This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/jZRy-3Fxbh9CfMaGDbVO9ZrP7QM.roa File: jZRy-3Fxbh9CfMaGDbVO9ZrP7QM.roa (raw, json) Hash identifier: l2vMq5ofdygHJTaEMvFxOysLBC/j3LYxWsrlWfvSH3g= Subject key identifier: 8D:94:72:FB:71:71:6E:1F:42:7C:C6:86:0D:B5:4E:F5:9A:CF:ED:03 Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Certificate serial: 019B7B369133F75FF54654BD34CC68292E0E Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/jZRy-3Fxbh9CfMaGDbVO9ZrP7QM.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207369 IP address blocks: 185.39.79.0/24 maxlen: 24 185.138.184.0/22 maxlen: 22 185.138.184.0/23 maxlen: 23 185.138.184.0/24 maxlen: 24 185.138.186.0/23 maxlen: 23 185.138.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:91:33:f7:5f:f5:46:54:bd:34:cc:68:29:2e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9472fb71716e1f427cc6860db54ef59acfed03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:98:df:ba:c7:ca:ef:9d:78:27:14:f2:d0: 4c:2d:cc:c1:90:28:f8:a6:cf:83:7d:37:c6:5d:06: 86:f0:57:36:e5:8e:61:a4:ab:a2:fa:ca:f4:0e:47: 27:50:22:9b:1f:99:34:75:c3:1c:4e:7e:48:31:24: 74:69:be:c4:b3:3a:5c:8f:0d:a2:ec:25:c5:e4:51: d9:89:e2:d2:58:d5:b3:77:f8:3f:e8:cb:8e:cb:33: 7c:b4:ad:47:ce:83:32:fd:ea:cb:95:b9:f0:2f:67: ee:38:10:ae:c7:25:9e:0d:88:c7:59:84:2c:22:ab: 66:b7:d5:4d:3f:88:73:9c:0c:4b:6b:93:c4:21:b1: 8d:bf:36:f6:48:41:23:91:86:94:18:46:7f:6c:4f: d0:cb:fb:72:ec:5e:0b:69:10:92:92:cc:7a:f4:10: 1c:21:bb:ca:4d:ac:2e:3c:34:ad:ea:a7:97:b9:03: 85:6f:1e:fd:39:c8:0f:0b:0f:46:86:6b:d8:20:00: 94:3b:da:44:81:9d:ea:6f:08:b3:cc:bb:6a:ae:57: ba:5e:62:85:69:6c:af:6e:65:84:3f:89:4b:10:40: f4:73:33:4c:7e:2b:8d:07:84:d9:5a:79:b7:67:b6: e9:fe:e2:70:2d:bf:08:97:ca:53:d3:e7:4a:43:ea: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:94:72:FB:71:71:6E:1F:42:7C:C6:86:0D:B5:4E:F5:9A:CF:ED:03 X509v3 Authority Key Identifier: keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/jZRy-3Fxbh9CfMaGDbVO9ZrP7QM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.79.0/24 185.138.184.0/22 Signature Algorithm: sha256WithRSAEncryption 09:5e:67:b2:a5:9e:3d:e4:e1:be:2d:61:82:bc:56:ae:b4:25: 05:a5:64:18:62:5f:5a:12:c7:1b:1d:cc:2e:d4:e1:78:87:68: 7d:e4:e9:e3:b5:ed:65:bf:fb:61:e9:c4:a7:e2:7b:83:f1:8f: c5:66:4b:87:21:06:f2:fb:65:ef:76:e4:e7:d1:b8:17:4c:62: b5:28:1b:59:44:b0:94:34:68:b8:33:f3:fc:ed:ba:85:ba:34: 52:57:1d:45:d2:19:05:59:80:23:5d:8e:0d:a4:b8:d2:34:ef: 6f:fa:99:43:82:3a:96:f8:93:f1:a0:da:6d:e0:39:7c:d4:08: af:37:dc:e2:c4:05:55:f4:82:c8:73:b5:8d:f7:80:e3:e7:cd: 4f:19:65:77:91:43:d7:19:19:76:d5:59:1f:b1:83:86:da:b4: 51:fe:06:1d:e2:19:50:8c:4f:cd:c2:5c:cd:85:9a:26:c9:2f: 2e:19:2d:d4:45:6b:c3:67:53:50:82:54:12:0f:e7:6d:77:8d: 81:47:81:b4:a8:09:62:28:9d:0f:0c:c3:e6:50:0c:b5:74:54: aa:8b:20:68:22:3e:85:4b:b4:15:ce:e3:b1:19:40:e5:5b:5c: b6:6e:45:08:8a:2a:be:4c:60:b4:cf:6f:9f:65:d2:35:ef:a1: 03:11:1f:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NpEz91/1RlS9NMxoKS4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi MjAzMjMwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDk0NzJmYjcxNzE2ZTFmNDI3Y2M2ODYwZGI1NGVmNTlhY2ZlZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTGY37rHyu+deCcU8tBMLczBkCj4 ps+DfTfGXQaG8Fc25Y5hpKui+sr0DkcnUCKbH5k0dcMcTn5IMSR0ab7Eszpcjw2i 7CXF5FHZieLSWNWzd/g/6MuOyzN8tK1HzoMy/erLlbnwL2fuOBCuxyWeDYjHWYQs Iqtmt9VNP4hznAxLa5PEIbGNvzb2SEEjkYaUGEZ/bE/Qy/ty7F4LaRCSksx69BAc IbvKTawuPDSt6qeXuQOFbx79OcgPCw9GhmvYIACUO9pEgZ3qbwizzLtqrle6XmKF aWyvbmWEP4lLEED0czNMfiuNB4TZWnm3Z7bp/uJwLb8Il8pT0+dKQ+osDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI2UcvtxcW4fQnzGhg21TvWaz+0DMB8GA1UdIwQY MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt MDk5NmFlZDMyZjNiLzEvalpSeS0zRnhiaDlDZk1hR0RiVk85WnJQN1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSdPAwQC uYq4MA0GCSqGSIb3DQEBCwUAA4IBAQAJXmeypZ495OG+LWGCvFautCUFpWQYYl9a EscbHcwu1OF4h2h95Onjte1lv/th6cSn4nuD8Y/FZkuHIQby+2XvduTn0bgXTGK1 KBtZRLCUNGi4M/P87bqFujRSVx1F0hkFWYAjXY4NpLjSNO9v+plDgjqW+JPxoNpt 4Dl81AivN9zixAVV9ILIc7WN94Dj581PGWV3kUPXGRl21VkfsYOG2rRR/gYd4hlQ jE/NwlzNhZomyS8uGS3URWvDZ1NQglQSD+dtd42BR4G0qAliKJ0PDMPmUAy1dFSq iyBoIj6FS7QVzuOxGUDlW1y2bkUIiiq+TGC0z2+fZdI176EDER8r -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:45 2026 by rpki-client