This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_JDLOHBdrBVnKNE-CkwafjX4Upw.roa File: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (raw, json) Hash identifier: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo= Subject key identifier: FC:90:CB:38:70:5D:AC:15:67:28:D1:3E:0A:4C:1A:7E:35:F8:52:9C Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC413E06CC227EDD29AE0B6DA68BE0 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_JDLOHBdrBVnKNE-CkwafjX4Upw.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35533 IP address blocks: 193.138.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:41:3e:06:cc:22:7e:dd:29:ae:0b:6d:a6:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc90cb38705dac156728d13e0a4c1a7e35f8529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:e9:c6:e6:72:73:37:77:2a:8f:95:30:56: da:3b:6f:b4:23:d5:4b:ff:5f:d2:ee:b0:4d:4c:36: 08:06:c8:c4:3f:ec:20:6d:a2:33:70:3f:1e:77:33: a5:6a:ea:1e:42:55:1e:3e:4e:98:91:dc:10:7b:ce: dc:3c:b8:bf:83:5d:d9:52:d6:12:94:c8:0e:ee:f1: 4d:c9:99:3d:a5:3c:31:eb:5c:07:c1:40:81:0a:05: 10:01:7e:72:2d:d4:7d:66:af:2a:45:b4:22:68:e8: 60:d3:fe:f5:70:3e:e1:a7:f3:d3:53:0c:ac:13:76: 73:86:d1:20:0f:18:e4:e0:b7:8f:a6:04:d5:61:f1: 3f:1f:6e:7e:04:a7:ba:fe:73:61:75:06:93:34:ab: 89:d1:14:70:29:28:20:b8:78:85:a2:72:5c:85:18: 05:b4:9d:2b:42:79:6a:8f:9c:ce:7d:e5:ba:45:11: 58:43:88:8a:f3:3f:61:9d:f7:39:86:66:dc:db:4d: e0:ed:78:a8:fe:dd:9d:f7:3a:50:b5:98:bd:a7:a4: 3a:74:c5:ef:34:8b:59:ab:e0:2c:83:83:b0:c2:6a: 5d:81:dc:72:a9:d3:81:5a:1a:06:55:c3:18:d8:da: 5b:f2:06:60:49:b3:61:02:e8:a5:a6:af:35:c6:e8: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:CB:38:70:5D:AC:15:67:28:D1:3E:0A:4C:1A:7E:35:F8:52:9C X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/_JDLOHBdrBVnKNE-CkwafjX4Upw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.84.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:27:74:2c:3b:bc:6a:f7:ca:b9:30:1b:9a:80:f6:10:e6:46: c6:1c:e7:4f:81:ca:2a:d8:67:58:e8:48:73:fc:02:82:a5:9a: 75:e3:b6:bc:65:7c:c6:15:98:3d:1d:65:e4:a0:4b:9a:93:14: 94:97:46:d8:cf:9d:78:5e:ce:85:fe:28:ed:a4:86:58:e5:15: 08:b5:a1:c5:0e:ae:27:78:a1:5b:69:ea:b4:87:00:c8:71:d7: a2:c1:47:5b:55:3e:a8:58:e9:29:c1:d7:1a:be:3e:34:d8:9b: 36:10:ad:37:39:1d:cc:c9:fe:88:9b:37:3a:82:b4:11:b2:94: 2a:f1:8f:89:a3:a9:48:77:24:dc:9e:51:ea:69:7e:48:cd:86: ce:24:fa:1b:5d:3c:0b:12:b8:95:80:a2:79:61:10:bd:c7:29: f0:52:54:7c:55:68:e3:72:3e:0a:cf:0d:f2:40:9b:10:99:76: c0:55:06:85:4f:55:d5:cd:c2:34:46:83:14:05:e4:fd:3c:37: 98:b6:e9:c3:5e:63:23:34:70:7a:e9:99:18:7e:03:cb:d8:e4: e8:ea:98:26:31:32:e1:ba:17:85:6e:28:34:65:e2:8d:d3:af: bf:97:58:ff:e1:3d:15:c6:80:ae:7f:6e:24:6f:7b:bd:8d:2d: 52:df:77:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EE+Bswift0prgttpovgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzkwY2IzODcwNWRhYzE1NjcyOGQxM2UwYTRjMWE3ZTM1Zjg1MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvpxuZyczd3Ko+VMFbaO2+0I9VL /1/S7rBNTDYIBsjEP+wgbaIzcD8edzOlauoeQlUePk6YkdwQe87cPLi/g13ZUtYS lMgO7vFNyZk9pTwx61wHwUCBCgUQAX5yLdR9Zq8qRbQiaOhg0/71cD7hp/PTUwys E3ZzhtEgDxjk4LePpgTVYfE/H25+BKe6/nNhdQaTNKuJ0RRwKSgguHiFonJchRgF tJ0rQnlqj5zOfeW6RRFYQ4iK8z9hnfc5hmbc203g7Xio/t2d9zpQtZi9p6Q6dMXv NItZq+Asg4OwwmpdgdxyqdOBWhoGVcMY2Npb8gZgSbNhAuilpq81xuioFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyQyzhwXawVZyjRPgpMGn41+FKcMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvX0pETE9IQmRyQlZuS05FLUNrd2Fmalg0VXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpUMA0G CSqGSIb3DQEBCwUAA4IBAQBKJ3QsO7xq98q5MBuagPYQ5kbGHOdPgcoq2GdY6Ehz /AKCpZp147a8ZXzGFZg9HWXkoEuakxSUl0bYz514Xs6F/ijtpIZY5RUItaHFDq4n eKFbaeq0hwDIcdeiwUdbVT6oWOkpwdcavj402Js2EK03OR3Myf6Imzc6grQRspQq 8Y+Jo6lIdyTcnlHqaX5IzYbOJPobXTwLEriVgKJ5YRC9xynwUlR8VWjjcj4Kzw3y QJsQmXbAVQaFT1XVzcI0RoMUBeT9PDeYtunDXmMjNHB66ZkYfgPL2OTo6pgmMTLh uheFbig0ZeKN06+/l1j/4T0VxoCuf24kb3u9jS1S33fw -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:23 2026 by rpki-client