This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa File: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (raw, json) Hash identifier: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs= Subject key identifier: 25:DE:A4:5B:89:46:35:3D:0E:04:98:C5:69:CB:35:9F:2C:A5:90:B4 Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580 Certificate serial: 019B78A28A795C2E4DC192FBAB25F24A9E8D Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49040 IP address blocks: 185.242.88.0/24 maxlen: 24 185.242.89.0/24 maxlen: 24 185.242.90.0/24 maxlen: 24 185.242.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8a:79:5c:2e:4d:c1:92:fb:ab:25:f2:4a:9e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25dea45b8946353d0e0498c569cb359f2ca590b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:f6:0c:d6:34:54:57:5a:d1:91:f8:4c:58: 35:22:9e:29:60:84:18:ee:8d:99:d1:aa:08:2c:60: b1:f1:df:bb:20:aa:46:b4:d3:8e:62:fd:d2:40:e8: 24:cf:4e:ad:a2:56:e7:6b:d9:0c:0b:db:ba:79:d2: 1e:0d:4f:0a:67:86:ab:76:84:1f:59:b3:62:86:7c: a2:41:d5:34:1f:c4:9d:95:4b:7f:dd:8b:44:05:e7: f8:49:21:43:e9:30:5f:06:f1:6a:42:92:36:5a:16: 9f:84:26:24:48:c3:99:c5:59:35:81:f1:93:f6:b4: 8f:9a:78:76:ae:d2:1a:ad:46:15:f9:59:d3:b9:59: 02:83:68:d6:d1:45:15:7c:c5:d3:86:e7:8d:ee:89: b2:37:b9:92:38:d7:67:ab:70:5a:a1:fa:59:0a:af: 1b:a3:bb:18:aa:3f:fa:16:2f:f4:fd:7c:0c:e3:a9: 45:b3:f2:4a:7d:d4:15:f0:5e:81:29:5b:e1:b8:80: cb:6e:a3:2c:d2:0d:04:7b:80:38:33:cc:38:c7:ee: 07:44:8a:9e:43:6f:b2:51:2c:a4:da:75:86:a4:40: 65:e6:50:b5:46:ea:61:c7:d5:ef:ae:30:32:15:a1: db:39:f8:f4:0e:cf:55:d5:58:af:ba:bb:9c:09:dd: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:A4:5B:89:46:35:3D:0E:04:98:C5:69:CB:35:9F:2C:A5:90:B4 X509v3 Authority Key Identifier: keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.88.0/22 Signature Algorithm: sha256WithRSAEncryption 20:42:28:07:04:1b:67:62:b1:d0:a7:35:b0:0d:e1:c9:12:2e: 84:e2:26:43:c0:78:2b:d5:25:4b:e5:80:22:e0:76:54:a2:11: da:79:6d:ee:1d:5b:e4:e6:ae:aa:ff:dc:f7:8d:c0:7e:0a:00: e5:6e:53:b9:1b:73:00:93:4d:28:25:27:34:b3:b6:07:b3:01: 45:4b:89:a6:e3:3b:8f:b5:3b:58:05:86:f5:d2:1f:2a:f9:ee: f7:c4:c2:8d:3a:a3:2c:65:31:01:29:2c:be:2d:1d:79:21:32: 9e:8f:1a:ed:17:3d:e3:3a:db:30:95:17:9c:ea:cb:0a:36:ac: 4d:a8:60:e0:d4:4f:e2:37:8a:af:37:a2:4f:76:b9:84:b4:f7: e9:03:90:1e:d4:9b:26:fc:3e:56:f1:52:43:f1:38:bb:04:4c: 44:78:e5:92:c2:b0:1b:73:73:e5:85:df:ee:cf:56:dc:c4:d5: e5:d4:5c:af:5e:44:ff:77:04:57:4b:1c:6b:11:ad:b1:f8:4a: aa:9e:90:52:3b:8c:26:97:71:bc:cc:c3:60:28:d4:d7:34:66: 3f:66:28:64:ce:8d:96:4e:fb:4c:8d:5f:53:4f:33:e9:36:b9: 73:20:25:4c:02:2b:45:72:6d:ea:6a:3a:4b:d4:b6:00:07:df: 0e:3e:49:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oop5XC5NwZL7qyXySp6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz NmE1ODAwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWRlYTQ1Yjg5NDYzNTNkMGUwNDk4YzU2OWNiMzU5ZjJjYTU5MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjz2DNY0VFda0ZH4TFg1Ip4pYIQY 7o2Z0aoILGCx8d+7IKpGtNOOYv3SQOgkz06tolbna9kMC9u6edIeDU8KZ4ardoQf WbNihnyiQdU0H8SdlUt/3YtEBef4SSFD6TBfBvFqQpI2WhafhCYkSMOZxVk1gfGT 9rSPmnh2rtIarUYV+VnTuVkCg2jW0UUVfMXThueN7omyN7mSONdnq3BaofpZCq8b o7sYqj/6Fi/0/XwM46lFs/JKfdQV8F6BKVvhuIDLbqMs0g0Ee4A4M8w4x+4HRIqe Q2+yUSyk2nWGpEBl5lC1Ruphx9XvrjAyFaHbOfj0Ds9V1VivurucCd0+hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXepFuJRjU9DgSYxWnLNZ8spZC0MB8GA1UdIwQY MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt ODUyN2M5YjNlNzVmLzEvSmQ2a1c0bEdOVDBPQkpqRmFjczFueXlsa0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufJYMA0G CSqGSIb3DQEBCwUAA4IBAQAgQigHBBtnYrHQpzWwDeHJEi6E4iZDwHgr1SVL5YAi 4HZUohHaeW3uHVvk5q6q/9z3jcB+CgDlblO5G3MAk00oJSc0s7YHswFFS4mm4zuP tTtYBYb10h8q+e73xMKNOqMsZTEBKSy+LR15ITKejxrtFz3jOtswlRec6ssKNqxN qGDg1E/iN4qvN6JPdrmEtPfpA5Ae1Jsm/D5W8VJD8Ti7BExEeOWSwrAbc3Plhd/u z1bcxNXl1FyvXkT/dwRXSxxrEa2x+EqqnpBSO4wml3G8zMNgKNTXNGY/Zihkzo2W TvtMjV9TTzPpNrlzICVMAitFcm3qajpL1LYAB98OPkmi -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:13 2026 by rpki-client