This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa File: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (raw, json) Hash identifier: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU= Subject key identifier: 26:EC:E3:DA:E5:85:34:D7:06:37:16:60:AB:A3:6C:E6:65:7C:78:DD Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b Certificate serial: 019B7BA530A92B044D89C6EC964830CCEF14 Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62838 IP address blocks: 185.179.204.0/24 maxlen: 24 185.179.205.0/24 maxlen: 24 185.179.206.0/24 maxlen: 24 185.179.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:30:a9:2b:04:4d:89:c6:ec:96:48:30:cc:ef:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26ece3dae58534d706371660aba36ce6657c78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:c1:9f:09:85:2f:62:4f:e6:53:28:0c:9e: d5:35:f3:a0:5f:45:e1:30:99:ab:cb:1a:ae:52:6c: 9f:43:7d:e8:85:cb:8f:1e:58:58:13:1d:4f:c7:bf: 3b:8d:ec:f1:62:f9:23:a5:27:07:31:d3:9b:50:08: fc:d4:83:00:77:69:d2:9c:27:d5:43:52:01:59:a0: 47:c0:f4:63:40:c4:71:78:4e:dc:45:f3:91:e4:42: 40:91:57:c2:df:69:01:22:0b:a5:94:8c:6f:71:dc: 33:32:0b:bd:2f:fd:5c:25:22:ae:e9:1c:2a:0b:1c: e1:78:1a:76:53:8a:8a:52:ed:13:97:fc:a7:f8:f8: d7:5f:f2:ad:e4:83:d0:73:91:a6:ab:1c:3f:aa:96: 82:43:73:f5:7f:fd:26:70:21:f1:25:aa:c6:51:61: da:10:16:00:88:b4:a5:3e:8c:f6:df:7d:62:b0:a0: c6:56:52:2b:0e:84:40:c1:bf:37:b3:09:4e:a6:83: 74:67:ac:ae:f5:96:90:e1:a0:54:70:a1:a7:d5:d1: a9:87:25:c2:5f:b1:92:1f:fb:57:ef:73:b5:af:91: f7:b1:be:60:0b:45:ea:44:bc:12:72:d6:a5:f1:9e: 98:6e:20:ca:6d:12:a4:69:4e:2f:26:5a:3d:55:29: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:E3:DA:E5:85:34:D7:06:37:16:60:AB:A3:6C:E6:65:7C:78:DD X509v3 Authority Key Identifier: keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.204.0/22 Signature Algorithm: sha256WithRSAEncryption 56:4f:5c:8b:58:df:f3:76:cf:45:02:4b:41:78:8b:bd:16:58: eb:08:92:e0:85:25:bb:04:c8:38:cf:bb:6a:af:da:ad:4b:4c: 42:1e:14:9a:eb:e0:d3:b9:ab:f6:aa:c8:08:73:9d:d5:10:ca: 50:8e:f4:a6:48:a5:30:46:ac:a5:93:c2:5e:03:5b:53:7e:6c: 8a:c7:1d:e2:70:2b:29:d5:f0:13:1d:c7:3f:22:02:fb:3f:ec: a8:31:1c:25:7d:f1:2e:2c:d6:be:49:a1:40:6a:4d:f0:ad:67: 51:d3:bb:52:05:d8:dc:e6:18:e6:e4:c3:b8:51:b3:10:a2:48: be:5d:7f:16:fc:05:6d:e7:ee:f3:5d:83:57:29:82:8f:03:ab: dd:a8:18:0a:52:8d:f9:13:56:df:3f:57:08:77:39:30:ca:58: b9:5a:57:8f:7e:e0:9d:90:d3:e9:61:0e:59:b3:e9:ff:dc:52: 29:3a:64:f7:e3:5c:b2:51:13:c5:cf:c7:d6:c2:d0:ed:6c:ec: 0f:91:e7:29:0a:37:e2:3e:c3:21:af:1d:f2:21:4d:d6:c9:d5: 1e:db:d5:f1:62:1d:e2:e0:b5:52:9e:59:62:b9:17:61:65:d2: 2f:fa:a9:a3:91:97:b8:dd:eb:98:93:17:a3:a5:80:17:36:49: 34:8e:e7:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTCpKwRNicbslkgwzO8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWJmZGQ0MmZhOTQ4NGY1NmUxODliYTY4M2Q1MTg4YzUy NDA4M2IwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmVjZTNkYWU1ODUzNGQ3MDYzNzE2NjBhYmEzNmNlNjY1N2M3OGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7jBnwmFL2JP5lMoDJ7VNfOgX0Xh MJmryxquUmyfQ33ohcuPHlhYEx1Px787jezxYvkjpScHMdObUAj81IMAd2nSnCfV Q1IBWaBHwPRjQMRxeE7cRfOR5EJAkVfC32kBIgullIxvcdwzMgu9L/1cJSKu6Rwq CxzheBp2U4qKUu0Tl/yn+PjXX/Kt5IPQc5Gmqxw/qpaCQ3P1f/0mcCHxJarGUWHa EBYAiLSlPoz2331isKDGVlIrDoRAwb83swlOpoN0Z6yu9ZaQ4aBUcKGn1dGphyXC X7GSH/tX73O1r5H3sb5gC0XqRLwSctal8Z6YbiDKbRKkaU4vJlo9VSmAUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCbs49rlhTTXBjcWYKujbOZlfHjdMB8GA1UdIwQY MBaAFBcb/dQvqUhPVuGJumg9UYjFJAg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2Yt YjRkOTY0Nzc2Yzg1LzEvSnV6ajJ1V0ZOTmNHTnhaZ3E2TnM1bVY4ZU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2YtYjRkOTY0Nzc2Yzg1 LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubPMMA0G CSqGSIb3DQEBCwUAA4IBAQBWT1yLWN/zds9FAktBeIu9FljrCJLghSW7BMg4z7tq r9qtS0xCHhSa6+DTuav2qsgIc53VEMpQjvSmSKUwRqylk8JeA1tTfmyKxx3icCsp 1fATHcc/IgL7P+yoMRwlffEuLNa+SaFAak3wrWdR07tSBdjc5hjm5MO4UbMQoki+ XX8W/AVt5+7zXYNXKYKPA6vdqBgKUo35E1bfP1cIdzkwyli5WlePfuCdkNPpYQ5Z s+n/3FIpOmT341yyURPFz8fWwtDtbOwPkecpCjfiPsMhrx3yIU3WydUe29XxYh3i 4LVSnlliuRdhZdIv+qmjkZe43euYkxejpYAXNkk0jucC -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:46 2026 by rpki-client