This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa File: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (raw, json) Hash identifier: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc= Subject key identifier: 8D:B0:2A:35:7B:44:10:0E:55:32:62:66:61:62:03:CB:4C:29:2D:E1 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019B7F15A68ECAF6E50FFEC9BC1286C88EAB Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.170.155.0/24 maxlen: 24 185.207.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a6:8e:ca:f6:e5:0f:fe:c9:bc:12:86:c8:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db02a357b44100e55326266616203cb4c292de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:55:27:cd:d1:46:75:9b:29:a1:d3:10:51: 75:d6:cf:25:63:e7:8f:de:cf:83:25:f3:50:b5:b7: c0:1d:b3:fa:cf:2f:bf:fb:85:35:c3:13:eb:dc:e4: 72:32:0e:62:92:ea:df:33:1c:f6:0f:2a:d6:b3:f5: 45:eb:8b:9c:a4:01:01:90:21:08:64:9b:6b:f9:9a: 16:e1:02:a3:3a:ef:ad:34:80:94:05:03:23:fd:3f: fd:75:3c:90:91:0b:2d:86:61:be:60:37:ba:b4:9b: de:22:fe:b9:6d:3a:10:ce:c6:0a:97:15:73:ec:16: 9d:11:ea:13:3b:3d:90:ce:f6:17:cc:dc:24:d6:aa: 43:6d:d1:45:4f:6e:36:2b:5b:2c:2c:52:48:c5:79: 8b:b3:c5:4c:76:75:03:86:d4:66:9d:10:41:bf:dc: 56:b1:3d:8f:b4:03:18:f4:e0:dc:88:60:f7:b1:ea: b2:ca:e8:6c:d6:61:63:46:b4:e3:80:de:b0:8f:83: ee:94:42:2c:57:f9:b3:cb:27:91:68:3a:b5:67:36: 6b:a3:2f:27:78:0f:1e:56:10:19:5f:c8:76:88:c9: ee:30:60:1e:f7:41:ad:d8:b3:06:f6:ed:21:22:c2: 9b:a1:9e:3d:db:f9:10:57:24:3a:46:14:78:35:9e: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B0:2A:35:7B:44:10:0E:55:32:62:66:61:62:03:CB:4C:29:2D:E1 X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.155.0/24 185.207.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:0b:42:da:89:92:08:0c:4f:69:d8:6f:e3:c5:6b:6b:e4:fe: 62:0b:7c:5e:7a:77:f8:0b:af:80:35:21:94:55:69:88:c3:ba: 55:3c:52:ba:42:65:f7:cd:10:ba:4a:d3:47:73:15:47:d1:f0: ae:32:0a:18:f1:70:4c:60:a9:8d:83:95:76:93:39:0e:17:6c: 5d:ab:6c:49:00:2f:ad:30:23:46:9d:a4:cc:62:fa:93:a0:7d: bb:67:d1:43:f3:4b:0d:cb:d8:7d:d3:8f:41:78:4f:77:b6:53: 75:84:c5:9c:11:a5:18:21:83:49:85:e9:17:1e:d2:5e:1e:aa: 81:0e:70:a5:d0:db:1b:b3:80:00:90:16:42:5e:65:1e:a7:e7: 30:55:a1:d3:2b:ee:9f:c9:2e:d9:6b:c5:05:d5:77:95:77:7f: fe:6c:81:71:44:f0:2e:90:16:4c:31:b1:0f:c4:bf:af:0f:43: 5e:9b:33:34:af:5f:41:3e:7b:4c:34:8a:69:f9:df:3f:c1:03: 05:7f:52:c3:e6:cd:19:d8:e7:0e:0b:8b:ee:eb:8a:e2:bb:5c: df:9c:39:4a:1f:1c:12:0e:2a:47:a7:7f:11:91:96:df:19:5f: 12:f7:08:64:4c:13:17:50:d3:f4:a2:1d:1c:ef:3e:aa:26:a4: f0:4e:6e:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FaaOyvblD/7JvBKGyI6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGIwMmEzNTdiNDQxMDBlNTUzMjYyNjY2MTYyMDNjYjRjMjkyZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU1VJ83RRnWbKaHTEFF11s8lY+eP 3s+DJfNQtbfAHbP6zy+/+4U1wxPr3ORyMg5ikurfMxz2DyrWs/VF64ucpAEBkCEI ZJtr+ZoW4QKjOu+tNICUBQMj/T/9dTyQkQsthmG+YDe6tJveIv65bToQzsYKlxVz 7BadEeoTOz2QzvYXzNwk1qpDbdFFT242K1ssLFJIxXmLs8VMdnUDhtRmnRBBv9xW sT2PtAMY9ODciGD3seqyyuhs1mFjRrTjgN6wj4PulEIsV/mzyyeRaDq1ZzZroy8n eA8eVhAZX8h2iMnuMGAe90Gt2LMG9u0hIsKboZ492/kQVyQ6RhR4NZ7dSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI2wKjV7RBAOVTJiZmFiA8tMKS3hMB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvamJBcU5YdEVFQTVWTW1KbVlXSUR5MHdwTGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaqbAwQA uc+GMA0GCSqGSIb3DQEBCwUAA4IBAQAbC0LaiZIIDE9p2G/jxWtr5P5iC3xeenf4 C6+ANSGUVWmIw7pVPFK6QmX3zRC6StNHcxVH0fCuMgoY8XBMYKmNg5V2kzkOF2xd q2xJAC+tMCNGnaTMYvqToH27Z9FD80sNy9h9049BeE93tlN1hMWcEaUYIYNJhekX HtJeHqqBDnCl0Nsbs4AAkBZCXmUep+cwVaHTK+6fyS7Za8UF1XeVd3/+bIFxRPAu kBZMMbEPxL+vD0NemzM0r19BPntMNIpp+d8/wQMFf1LD5s0Z2OcOC4vu64riu1zf nDlKHxwSDipHp38RkZbfGV8S9whkTBMXUNP0oh0c7z6qJqTwTm7P -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:03 2026 by rpki-client