This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa File: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (raw, json) Hash identifier: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I= Subject key identifier: 8F:70:BB:5E:15:AA:3E:A6:59:1E:F6:64:1E:ED:F2:8A:A7:9E:09:C7 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7F19A385166A72B880714CE55014 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203295 IP address blocks: 185.139.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7f:19:a3:85:16:6a:72:b8:80:71:4c:e5:50:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f70bb5e15aa3ea6591ef6641eedf28aa79e09c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:82:b0:cb:38:b5:15:cb:dd:c8:e0:de:25: aa:aa:54:43:2a:7b:a0:e5:58:87:6e:85:74:a3:67: be:f1:cb:b0:e8:69:de:a1:ca:01:3a:c2:32:9b:b1: e4:17:a7:bd:14:95:c9:86:65:0c:62:62:b9:23:1b: cd:bb:10:b4:c8:ce:17:57:3a:10:1d:78:b4:c2:99: 60:ba:86:bc:01:ed:99:e0:25:16:b3:ba:34:10:e8: f1:b4:55:fe:d0:07:f0:42:8c:50:b9:51:f1:39:06: 05:23:82:b0:2f:00:eb:83:7c:d7:8b:0f:1d:77:08: 1b:60:e4:51:8b:a2:d5:b1:12:65:38:9d:9b:1f:de: 8b:2d:63:6c:33:f7:19:85:0e:23:ac:fb:76:9b:59: 4a:a6:fe:9c:c9:49:ed:d4:3f:3e:46:ef:93:f5:a6: ea:80:15:de:8e:23:e2:31:3d:fc:27:5c:97:a3:27: 30:bb:be:05:20:c3:1b:ad:f5:e6:4d:3e:fc:bf:2b: b1:3c:2d:08:2a:e4:5f:73:ff:3a:2d:b7:c9:38:75: 0f:2d:20:bd:41:eb:7a:7c:5d:09:f1:8d:56:37:1e: 31:27:c8:44:56:75:5a:15:c8:c2:37:5f:5a:c7:17: 11:52:ed:5b:00:17:d1:1c:df:7d:bf:e2:85:b6:1a: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:BB:5E:15:AA:3E:A6:59:1E:F6:64:1E:ED:F2:8A:A7:9E:09:C7 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.172.0/22 Signature Algorithm: sha256WithRSAEncryption d8:f0:12:03:e2:5d:bd:a1:c1:ba:aa:9d:89:8a:7a:8c:89:c7: 3f:1c:f9:0b:b8:64:28:12:f4:4a:fc:76:a0:f1:34:cd:e1:9e: 82:57:b1:c2:91:dc:66:9b:4d:bf:92:fb:fc:bf:b9:e9:5e:74: cd:d9:bb:a8:28:8b:37:5b:04:8d:c8:af:56:98:ff:6d:db:c0: 01:97:78:c5:b3:f1:9c:ff:a4:75:3b:8d:8d:ea:1e:e9:e4:d9: 84:46:4d:2b:8d:e1:7f:87:7f:fe:de:25:8b:ed:a5:e5:9c:9a: b5:61:14:c9:a6:32:9d:4b:6d:ad:67:38:ed:ac:2c:fb:08:0e: 1a:7b:1f:eb:00:84:a3:56:b5:0b:d4:33:5b:b0:50:d1:09:75: 19:1d:1e:ec:35:75:69:77:bd:c2:97:ec:1b:ba:a9:ad:60:7b: ee:bf:b9:87:39:6c:cd:52:ad:68:da:42:a2:78:93:5a:45:af: e1:d9:a7:12:c8:82:f3:81:c3:3d:d4:97:25:79:32:c2:fb:e6: b9:53:a2:57:2a:dd:9a:d7:1a:dc:08:d0:97:16:0e:63:9f:45: 7a:d0:fe:91:e7:08:cf:30:43:83:76:94:80:f6:8b:74:97:63: 56:6e:36:14:4e:b9:7d:15:92:7b:bd:79:b7:9b:8a:3e:8e:b1: 87:b0:ac:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2638Zo4UWanK4gHFM5VAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjcwYmI1ZTE1YWEzZWE2NTkxZWY2NjQxZWVkZjI4YWE3OWUwOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2amCsMs4tRXL3cjg3iWqqlRDKnug 5ViHboV0o2e+8cuw6GneocoBOsIym7HkF6e9FJXJhmUMYmK5IxvNuxC0yM4XVzoQ HXi0wplguoa8Ae2Z4CUWs7o0EOjxtFX+0AfwQoxQuVHxOQYFI4KwLwDrg3zXiw8d dwgbYORRi6LVsRJlOJ2bH96LLWNsM/cZhQ4jrPt2m1lKpv6cyUnt1D8+Ru+T9abq gBXejiPiMT38J1yXoycwu74FIMMbrfXmTT78vyuxPC0IKuRfc/86LbfJOHUPLSC9 Qet6fF0J8Y1WNx4xJ8hEVnVaFcjCN19axxcRUu1bABfRHN99v+KFthpgQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9wu14Vqj6mWR72ZB7t8oqnngnHMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvajNDN1hoV3FQcVpaSHZaa0h1M3lpcWVlQ2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYusMA0G CSqGSIb3DQEBCwUAA4IBAQDY8BID4l29ocG6qp2JinqMicc/HPkLuGQoEvRK/Hag 8TTN4Z6CV7HCkdxmm02/kvv8v7npXnTN2buoKIs3WwSNyK9WmP9t28ABl3jFs/Gc /6R1O42N6h7p5NmERk0rjeF/h3/+3iWL7aXlnJq1YRTJpjKdS22tZzjtrCz7CA4a ex/rAISjVrUL1DNbsFDRCXUZHR7sNXVpd73Cl+wbuqmtYHvuv7mHOWzNUq1o2kKi eJNaRa/h2acSyILzgcM91JcleTLC++a5U6JXKt2a1xrcCNCXFg5jn0V60P6R5wjP MEODdpSA9ot0l2NWbjYUTrl9FZJ7vXm3m4o+jrGHsKxe -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:50 2026 by rpki-client