This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa File: jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa (raw, json) Hash identifier: 2Zm1F358Ktx90HgZPnWlbKxHuyZ65L4VlWk0sdk1YM4= Subject key identifier: 8E:96:97:D5:EC:94:6B:AD:4C:D7:35:0F:58:96:B3:FB:2C:4D:24:64 Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Certificate serial: 019B7AC8C3F4FD8CEF784E37979CD2AEE55F Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214123 IP address blocks: 185.36.208.0/24 maxlen: 24 185.183.220.0/24 maxlen: 24 2a0f:4f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c3:f4:fd:8c:ef:78:4e:37:97:9c:d2:ae:e5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9697d5ec946bad4cd7350f5896b3fb2c4d2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:32:59:dd:03:b5:03:ed:f2:f6:2f:26:e7: 8c:46:33:91:16:e2:cb:ff:eb:a1:07:69:62:ba:7a: 1c:f8:ec:d7:8c:33:10:89:29:9e:41:82:a6:36:aa: 31:c9:6d:e8:7e:12:6d:c9:ed:51:56:6f:fc:18:57: fd:41:d2:7b:a1:e4:4f:97:30:82:07:96:e9:fb:26: 8b:54:c4:0b:54:ec:45:76:46:31:88:3f:87:90:74: 37:74:93:a1:d8:c1:94:73:ef:37:82:4b:3e:b7:3d: bd:3f:a4:72:3a:f1:26:35:ed:c2:74:2f:91:0a:d1: c6:4a:0c:57:36:64:68:db:84:25:83:c2:ee:33:06: c0:13:dd:23:54:bd:dc:5c:20:a3:1d:cb:dc:99:e6: ab:0b:40:06:7f:a4:f4:0c:52:01:22:77:ce:fd:b8: 68:20:79:ee:84:8b:34:2f:2e:84:af:2e:c3:b5:4d: 4c:07:28:83:bd:1e:61:aa:3e:21:b5:5e:bd:6b:5d: ac:04:01:dc:ba:6b:ea:cc:3c:ea:f9:e0:79:fa:60: b0:4a:67:91:e2:e4:c8:92:d2:97:7f:86:ac:97:c1: af:b5:36:f5:8a:b8:81:e2:54:26:46:5b:03:01:c1: e3:24:6f:28:13:37:8e:38:e7:4b:58:a6:09:6f:91: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:97:D5:EC:94:6B:AD:4C:D7:35:0F:58:96:B3:FB:2C:4D:24:64 X509v3 Authority Key Identifier: keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.208.0/24 185.183.220.0/24 IPv6: 2a0f:4f00::/29 Signature Algorithm: sha256WithRSAEncryption 75:a4:70:24:4b:44:1e:db:08:55:e1:1f:db:63:85:32:45:29: 52:70:4b:87:59:19:aa:95:bb:2d:1f:0c:85:e2:ac:77:e2:6a: 02:0e:e8:59:8b:64:2c:95:43:39:d3:c4:f1:99:52:95:d5:4e: 03:58:39:ae:49:6a:01:93:e4:72:7d:f0:9c:4a:c6:aa:69:d1: f5:79:a3:9c:d2:04:20:1c:40:99:a8:b0:fb:80:d9:70:f0:0a: aa:d7:e1:4b:26:cd:1d:30:47:0c:be:62:62:ec:db:04:ec:4c: 91:af:e7:54:b3:95:4d:56:ce:fa:50:63:fb:35:9a:8f:7d:78: 54:44:9d:90:e8:da:a6:bf:51:8d:47:7f:d8:26:53:b9:4e:04: 7d:3f:ea:bf:90:47:5a:87:43:74:82:c8:31:eb:da:36:c5:20: 3f:98:56:09:a3:77:39:56:81:cd:2a:77:39:2c:65:ed:ba:c8: 71:3e:aa:2c:54:b1:74:c7:0a:d3:ae:49:2a:62:18:a9:98:0d: 2c:d0:67:43:d1:e4:d4:36:d0:a5:c2:6a:d9:ce:7b:26:55:70: 16:62:e9:20:86:1e:94:b4:ef:eb:33:24:bc:48:45:2d:1f:b6: 7e:6b:b3:25:dd:5f:d8:27:95:d8:f1:3e:99:15:8a:b9:e5:ce: 69:a0:e8:18 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6yMP0/YzveE43l5zSruVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2 OGM5MzAwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTk2OTdkNWVjOTQ2YmFkNGNkNzM1MGY1ODk2YjNmYjJjNGQyNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkEyWd0DtQPt8vYvJueMRjORFuLL /+uhB2liunoc+OzXjDMQiSmeQYKmNqoxyW3ofhJtye1RVm/8GFf9QdJ7oeRPlzCC B5bp+yaLVMQLVOxFdkYxiD+HkHQ3dJOh2MGUc+83gks+tz29P6RyOvEmNe3CdC+R CtHGSgxXNmRo24Qlg8LuMwbAE90jVL3cXCCjHcvcmearC0AGf6T0DFIBInfO/bho IHnuhIs0Ly6Ery7DtU1MByiDvR5hqj4htV69a12sBAHcumvqzDzq+eB5+mCwSmeR 4uTIktKXf4asl8GvtTb1iriB4lQmRlsDAcHjJG8oEzeOOOdLWKYJb5FIrwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFI6Wl9XslGutTNc1D1iWs/ssTSRkMB8GA1UdIwQY MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1 LTliZjE5ZDg0MjIwZi8xL2pwYVgxZXlVYTYxTTF6VVBXSmF6LXl4TkpHUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1LTliZjE5ZDg0MjIw Zi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAC5JNAD BAC5t9wwDQQCAAIwBwMFAyoPTwAwDQYJKoZIhvcNAQELBQADggEBAHWkcCRLRB7b CFXhH9tjhTJFKVJwS4dZGaqVuy0fDIXirHfiagIO6FmLZCyVQznTxPGZUpXVTgNY Oa5JagGT5HJ98JxKxqpp0fV5o5zSBCAcQJmosPuA2XDwCqrX4UsmzR0wRwy+YmLs 2wTsTJGv51SzlU1WzvpQY/s1mo99eFREnZDo2qa/UY1Hf9gmU7lOBH0/6r+QR1qH Q3SCyDHr2jbFID+YVgmjdzlWgc0qdzksZe26yHE+qixUsXTHCtOuSSpiGKmYDSzQ Z0PR5NQ20KXCatnOeyZVcBZi6SCGHpS07+szJLxIRS0ftn5rsyXdX9gnldjxPpkV irnlzmmg6Bg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:26 2026 by rpki-client