This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jwGQmxKkvoMxt0zGNzmgobrPceA.roa File: jwGQmxKkvoMxt0zGNzmgobrPceA.roa (raw, json) Hash identifier: Q9xMi0UBmOQ6J1V4+YgTpk7VffngMdEzFI533VU3vXQ= Subject key identifier: 8F:01:90:9B:12:A4:BE:83:31:B7:4C:C6:37:39:A0:A1:BA:CF:71:E0 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA667F7430417E55BDA0C91DD184E77 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jwGQmxKkvoMxt0zGNzmgobrPceA.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50242 IP address blocks: 85.248.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:67:f7:43:04:17:e5:5b:da:0c:91:dd:18:4e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f01909b12a4be8331b74cc63739a0a1bacf71e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:d6:e6:16:a6:76:a5:38:8b:21:20:73:80: 14:3c:69:43:2b:d8:76:72:26:1f:67:b3:86:f6:58: ac:6a:8f:76:c9:56:2c:d3:a1:81:3e:7b:3f:e1:95: 33:49:ea:c4:32:6f:a5:de:f3:bd:02:ea:72:d0:55: af:91:fa:4a:24:2b:d0:00:e9:4a:50:8c:32:26:99: af:f4:45:f7:ec:43:cd:a7:7f:b9:10:62:66:e3:aa: 9a:76:72:b9:07:aa:9c:d7:de:3e:ef:61:cc:76:63: f6:d1:4c:7a:66:27:af:75:f9:eb:a3:1c:6b:d4:04: db:ef:57:36:bc:8b:57:c9:49:74:3f:b6:ef:3e:9d: c6:f2:68:a6:f9:47:3d:d1:17:f5:4f:b0:4a:22:87: ab:2e:ff:65:ad:59:82:04:e9:d4:b1:8e:39:bd:38: a3:eb:a8:5d:cf:68:fe:fb:2e:56:11:f5:a3:29:1c: 8d:4e:0c:8f:18:7d:66:30:16:42:ec:98:ef:2c:9e: 12:8c:16:3b:b5:21:58:a8:00:10:8d:16:50:fb:d5: e1:60:c3:70:94:ce:39:31:69:02:f0:b0:e9:46:d0: 66:bb:a0:61:2b:3b:a5:8c:d0:9e:24:8f:b6:2b:ac: 35:f5:c6:cd:3a:68:b2:e1:b9:c9:11:83:20:32:25: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:90:9B:12:A4:BE:83:31:B7:4C:C6:37:39:A0:A1:BA:CF:71:E0 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/jwGQmxKkvoMxt0zGNzmgobrPceA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.124.0/24 Signature Algorithm: sha256WithRSAEncryption 20:6c:50:d7:02:7f:9a:9c:38:01:e5:54:a3:1f:50:dd:73:71: a2:2c:a5:93:6c:53:db:d3:b0:af:3d:7b:8b:7f:bf:c0:8e:94: 5f:8d:d6:a6:13:bf:c8:b3:c3:d5:e7:dd:e2:e0:a4:d8:ca:ef: 27:dc:6b:af:b9:60:44:b9:85:21:79:4e:28:42:e4:b5:75:f6: 39:6d:db:2b:76:6b:4f:3b:a4:0e:b1:05:df:c1:af:7f:5d:4a: 7e:4d:17:f4:00:81:a9:a0:4a:99:2c:d6:0e:02:75:58:7d:36: 1e:78:37:b9:6a:78:cc:d4:b0:0f:d4:60:b5:e6:66:cc:69:7a: 3e:53:03:09:b9:41:a0:59:30:21:87:cb:12:45:4f:f9:ae:df: b9:19:4f:9c:59:38:fa:7e:4a:be:19:b1:c5:ac:17:80:c0:ff: 03:f0:bf:52:32:c9:6e:24:84:6f:b4:ee:2f:f2:4a:9f:9c:e1: d0:7f:cf:04:7f:6e:5f:96:41:91:d9:0c:a5:e8:35:ba:3e:9e: 60:60:9f:28:bd:6c:f4:79:86:95:4e:ae:fd:6f:96:80:70:56: cc:8d:93:37:a2:09:58:e5:7a:33:fb:de:cf:d5:8d:af:48:e6: 75:da:9a:f1:2f:2b:d3:84:6d:1e:63:7a:db:55:fa:c5:f6:1e: 22:1f:2f:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmf3QwQX5VvaDJHdGE53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjAxOTA5YjEyYTRiZTgzMzFiNzRjYzYzNzM5YTBhMWJhY2Y3MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBjW5hamdqU4iyEgc4AUPGlDK9h2 ciYfZ7OG9lisao92yVYs06GBPns/4ZUzSerEMm+l3vO9Aupy0FWvkfpKJCvQAOlK UIwyJpmv9EX37EPNp3+5EGJm46qadnK5B6qc194+72HMdmP20Ux6Zievdfnroxxr 1ATb71c2vItXyUl0P7bvPp3G8mim+Uc90Rf1T7BKIoerLv9lrVmCBOnUsY45vTij 66hdz2j++y5WEfWjKRyNTgyPGH1mMBZC7JjvLJ4SjBY7tSFYqAAQjRZQ+9XhYMNw lM45MWkC8LDpRtBmu6BhKzuljNCeJI+2K6w19cbNOmiy4bnJEYMgMiWdqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8BkJsSpL6DMbdMxjc5oKG6z3HgMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvandHUW14S2t2b014dDB6R056bWdvYnJQY2VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfh8MA0G CSqGSIb3DQEBCwUAA4IBAQAgbFDXAn+anDgB5VSjH1Ddc3GiLKWTbFPb07CvPXuL f7/AjpRfjdamE7/Is8PV593i4KTYyu8n3GuvuWBEuYUheU4oQuS1dfY5bdsrdmtP O6QOsQXfwa9/XUp+TRf0AIGpoEqZLNYOAnVYfTYeeDe5anjM1LAP1GC15mbMaXo+ UwMJuUGgWTAhh8sSRU/5rt+5GU+cWTj6fkq+GbHFrBeAwP8D8L9SMsluJIRvtO4v 8kqfnOHQf88Ef25flkGR2Qyl6DW6Pp5gYJ8ovWz0eYaVTq79b5aAcFbMjZM3oglY 5Xoz+97P1Y2vSOZ12prxLyvThG0eY3rbVfrF9h4iHy8/ -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:07 2026 by rpki-client