c:2b:b5:0e: 37:0e:11:c0:2a:d0:46:21:ab:f6:06:50:7e:ea:85:60:47:95: 93:ed:10:85:0c:af:ba:03:64:8c:ee:c5:69:f9:54:39:80:d6: 97:88:81:12:cf:ee:bf:20:90:ce:8d:24:e0:c4:01:d4:cc:77: 3d:e2:d7:b0:2f:ce:08:2a:ba:5f:d2:c4:7b:83:18:96:c5:44: 5a:b0:a6:5c:c7:d4:f6:33:7b:44:e5:56:0f:b8:f7:40:15:cc: b0:2e:40:49:e5:00:7e:86:cf:3c:e9:22:84:c4:02:1c:b3:63: 9a:04:97:b9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9ywLiDH/5UnyB/0kRZfBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw MGViY2YwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGM3Y2ExOWI0MzNkNmE5ZTE0YzY2YTlkZGEzNjViZTM2ZDhmY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpEyNIVMzL80c4hjnVH28NVaOpjn iUmRV2ca1rOadR9PjqIi/pSB2UqJ4B1+iYqdQX995sFlC7icl4ZYkUsSdZTiKd5K VwEjHb+WLjKtTbxbrpx7rrr0WhKMp30TiElsG1c3WUVEnzvmLe9aNXQoS7fnb4IJ rK545bMWBPYEwxDh15UXcDvS0eoOvtWgHiqa3ReDJx6tkCF08kNtQQaEXMhp+Ycg HOO16LHf2V8UBdTbD3ZkrxlQzL5jbMwuxZePkC9QkSOdEWdMjCffjI4LCgivvFj7 lvAc7LICwAhfFDSyHdKHNE+Oy+f9Xle4AtgBhcGryfcF30aRntUioRdA9wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFI3Hyhm0M9ap4Uxmqd2jZb422PzxMB8GA1UdIwQY MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk LWE4ZThiODkzMTU1Mi8xL2pjZktHYlF6MXFuaFRHYXAzYU5sdmpiWV9QRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVkLWE4ZThiODkzMTU1 Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5r7ww DQYJKoZIhvcNAQELBQADggEBAEnzp8du194J1BZ1bSQ5zw+9z58gB4xt8dQ0yKEb XGXn/rZxKTjN85XuB1M6eX6wIuBl6dWp0xc2RzIwalV41Ogi/3KP6N/lQmTYtg3M 4FEE3MrCKQm2Nwmas5Lxg0s6uX6zqia552NTLgBaioJtmgtOF7u1HwOskqoDVKGT mT9LPllSqm8y+bAH5js5HCu1DjcOEcAq0EYhq/YGUH7qhWBHlZPtEIUMr7oDZIzu xWn5VDmA1peIgRLP7r8gkM6NJODEAdTMdz3i17Avzggqul/SxHuDGJbFRFqwplzH 1PYze0TlVg+490AVzLAuQEnlAH6GzzzpIoTEAhyzY5oEl7k= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:12 2026 by rpki-client