This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/jEHF2JhlerkwgIZYhi0p-P37ie0.roa File: jEHF2JhlerkwgIZYhi0p-P37ie0.roa (raw, json) Hash identifier: nTp/Ugz+no+JQBbMsJeybMXRhILIChUqzXvxTziroZ4= Subject key identifier: 8C:41:C5:D8:98:65:7A:B9:30:80:86:58:86:2D:29:F8:FD:FB:89:ED Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Certificate serial: 019B7C1279B1A64585386B51C1E4B290780D Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/jEHF2JhlerkwgIZYhi0p-P37ie0.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46235 IP address blocks: 195.245.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:79:b1:a6:45:85:38:6b:51:c1:e4:b2:90:78:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c41c5d898657ab930808658862d29f8fdfb89ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:cf:fa:f2:c4:ab:0d:20:eb:d8:bc:ac:58: 09:83:f5:9e:8d:5a:93:65:27:c7:1b:16:5d:ef:e2: ec:0b:a0:c5:5e:aa:6d:33:b6:db:9a:0a:cb:31:e7: 9e:f4:10:5d:bf:4a:80:20:0b:e4:bb:6b:b1:79:71: 4d:24:1d:54:31:ed:c9:e8:51:b7:1d:5a:5c:b0:3f: f4:f1:63:13:7a:a9:48:19:ed:b7:49:4f:5d:3f:bf: 68:c2:28:11:ff:2d:81:dd:fd:f7:f4:7d:c9:2c:7a: e4:89:5b:c9:71:e9:85:ec:e8:4d:0f:9d:dc:55:dd: c9:a9:90:66:1a:22:51:b8:28:9d:fa:cc:f8:b3:39: bc:b1:88:5c:a4:d5:73:db:1d:3f:1e:8a:f4:f7:3d: 8a:9a:51:65:4d:28:31:a0:c6:d7:1e:71:4c:52:64: 9e:c5:87:5a:d5:73:9f:10:1c:87:cb:a9:52:ef:dc: aa:d1:2c:f7:a0:4c:26:a7:63:34:52:0d:7c:1d:eb: a2:d2:c7:2a:a9:4f:5b:61:c0:28:04:42:b6:2d:0b: 58:20:8e:d8:b0:59:81:d1:8a:b5:33:97:c1:f5:6b: 7e:a4:e9:9e:57:49:1d:74:7b:36:92:dc:be:eb:ce: 8a:e7:5a:a0:d0:35:5a:c5:a8:05:d9:10:0e:d8:91: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:41:C5:D8:98:65:7A:B9:30:80:86:58:86:2D:29:F8:FD:FB:89:ED X509v3 Authority Key Identifier: keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/jEHF2JhlerkwgIZYhi0p-P37ie0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.86.0/23 Signature Algorithm: sha256WithRSAEncryption 91:8b:1c:f5:ad:d7:9c:62:b3:5a:51:b9:50:64:37:fe:50:39: 1f:1e:ab:a1:67:d9:32:a9:66:f0:4e:22:38:e7:dc:93:35:23: e2:b7:a1:28:92:d6:a1:91:ce:37:a3:02:51:49:73:62:18:02: 20:5d:3c:62:d3:4d:64:f4:5b:4d:9b:2f:e4:68:db:b5:c6:97: de:2a:e7:cc:5f:c6:70:e3:6f:b2:23:ff:1e:45:11:a4:10:fa: 97:85:43:ec:9a:2d:b8:0b:d7:b6:a4:f7:ef:a4:08:b0:d4:fb: 32:8c:f0:15:48:c1:1b:45:de:e1:20:c3:8d:08:cc:c9:c8:a0: d3:43:df:44:2f:0b:fb:60:b9:61:51:4b:38:df:d5:7e:58:a1: e9:8e:c1:eb:ae:25:57:0c:d6:55:25:e3:ae:9c:9d:69:c3:c8: 73:c1:fa:bd:ee:54:c6:1c:36:59:2f:ff:24:85:22:f1:11:9d: 4d:11:a5:7e:75:c1:b5:cd:cd:d9:83:73:26:5d:ad:7f:9e:de: 94:eb:ae:42:92:52:eb:a5:69:1c:0d:71:05:17:59:85:52:0a: d1:93:91:71:e0:8f:07:d8:24:1c:3a:e4:25:3e:af:37:25:cf: 77:3a:0e:4d:97:81:ee:98:29:d7:fa:91:c6:4a:12:a1:e6:53: 5d:9d:65:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnmxpkWFOGtRweSykHgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNjJiYzM2NTEyNjU4YTBmN2QzZjk2YmMxZDhlNjdkOWZk NDkxOGIwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzQxYzVkODk4NjU3YWI5MzA4MDg2NTg4NjJkMjlmOGZkZmI4OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeXP+vLEqw0g69i8rFgJg/WejVqT ZSfHGxZd7+LsC6DFXqptM7bbmgrLMeee9BBdv0qAIAvku2uxeXFNJB1UMe3J6FG3 HVpcsD/08WMTeqlIGe23SU9dP79owigR/y2B3f339H3JLHrkiVvJcemF7OhND53c Vd3JqZBmGiJRuCid+sz4szm8sYhcpNVz2x0/Hor09z2KmlFlTSgxoMbXHnFMUmSe xYda1XOfEByHy6lS79yq0Sz3oEwmp2M0Ug18Heui0scqqU9bYcAoBEK2LQtYII7Y sFmB0Yq1M5fB9Wt+pOmeV0kddHs2kty+686K51qg0DVaxagF2RAO2JGyewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxBxdiYZXq5MICGWIYtKfj9+4ntMB8GA1UdIwQY MBaAFBBivDZRJlig99P5a8HY5n2f1JGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYt OTVhZDkyYWM4Njk4LzEvakVIRjJKaGxlcmt3Z0laWWhpMHAtUDM3aWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYtOTVhZDkyYWM4Njk4 LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/VWMA0G CSqGSIb3DQEBCwUAA4IBAQCRixz1rdecYrNaUblQZDf+UDkfHquhZ9kyqWbwTiI4 59yTNSPit6Eoktahkc43owJRSXNiGAIgXTxi001k9FtNmy/kaNu1xpfeKufMX8Zw 42+yI/8eRRGkEPqXhUPsmi24C9e2pPfvpAiw1PsyjPAVSMEbRd7hIMONCMzJyKDT Q99ELwv7YLlhUUs439V+WKHpjsHrriVXDNZVJeOunJ1pw8hzwfq97lTGHDZZL/8k hSLxEZ1NEaV+dcG1zc3Zg3MmXa1/nt6U665CklLrpWkcDXEFF1mFUgrRk5Fx4I8H 2CQcOuQlPq83Jc93Og5Nl4HumCnX+pHGShKh5lNdnWWy -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:58 2026 by rpki-client