This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/jCXew-LM4stUKDAZjHPkm0CcjHk.roa File: jCXew-LM4stUKDAZjHPkm0CcjHk.roa (raw, json) Hash identifier: OKyuhMm85OLa4bavn5P/TH9jpfhep7ElblfCCsZsrhU= Subject key identifier: 8C:25:DE:C3:E2:CC:E2:CB:54:28:30:19:8C:73:E4:9B:40:9C:8C:79 Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Certificate serial: 019B7E38EFDBB5A4D65534CDD2A59F082219 Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/jCXew-LM4stUKDAZjHPkm0CcjHk.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34407 IP address blocks: 185.162.100.0/22 maxlen: 24 195.8.96.0/24 maxlen: 24 2a07:c400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:db:b5:a4:d6:55:34:cd:d2:a5:9f:08:22:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c25dec3e2cce2cb542830198c73e49b409c8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:76:54:54:7d:29:61:19:27:6d:65:b1:4a: 7b:ed:a7:3c:a4:5b:4e:3b:59:63:37:c3:77:6b:b2: ec:7e:14:70:ec:13:96:8e:a5:a6:04:79:f8:1e:e3: 61:b0:fe:19:db:51:49:1b:94:77:a4:d8:9c:1c:f9: 49:33:10:e5:b1:e4:af:fe:36:ab:60:33:fa:2d:82: b1:7b:48:e0:7b:49:de:07:c3:0a:04:32:53:bb:e0: 6b:21:71:a0:56:80:0c:02:b5:1e:4f:f7:c6:30:06: 74:4e:2f:47:c9:2e:02:6c:25:84:96:3b:f6:0d:ac: 81:05:e5:dc:2c:ab:bf:6c:54:b3:37:c4:bf:3b:f6: 9e:f5:64:17:fd:1c:be:35:c3:6f:16:9f:a9:d4:51: 4c:0e:37:da:37:e3:81:1c:17:88:e0:1a:e4:d6:c4: ca:68:9b:7d:95:c7:71:6e:3c:2d:e0:38:04:2b:6d: db:7f:14:5a:91:b4:3a:75:7f:6b:b5:16:26:f0:b7: 12:02:87:c5:8a:e3:f2:81:60:26:80:b6:ce:fd:80: c1:d9:cd:4b:57:13:5d:18:73:fd:c9:b6:d0:33:3d: aa:a5:2d:b1:47:27:7c:7a:1c:ee:c9:bc:d6:d6:cf: 7e:d4:ee:e7:dd:31:4d:60:fa:21:d0:5a:bc:a2:81: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:DE:C3:E2:CC:E2:CB:54:28:30:19:8C:73:E4:9B:40:9C:8C:79 X509v3 Authority Key Identifier: keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/jCXew-LM4stUKDAZjHPkm0CcjHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.100.0/22 195.8.96.0/24 IPv6: 2a07:c400::/29 Signature Algorithm: sha256WithRSAEncryption 71:cb:80:05:d4:cb:dc:c6:07:16:34:4a:03:bf:80:60:b1:04: 23:bf:c9:54:b7:71:73:f8:f0:9e:32:59:1c:be:97:ec:7f:26: cf:9d:91:94:7f:5a:75:b3:e4:d6:fe:3c:91:5c:05:b3:41:8c: a2:86:8a:a4:69:de:19:10:54:89:ee:8d:54:4f:4a:ac:a8:c3: c0:6b:33:65:e1:af:ab:7a:18:ae:d8:50:8d:46:01:be:9d:05: 53:81:3f:05:61:74:55:8e:64:f5:c0:46:a7:fe:fc:d3:21:ee: 09:c1:a5:c3:3e:de:a9:ec:3c:bd:57:33:74:37:5c:59:e3:74: 91:28:4e:4b:5f:63:b5:b3:dc:1e:6b:b3:c3:6b:c6:dc:22:34: 77:2b:9b:60:97:1c:e2:c0:a3:18:5d:92:d4:6d:5d:69:ed:b6: 4a:6b:9e:f2:fe:9b:f1:20:dd:69:86:e5:26:a9:ff:94:b2:5c: 24:3c:2a:c0:42:d4:1c:11:87:09:28:0c:d5:f0:77:74:4b:ce: eb:53:f7:39:f5:b3:e0:1d:fd:35:06:a6:04:b1:2c:1e:ec:e6: a0:f3:eb:fd:1b:7c:8e:f1:a7:e9:1a:06:28:2a:71:0e:98:03: 7d:70:8b:fc:06:a4:0d:33:31:2f:59:1a:da:b0:85:05:71:7a: 6c:d4:2b:9a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OO/btaTWVTTN0qWfCCIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj ZmJiNTEwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzI1ZGVjM2UyY2NlMmNiNTQyODMwMTk4YzczZTQ5YjQwOWM4Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXJ2VFR9KWEZJ21lsUp77ac8pFtO O1ljN8N3a7LsfhRw7BOWjqWmBHn4HuNhsP4Z21FJG5R3pNicHPlJMxDlseSv/jar YDP6LYKxe0jge0neB8MKBDJTu+BrIXGgVoAMArUeT/fGMAZ0Ti9HyS4CbCWEljv2 DayBBeXcLKu/bFSzN8S/O/ae9WQX/Ry+NcNvFp+p1FFMDjfaN+OBHBeI4Brk1sTK aJt9lcdxbjwt4DgEK23bfxRakbQ6dX9rtRYm8LcSAofFiuPygWAmgLbO/YDB2c1L VxNdGHP9ybbQMz2qpS2xRyd8ehzuybzW1s9+1O7n3TFNYPoh0Fq8ooHMCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIwl3sPizOLLVCgwGYxz5JtAnIx5MB8GA1UdIwQY MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct N2UyMTdiZWYyZDllLzEvakNYZXctTE00c3RVS0RBWmpIUGttMENjakhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaJkAwQA wwhgMA0EAgACMAcDBQMqB8QAMA0GCSqGSIb3DQEBCwUAA4IBAQBxy4AF1MvcxgcW NEoDv4BgsQQjv8lUt3Fz+PCeMlkcvpfsfybPnZGUf1p1s+TW/jyRXAWzQYyihoqk ad4ZEFSJ7o1UT0qsqMPAazNl4a+rehiu2FCNRgG+nQVTgT8FYXRVjmT1wEan/vzT Ie4JwaXDPt6p7Dy9VzN0N1xZ43SRKE5LX2O1s9wea7PDa8bcIjR3K5tglxziwKMY XZLUbV1p7bZKa57y/pvxIN1phuUmqf+UslwkPCrAQtQcEYcJKAzV8Hd0S87rU/c5 9bPgHf01BqYEsSwe7Oag8+v9G3yO8afpGgYoKnEOmAN9cIv8BqQNMzEvWRrasIUF cXps1Cua -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:13 2026 by rpki-client