This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa File: jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa (raw, json) Hash identifier: EV9l1WgVc2rsgYc/+T8QGA8A2PJD5mEc20rAUOjgeu0= Subject key identifier: 8D:33:0A:F1:CE:07:C5:EF:BF:1A:68:67:26:5D:9C:6E:19:61:C2:2E Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B7C12BB66D567EC9336DE567B4B99A72C Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42865 IP address blocks: 185.10.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:66:d5:67:ec:93:36:de:56:7b:4b:99:a7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d330af1ce07c5efbf1a6867265d9c6e1961c22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:22:1a:ff:05:5e:37:5e:77:72:77:be:44: e2:c5:d4:d0:fd:c2:e1:19:3a:d6:97:a2:33:a8:5c: 90:0c:83:06:69:ad:ed:cc:45:de:63:39:17:08:58: c4:1e:fa:d1:64:66:f8:40:45:f8:93:5e:d0:04:1d: ae:9b:1f:db:c1:c1:99:44:0a:ad:24:05:91:9e:e3: 76:f0:ba:57:e8:69:60:05:f5:14:df:ed:b5:a8:3e: 44:7c:b5:a4:a9:51:59:ed:11:93:8f:84:1f:40:34: fa:f7:c4:a7:d7:a0:68:52:85:dd:90:50:96:e4:ae: 1c:50:14:16:d8:5b:3e:e1:da:30:4c:58:50:92:37: e9:3a:fa:e7:d5:dc:ab:02:92:57:30:19:a4:b7:02: 9c:f5:0d:53:5d:a0:7d:2a:80:67:d8:19:c0:4b:cd: 21:9d:23:cf:1a:3f:77:fb:96:04:01:63:e6:8e:96: 66:4e:f7:8d:02:33:58:2e:1d:3a:e9:4d:58:09:71: 2a:ca:41:ab:bd:9a:76:b8:2e:48:44:1d:00:f6:26: 89:5a:33:9d:e6:0d:a0:3a:6f:bf:97:f4:0a:b8:f6: 07:c0:9a:43:24:b0:41:4e:cb:08:b7:f2:93:f4:fb: ff:4c:78:9c:c5:c6:a7:74:7b:09:36:8f:31:17:98: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:0A:F1:CE:07:C5:EF:BF:1A:68:67:26:5D:9C:6E:19:61:C2:2E X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/jTMK8c4Hxe-_GmhnJl2cbhlhwi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.209.0/24 Signature Algorithm: sha256WithRSAEncryption 51:63:a7:67:53:83:1d:85:d8:ec:f8:99:9c:19:9b:1d:49:a7: de:9e:bb:82:36:c4:f4:f8:94:51:83:c8:39:13:bc:09:58:d9: 39:70:86:26:ae:b9:b8:3b:92:70:29:2a:99:0b:da:04:2e:50: 30:46:7e:14:cf:74:a1:e9:85:11:50:35:48:8e:f1:cf:27:13: f4:6f:a2:80:f7:9a:68:8f:a6:4c:c3:85:84:41:db:08:74:76: 92:42:68:6d:de:c5:84:b8:91:7c:98:54:87:1a:c8:9f:ae:62: 04:34:76:40:1a:b3:37:0f:97:0e:52:0d:26:8a:ec:f7:ed:8f: d0:98:d3:67:48:ac:d5:a5:36:20:84:7b:18:e4:2c:a0:c7:57: 84:aa:48:c6:6f:06:c3:56:1a:d0:3a:ea:03:84:61:48:83:ba: 21:82:26:10:d3:0c:ed:e8:3c:76:f3:52:11:1c:1a:9d:bc:f7: 6c:6e:ed:17:f8:82:93:be:02:aa:52:81:6a:43:15:bc:08:61: 08:1e:b1:3c:03:ee:16:15:6e:7e:a7:8d:bf:59:7b:7f:82:ad: fc:a0:12:a9:8f:76:b7:72:76:85:db:7f:81:94:04:7a:00:e1: 5e:f0:3f:86:4c:c3:72:24:61:46:7d:35:56:5b:d2:4a:e9:17: 5e:fb:ff:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ertm1WfskzbeVntLmacsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMzMGFmMWNlMDdjNWVmYmYxYTY4NjcyNjVkOWM2ZTE5NjFjMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2siGv8FXjded3J3vkTixdTQ/cLh GTrWl6IzqFyQDIMGaa3tzEXeYzkXCFjEHvrRZGb4QEX4k17QBB2umx/bwcGZRAqt JAWRnuN28LpX6GlgBfUU3+21qD5EfLWkqVFZ7RGTj4QfQDT698Sn16BoUoXdkFCW 5K4cUBQW2Fs+4dowTFhQkjfpOvrn1dyrApJXMBmktwKc9Q1TXaB9KoBn2BnAS80h nSPPGj93+5YEAWPmjpZmTveNAjNYLh066U1YCXEqykGrvZp2uC5IRB0A9iaJWjOd 5g2gOm+/l/QKuPYHwJpDJLBBTssIt/KT9Pv/THicxcandHsJNo8xF5hfVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0zCvHOB8XvvxpoZyZdnG4ZYcIuMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvalRNSzhjNEh4ZS1fR21obkpsMmNiaGxod2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQrRMA0G CSqGSIb3DQEBCwUAA4IBAQBRY6dnU4Mdhdjs+JmcGZsdSafenruCNsT0+JRRg8g5 E7wJWNk5cIYmrrm4O5JwKSqZC9oELlAwRn4Uz3Sh6YURUDVIjvHPJxP0b6KA95po j6ZMw4WEQdsIdHaSQmht3sWEuJF8mFSHGsifrmIENHZAGrM3D5cOUg0miuz37Y/Q mNNnSKzVpTYghHsY5Cygx1eEqkjGbwbDVhrQOuoDhGFIg7ohgiYQ0wzt6Dx281IR HBqdvPdsbu0X+IKTvgKqUoFqQxW8CGEIHrE8A+4WFW5+p42/WXt/gq38oBKpj3a3 cnaF23+BlAR6AOFe8D+GTMNyJGFGfTVWW9JK6Rde+/8C -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:28 2026 by rpki-client