This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/juoDqBJ7n299gPxuH0Kb4uGBHEw.roa File: juoDqBJ7n299gPxuH0Kb4uGBHEw.roa (raw, json) Hash identifier: QknnOGTrcO8rMkdB2tP33xE6C8CQ2VIITStYWv7rx7Q= Subject key identifier: 8E:EA:03:A8:12:7B:9F:6F:7D:80:FC:6E:1F:42:9B:E2:E1:81:1C:4C Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807981A2CDFE1F4D16B02FE67BEFCE Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/juoDqBJ7n299gPxuH0Kb4uGBHEw.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12462 IP address blocks: 212.49.189.0/24 maxlen: 24 212.163.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:79:81:a2:cd:fe:1f:4d:16:b0:2f:e6:7b:ef:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eea03a8127b9f6f7d80fc6e1f429be2e1811c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:9d:3c:9d:ee:22:ff:21:be:8f:05:af:5e: 66:a1:44:26:e8:34:b4:2f:c9:11:30:c6:f9:e4:2a: ea:0f:2e:2a:ed:ae:bc:18:87:88:2c:69:cb:7d:6a: 32:dd:13:2d:5e:50:85:fd:1d:9e:75:17:4d:75:b6: b6:61:2b:10:2f:79:d2:12:d4:16:5f:4c:bb:99:bc: 39:b6:48:16:17:d7:05:f6:e6:be:86:fe:9a:5b:57: 3a:95:02:0e:9a:c5:d1:4d:9c:4f:a6:36:56:a3:b1: e2:77:dc:a2:e4:9c:b0:89:c1:91:67:ab:04:b8:2e: e6:17:12:fb:e3:7a:5c:98:5e:71:bf:7d:78:df:44: ea:88:ad:50:89:c2:d1:79:2f:3e:2e:09:24:60:9f: 1c:c0:bb:c8:8c:78:37:91:a3:6b:7b:60:c4:2a:a9: 42:90:49:80:f7:20:0b:42:8e:3d:eb:40:43:07:84: d8:3d:36:2c:8c:59:a3:e2:75:f5:0f:5d:68:1b:dc: af:e6:61:31:52:d3:d5:66:c8:c9:fe:80:2e:3d:46: 9f:bd:c0:50:a4:66:9a:7b:fe:8a:f5:89:9a:b0:5a: 20:09:88:4d:67:35:36:66:ef:0a:73:c2:0a:73:38: f1:ff:fb:f8:3d:c3:e5:67:d4:f0:fa:99:41:16:72: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EA:03:A8:12:7B:9F:6F:7D:80:FC:6E:1F:42:9B:E2:E1:81:1C:4C X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/juoDqBJ7n299gPxuH0Kb4uGBHEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.49.189.0/24 212.163.31.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ab:09:11:93:1b:e5:49:ed:8f:5f:e4:ef:ff:b1:1c:a3:c2: 68:0b:e7:3c:20:24:ae:9a:2a:5c:22:8a:39:6e:cd:86:e5:fa: fd:fb:4d:e4:36:0d:a6:c1:b5:a6:7b:08:91:e4:84:ad:71:9f: 08:f7:01:2e:1f:49:db:b4:a2:97:73:a4:b0:7b:39:b4:f1:4f: 4d:d4:0a:db:ce:10:78:3d:ce:72:d8:b5:b4:f7:45:1d:8a:a3: aa:36:bd:1c:ba:41:62:c6:eb:33:3f:33:b6:d2:b7:32:cb:53: 5c:1f:b3:40:a5:24:71:3b:9c:da:17:81:d7:97:8a:8d:20:04: 2f:2d:c2:7b:8a:e5:fd:b7:19:62:c5:b4:a1:97:ee:64:fa:bd: ee:c7:0b:41:5e:5c:9b:c2:34:68:be:4e:40:16:90:1e:ba:e7: 55:23:e5:15:53:b6:bb:f5:02:79:52:bd:e1:98:1f:59:49:9c: 06:d0:9c:3b:13:34:ea:4d:7c:d1:1a:a1:7a:95:9d:70:8b:d4: 42:60:ca:af:c2:7d:49:17:12:d9:98:23:0b:07:f9:b5:5e:8a: 08:f6:e4:ae:92:8d:de:0e:4e:8a:82:02:d2:69:2f:69:b3:e6: e1:96:aa:16:a4:66:48:db:00:6c:2d:aa:4c:f0:88:44:b4:fa: c7:d4:00:b9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gHmBos3+H00WsC/me+/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWVhMDNhODEyN2I5ZjZmN2Q4MGZjNmUxZjQyOWJlMmUxODExYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SGdPJ3uIv8hvo8Fr15moUQm6DS0 L8kRMMb55CrqDy4q7a68GIeILGnLfWoy3RMtXlCF/R2edRdNdba2YSsQL3nSEtQW X0y7mbw5tkgWF9cF9ua+hv6aW1c6lQIOmsXRTZxPpjZWo7Hid9yi5JywicGRZ6sE uC7mFxL743pcmF5xv31430TqiK1QicLReS8+LgkkYJ8cwLvIjHg3kaNre2DEKqlC kEmA9yALQo4960BDB4TYPTYsjFmj4nX1D11oG9yv5mExUtPVZsjJ/oAuPUafvcBQ pGaae/6K9YmasFogCYhNZzU2Zu8Kc8IKczjx//v4PcPlZ9Tw+plBFnI2UQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI7qA6gSe59vfYD8bh9Cm+LhgRxMMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvanVvRHFCSjduMjk5Z1B4dUgwS2I0dUdCSEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1DG9AwQA 1KMfMA0GCSqGSIb3DQEBCwUAA4IBAQA3qwkRkxvlSe2PX+Tv/7Eco8JoC+c8ICSu mipcIoo5bs2G5fr9+03kNg2mwbWmewiR5IStcZ8I9wEuH0nbtKKXc6Swezm08U9N 1ArbzhB4Pc5y2LW090UdiqOqNr0cukFixuszPzO20rcyy1NcH7NApSRxO5zaF4HX l4qNIAQvLcJ7iuX9txlixbShl+5k+r3uxwtBXlybwjRovk5AFpAeuudVI+UVU7a7 9QJ5Ur3hmB9ZSZwG0Jw7EzTqTXzRGqF6lZ1wi9RCYMqvwn1JFxLZmCMLB/m1XooI 9uSuko3eDk6KggLSaS9ps+bhlqoWpGZI2wBsLapM8IhEtPrH1AC5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:22 2026 by rpki-client