This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa File: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (raw, json) Hash identifier: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE= Subject key identifier: D4:9B:72:16:31:87:28:E8:C1:E8:4E:72:98:54:58:1E:8D:02:8E:7A Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Certificate serial: 019B7C1256EA69CE190CB09D176E0CE2AA7F Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48501 IP address blocks: 185.161.140.0/22 maxlen: 22 185.161.140.0/24 maxlen: 24 185.161.141.0/24 maxlen: 24 185.161.142.0/24 maxlen: 24 185.161.143.0/24 maxlen: 24 2a07:c500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:56:ea:69:ce:19:0c:b0:9d:17:6e:0c:e2:aa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49b7216318728e8c1e84e729854581e8d028e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:8e:26:c7:91:47:49:05:05:af:fd:7d:70: 7a:7b:6a:07:e0:23:a7:ba:60:a6:38:55:8d:0c:c0: 82:f4:01:2f:2b:a0:4e:30:52:91:1d:f2:13:98:4b: 39:bf:f9:f2:3f:be:f3:c8:78:f0:7e:52:5b:9f:c1: 38:0f:dc:40:62:25:59:e0:67:0b:51:32:b6:37:16: 3e:2c:1e:f4:28:61:b2:ee:62:ee:9e:0b:65:e6:1f: 63:de:29:85:38:b4:88:58:46:7e:2d:b0:fe:bf:9d: 48:74:18:31:6b:0f:a5:62:84:dc:81:e4:44:a4:69: ba:02:84:bb:1c:d8:1d:b4:23:fe:a3:ec:81:73:54: 74:49:ef:fc:66:37:64:b6:35:34:11:33:0d:76:b8: 68:74:56:18:73:98:10:79:16:bb:87:ec:78:42:10: 44:c3:ad:50:59:42:31:36:5b:c8:28:f0:7d:2a:5d: 33:f1:f0:06:59:f5:a1:78:29:40:65:3e:a1:45:aa: 0b:ba:8e:96:23:ab:1c:cc:f9:71:dc:70:99:66:34: ae:76:6f:94:c1:8e:7d:d7:5e:a8:52:f4:60:c0:c9: 66:64:a4:2b:b7:d3:06:50:5a:20:32:68:ba:3b:83: ce:a2:71:cb:62:2c:03:cd:2e:6a:80:ea:81:62:e5: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:72:16:31:87:28:E8:C1:E8:4E:72:98:54:58:1E:8D:02:8E:7A X509v3 Authority Key Identifier: keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.140.0/22 IPv6: 2a07:c500::/29 Signature Algorithm: sha256WithRSAEncryption 8d:33:a6:23:f0:6b:02:de:c8:e9:79:b8:bf:a0:35:4f:5f:b5: ed:10:cc:40:06:55:0c:4f:93:3f:6e:61:b1:11:a0:55:be:ed: 2d:18:34:cb:3c:5b:62:41:7d:b4:57:b7:6a:c3:c3:07:b0:1e: 0b:62:ed:4c:85:52:d0:5b:a2:d2:a3:3a:4c:1a:92:f4:f7:37: 06:ea:3a:62:e9:4e:d1:af:cf:14:74:c7:84:35:b1:c7:d5:fa: f3:0f:b8:a9:f3:71:e5:5b:a1:17:92:fe:30:1d:ad:96:f1:34: 54:af:93:a1:ef:c7:c3:cd:3d:25:aa:9e:d8:f7:f7:8c:99:16: 5a:03:be:07:25:73:75:15:7e:00:93:e5:47:2f:92:42:c4:37: 5d:bd:e1:eb:46:03:a7:29:11:50:15:8e:1b:f7:c4:2a:ab:8c: e1:1e:b5:b0:e8:4b:26:9f:08:f2:30:ac:42:1e:57:5e:85:0c: 22:f8:ba:3f:eb:47:aa:27:78:7b:bf:a2:9f:0d:c9:24:49:d8: 86:62:08:4f:35:bd:95:e5:c5:3e:86:98:3b:88:a1:56:84:eb: 4c:3a:f1:a8:a1:87:53:06:df:bb:62:6c:dc:7e:27:74:32:01: 9c:f5:eb:46:40:8d:77:08:aa:45:bc:34:29:ec:16:40:07:0a: e7:6b:8d:31 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Elbqac4ZDLCdF24M4qp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl MTgyNDAwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDliNzIxNjMxODcyOGU4YzFlODRlNzI5ODU0NTgxZThkMDI4ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/yOJseRR0kFBa/9fXB6e2oH4COn umCmOFWNDMCC9AEvK6BOMFKRHfITmEs5v/nyP77zyHjwflJbn8E4D9xAYiVZ4GcL UTK2NxY+LB70KGGy7mLungtl5h9j3imFOLSIWEZ+LbD+v51IdBgxaw+lYoTcgeRE pGm6AoS7HNgdtCP+o+yBc1R0Se/8ZjdktjU0ETMNdrhodFYYc5gQeRa7h+x4QhBE w61QWUIxNlvIKPB9Kl0z8fAGWfWheClAZT6hRaoLuo6WI6sczPlx3HCZZjSudm+U wY59116oUvRgwMlmZKQrt9MGUFogMmi6O4POonHLYiwDzS5qgOqBYuVXSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNSbchYxhyjowehOcphUWB6NAo56MB8GA1UdIwQY MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt YjIwZWJlNTk1NDc1LzEvMUp0eUZqR0hLT2pCNkU1eW1GUllIbzBDam5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1 LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaGMMA0E AgACMAcDBQMqB8UAMA0GCSqGSIb3DQEBCwUAA4IBAQCNM6Yj8GsC3sjpebi/oDVP X7XtEMxABlUMT5M/bmGxEaBVvu0tGDTLPFtiQX20V7dqw8MHsB4LYu1MhVLQW6LS ozpMGpL09zcG6jpi6U7Rr88UdMeENbHH1frzD7ip83HlW6EXkv4wHa2W8TRUr5Oh 78fDzT0lqp7Y9/eMmRZaA74HJXN1FX4Ak+VHL5JCxDddveHrRgOnKRFQFY4b98Qq q4zhHrWw6EsmnwjyMKxCHldehQwi+Lo/60eqJ3h7v6KfDckkSdiGYghPNb2V5cU+ hpg7iKFWhOtMOvGooYdTBt+7Ymzcfid0MgGc9etGQI13CKpFvDQp7BZABwrna40x -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:26 2026 by rpki-client