This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JQnCfY6YafPRsaYc7zKPwbPOWDw.roa File: JQnCfY6YafPRsaYc7zKPwbPOWDw.roa (raw, json) Hash identifier: GmdykJDu2x9EESYje5rdUV18QI0AESFSpmuLu31e0OA= Subject key identifier: 25:09:C2:7D:8E:98:69:F3:D1:B1:A6:1C:EF:32:8F:C1:B3:CE:58:3C Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Certificate serial: 019B79ED36E3FFBA160D51D63A7DC6A73AAF Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JQnCfY6YafPRsaYc7zKPwbPOWDw.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38999 IP address blocks: 185.127.183.0/24 maxlen: 24 185.127.183.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:36:e3:ff:ba:16:0d:51:d6:3a:7d:c6:a7:3a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2509c27d8e9869f3d1b1a61cef328fc1b3ce583c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:41:45:48:fc:a3:00:18:e6:83:45:f1:cd: 32:70:f2:dc:c0:29:e5:2a:21:b8:da:a4:93:1b:88: de:48:f0:ce:e7:0b:b2:35:c0:f8:c6:9f:7c:26:71: 98:cb:6a:78:86:66:4a:0a:bd:67:5f:07:7a:fc:de: fc:9b:1f:01:bd:55:33:7e:da:c0:e8:7b:3d:9a:4e: 3c:2d:dd:af:8d:e6:71:9e:12:4a:e2:0c:93:57:75: a3:b0:51:97:bc:86:25:c8:9a:ee:78:8c:1f:bb:bf: 02:59:15:e7:02:9f:85:50:e7:3e:43:ba:9e:00:16: 8b:37:97:06:96:bf:7d:b9:55:1f:70:8c:0e:ff:56: 48:3f:8f:b9:57:4a:2f:4c:1a:76:10:6e:51:bb:0a: 1f:d9:4c:be:fb:b6:33:44:32:04:2d:6a:33:77:c2: 01:92:e0:6d:8c:30:f3:15:36:01:59:6b:8b:3d:4b: 96:fa:d9:d2:00:e0:47:e0:51:f0:5f:34:1d:3b:ce: 66:59:8e:24:1c:7f:3f:8a:5e:d2:6a:62:86:ed:44: 2d:79:be:7d:a8:c1:c1:d8:6f:b5:d3:5d:e6:32:b3: 52:da:b4:6e:90:bf:5b:e3:f7:20:97:15:33:ca:31: f0:af:f8:3a:cc:e9:8a:3c:75:67:06:2a:7a:84:3e: e8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:C2:7D:8E:98:69:F3:D1:B1:A6:1C:EF:32:8F:C1:B3:CE:58:3C X509v3 Authority Key Identifier: keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/JQnCfY6YafPRsaYc7zKPwbPOWDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.183.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c0:1e:d0:8f:be:f7:66:c0:bc:7f:ce:ab:ea:2e:8a:eb:e8: 3c:27:38:38:d2:df:31:56:ba:ce:dc:d7:5b:00:2f:a3:2a:5d: fb:9b:7c:cc:b8:2a:62:d3:4a:1f:50:75:e0:b3:b3:b9:b9:e6: 0e:30:f3:41:d2:31:81:6d:33:4c:cb:db:32:a9:a7:5f:5a:bc: d4:49:aa:cf:cc:de:24:a0:0b:7c:58:4b:75:76:8c:a8:46:2c: ed:87:fb:17:43:ba:1c:cc:89:19:67:73:ee:c9:85:3c:81:b6: d7:2e:b4:b3:7f:3f:4d:e5:70:f2:dd:16:96:05:f7:86:77:b9: a7:09:61:cf:4a:5a:15:0c:58:4f:98:70:be:6d:e1:4c:a9:6b: 92:6e:36:a7:04:35:a6:d5:3c:20:50:0c:b7:28:d2:35:d9:83: 82:67:ad:0c:cd:41:69:38:fb:30:13:5a:af:4b:6c:41:bd:b3: 91:86:96:a6:da:ea:b7:9d:5a:bd:f1:0f:35:4e:1e:ca:eb:e7: ce:2b:33:15:c5:87:4a:63:f7:00:93:f1:21:7f:d3:db:7b:a2: 51:d8:24:45:fa:e9:d9:ec:8b:f0:23:09:7e:d4:94:17:6d:c2: 42:0b:b8:bc:f0:6f:49:ab:20:71:e3:dc:f9:b2:1a:bf:72:23: 00:b2:22:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Tbj/7oWDVHWOn3GpzqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4 MzNjNTYwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTA5YzI3ZDhlOTg2OWYzZDFiMWE2MWNlZjMyOGZjMWIzY2U1ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfxBRUj8owAY5oNF8c0ycPLcwCnl KiG42qSTG4jeSPDO5wuyNcD4xp98JnGYy2p4hmZKCr1nXwd6/N78mx8BvVUzftrA 6Hs9mk48Ld2vjeZxnhJK4gyTV3WjsFGXvIYlyJrueIwfu78CWRXnAp+FUOc+Q7qe ABaLN5cGlr99uVUfcIwO/1ZIP4+5V0ovTBp2EG5Ruwof2Uy++7YzRDIELWozd8IB kuBtjDDzFTYBWWuLPUuW+tnSAOBH4FHwXzQdO85mWY4kHH8/il7SamKG7UQteb59 qMHB2G+1013mMrNS2rRukL9b4/cglxUzyjHwr/g6zOmKPHVnBip6hD7oDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUJwn2OmGnz0bGmHO8yj8Gzzlg8MB8GA1UdIwQY MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt OGM1NmQ4ZmUxN2I1LzEvSlFuQ2ZZNllhZlBSc2FZYzd6S1B3YlBPV0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1 LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX+3MA0G CSqGSIb3DQEBCwUAA4IBAQCWwB7Qj773ZsC8f86r6i6K6+g8Jzg40t8xVrrO3Ndb AC+jKl37m3zMuCpi00ofUHXgs7O5ueYOMPNB0jGBbTNMy9syqadfWrzUSarPzN4k oAt8WEt1doyoRizth/sXQ7oczIkZZ3PuyYU8gbbXLrSzfz9N5XDy3RaWBfeGd7mn CWHPSloVDFhPmHC+beFMqWuSbjanBDWm1TwgUAy3KNI12YOCZ60MzUFpOPswE1qv S2xBvbORhpam2uq3nVq98Q81Th7K6+fOKzMVxYdKY/cAk/Ehf9Pbe6JR2CRF+unZ 7IvwIwl+1JQXbcJCC7i88G9JqyBx49z5shq/ciMAsiJS -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:23 2026 by rpki-client