This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/_JF8Eg2LajBMQ-wk536FOe9jq_A.roa File: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (raw, json) Hash identifier: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg= Subject key identifier: FC:91:7C:12:0D:8B:6A:30:4C:43:EC:24:E7:7E:85:39:EF:63:AB:F0 Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Certificate serial: 019B783528F5E5168423BF6EBBB36F744561 Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/_JF8Eg2LajBMQ-wk536FOe9jq_A.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28717 IP address blocks: 62.122.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:f5:e5:16:84:23:bf:6e:bb:b3:6f:74:45:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc917c120d8b6a304c43ec24e77e8539ef63abf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:3a:d7:dd:7f:d5:38:61:f7:f9:30:e2:bc: 50:56:2e:b1:77:fa:8b:1c:99:b5:f4:86:05:0e:3c: 74:fc:9c:8b:12:ab:76:28:dc:32:39:56:4c:4b:4c: f0:86:c3:70:08:7c:d2:12:ba:9f:ca:29:fb:62:6a: 39:23:f7:52:b2:c4:ad:8a:3d:40:1b:de:82:bd:4d: 41:f0:7c:4b:00:94:24:7b:91:7e:f6:32:af:be:0e: 07:77:4c:f5:80:d2:ba:6a:40:75:99:de:f8:94:50: ff:47:3b:85:08:5f:5b:5c:ad:be:de:e9:b3:23:ab: 4d:69:61:9e:10:41:90:4b:b3:8c:53:be:3d:71:a2: 0e:30:7f:6b:7d:51:bb:89:3c:35:b1:b7:8a:0b:4d: 36:d5:b0:89:51:8b:86:48:3d:be:d0:fa:6d:66:5e: 47:82:a9:ac:07:e5:52:70:cd:0e:fd:f2:11:73:9a: 5e:6d:eb:77:ea:d8:93:d9:57:a2:71:53:1d:66:57: 96:66:0c:1a:d4:8f:e6:97:1f:b0:e6:23:94:69:48: 64:78:19:6f:5a:31:68:57:24:77:51:22:77:91:57: da:08:84:a1:17:71:c8:c6:d5:f0:fb:fd:62:c1:7c: 4b:65:ee:59:02:02:cd:0c:d6:58:2c:bf:f7:61:a4: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:91:7C:12:0D:8B:6A:30:4C:43:EC:24:E7:7E:85:39:EF:63:AB:F0 X509v3 Authority Key Identifier: keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/_JF8Eg2LajBMQ-wk536FOe9jq_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.160.0/21 Signature Algorithm: sha256WithRSAEncryption 67:52:1e:8f:53:97:ce:4a:db:d8:02:c1:c3:a9:00:6c:d6:b6: 68:9d:90:a7:cc:c7:50:bd:44:80:99:7e:01:8c:47:d6:d6:2e: 3c:65:7d:37:68:04:40:e8:55:f8:f5:06:0b:f9:33:73:7b:67: fe:57:53:80:a4:db:ba:cd:01:b1:1e:82:d4:c1:d8:fb:18:2f: 07:46:58:35:3a:23:69:c3:be:7c:4f:86:c1:c4:81:19:66:6a: e3:d5:d6:61:a9:82:ac:ed:43:3e:ef:55:3e:ce:a8:64:77:1b: 12:2e:eb:d5:fd:f4:61:c7:9d:67:f1:8e:96:50:f7:c1:77:0b: 67:ea:d0:e9:57:2a:20:3b:53:97:61:1b:fb:bd:62:7c:ef:bc: 5c:cd:ba:f7:31:97:38:93:a7:72:d0:84:41:09:76:b9:3f:71: 03:7d:9a:32:9c:31:8b:07:e0:57:54:12:c5:66:df:15:f1:ca: cb:d1:e4:49:36:b0:a1:5f:cd:d6:0f:53:2d:d5:ab:30:df:ca: 59:32:82:2b:73:80:6a:1b:95:fb:21:b9:f1:48:da:61:01:d0: bd:4b:6e:54:55:86:94:7a:a2:60:5c:2f:07:2f:7d:26:23:ea: ab:28:43:54:5b:be:30:7c:ac:69:24:fd:a0:9d:df:5a:98:f8: 5e:64:40:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSj15RaEI79uu7NvdEVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi Zjc5OTYwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzkxN2MxMjBkOGI2YTMwNGM0M2VjMjRlNzdlODUzOWVmNjNhYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uc6191/1Thh9/kw4rxQVi6xd/qL HJm19IYFDjx0/JyLEqt2KNwyOVZMS0zwhsNwCHzSErqfyin7Ymo5I/dSssStij1A G96CvU1B8HxLAJQke5F+9jKvvg4Hd0z1gNK6akB1md74lFD/RzuFCF9bXK2+3umz I6tNaWGeEEGQS7OMU749caIOMH9rfVG7iTw1sbeKC0021bCJUYuGSD2+0PptZl5H gqmsB+VScM0O/fIRc5pebet36tiT2VeicVMdZleWZgwa1I/mlx+w5iOUaUhkeBlv WjFoVyR3USJ3kVfaCIShF3HIxtXw+/1iwXxLZe5ZAgLNDNZYLL/3YaTpsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyRfBINi2owTEPsJOd+hTnvY6vwMB8GA1UdIwQY MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt NmVhYTFjODk4MjRhLzEvX0pGOEVnMkxhakJNUS13azUzNkZPZTlqcV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPnqgMA0G CSqGSIb3DQEBCwUAA4IBAQBnUh6PU5fOStvYAsHDqQBs1rZonZCnzMdQvUSAmX4B jEfW1i48ZX03aARA6FX49QYL+TNze2f+V1OApNu6zQGxHoLUwdj7GC8HRlg1OiNp w758T4bBxIEZZmrj1dZhqYKs7UM+71U+zqhkdxsSLuvV/fRhx51n8Y6WUPfBdwtn 6tDpVyogO1OXYRv7vWJ877xczbr3MZc4k6dy0IRBCXa5P3EDfZoynDGLB+BXVBLF Zt8V8crL0eRJNrChX83WD1Mt1asw38pZMoIrc4BqG5X7IbnxSNphAdC9S25UVYaU eqJgXC8HL30mI+qrKENUW74wfKxpJP2gnd9amPheZECE -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:57 2026 by rpki-client