This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/rjqoaksN8bIK2O4SRzuLcMffaQQ.roa File: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (raw, json) Hash identifier: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk= Subject key identifier: AE:3A:A8:6A:4B:0D:F1:B2:0A:D8:EE:12:47:3B:8B:70:C7:DF:69:04 Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Certificate serial: 019B7A5B0C4903E120EDA41393DA12E0A157 Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/rjqoaksN8bIK2O4SRzuLcMffaQQ.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8822 IP address blocks: 185.104.117.0/24 maxlen: 24 195.182.224.0/19 maxlen: 19 195.182.224.0/24 maxlen: 24 195.182.225.0/24 maxlen: 24 195.182.226.0/24 maxlen: 24 2a0f:4c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0c:49:03:e1:20:ed:a4:13:93:da:12:e0:a1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae3aa86a4b0df1b20ad8ee12473b8b70c7df6904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:95:ae:97:1f:05:94:9c:6b:ad:0a:60:a9: 4f:94:ff:59:08:ed:59:47:18:50:49:ee:55:86:ba: 10:a3:7d:c6:ee:3a:3f:47:da:f6:45:10:35:8f:6c: 29:c2:e3:20:fc:9c:81:a3:fe:4a:09:96:84:d8:bf: 45:9a:6f:09:81:d7:33:cb:a1:11:ca:b4:de:63:8c: 69:71:f5:db:11:36:5c:fc:be:4d:b9:c5:29:53:07: b6:5d:41:42:9c:c3:4a:ee:8d:1b:2c:70:88:59:9c: d0:5c:03:25:b0:4a:1f:1a:c0:38:99:4a:17:3d:58: c2:00:87:93:b4:88:7a:0f:3c:1a:fa:33:86:fc:07: ef:a2:20:41:af:9f:a9:3e:46:0f:a2:09:87:05:20: 93:87:8e:2d:a1:32:86:1d:94:cc:22:81:f2:ba:58: 25:bd:74:11:58:94:9a:c0:12:70:b6:ef:31:b6:3d: 2e:05:13:a8:22:a4:06:02:7a:66:05:aa:69:2c:81: 3c:f2:35:05:2e:77:99:0f:b5:98:dd:72:93:04:a6: d3:3a:fe:44:53:f8:04:a2:9c:28:71:b9:5c:0f:5c: b1:82:27:b0:8b:d8:2b:7a:f0:2f:f8:ef:de:0b:9b: 37:2b:eb:54:65:f1:f3:7a:44:cc:04:b6:ff:b9:48: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:A8:6A:4B:0D:F1:B2:0A:D8:EE:12:47:3B:8B:70:C7:DF:69:04 X509v3 Authority Key Identifier: keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/rjqoaksN8bIK2O4SRzuLcMffaQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.117.0/24 195.182.224.0/19 IPv6: 2a0f:4c00::/29 Signature Algorithm: sha256WithRSAEncryption 84:75:32:27:e2:0f:9e:dc:6a:15:1f:62:5e:89:25:51:48:e0: 98:a8:d5:77:76:90:af:e5:5f:4c:04:4f:6d:f0:f3:3a:6f:e3: 77:58:1f:37:e5:d0:b9:20:11:61:34:b2:78:5f:3f:f6:a6:a2: a0:de:56:00:40:fd:56:d5:bd:b1:99:d5:48:68:1b:1d:26:91: a1:78:6a:17:00:f7:2a:6a:0a:15:5c:7b:88:66:a4:07:1b:ee: 8c:78:ea:48:e8:ec:f3:1b:56:36:ec:c3:6b:7c:78:bf:1c:6c: c2:a0:27:11:50:1b:00:41:6b:f9:76:31:e7:d8:95:b6:ac:c5: dd:be:78:78:d9:0c:16:54:ff:65:8c:25:4b:aa:18:1a:c3:ac: cf:2c:f2:65:a3:34:62:ee:c2:fd:3f:25:b9:89:c5:b8:47:ba: e7:16:95:18:68:85:1e:f2:9b:79:fc:1b:55:77:16:3c:dd:61: 5c:ff:c3:1c:c4:c4:a3:0e:fc:3d:56:b9:6b:f1:cb:54:79:c7: 16:07:d3:05:f6:6e:3c:7b:70:8e:1c:0e:32:a8:ac:34:c6:f9: 8a:07:22:59:71:71:08:08:c0:45:0d:47:20:20:39:05:b3:61: f1:a9:85:54:df:bc:6d:26:05:1c:6e:e7:5b:e2:da:08:91:67: f2:b3:3e:72 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WwxJA+Eg7aQTk9oS4KFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGFjMTc0ZTg1MmI3MWMzMTE2M2VjMWQ4NjQ5ZmZmNmIw N2JhNzkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTNhYTg2YTRiMGRmMWIyMGFkOGVlMTI0NzNiOGI3MGM3ZGY2OTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8uVrpcfBZSca60KYKlPlP9ZCO1Z RxhQSe5VhroQo33G7jo/R9r2RRA1j2wpwuMg/JyBo/5KCZaE2L9Fmm8Jgdczy6ER yrTeY4xpcfXbETZc/L5NucUpUwe2XUFCnMNK7o0bLHCIWZzQXAMlsEofGsA4mUoX PVjCAIeTtIh6Dzwa+jOG/AfvoiBBr5+pPkYPogmHBSCTh44toTKGHZTMIoHyulgl vXQRWJSawBJwtu8xtj0uBROoIqQGAnpmBappLIE88jUFLneZD7WY3XKTBKbTOv5E U/gEopwocblcD1yxgiewi9grevAv+O/eC5s3K+tUZfHzekTMBLb/uUjj5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK46qGpLDfGyCtjuEkc7i3DH32kEMB8GA1UdIwQY MBaAFNeKwXToUrccMRY+wdhkn/9rB7p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMt OTQ3ZGUzODY4Y2Q1LzEvcmpxb2Frc044YklLMk80U1J6dUxjTWZmYVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMtOTQ3ZGUzODY4Y2Q1 LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuWh1AwQF w7bgMA0EAgACMAcDBQMqD0wAMA0GCSqGSIb3DQEBCwUAA4IBAQCEdTIn4g+e3GoV H2JeiSVRSOCYqNV3dpCv5V9MBE9t8PM6b+N3WB835dC5IBFhNLJ4Xz/2pqKg3lYA QP1W1b2xmdVIaBsdJpGheGoXAPcqagoVXHuIZqQHG+6MeOpI6OzzG1Y27MNrfHi/ HGzCoCcRUBsAQWv5djHn2JW2rMXdvnh42QwWVP9ljCVLqhgaw6zPLPJlozRi7sL9 PyW5icW4R7rnFpUYaIUe8pt5/BtVdxY83WFc/8McxMSjDvw9Vrlr8ctUeccWB9MF 9m48e3COHA4yqKw0xvmKByJZcXEICMBFDUcgIDkFs2HxqYVU37xtJgUcbudb4toI kWfysz5y -----END CERTIFICATE-----Generated at Tue Jan 27 01:41:54 2026 by rpki-client