This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/JinlA7FKjDVbIRYDa6baiCb1Mj8.roa File: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (raw, json) Hash identifier: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U= Subject key identifier: 26:29:E5:03:B1:4A:8C:35:5B:21:16:03:6B:A6:DA:88:26:F5:32:3F Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019B7E378E1878ED9C0FCE2AA4096F570D54 Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/JinlA7FKjDVbIRYDa6baiCb1Mj8.roa Signing time: Fri 02 Jan 2026 10:18:48 +0000 ROA not before: Fri 02 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 185.195.228.0/24 maxlen: 24 185.195.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8e:18:78:ed:9c:0f:ce:2a:a4:09:6f:57:0d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2629e503b14a8c355b2116036ba6da8826f5323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:53:02:f3:98:6f:13:6b:06:c1:82:b3:e4: 4b:f9:72:7a:3c:f5:e3:c2:38:1e:3d:29:d0:f1:8c: bd:39:f8:27:3d:fd:85:d7:2f:77:71:bb:be:36:7a: 23:af:3f:a7:12:7c:29:c6:9e:fe:83:5a:9a:25:f1: 61:c3:73:6d:0b:3c:cd:92:d9:62:9a:13:31:96:e7: 5f:5f:36:78:4a:c0:48:b2:7a:1a:27:be:fb:ea:d1: c5:f8:9a:a9:47:fa:02:85:2d:0d:f9:3f:ae:db:26: 8c:ec:3a:cb:16:06:af:70:44:85:e1:84:a5:23:0e: f8:05:05:f0:0a:13:0a:0d:6b:42:cc:f1:ce:cd:81: 3b:c6:eb:e5:f1:29:bf:71:c2:9b:1d:e9:57:32:a1: 8b:ff:0b:d3:8e:8f:2f:79:d9:eb:a8:b4:d5:7f:6e: c9:89:73:08:1e:89:85:a1:b1:11:46:a6:5d:18:22: 9e:9d:d4:3d:00:79:54:57:7e:02:83:25:65:86:02: 66:39:d9:2e:47:b6:02:cd:99:c8:fc:45:cb:22:a5: 18:dd:56:cd:7b:42:19:80:3e:6a:9a:fe:75:2c:39: 98:0e:ec:03:a6:27:c4:59:c3:17:5e:26:8f:17:8e: 1d:30:b5:34:89:ea:06:7d:77:20:93:47:5f:f5:ea: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:E5:03:B1:4A:8C:35:5B:21:16:03:6B:A6:DA:88:26:F5:32:3F X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/JinlA7FKjDVbIRYDa6baiCb1Mj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.228.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:31:37:71:4d:03:0f:9b:a9:2f:0f:66:99:fb:be:a0:5f:29: 45:10:c6:63:41:f2:55:58:b3:bb:af:f5:85:df:e7:c6:88:ad: cd:3d:7d:21:00:87:d4:4c:51:3f:b7:9d:bd:63:3e:96:f0:a8: d2:0f:9b:0c:29:28:a8:4a:84:56:ad:7e:10:92:e6:8e:ad:c4: 19:40:d6:6c:b7:8e:7f:65:45:e5:d8:c6:b5:4f:6b:ee:4a:db: 5a:16:8a:f8:c5:db:b8:35:02:d0:71:d8:db:bf:29:fa:a9:da: 9a:07:3e:52:1e:04:e1:a3:5f:bc:d7:45:46:d5:58:9c:1f:ac: 42:3d:52:7f:6f:14:70:fb:72:8b:7b:dc:62:c2:03:15:ce:d2: d0:a0:de:cc:33:f1:31:3a:a9:95:62:c9:51:b0:61:10:0e:e4: 0a:0b:51:d5:05:91:b2:3c:38:ee:0a:d3:7d:02:5a:83:a1:b7: a0:7c:ee:62:21:d9:5c:58:6d:bc:6e:c3:12:00:26:fc:df:0f: fb:72:3e:31:46:1f:c9:70:00:8a:95:6f:1e:fd:ca:e1:93:ef: 4f:f2:03:47:bd:bf:7b:21:00:80:51:cf:94:44:ac:7c:d6:3f: b3:6d:df:a8:47:61:99:59:51:c8:e0:db:2f:e0:26:cc:98:86: 0b:f0:50:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N44YeO2cD84qpAlvVw1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjI5ZTUwM2IxNGE4YzM1NWIyMTE2MDM2YmE2ZGE4ODI2ZjUzMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfZTAvOYbxNrBsGCs+RL+XJ6PPXj wjgePSnQ8Yy9OfgnPf2F1y93cbu+Nnojrz+nEnwpxp7+g1qaJfFhw3NtCzzNktli mhMxludfXzZ4SsBIsnoaJ7776tHF+JqpR/oChS0N+T+u2yaM7DrLFgavcESF4YSl Iw74BQXwChMKDWtCzPHOzYE7xuvl8Sm/ccKbHelXMqGL/wvTjo8vednrqLTVf27J iXMIHomFobERRqZdGCKendQ9AHlUV34CgyVlhgJmOdkuR7YCzZnI/EXLIqUY3VbN e0IZgD5qmv51LDmYDuwDpifEWcMXXiaPF44dMLU0ieoGfXcgk0df9erKrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYp5QOxSow1WyEWA2um2ogm9TI/MB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvSmlubEE3RktqRFZiSVJZRGE2YmFpQ2IxTWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucPkMA0G CSqGSIb3DQEBCwUAA4IBAQB8MTdxTQMPm6kvD2aZ+76gXylFEMZjQfJVWLO7r/WF 3+fGiK3NPX0hAIfUTFE/t529Yz6W8KjSD5sMKSioSoRWrX4QkuaOrcQZQNZst45/ ZUXl2Ma1T2vuSttaFor4xdu4NQLQcdjbvyn6qdqaBz5SHgTho1+810VG1VicH6xC PVJ/bxRw+3KLe9xiwgMVztLQoN7MM/ExOqmVYslRsGEQDuQKC1HVBZGyPDjuCtN9 AlqDobegfO5iIdlcWG28bsMSACb83w/7cj4xRh/JcACKlW8e/crhk+9P8gNHvb97 IQCAUc+URKx81j+zbd+oR2GZWVHI4Nsv4CbMmIYL8FDp -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:29 2026 by rpki-client