This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jtTG-jKD8OSKOGMXnrAukF2vE_M.roa File: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (raw, json) Hash identifier: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k= Subject key identifier: 8E:D4:C6:FA:32:83:F0:E4:8A:38:63:17:9E:B0:2E:90:5D:AF:13:F3 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52A0C39EF5DE6D243CE4200F06D6B Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jtTG-jKD8OSKOGMXnrAukF2vE_M.roa Signing time: Fri 02 Jan 2026 12:18:31 +0000 ROA not before: Fri 02 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 87.246.8.0/24 maxlen: 24 87.246.9.0/24 maxlen: 24 87.246.10.0/24 maxlen: 24 87.246.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2a:0c:39:ef:5d:e6:d2:43:ce:42:00:f0:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ed4c6fa3283f0e48a3863179eb02e905daf13f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:88:6a:0b:6d:e8:96:2f:d2:db:ef:f7:c3: 51:0e:a0:99:cc:0a:95:fd:0f:1d:c3:6d:ab:f9:e6: d0:dc:57:d6:63:39:1a:2b:dc:75:09:07:94:81:01: 42:37:6a:f8:96:2e:45:70:24:f0:8b:ec:9e:3f:9d: e9:51:24:82:2c:e8:6f:da:9b:99:21:d4:69:a4:37: c0:42:43:46:12:91:70:33:93:79:f7:b6:9c:9e:08: 8a:28:2d:4b:7a:7d:a0:86:63:99:54:1e:da:d4:b7: 4e:0b:25:da:0d:89:36:d2:cb:33:c7:0c:2b:7a:3b: 0d:e2:cf:31:bc:c4:b4:3b:44:53:c3:6a:47:cb:e5: b7:c7:27:d2:1d:7e:58:d0:02:ee:3b:17:71:61:5b: 97:46:4b:92:58:76:42:e6:c8:78:d5:78:32:0d:05: 14:6f:d1:19:5a:f3:32:f9:6b:b3:1d:80:53:6e:71: 43:60:a1:d3:41:cf:db:00:8c:9f:f2:87:48:4b:1b: a2:dd:ad:9e:da:c4:d8:e7:0d:09:4e:b0:ce:a5:10: a9:26:e8:ee:9c:10:db:4f:df:ba:e7:83:97:1c:5c: a9:84:d7:ce:7a:d5:4b:51:0a:a2:e0:2a:a0:fb:8f: 82:37:bc:4a:9c:9e:70:49:ca:0a:e9:fb:25:d0:1f: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:C6:FA:32:83:F0:E4:8A:38:63:17:9E:B0:2E:90:5D:AF:13:F3 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jtTG-jKD8OSKOGMXnrAukF2vE_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.8.0/22 Signature Algorithm: sha256WithRSAEncryption 67:8e:bd:c5:b5:bf:18:c3:14:13:19:35:51:3e:a8:40:a3:13: 65:96:a2:55:8b:85:3f:7b:0c:21:63:a1:0d:13:20:e5:1f:ac: 64:13:fe:a2:2b:b7:8b:4f:de:a4:40:2c:f9:30:81:fc:f4:a5: 42:89:66:db:14:66:1a:1d:3c:c2:3d:1d:c3:aa:2e:69:3f:de: 91:11:1c:16:e7:c1:fb:b2:82:66:d5:27:a0:82:02:9b:f7:8b: 38:64:fb:e1:a4:90:45:a3:16:9e:ef:ef:48:04:af:10:df:59: 94:45:da:20:ac:89:f9:ac:bd:05:40:d2:33:97:18:b3:1b:d2: b7:45:c2:16:3d:6c:3e:37:0e:1e:7e:1b:07:22:35:7e:ec:68: 4a:6c:f2:08:60:19:22:70:12:66:d7:e6:af:18:1b:65:33:ae: dd:0b:cf:03:f0:b2:61:8d:bd:35:b3:4e:ec:5f:89:32:20:7d: 4b:f9:5b:bd:16:be:cb:48:c0:bf:af:ed:8e:9e:92:b1:f1:35: 4e:14:81:e1:f3:f7:af:49:d3:16:d1:3b:3d:6b:8e:b7:90:3b: 03:72:6f:be:b4:3c:b7:bb:2c:9e:6b:77:30:a4:d9:d7:16:6e: 09:c3:38:57:e8:1d:07:8b:a3:b8:4a:99:ae:8c:00:13:5e:6d: 53:9e:07:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSoMOe9d5tJDzkIA8G1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWQ0YzZmYTMyODNmMGU0OGEzODYzMTc5ZWIwMmU5MDVkYWYxM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ISIagtt6JYv0tvv98NRDqCZzAqV /Q8dw22r+ebQ3FfWYzkaK9x1CQeUgQFCN2r4li5FcCTwi+yeP53pUSSCLOhv2puZ IdRppDfAQkNGEpFwM5N597acngiKKC1Len2ghmOZVB7a1LdOCyXaDYk20sszxwwr ejsN4s8xvMS0O0RTw2pHy+W3xyfSHX5Y0ALuOxdxYVuXRkuSWHZC5sh41XgyDQUU b9EZWvMy+WuzHYBTbnFDYKHTQc/bAIyf8odISxui3a2e2sTY5w0JTrDOpRCpJuju nBDbT9+654OXHFyphNfOetVLUQqi4Cqg+4+CN7xKnJ5wScoK6fsl0B91vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7Uxvoyg/DkijhjF56wLpBdrxPzMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvanRURy1qS0Q4T1NLT0dNWG5yQXVrRjJ2RV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCV/YIMA0G CSqGSIb3DQEBCwUAA4IBAQBnjr3Ftb8YwxQTGTVRPqhAoxNllqJVi4U/ewwhY6EN EyDlH6xkE/6iK7eLT96kQCz5MIH89KVCiWbbFGYaHTzCPR3Dqi5pP96RERwW58H7 soJm1SegggKb94s4ZPvhpJBFoxae7+9IBK8Q31mURdogrIn5rL0FQNIzlxizG9K3 RcIWPWw+Nw4efhsHIjV+7GhKbPIIYBkicBJm1+avGBtlM67dC88D8LJhjb01s07s X4kyIH1L+Vu9Fr7LSMC/r+2OnpKx8TVOFIHh8/evSdMW0Ts9a463kDsDcm++tDy3 uyyea3cwpNnXFm4JwzhX6B0Hi6O4SpmujAATXm1Tngfe -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:42 2026 by rpki-client