This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/_j-w8ryBQjLCWIwAmFTiY5TAY88.roa File: _j-w8ryBQjLCWIwAmFTiY5TAY88.roa (raw, json) Hash identifier: IoowLZv4i35Qz8+XIIDTG4eq6sXKW6ztSxWDJG1KGIw= Subject key identifier: FE:3F:B0:F2:BC:81:42:32:C2:58:8C:00:98:54:E2:63:94:C0:63:CF Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136 Certificate serial: 019B76EAFCCFDC7C14D3E7C951C7AB119894 Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/_j-w8ryBQjLCWIwAmFTiY5TAY88.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12338 IP address blocks: 185.163.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:cf:dc:7c:14:d3:e7:c9:51:c7:ab:11:98:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe3fb0f2bc814232c2588c009854e26394c063cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:5e:8f:d6:bc:1c:9d:e8:bf:1e:f3:b7:31: 52:ef:d2:a8:c5:1e:4c:98:df:bc:8d:ad:8c:57:75: cc:e9:26:a4:08:32:10:df:de:5e:e1:3f:28:a2:fa: 80:c0:68:8f:e2:39:ca:93:e1:af:bf:cb:0f:fc:af: b6:ab:61:2b:e0:c5:0d:2a:60:ca:03:11:b9:ab:14: 18:95:db:24:70:20:96:c4:7f:bc:c8:7d:f3:22:52: b8:06:d4:1f:e3:c6:7b:4c:77:eb:8b:f7:a3:d0:c3: bb:d0:dd:5b:c0:e1:a8:2a:ac:26:48:a7:9b:2a:a3: f4:e5:87:33:42:c9:42:ba:f8:28:f7:13:7b:9f:33: 9a:61:dc:0a:40:5c:d9:fc:55:cd:b4:d9:84:99:b6: 17:e5:57:d8:ff:3d:eb:28:f0:9c:0f:30:a4:59:fd: 01:60:e0:f6:06:41:c5:02:d4:73:c5:d8:b0:99:f5: d1:60:ed:35:d4:18:c7:35:8e:47:9e:eb:94:a6:42: d0:60:c7:68:73:fe:b3:c4:ff:83:f4:f2:01:21:62: cf:8d:72:c2:79:17:ad:3e:2d:76:f5:d4:53:f2:56: 8a:8a:3a:dc:f2:3e:d1:cb:aa:59:48:a9:12:26:5a: 10:44:e6:c1:fb:ba:a1:e9:d2:a7:29:e1:71:b3:41: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3F:B0:F2:BC:81:42:32:C2:58:8C:00:98:54:E2:63:94:C0:63:CF X509v3 Authority Key Identifier: keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/_j-w8ryBQjLCWIwAmFTiY5TAY88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.164.0/23 Signature Algorithm: sha256WithRSAEncryption 06:85:6e:6b:20:32:85:e1:ab:0d:d5:57:36:ec:54:67:99:e8: 54:65:c9:38:f2:e0:51:5e:d3:fa:03:52:61:78:89:c1:2c:da: 86:69:8f:c2:0f:32:f1:eb:49:d7:bb:b4:e8:0d:43:c0:ec:8a: bc:b6:65:77:da:0b:70:64:f8:b0:6f:bc:f7:ea:61:43:05:c9: 2e:cb:73:9b:1d:fc:33:d4:b8:87:a6:1f:a0:b5:a0:df:f3:5e: 05:34:dd:8d:a3:11:65:96:90:88:ba:75:62:39:ed:15:57:e9: 22:65:b4:90:ca:9a:3c:b4:86:f7:f0:83:ca:50:87:b5:02:26: 5c:8d:4a:54:e7:91:60:90:53:a8:eb:72:c4:00:c9:43:f3:b0: 9e:3a:5f:5a:07:76:dc:27:34:15:f5:bb:d7:49:1a:53:27:da: 10:80:39:26:f3:8d:e9:1b:80:ce:11:fd:f9:a1:e9:4f:c9:c0: 07:25:d7:5e:85:6e:df:01:b1:54:7f:74:8e:39:c6:85:67:65: f2:4c:5d:a6:62:6c:e5:a1:d4:e8:2d:62:a5:af:2a:ea:ba:33: 35:ec:c3:2d:1f:a7:2a:c9:89:03:30:86:be:22:48:e4:e7:c3: 4e:99:6c:9e:b0:6f:1b:b7:91:e8:8d:ca:2f:49:cb:07:c4:a3: 63:23:d5:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vzP3HwU0+fJUcerEZiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NDY2NDdkOWQ1NzU5YTAxZjhkMTg2NjhhMzc3YzA2M2Zm NTkxMzYwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTNmYjBmMmJjODE0MjMyYzI1ODhjMDA5ODU0ZTI2Mzk0YzA2M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe9ej9a8HJ3ovx7ztzFS79KoxR5M mN+8ja2MV3XM6SakCDIQ395e4T8oovqAwGiP4jnKk+Gvv8sP/K+2q2Er4MUNKmDK AxG5qxQYldskcCCWxH+8yH3zIlK4BtQf48Z7THfri/ej0MO70N1bwOGoKqwmSKeb KqP05YczQslCuvgo9xN7nzOaYdwKQFzZ/FXNtNmEmbYX5VfY/z3rKPCcDzCkWf0B YOD2BkHFAtRzxdiwmfXRYO011BjHNY5HnuuUpkLQYMdoc/6zxP+D9PIBIWLPjXLC eRetPi129dRT8laKijrc8j7Ry6pZSKkSJloQRObB+7qh6dKnKeFxs0HoawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP4/sPK8gUIywliMAJhU4mOUwGPPMB8GA1UdIwQY MBaAFHlGZH2dV1mgH40YZoo3fAY/9ZE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYt ZTRiYWQzNGJiZWZmLzEvX2otdzhyeUJRakxDV0l3QW1GVGlZNVRBWTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYtZTRiYWQzNGJiZWZm LzEvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaOkMA0G CSqGSIb3DQEBCwUAA4IBAQAGhW5rIDKF4asN1Vc27FRnmehUZck48uBRXtP6A1Jh eInBLNqGaY/CDzLx60nXu7ToDUPA7Iq8tmV32gtwZPiwb7z36mFDBckuy3ObHfwz 1LiHph+gtaDf814FNN2NoxFllpCIunViOe0VV+kiZbSQypo8tIb38IPKUIe1AiZc jUpU55FgkFOo63LEAMlD87CeOl9aB3bcJzQV9bvXSRpTJ9oQgDkm843pG4DOEf35 oelPycAHJddehW7fAbFUf3SOOcaFZ2XyTF2mYmzlodToLWKlryrqujM17MMtH6cq yYkDMIa+Ikjk58NOmWyesG8bt5HojcovScsHxKNjI9Wm -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:59 2026 by rpki-client