This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jOpQFZewmPq2pi8ogPmFximkzeg.roa File: jOpQFZewmPq2pi8ogPmFximkzeg.roa (raw, json) Hash identifier: FOMOmzLBvdOaek+CYOQB+g3G3vMvPUuHvzObKY0ixQw= Subject key identifier: 8C:EA:50:15:97:B0:98:FA:B6:A6:2F:28:80:F9:85:C6:29:A4:CD:E8 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C11852678A89931CCA8DF1EBA14A5AE Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jOpQFZewmPq2pi8ogPmFximkzeg.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209986 IP address blocks: 94.131.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:85:26:78:a8:99:31:cc:a8:df:1e:ba:14:a5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cea501597b098fab6a62f2880f985c629a4cde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:31:2d:4b:2c:a1:88:5c:79:cc:3a:bb:f7: 4f:9f:b5:07:a9:9d:6c:4b:a0:a0:1f:70:0c:b7:ad: a6:2b:16:96:fc:e9:7b:fe:79:cf:10:b1:81:28:14: 32:1d:0b:be:77:1a:5c:55:2c:52:00:ca:a9:38:28: 27:b8:29:6b:cb:ea:96:fc:18:b5:03:fa:ab:24:60: cd:03:69:bc:f9:76:b1:2b:cf:f7:5e:4d:12:16:19: ff:73:f7:a1:e0:08:88:15:c1:b4:4b:7e:32:8e:6e: ef:e5:73:0c:f7:34:39:66:34:4e:03:60:e2:fa:b9: 61:5e:42:ce:34:18:eb:13:98:14:9d:77:e8:61:f6: 57:f5:56:9b:61:18:1d:91:c9:51:c4:65:fc:cc:9e: 42:4b:8f:41:7a:eb:eb:5f:e5:6b:e0:ac:93:b4:b1: e0:c3:f1:db:a7:04:51:ac:2f:45:2b:a7:3f:f5:c6: 16:ed:9f:b6:fd:81:ff:de:68:a2:49:6f:82:18:94: ef:df:e2:e7:66:0d:94:73:72:ef:c6:b9:97:9a:f6: b6:b8:54:cc:cd:7c:ca:62:6e:70:9b:03:22:71:55: 45:97:e1:3b:7a:65:79:a7:c8:72:bf:af:c1:c4:25: c3:df:f9:a4:40:da:08:1f:b2:1b:02:d0:6a:4a:e4: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EA:50:15:97:B0:98:FA:B6:A6:2F:28:80:F9:85:C6:29:A4:CD:E8 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jOpQFZewmPq2pi8ogPmFximkzeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.195.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e2:ea:b3:eb:25:1c:33:e0:08:82:cf:63:6d:b1:77:de:e9: d8:c2:0b:d8:0c:15:de:c3:5e:47:cf:00:49:1d:eb:95:3c:5b: 1a:3c:ed:db:8b:c8:39:12:c6:c9:8d:f1:7f:44:ed:79:16:8c: 52:47:08:86:67:b2:63:99:7f:b4:87:34:74:08:0f:31:67:e5: c2:30:18:48:6d:b1:72:9b:a3:a1:38:9a:7d:71:06:b6:78:b4: 60:48:48:06:e6:c5:17:64:8b:c7:f4:b3:e4:3b:f5:8d:e1:cb: d9:3a:93:89:93:1e:35:02:b0:69:d5:4a:33:9e:9f:41:ce:e3: 2e:d2:39:fe:a0:f8:8a:2f:a8:94:ac:58:bd:43:d5:ec:21:55: 27:de:d7:2a:20:53:d1:f0:94:74:b6:bd:25:49:aa:08:29:8b: f6:3a:45:06:42:67:c1:6c:dc:98:0e:6c:d4:23:14:61:4f:e6: 34:84:db:cc:a8:8c:ba:0b:17:16:61:3e:08:ca:f3:2a:46:95: 7a:ce:cc:8d:61:df:0d:9c:9b:b7:22:9d:95:25:50:e8:09:13: 62:37:a6:33:3f:f8:12:ba:48:36:aa:50:26:42:ce:a9:3a:a0: 18:43:54:e6:98:df:52:96:3c:05:6b:ac:e6:5b:6c:fd:6b:96: 4f:04:41:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYUmeKiZMcyo3x66FKWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2VhNTAxNTk3YjA5OGZhYjZhNjJmMjg4MGY5ODVjNjI5YTRjZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtgxLUssoYhcecw6u/dPn7UHqZ1s S6CgH3AMt62mKxaW/Ol7/nnPELGBKBQyHQu+dxpcVSxSAMqpOCgnuClry+qW/Bi1 A/qrJGDNA2m8+XaxK8/3Xk0SFhn/c/eh4AiIFcG0S34yjm7v5XMM9zQ5ZjROA2Di +rlhXkLONBjrE5gUnXfoYfZX9VabYRgdkclRxGX8zJ5CS49BeuvrX+Vr4KyTtLHg w/HbpwRRrC9FK6c/9cYW7Z+2/YH/3miiSW+CGJTv3+LnZg2Uc3LvxrmXmva2uFTM zXzKYm5wmwMicVVFl+E7emV5p8hyv6/BxCXD3/mkQNoIH7IbAtBqSuQYWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzqUBWXsJj6tqYvKID5hcYppM3oMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvak9wUUZaZXdtUHEycGk4b2dQbUZ4aW1remVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoPDMA0G CSqGSIb3DQEBCwUAA4IBAQBE4uqz6yUcM+AIgs9jbbF33unYwgvYDBXew15HzwBJ HeuVPFsaPO3bi8g5EsbJjfF/RO15FoxSRwiGZ7JjmX+0hzR0CA8xZ+XCMBhIbbFy m6OhOJp9cQa2eLRgSEgG5sUXZIvH9LPkO/WN4cvZOpOJkx41ArBp1Uoznp9BzuMu 0jn+oPiKL6iUrFi9Q9XsIVUn3tcqIFPR8JR0tr0lSaoIKYv2OkUGQmfBbNyYDmzU IxRhT+Y0hNvMqIy6CxcWYT4IyvMqRpV6zsyNYd8NnJu3Ip2VJVDoCRNiN6YzP/gS ukg2qlAmQs6pOqAYQ1TmmN9SljwFa6zmW2z9a5ZPBEGm -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:35 2026 by rpki-client