This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa File: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (raw, json) Hash identifier: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE= Subject key identifier: 26:63:C9:25:E7:86:85:A8:FC:38:F1:78:76:4F:AD:63:A6:39:93:58 Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019BFA7716DC59EFF82530FA4E93C7FB5919 Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa Signing time: Mon 26 Jan 2026 13:21:07 +0000 ROA not before: Mon 26 Jan 2026 13:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15932 IP address blocks: 185.142.240.0/22 maxlen: 22 185.142.243.0/24 maxlen: 24 213.230.176.0/21 maxlen: 21 213.230.184.0/23 maxlen: 23 213.230.184.0/24 maxlen: 24 213.230.188.0/23 maxlen: 23 213.230.188.0/24 maxlen: 24 213.230.189.0/24 maxlen: 24 213.230.191.0/24 maxlen: 24 2a02:2b48::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:77:16:dc:59:ef:f8:25:30:fa:4e:93:c7:fb:59:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Jan 26 13:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2663c925e78685a8fc38f178764fad63a6399358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:5d:bf:26:d7:fb:f4:2b:ac:0a:d5:d5:6c: ad:be:4d:18:06:5e:16:10:d6:49:c2:7c:ed:df:f2: 39:09:8d:72:a4:54:48:26:e1:7f:60:b9:7b:60:a8: 1d:b4:fa:d6:8b:57:73:c5:b0:59:6b:ea:b1:d4:4b: 4f:a9:08:23:7a:23:ce:f2:d9:b8:8a:70:55:5e:69: cd:75:40:02:3c:90:2d:ee:9f:20:c5:67:e4:7d:1b: 3e:51:86:56:ef:64:08:9d:71:65:5a:8a:fe:af:7d: d8:5d:fe:26:e7:d7:4a:db:23:68:a3:b0:1b:5c:68: 41:31:f1:f4:31:42:f0:ec:4a:05:a9:d0:96:d9:a1: 7a:80:02:fa:fa:2c:7e:fc:63:b2:d4:12:fd:47:c4: 00:12:f0:a7:4b:cb:d2:04:c3:0b:5d:ea:29:53:77: 07:76:b2:da:05:01:91:73:dd:c2:56:29:25:82:f4: e0:a6:cb:de:ce:4a:62:76:99:1f:b4:40:15:88:74: 74:cd:13:7e:02:16:9d:b5:4d:fc:9c:7f:7f:5a:83: 90:61:e9:2e:03:f3:42:17:ec:ea:f6:e2:0e:3e:32: 0c:1b:a6:77:9a:85:b1:ff:c5:02:e7:95:1f:65:8f: ad:45:70:b2:ff:a1:16:93:1c:16:aa:d2:ae:71:e6: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:63:C9:25:E7:86:85:A8:FC:38:F1:78:76:4F:AD:63:A6:39:93:58 X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.240.0/22 213.230.176.0-213.230.185.255 213.230.188.0/23 213.230.191.0/24 IPv6: 2a02:2b48::/29 Signature Algorithm: sha256WithRSAEncryption 74:d0:bf:ea:14:9e:54:d8:f5:30:f3:b2:07:11:ad:d2:24:9e: 0e:52:d7:b1:36:27:c2:c6:a1:3f:16:d6:69:6d:d9:05:cd:b3: d8:56:f0:67:fa:95:22:0b:5e:2e:15:ef:77:88:1f:26:bf:e1: 58:4e:a8:b7:8f:47:e8:16:76:84:a2:12:2f:98:eb:00:27:22: ba:ee:aa:90:62:e0:43:1d:f5:f1:ee:d6:4b:60:7f:d1:5f:c0: a4:24:34:ec:b0:63:00:a0:1a:69:07:9d:a5:c1:87:c4:77:b0: 80:8c:c8:c0:dd:47:cd:bc:ad:fb:b3:6d:9e:f1:23:7e:f5:7a: d7:bc:f7:39:53:5e:12:ee:c1:e6:e7:42:93:c7:f3:7a:dd:e9: 1a:a8:5b:83:c5:a8:ae:38:43:c9:ac:a4:04:da:3d:7c:b3:1a: a2:d5:e8:8d:53:3e:b1:af:0a:d2:ff:8f:cd:a3:a7:b0:b6:a1: 1d:4e:f4:87:a8:49:d5:b1:9a:94:e3:77:be:5d:4f:15:b7:ce: c7:89:c5:f0:a7:bd:29:9c:38:03:75:d8:10:ab:b6:15:5b:ce: 9f:6f:30:ef:2b:58:17:cf:5f:1a:a3:2b:9b:21:86:0a:e8:62: 93:15:03:af:0e:bf:44:2e:e8:b8:8b:06:cb:8a:ca:8d:d4:8c: 67:cc:54:56 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZv6dxbcWe/4JTD6TpPH+1kZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjYwMTI2MTMyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjYzYzkyNWU3ODY4NWE4ZmMzOGYxNzg3NjRmYWQ2M2E2Mzk5MzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2NdvybX+/QrrArV1Wytvk0YBl4W ENZJwnzt3/I5CY1ypFRIJuF/YLl7YKgdtPrWi1dzxbBZa+qx1EtPqQgjeiPO8tm4 inBVXmnNdUACPJAt7p8gxWfkfRs+UYZW72QInXFlWor+r33YXf4m59dK2yNoo7Ab XGhBMfH0MULw7EoFqdCW2aF6gAL6+ix+/GOy1BL9R8QAEvCnS8vSBMMLXeopU3cH drLaBQGRc93CViklgvTgpsvezkpidpkftEAViHR0zRN+AhadtU38nH9/WoOQYeku A/NCF+zq9uIOPjIMG6Z3moWx/8UC55UfZY+tRXCy/6EWkxwWqtKuceYgZQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFCZjySXnhoWo/DjxeHZPrWOmOZNYMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvSm1QSkplZUdoYWo4T1BGNGRrLXRZNlk1azFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCuY7wMAwD BATV5rADBAHV5rgDBAHV5rwDBADV5r8wDQQCAAIwBwMFAyoCK0gwDQYJKoZIhvcN AQELBQADggEBAHTQv+oUnlTY9TDzsgcRrdIkng5S17E2J8LGoT8W1mlt2QXNs9hW 8Gf6lSILXi4V73eIHya/4VhOqLePR+gWdoSiEi+Y6wAnIrruqpBi4EMd9fHu1ktg f9FfwKQkNOywYwCgGmkHnaXBh8R3sICMyMDdR828rfuzbZ7xI371ete89zlTXhLu webnQpPH83rd6RqoW4PFqK44Q8mspATaPXyzGqLV6I1TPrGvCtL/j82jp7C2oR1O 9IeoSdWxmpTjd75dTxW3zseJxfCnvSmcOAN12BCrthVbzp9vMO8rWBfPXxqjK5sh hgroYpMVA68Ov0Qu6LiLBsuKyo3UjGfMVFY= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:24 2026 by rpki-client