This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/j9kxk_tAwUgeNl7TqWWToAuo7-I.roa File: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (raw, json) Hash identifier: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk= Subject key identifier: 8F:D9:31:93:FB:40:C1:48:1E:36:5E:D3:A9:65:93:A0:0B:A8:EF:E2 Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019B7F81EE6DC22D18759BE4717AE0CF1D7F Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/j9kxk_tAwUgeNl7TqWWToAuo7-I.roa Signing time: Fri 02 Jan 2026 16:19:40 +0000 ROA not before: Fri 02 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34576 IP address blocks: 147.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:ee:6d:c2:2d:18:75:9b:e4:71:7a:e0:cf:1d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Jan 2 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd93193fb40c1481e365ed3a96593a00ba8efe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:c2:86:b7:e8:3b:99:82:22:0c:42:84:b3: 40:af:09:a0:ec:73:63:ca:70:c5:1e:7a:36:51:0e: 8c:0f:4b:6d:43:b3:62:e2:a7:78:87:3f:ac:39:9a: d0:e4:53:38:27:b8:ae:14:6b:32:10:39:77:22:5b: f0:4d:6b:fc:43:0c:1d:5f:9a:0b:db:ee:ce:45:95: c1:55:24:cf:a7:fa:c3:62:d6:3c:c7:fc:a6:32:4f: 85:1d:31:02:5f:f3:99:45:8f:8d:7b:04:77:a7:5a: c7:c6:15:20:57:3e:af:53:5d:a5:dc:8d:1c:9e:cf: a6:cd:f9:1d:39:de:2a:e4:f8:a6:38:6a:bd:76:d7: dd:29:ea:66:e1:6e:2d:99:bb:35:0c:bc:36:59:eb: 76:d5:a6:5d:ea:58:9e:db:39:1c:df:c3:70:b1:72: b1:94:ba:fa:6c:39:a6:53:a5:d2:05:69:44:1c:60: f1:60:f7:f5:66:41:24:ce:f8:0f:af:1f:1e:61:8f: b1:d0:0d:96:97:4d:55:e3:a3:68:37:ea:77:03:01: 66:cf:6c:b5:5e:3c:6f:4c:ed:c4:bc:6a:c8:b9:4c: b5:a7:89:03:80:6f:87:9e:08:4d:84:dd:7f:0e:e8: 8d:9c:87:8c:be:82:63:fe:ad:fa:31:78:79:39:3f: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D9:31:93:FB:40:C1:48:1E:36:5E:D3:A9:65:93:A0:0B:A8:EF:E2 X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/j9kxk_tAwUgeNl7TqWWToAuo7-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:06:1f:1b:98:bf:e0:b1:cb:89:33:bd:ba:7f:c8:0e:c7:28: b5:52:28:44:1a:ed:c0:e0:8c:f4:99:66:4f:9a:e9:bc:98:8d: 2f:a1:2c:60:71:79:97:a4:af:8a:6b:6d:be:fe:8c:45:62:0c: 63:7d:ee:b6:20:3e:e1:ff:2c:3d:2f:97:f5:1a:8b:84:83:a5: 05:bf:4f:8b:40:e1:a5:e2:99:ea:58:2f:de:65:a8:91:51:14: 92:23:a9:c0:63:76:6b:4d:be:47:39:54:59:c4:12:6d:b4:45: 74:90:49:13:a4:29:55:83:24:84:23:24:7f:f1:48:06:db:42: 53:c4:e6:28:f4:24:f7:3e:92:cc:b8:14:af:33:dd:c8:fe:00: 95:54:4b:b8:16:f2:b2:67:4b:1b:fe:46:18:4c:f1:a9:65:89: a5:31:1c:d1:52:84:84:41:01:27:d0:42:94:cf:59:4b:0d:6c: c3:16:0b:dc:9d:8a:29:fd:34:38:7b:53:f5:48:1a:5f:4d:54: 25:d1:1b:89:1a:24:d5:ee:40:34:64:cf:a9:4f:98:44:a0:bc: 71:6e:8a:7b:21:c3:02:cf:47:7a:5f:89:00:93:2d:aa:9d:9f: 11:ae:84:9c:93:7c:80:fa:74:9d:fc:bc:64:f8:60:ad:66:e9: bb:35:8a:37 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/ge5twi0YdZvkcXrgzx1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjYwMTAyMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQ5MzE5M2ZiNDBjMTQ4MWUzNjVlZDNhOTY1OTNhMDBiYThlZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DvChrfoO5mCIgxChLNArwmg7HNj ynDFHno2UQ6MD0ttQ7Ni4qd4hz+sOZrQ5FM4J7iuFGsyEDl3IlvwTWv8QwwdX5oL 2+7ORZXBVSTPp/rDYtY8x/ymMk+FHTECX/OZRY+NewR3p1rHxhUgVz6vU12l3I0c ns+mzfkdOd4q5PimOGq9dtfdKepm4W4tmbs1DLw2Wet21aZd6lie2zkc38NwsXKx lLr6bDmmU6XSBWlEHGDxYPf1ZkEkzvgPrx8eYY+x0A2Wl01V46NoN+p3AwFmz2y1 XjxvTO3EvGrIuUy1p4kDgG+HnghNhN1/DuiNnIeMvoJj/q36MXh5OT/I1wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFI/ZMZP7QMFIHjZe06llk6ALqO/iMB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvajlreGtfdEF3VWdlTmw3VHFXV1RvQXVvNy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk9wwDQYJ KoZIhvcNAQELBQADggEBAGcGHxuYv+Cxy4kzvbp/yA7HKLVSKEQa7cDgjPSZZk+a 6byYjS+hLGBxeZekr4prbb7+jEViDGN97rYgPuH/LD0vl/Uai4SDpQW/T4tA4aXi mepYL95lqJFRFJIjqcBjdmtNvkc5VFnEEm20RXSQSROkKVWDJIQjJH/xSAbbQlPE 5ij0JPc+ksy4FK8z3cj+AJVUS7gW8rJnSxv+RhhM8alliaUxHNFShIRBASfQQpTP WUsNbMMWC9ydiin9NDh7U/VIGl9NVCXRG4kaJNXuQDRkz6lPmESgvHFuinshwwLP R3pfiQCTLaqdnxGuhJyTfID6dJ38vGT4YK1m6bs1ijc= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:13 2026 by rpki-client