This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/jWqvEO-jmA-gQShTX85xvehC5Hc.roa File: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (raw, json) Hash identifier: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY= Subject key identifier: 8D:6A:AF:10:EF:A3:98:0F:A0:41:28:53:5F:CE:71:BD:E8:42:E4:77 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A696D758230207CE7EAFDD2A0C01 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/jWqvEO-jmA-gQShTX85xvehC5Hc.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20765 IP address blocks: 185.126.35.0/27 maxlen: 27 185.126.35.32/27 maxlen: 27 185.126.35.64/28 maxlen: 28 185.126.35.80/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a6:96:d7:58:23:02:07:ce:7e:af:dd:2a:0c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6aaf10efa3980fa04128535fce71bde842e477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:cc:d2:e2:2b:b4:a9:4c:fa:20:99:32:dc: 84:b4:f9:f1:2d:d5:fa:34:62:db:99:5c:e0:8d:3d: 6c:57:da:2f:d9:c3:bd:c3:aa:93:f2:5f:c8:94:99: 8e:1a:53:6d:00:11:53:8f:0c:0f:ff:bb:00:54:c1: a9:04:d8:47:20:4a:01:68:07:2c:64:be:d9:47:dd: a8:73:95:55:9f:e3:1e:c2:46:7c:66:72:78:81:0e: f3:db:9d:16:2a:73:c2:e6:db:84:dd:43:f1:c5:bc: e0:1e:7e:8d:79:14:35:14:1f:a3:26:cf:e5:8a:07: 94:61:2e:f0:b3:a5:3d:42:09:36:56:dd:e6:28:15: 3e:64:02:3a:bd:22:c9:2f:27:df:9d:a0:8d:93:f4: a6:64:83:35:64:63:33:70:27:15:c1:56:28:d2:1c: a7:aa:8f:9c:09:13:08:34:09:7b:d7:b6:6b:e6:05: cd:a4:7d:e3:c7:6a:28:2c:b9:a5:15:31:53:c8:4c: ad:e8:5e:b6:81:59:ca:a9:b9:4f:56:9d:19:e7:1b: e0:f3:60:0f:0e:cf:c6:d8:8e:ed:4f:4f:e8:d0:2e: c5:dc:3e:ff:ab:ed:3c:2a:af:02:fe:7f:9b:38:5c: b5:69:5c:09:08:7d:3f:e5:1c:8b:79:4d:6b:82:4c: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:AF:10:EF:A3:98:0F:A0:41:28:53:5F:CE:71:BD:E8:42:E4:77 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/jWqvEO-jmA-gQShTX85xvehC5Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.35.0-185.126.35.95 Signature Algorithm: sha256WithRSAEncryption 27:ed:06:e1:af:99:b3:b7:4e:44:7c:f0:69:21:c0:58:4d:25: f2:eb:90:f0:78:1e:5d:f6:6c:f5:a8:ee:df:de:ed:bb:c8:18: 9d:0d:01:e8:83:f3:af:91:4f:47:89:67:c9:2f:59:51:b6:c7: 60:14:41:5c:11:a5:34:8f:e2:73:04:af:9a:b5:cd:65:b3:66: 6f:41:a1:07:20:71:90:e3:3b:9f:16:c2:90:56:73:1c:0e:ad: 64:33:04:d6:80:e8:11:cd:ea:de:84:08:d6:62:84:29:8d:f2: 52:5d:95:b5:ee:be:60:a9:c1:e2:a2:83:ba:b8:cc:2e:d8:17: 58:d6:a6:5e:45:7a:94:c5:39:01:c3:c1:da:51:77:b4:60:e7: 53:40:c7:73:50:c8:a5:c9:86:36:98:a0:31:fe:a0:1f:28:04: 35:1e:2b:c3:d8:48:96:29:a8:bf:4d:a5:64:01:7b:5c:ac:2d: 71:f9:45:7d:a1:34:3c:41:e8:48:2a:88:8f:69:18:44:a8:41: cc:c7:51:2f:20:2c:8b:be:69:e5:5f:d7:2e:d6:04:13:a0:38: b7:18:c6:63:9a:7d:c1:8a:9f:6c:65:ad:77:11:7c:e6:d2:04: d7:dd:f4:4c:48:50:73:c7:40:5c:1c:2d:c2:ac:4e:e2:5d:87: 79:91:d3:0a -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt7NqaW11gjAgfOfq/dKgwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZhYWYxMGVmYTM5ODBmYTA0MTI4NTM1ZmNlNzFiZGU4NDJlNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQjM0uIrtKlM+iCZMtyEtPnxLdX6 NGLbmVzgjT1sV9ov2cO9w6qT8l/IlJmOGlNtABFTjwwP/7sAVMGpBNhHIEoBaAcs ZL7ZR92oc5VVn+MewkZ8ZnJ4gQ7z250WKnPC5tuE3UPxxbzgHn6NeRQ1FB+jJs/l igeUYS7ws6U9Qgk2Vt3mKBU+ZAI6vSLJLyffnaCNk/SmZIM1ZGMzcCcVwVYo0hyn qo+cCRMINAl717Zr5gXNpH3jx2ooLLmlFTFTyEyt6F62gVnKqblPVp0Z5xvg82AP Ds/G2I7tT0/o0C7F3D7/q+08Kq8C/n+bOFy1aVwJCH0/5RyLeU1rgky1wwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFI1qrxDvo5gPoEEoU1/Ocb3oQuR3MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvaldxdkVPLWptQS1nUVNoVFg4NXh2ZWhDNUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPMA0DBAC5fiMD BQW5fiNAMA0GCSqGSIb3DQEBCwUAA4IBAQAn7Qbhr5mzt05EfPBpIcBYTSXy65Dw eB5d9mz1qO7f3u27yBidDQHog/OvkU9HiWfJL1lRtsdgFEFcEaU0j+JzBK+atc1l s2ZvQaEHIHGQ4zufFsKQVnMcDq1kMwTWgOgRzerehAjWYoQpjfJSXZW17r5gqcHi ooO6uMwu2BdY1qZeRXqUxTkBw8HaUXe0YOdTQMdzUMilyYY2mKAx/qAfKAQ1HivD 2EiWKai/TaVkAXtcrC1x+UV9oTQ8QehIKoiPaRhEqEHMx1EvICyLvmnlX9cu1gQT oDi3GMZjmn3Bip9sZa13EXzm0gTX3fRMSFBzx0BcHC3CrE7iXYd5kdMK -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:57 2026 by rpki-client