This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa File: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (raw, json) Hash identifier: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY= Subject key identifier: 24:55:88:09:50:83:43:4F:B9:9F:A4:28:9F:C7:DC:1D:B1:87:0B:57 Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EF1A887B042956122A975AEA72796 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202727 IP address blocks: 185.156.80.0/22 maxlen: 22 185.163.28.0/22 maxlen: 22 185.171.156.0/22 maxlen: 22 185.180.244.0/22 maxlen: 22 185.191.92.0/22 maxlen: 22 185.211.24.0/22 maxlen: 22 185.218.248.0/22 maxlen: 22 185.249.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:a8:87:b0:42:95:61:22:a9:75:ae:a7:27:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=245588095083434fb99fa4289fc7dc1db1870b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:c6:9a:ab:6f:e9:cd:2e:04:e7:0b:0e:fd: 9a:18:77:1c:d0:f8:aa:4d:7e:db:a9:f2:54:ab:be: 58:14:a0:60:4c:99:d6:a3:e0:a7:e6:b5:75:a4:0d: 25:63:23:46:9d:3a:5d:0e:65:f4:bb:33:79:d9:50: d5:f2:10:0c:79:3e:8c:57:58:4e:03:09:29:45:6f: 62:2f:59:8e:4d:fb:56:6f:c6:19:03:a3:88:b6:13: 92:a2:ff:ac:b7:a2:b9:7a:42:d0:4f:d0:9d:d1:1c: 11:94:66:f6:e3:c8:98:86:b1:fc:ad:d0:7a:ab:02: 23:ac:2f:12:59:19:0c:f6:18:51:1a:64:a9:ca:49: d9:42:62:5f:6d:14:61:a7:7e:05:4b:b1:67:ea:d2: a3:fa:02:bf:61:1e:b0:38:57:18:f7:e2:eb:7d:c1: 84:b7:a7:11:17:9d:c5:22:66:fc:4f:cd:88:24:ef: 21:ee:08:49:e5:02:47:f7:ef:71:2b:9a:d7:79:8b: b8:5f:8f:6e:93:72:81:d5:4f:e8:d4:91:c5:ba:b5: 94:f9:27:39:8c:15:2c:71:a8:c6:bf:cf:6f:09:33: c1:21:73:7c:73:ed:cf:22:c2:dc:dc:64:ff:06:75: 37:1d:f2:ed:d8:89:1a:22:90:d7:8f:a9:5d:4a:88: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:55:88:09:50:83:43:4F:B9:9F:A4:28:9F:C7:DC:1D:B1:87:0B:57 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.80.0/22 185.163.28.0/22 185.171.156.0/22 185.180.244.0/22 185.191.92.0/22 185.211.24.0/22 185.218.248.0/22 185.249.28.0/22 Signature Algorithm: sha256WithRSAEncryption 16:ca:97:a2:4d:9a:cf:7b:19:37:0c:d9:0b:d7:30:5e:98:56: 80:f5:8c:02:b7:30:3f:23:6c:cd:7a:2e:5f:27:fb:e5:7e:7b: fb:7f:fc:a1:64:ee:17:fd:66:b4:d2:30:3b:2f:c4:ed:38:98: d6:a7:4f:46:7d:6d:a7:40:5a:ca:43:3e:5e:e2:a1:5d:c4:2c: 0d:8d:6d:1e:5c:6c:25:11:d6:55:cf:62:69:4d:8c:3e:d6:40: 02:2a:92:3b:de:c9:51:85:50:85:f8:8c:23:10:74:52:c9:ae: b7:7a:63:e4:68:87:2c:40:20:71:71:94:d9:2d:f6:93:1c:78: 0e:3c:13:22:3f:44:b0:c3:76:23:e3:00:20:75:cc:23:65:f9: 4f:77:e5:6f:e7:f0:8c:de:8e:21:66:37:93:e6:7b:89:32:be: c4:df:3c:9b:d0:47:12:09:51:e0:f5:d1:55:84:c2:9b:99:65: af:26:d7:a1:88:ed:52:22:fb:a7:b4:2f:6e:15:6c:ab:4d:21: f5:78:0f:d4:30:d9:23:29:3b:de:58:37:c4:a4:1d:52:20:15: ee:3f:8e:19:45:8a:cf:ac:53:44:dc:8d:0e:ea:e1:72:e6:dc: d4:85:f5:d3:12:49:a6:09:fa:50:02:2a:45:41:97:67:94:c1: 52:16:d3:41 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5fvGoh7BClWEiqXWupyeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU1ODgwOTUwODM0MzRmYjk5ZmE0Mjg5ZmM3ZGMxZGIxODcwYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYrGmqtv6c0uBOcLDv2aGHcc0Piq TX7bqfJUq75YFKBgTJnWo+Cn5rV1pA0lYyNGnTpdDmX0uzN52VDV8hAMeT6MV1hO AwkpRW9iL1mOTftWb8YZA6OIthOSov+st6K5ekLQT9Cd0RwRlGb248iYhrH8rdB6 qwIjrC8SWRkM9hhRGmSpyknZQmJfbRRhp34FS7Fn6tKj+gK/YR6wOFcY9+LrfcGE t6cRF53FImb8T82IJO8h7ghJ5QJH9+9xK5rXeYu4X49uk3KB1U/o1JHFurWU+Sc5 jBUscajGv89vCTPBIXN8c+3PIsLc3GT/BnU3HfLt2IkaIpDXj6ldSoif/wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCRViAlQg0NPuZ+kKJ/H3B2xhwtXMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvSkZXSUNWQ0RRMC01bjZRb244ZmNIYkdIQzFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCuZxQAwQC uaMcAwQCuaucAwQCubT0AwQCub9cAwQCudMYAwQCudr4AwQCufkcMA0GCSqGSIb3 DQEBCwUAA4IBAQAWypeiTZrPexk3DNkL1zBemFaA9YwCtzA/I2zNei5fJ/vlfnv7 f/yhZO4X/Wa00jA7L8TtOJjWp09GfW2nQFrKQz5e4qFdxCwNjW0eXGwlEdZVz2Jp TYw+1kACKpI73slRhVCF+IwjEHRSya63emPkaIcsQCBxcZTZLfaTHHgOPBMiP0Sw w3Yj4wAgdcwjZflPd+Vv5/CM3o4hZjeT5nuJMr7E3zyb0EcSCVHg9dFVhMKbmWWv JtehiO1SIvuntC9uFWyrTSH1eA/UMNkjKTveWDfEpB1SIBXuP44ZRYrPrFNE3I0O 6uFy5tzUhfXTEkmmCfpQAipFQZdnlMFSFtNB -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:39 2026 by rpki-client