This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/JIvUMyg919C-AEiCOLhbtlj6cjE.roa File: JIvUMyg919C-AEiCOLhbtlj6cjE.roa (raw, json) Hash identifier: c3tt9IXLSdvp7thburVJzoa0SnXdItptroj1j30Mafk= Subject key identifier: 24:8B:D4:33:28:3D:D7:D0:BE:00:48:82:38:B8:5B:B6:58:FA:72:31 Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Certificate serial: 019B7D5CE4EC8F2FA474E156E0DD8EDD29C6 Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/JIvUMyg919C-AEiCOLhbtlj6cjE.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199627 IP address blocks: 185.9.20.0/24 maxlen: 24 2a03:42c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:ec:8f:2f:a4:74:e1:56:e0:dd:8e:dd:29:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=248bd433283dd7d0be00488238b85bb658fa7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:7b:b4:79:36:02:10:17:26:02:4a:71:3c: 1b:fa:61:7c:37:52:f5:4d:22:17:b4:79:89:f9:f6: 52:b7:1f:d1:c2:1b:53:50:49:a9:9b:2f:b4:52:7c: d3:58:c8:cd:e2:d9:b9:fd:6e:06:84:e1:84:9e:28: ba:ac:1c:10:fa:49:e8:3e:af:9a:53:68:40:d0:cc: b2:85:dd:a2:02:f1:bf:75:05:e0:78:07:36:b2:8d: 5d:0f:ae:d4:6d:93:7c:aa:79:25:05:5d:89:bd:59: 4d:a4:d9:12:50:2f:66:a0:c2:e0:f5:11:d5:b6:16: 3f:ed:46:67:8b:0e:c4:27:02:e4:85:55:4c:2d:6d: 24:52:24:c8:44:c3:8b:69:94:0b:38:9b:c5:4e:6f: 5e:17:70:74:19:60:3c:da:a5:fe:55:58:e0:31:dc: 53:66:22:18:a3:4a:b3:d0:ab:69:cb:53:2b:50:3c: e8:81:48:25:f1:e4:95:d7:ba:fb:bd:1f:bf:34:65: 30:3b:0d:49:60:84:9f:a5:8b:6a:23:59:6e:2f:9c: 5e:9b:6f:ab:e3:9f:a3:ae:04:8b:57:a9:41:dc:0d: d9:53:e8:ee:ea:b5:93:91:91:d0:b7:73:e2:9b:dc: 6d:64:87:15:bd:58:53:6e:04:42:97:6f:b8:6a:49: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8B:D4:33:28:3D:D7:D0:BE:00:48:82:38:B8:5B:B6:58:FA:72:31 X509v3 Authority Key Identifier: keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/JIvUMyg919C-AEiCOLhbtlj6cjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.20.0/24 IPv6: 2a03:42c0::/32 Signature Algorithm: sha256WithRSAEncryption ac:80:9c:43:56:1a:9f:ba:c8:21:6c:53:a8:35:39:1c:eb:79: 04:2c:02:aa:d5:56:b9:de:66:d3:67:6b:9e:f6:c7:bd:14:31: e2:e1:c3:88:44:3e:c9:bc:5d:3a:70:c9:69:86:56:2f:7f:aa: 20:cd:9a:e3:a7:84:ce:18:ab:5f:4b:ff:be:96:ee:ee:96:78: 32:0b:47:39:80:89:35:a3:eb:52:3d:c1:ac:a6:5f:19:52:ef: 6a:37:aa:07:56:e4:62:85:d6:87:5c:43:6e:6d:dd:3f:a3:0c: 0f:d9:52:3a:c8:88:15:31:9b:ce:40:a1:a8:f9:08:ec:05:ad: a8:84:d3:e5:53:59:4e:aa:3e:91:5a:f2:1b:fe:ab:9f:f0:28: 40:06:1b:8a:b0:ef:30:61:0d:99:b6:8a:c4:48:e3:26:2c:c2: 65:78:9f:fd:7d:c0:dc:32:66:15:2f:43:4c:51:82:1b:ff:65: 01:8b:ae:d2:2c:27:0b:14:7e:fe:f9:7b:22:b9:38:73:d7:ac: 4f:d6:9e:5a:a0:c1:20:77:30:f3:48:c7:66:6c:91:c6:31:d1: 57:ca:fa:f1:5d:95:63:3f:b7:76:19:31:40:6f:b1:ca:a6:bc: 00:47:3f:54:ad:ab:c9:d7:87:34:52:bf:22:cb:d5:00:b6:41: 4a:8d:e5:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XOTsjy+kdOFW4N2O3SnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi YjM2ODYwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDhiZDQzMzI4M2RkN2QwYmUwMDQ4ODIzOGI4NWJiNjU4ZmE3MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGB7tHk2AhAXJgJKcTwb+mF8N1L1 TSIXtHmJ+fZStx/RwhtTUEmpmy+0UnzTWMjN4tm5/W4GhOGEnii6rBwQ+knoPq+a U2hA0Myyhd2iAvG/dQXgeAc2so1dD67UbZN8qnklBV2JvVlNpNkSUC9moMLg9RHV thY/7UZniw7EJwLkhVVMLW0kUiTIRMOLaZQLOJvFTm9eF3B0GWA82qX+VVjgMdxT ZiIYo0qz0Ktpy1MrUDzogUgl8eSV17r7vR+/NGUwOw1JYISfpYtqI1luL5xem2+r 45+jrgSLV6lB3A3ZU+ju6rWTkZHQt3Pim9xtZIcVvVhTbgRCl2+4akm+0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCSL1DMoPdfQvgBIgji4W7ZY+nIxMB8GA1UdIwQY MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt YzdmZTYyMjI3ZGYzLzEvSkl2VU15ZzkxOUMtQUVpQ09MaGJ0bGo2Y2pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuQkUMA0E AgACMAcDBQAqA0LAMA0GCSqGSIb3DQEBCwUAA4IBAQCsgJxDVhqfusghbFOoNTkc 63kELAKq1Va53mbTZ2ue9se9FDHi4cOIRD7JvF06cMlphlYvf6ogzZrjp4TOGKtf S/++lu7ulngyC0c5gIk1o+tSPcGspl8ZUu9qN6oHVuRihdaHXENubd0/owwP2VI6 yIgVMZvOQKGo+QjsBa2ohNPlU1lOqj6RWvIb/quf8ChABhuKsO8wYQ2ZtorESOMm LMJleJ/9fcDcMmYVL0NMUYIb/2UBi67SLCcLFH7++XsiuThz16xP1p5aoMEgdzDz SMdmbJHGMdFXyvrxXZVjP7d2GTFAb7HKprwARz9UravJ14c0Ur8iy9UAtkFKjeUa -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:09 2026 by rpki-client