This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JlzUlUHXjW5zqvwixAy9oMWnTdc.roa File: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (raw, json) Hash identifier: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A= Subject key identifier: 26:5C:D4:95:41:D7:8D:6E:73:AA:FC:22:C4:0C:BD:A0:C5:A7:4D:D7 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82DB6C781A88613AA01EBA4B6C32C Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JlzUlUHXjW5zqvwixAy9oMWnTdc.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198651 IP address blocks: 86.38.112.0/24 maxlen: 24 86.38.113.0/24 maxlen: 24 86.38.114.0/24 maxlen: 24 86.38.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2d:b6:c7:81:a8:86:13:aa:01:eb:a4:b6:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=265cd49541d78d6e73aafc22c40cbda0c5a74dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:93:b1:b3:8c:8e:6f:60:42:5e:c8:9b:ca: 87:d6:dd:6f:a4:31:ae:66:47:18:2b:d6:6c:58:e5: 2d:c7:4b:68:1c:a5:27:e0:6c:f6:90:99:b6:f1:bb: 51:31:b8:e5:5a:ec:a8:70:21:4a:f3:1b:ca:02:24: a4:76:65:78:65:c9:19:89:a0:30:81:7f:f7:04:91: 5f:8d:23:a0:1f:61:3b:3b:9e:da:74:55:ed:30:13: 3c:f5:51:a3:f6:f9:e2:9d:06:ba:33:b3:e1:66:ce: 1e:af:6c:e8:b7:b7:fe:19:30:5d:b3:b5:15:ea:d8: 1b:67:69:05:53:da:80:5a:d7:93:59:42:03:58:cf: 89:90:65:d9:7a:68:01:1a:76:41:20:b5:91:49:1b: b2:28:30:d9:b8:58:f8:65:7e:81:c7:25:76:fc:42: 7a:03:aa:a8:76:0f:93:59:5b:d8:da:36:5f:0c:d0: 05:a5:9f:60:e6:ed:b3:0f:05:b7:3f:bc:91:a8:cf: b8:9e:04:26:9e:e5:80:70:5f:e3:97:f8:b6:f2:e2: 3c:b2:2f:5e:89:05:a2:b2:9a:2a:40:9f:49:06:9e: d7:88:d3:7c:59:61:5d:9c:31:fc:9d:f8:9e:bd:9f: 82:36:a0:fe:39:b6:d6:0b:00:4a:29:55:e2:f0:37: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5C:D4:95:41:D7:8D:6E:73:AA:FC:22:C4:0C:BD:A0:C5:A7:4D:D7 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JlzUlUHXjW5zqvwixAy9oMWnTdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.112.0/22 Signature Algorithm: sha256WithRSAEncryption 11:d2:c8:28:52:2a:13:5a:0f:0e:2b:8c:02:74:71:86:d6:36: 48:6f:6d:77:68:ee:d3:12:ad:c9:c7:65:9d:c0:e8:75:8a:96: b9:d1:2c:fb:14:6f:87:c4:55:4b:2f:df:fc:34:0d:27:54:ca: 61:9b:ba:78:47:d4:bd:de:34:46:f1:c0:b6:ac:81:00:05:46: ef:4e:24:e0:a5:be:10:2e:cc:3f:a9:cc:55:bd:0a:21:3b:92: 49:50:27:ba:da:5a:ba:99:11:f9:32:7e:07:20:3d:cf:47:23: 6b:20:c4:1f:af:7b:ee:49:64:3b:34:f0:e9:aa:82:11:c6:91: ee:f3:a1:73:32:47:fe:c8:2a:fe:49:85:37:86:87:de:a5:34: e5:65:f5:cc:57:f4:fb:29:53:61:70:f5:f5:1f:b6:39:b2:71: 78:d4:2f:d4:49:09:62:53:90:46:dd:16:71:e1:d6:7f:a1:00: 88:fe:39:3c:01:76:34:7e:64:95:4e:92:d5:9f:bb:0d:7c:50: 0b:8f:5b:5b:64:e3:ff:90:7f:4d:34:48:53:21:15:6d:10:d7: 24:7c:93:22:80:64:52:e2:60:bc:20:0b:a4:8f:45:3e:5a:21: 18:f7:7d:4d:2d:c3:f6:27:02:14:32:ff:5f:10:66:43:d7:d8: 8c:77:fe:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yC22x4GohhOqAeuktsMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjVjZDQ5NTQxZDc4ZDZlNzNhYWZjMjJjNDBjYmRhMGM1YTc0ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CqTsbOMjm9gQl7Im8qH1t1vpDGu ZkcYK9ZsWOUtx0toHKUn4Gz2kJm28btRMbjlWuyocCFK8xvKAiSkdmV4ZckZiaAw gX/3BJFfjSOgH2E7O57adFXtMBM89VGj9vninQa6M7PhZs4er2zot7f+GTBds7UV 6tgbZ2kFU9qAWteTWUIDWM+JkGXZemgBGnZBILWRSRuyKDDZuFj4ZX6BxyV2/EJ6 A6qodg+TWVvY2jZfDNAFpZ9g5u2zDwW3P7yRqM+4ngQmnuWAcF/jl/i28uI8si9e iQWispoqQJ9JBp7XiNN8WWFdnDH8nfievZ+CNqD+ObbWCwBKKVXi8DecjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZc1JVB141uc6r8IsQMvaDFp03XMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvSmx6VWxVSFhqVzV6cXZ3aXhBeTlvTVduVGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCViZwMA0G CSqGSIb3DQEBCwUAA4IBAQAR0sgoUioTWg8OK4wCdHGG1jZIb213aO7TEq3Jx2Wd wOh1ipa50Sz7FG+HxFVLL9/8NA0nVMphm7p4R9S93jRG8cC2rIEABUbvTiTgpb4Q Lsw/qcxVvQohO5JJUCe62lq6mRH5Mn4HID3PRyNrIMQfr3vuSWQ7NPDpqoIRxpHu 86FzMkf+yCr+SYU3hofepTTlZfXMV/T7KVNhcPX1H7Y5snF41C/USQliU5BG3RZx 4dZ/oQCI/jk8AXY0fmSVTpLVn7sNfFALj1tbZOP/kH9NNEhTIRVtENckfJMigGRS 4mC8IAukj0U+WiEY931NLcP2JwIUMv9fEGZD19iMd/7G -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:07 2026 by rpki-client