This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa File: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (raw, json) Hash identifier: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs= Subject key identifier: 8F:C2:57:95:44:C4:77:58:FF:F5:5A:04:45:CD:19:B6:C5:CC:F0:EF Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F7606AA81F1B422EACF9EB00FB20 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39519 IP address blocks: 86.105.223.0/24 maxlen: 24 152.89.92.0/22 maxlen: 24 194.107.165.0/24 maxlen: 24 195.93.242.0/23 maxlen: 24 195.191.98.0/24 maxlen: 24 2001:4ba2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:60:6a:a8:1f:1b:42:2e:ac:f9:eb:00:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fc2579544c47758fff55a0445cd19b6c5ccf0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:56:ba:cc:3d:1c:f8:7e:6c:d8:4d:89:79: d9:45:53:2d:6f:e6:47:53:3c:45:bd:94:95:72:1a: a3:18:4b:fc:56:cf:f4:21:f8:59:d6:03:85:ba:4e: 33:3b:c9:3c:36:55:81:61:e2:ed:58:07:07:09:6d: e6:77:65:36:bc:34:34:85:cf:0d:dc:6e:60:34:71: 27:a7:da:65:d0:44:7d:5f:cf:ee:60:7a:62:f5:69: 78:3b:3f:9d:4c:3c:4d:e9:6d:54:55:f6:f3:1e:22: 27:e4:c7:d5:43:55:a1:71:04:4d:1c:3c:a8:54:b7: 92:1c:90:f3:e5:d1:a1:bf:46:80:bc:71:de:49:09: 9f:d6:60:24:89:79:6d:7b:76:6a:b6:26:88:b8:07: 11:76:61:4b:7c:a5:39:79:cf:89:31:97:72:2d:32: 28:fd:7d:4a:9f:c1:9f:6b:c7:c5:c4:e2:80:30:0d: b7:99:f5:65:f4:17:c1:23:60:a1:fe:83:74:1d:bc: 0c:6d:6b:88:e8:e3:e6:c2:81:57:88:e9:2b:91:0e: c7:48:82:4e:37:55:30:8e:c0:d8:47:d9:81:fe:ee: 2c:3c:af:9c:0c:80:8f:f6:b6:8d:62:ab:d1:48:cc: ed:e4:77:15:18:32:f2:8c:7b:85:7b:84:f5:63:a4: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C2:57:95:44:C4:77:58:FF:F5:5A:04:45:CD:19:B6:C5:CC:F0:EF X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.223.0/24 152.89.92.0/22 194.107.165.0/24 195.93.242.0/23 195.191.98.0/24 IPv6: 2001:4ba2::/32 Signature Algorithm: sha256WithRSAEncryption c2:ce:ac:f6:7f:51:be:40:f2:14:ac:d4:51:68:e5:97:bd:f8: b7:0f:1b:7c:80:84:11:61:69:69:b2:c9:99:f7:c1:da:05:a4: 85:f5:18:77:3a:ca:cc:d6:41:56:66:c8:c0:2d:25:97:bf:45: 38:50:a2:d5:6b:b4:e3:b8:bb:a8:26:f3:c5:03:1f:5a:cb:e8: 7b:f1:c2:bc:2e:74:09:df:7a:50:9f:33:28:70:73:02:7a:4b: a1:12:e3:a8:40:49:c7:09:ae:72:8b:f4:19:68:51:2e:9d:37: 37:95:e7:7e:cb:6c:24:6a:e4:f6:e6:69:8b:db:84:48:52:04: 41:f9:84:80:03:ab:d6:76:03:37:4c:bf:48:15:8f:41:5c:0c: f1:54:3d:cd:96:0b:d2:9e:a7:f1:dc:96:a5:38:66:d5:ed:bc: 2c:49:a8:9a:ac:b5:41:46:cf:b8:c7:e2:01:d5:87:5e:87:3d: d3:30:a4:c1:65:73:7a:d6:d1:7c:d6:ab:38:9d:ff:73:83:36: ed:0a:bf:6b:2e:95:6a:08:89:70:f5:c8:9b:48:10:38:0c:5b: f7:cd:87:74:c3:87:0d:75:d8:29:8c:a6:f4:36:3b:9a:45:92: 78:87:b3:cb:c7:20:7c:20:0c:86:c5:5f:3c:75:ed:3f:b6:f8: 2c:13:33:17 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NPdgaqgfG0IurPnrAPsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmMyNTc5NTQ0YzQ3NzU4ZmZmNTVhMDQ0NWNkMTliNmM1Y2NmMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8JWusw9HPh+bNhNiXnZRVMtb+ZH UzxFvZSVchqjGEv8Vs/0IfhZ1gOFuk4zO8k8NlWBYeLtWAcHCW3md2U2vDQ0hc8N 3G5gNHEnp9pl0ER9X8/uYHpi9Wl4Oz+dTDxN6W1UVfbzHiIn5MfVQ1WhcQRNHDyo VLeSHJDz5dGhv0aAvHHeSQmf1mAkiXlte3ZqtiaIuAcRdmFLfKU5ec+JMZdyLTIo /X1Kn8Gfa8fFxOKAMA23mfVl9BfBI2Ch/oN0HbwMbWuI6OPmwoFXiOkrkQ7HSIJO N1UwjsDYR9mB/u4sPK+cDICP9raNYqvRSMzt5HcVGDLyjHuFe4T1Y6StAwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFI/CV5VExHdY//VaBEXNGbbFzPDvMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvajhKWGxVVEVkMWpfOVZvRVJjMFp0c1hNOE84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAVmnfAwQC mFlcAwQAwmulAwQBw13yAwQAw79iMA0EAgACMAcDBQAgAUuiMA0GCSqGSIb3DQEB CwUAA4IBAQDCzqz2f1G+QPIUrNRRaOWXvfi3Dxt8gIQRYWlpssmZ98HaBaSF9Rh3 OsrM1kFWZsjALSWXv0U4UKLVa7TjuLuoJvPFAx9ay+h78cK8LnQJ33pQnzMocHMC ekuhEuOoQEnHCa5yi/QZaFEunTc3led+y2wkauT25mmL24RIUgRB+YSAA6vWdgM3 TL9IFY9BXAzxVD3NlgvSnqfx3JalOGbV7bwsSaiarLVBRs+4x+IB1Ydehz3TMKTB ZXN61tF81qs4nf9zgzbtCr9rLpVqCIlw9cibSBA4DFv3zYd0w4cNddgpjKb0Njua RZJ4h7PLxyB8IAyGxV88de0/tvgsEzMX -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:14 2026 by rpki-client