This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/jigHsNicdl1fh604Cm7gsncIpSo.roa File: jigHsNicdl1fh604Cm7gsncIpSo.roa (raw, json) Hash identifier: egO5ZL+gBPeAqwobqK6rLtgltAJXbcYCPVXRe34SZBg= Subject key identifier: 8E:28:07:B0:D8:9C:76:5D:5F:87:AD:38:0A:6E:E0:B2:77:08:A5:2A Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B7FF24D54FC201F0954DC1D93B9D9BB7D Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/jigHsNicdl1fh604Cm7gsncIpSo.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209635 IP address blocks: 84.45.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4d:54:fc:20:1f:09:54:dc:1d:93:b9:d9:bb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e2807b0d89c765d5f87ad380a6ee0b27708a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:80:78:b2:d9:ef:22:37:76:b4:15:4f:9a: b2:3d:3a:76:92:93:20:7c:e8:48:8d:97:b3:42:ee: 56:44:e8:7b:df:71:32:af:4e:c9:30:e8:02:56:d4: 2a:71:ae:9a:86:0e:73:53:a0:7b:e4:3e:5c:e2:cd: fe:5b:12:fc:e8:2b:c6:0b:0a:39:32:a1:6b:a5:77: a8:b6:9a:fb:58:43:fe:d1:43:7c:30:64:f0:22:d4: e8:10:38:d2:10:5e:5f:ec:a1:5d:b8:e3:5f:ac:8b: cb:3e:f4:2d:af:9c:09:1e:e0:a2:3d:90:f5:e7:6c: 13:61:25:2c:dc:01:54:5f:d0:af:74:f0:eb:78:44: 22:0b:d9:a6:3a:92:0b:cb:a6:30:05:49:ab:a3:90: 70:b6:f8:94:dd:1c:ec:19:6c:c9:de:b6:21:86:82: 73:3f:05:76:5a:89:24:d9:52:42:58:4b:1f:60:e5: 80:2d:00:92:23:48:b6:cf:ba:b4:1e:80:e8:d3:a9: a0:f0:bd:b8:7c:43:b0:88:77:15:86:86:9f:8b:f8: 3b:f6:f1:3e:69:89:76:f1:d9:f3:ee:2a:ea:68:20: 12:f3:38:50:3d:52:a4:01:d7:b3:d7:e1:aa:17:1d: 85:7e:d8:0e:1a:a9:41:bd:c0:a8:58:a5:ea:ea:9a: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:07:B0:D8:9C:76:5D:5F:87:AD:38:0A:6E:E0:B2:77:08:A5:2A X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/jigHsNicdl1fh604Cm7gsncIpSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.45.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:53:b3:f5:8c:ce:a5:99:08:d9:f5:26:ba:fb:8a:aa:2b:0c: 94:ff:7f:ed:5e:66:ae:a0:97:ec:fb:f1:d7:dc:e8:1d:66:dd: 48:ce:ec:d7:57:3d:41:1c:4a:78:4d:f0:28:cc:76:4f:46:bd: a8:e9:f8:6f:37:ee:77:08:1a:c3:ac:9a:e8:99:05:3f:5e:05: 89:7f:ec:b5:56:f3:33:b8:2f:c3:ff:3f:87:3d:d6:a5:17:36: 5f:8e:b3:d4:6f:36:8f:48:68:23:9f:26:36:45:ea:42:5c:1f: d0:ad:2a:b6:4f:0e:f5:ab:80:fd:dd:b2:f7:b4:49:29:75:89: f5:ed:1f:42:b8:b5:09:4a:2e:25:75:c8:6e:7f:5a:e2:d0:ef: 87:11:ee:6c:a0:ab:b5:ef:9f:05:49:20:3c:1e:d9:63:56:60: 5c:15:2f:75:20:b5:cf:82:a0:0c:6c:39:50:2f:6a:06:b4:11: 4c:de:4d:57:61:02:60:0a:7a:b1:b2:23:6e:44:ff:fb:d6:78: b5:cf:fb:08:c1:85:c5:e5:4b:c5:62:ab:55:f4:4c:a5:da:a1: 43:05:ca:b8:31:f2:46:94:75:64:a8:a8:88:23:31:b2:b3:8b: 4d:5e:78:1a:7b:6d:c2:01:97:79:52:55:fa:66:0a:ed:6f:c6: f8:2f:9a:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8k1U/CAfCVTcHZO52bt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTI4MDdiMGQ4OWM3NjVkNWY4N2FkMzgwYTZlZTBiMjc3MDhhNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBaAeLLZ7yI3drQVT5qyPTp2kpMg fOhIjZezQu5WROh733Eyr07JMOgCVtQqca6ahg5zU6B75D5c4s3+WxL86CvGCwo5 MqFrpXeotpr7WEP+0UN8MGTwItToEDjSEF5f7KFduONfrIvLPvQtr5wJHuCiPZD1 52wTYSUs3AFUX9CvdPDreEQiC9mmOpILy6YwBUmro5BwtviU3RzsGWzJ3rYhhoJz PwV2Wokk2VJCWEsfYOWALQCSI0i2z7q0HoDo06mg8L24fEOwiHcVhoafi/g79vE+ aYl28dnz7irqaCAS8zhQPVKkAdez1+GqFx2FftgOGqlBvcCoWKXq6prNjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4oB7DYnHZdX4etOApu4LJ3CKUqMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvamlnSHNOaWNkbDFmaDYwNENtN2dzbmNJcFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC0fMA0G CSqGSIb3DQEBCwUAA4IBAQCNU7P1jM6lmQjZ9Sa6+4qqKwyU/3/tXmauoJfs+/HX 3OgdZt1IzuzXVz1BHEp4TfAozHZPRr2o6fhvN+53CBrDrJromQU/XgWJf+y1VvMz uC/D/z+HPdalFzZfjrPUbzaPSGgjnyY2RepCXB/QrSq2Tw71q4D93bL3tEkpdYn1 7R9CuLUJSi4ldchuf1ri0O+HEe5soKu1758FSSA8HtljVmBcFS91ILXPgqAMbDlQ L2oGtBFM3k1XYQJgCnqxsiNuRP/71ni1z/sIwYXF5UvFYqtV9Eyl2qFDBcq4MfJG lHVkqKiIIzGys4tNXngae23CAZd5UlX6Zgrtb8b4L5oC -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:52 2026 by rpki-client