This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/jPosKpC4jbWbnigp_N_xbEGwtdU.roa File: jPosKpC4jbWbnigp_N_xbEGwtdU.roa (raw, json) Hash identifier: PKivQvn7H0k9WsK5zKGzhI4jllClxyjJNOUB8aA/6s0= Subject key identifier: 8C:FA:2C:2A:90:B8:8D:B5:9B:9E:28:29:FC:DF:F1:6C:41:B0:B5:D5 Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB64D8ECE803ECF8A4A7777DBFA5BE Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/jPosKpC4jbWbnigp_N_xbEGwtdU.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202562 IP address blocks: 185.186.10.0/24 maxlen: 24 2a0b:6b83::/32 maxlen: 48 2a0b:6b86:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:64:d8:ec:e8:03:ec:f8:a4:a7:77:7d:bf:a5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cfa2c2a90b88db59b9e2829fcdff16c41b0b5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:52:7c:dc:ee:63:a1:da:ec:14:c8:0b:4d: a0:10:73:da:22:a1:c7:f3:b0:98:ef:f7:e1:25:f4: 8a:f8:f5:cd:1b:52:83:66:be:94:c4:f4:5e:66:c9: 6b:98:b9:ef:d2:d9:11:bd:69:3b:af:39:9a:8e:03: c3:de:64:da:8f:98:ec:44:fa:57:5e:4f:54:cc:57: ce:fa:ca:5e:a1:01:3a:bd:aa:49:53:1b:8e:4e:de: 85:4d:57:04:07:33:b6:b4:8e:48:b6:d6:d1:b2:57: 57:90:22:2e:ac:03:bd:2e:22:72:e8:07:29:4e:9b: 93:d8:aa:68:dc:3e:99:7e:09:05:4f:46:f3:a3:58: 91:78:f4:8b:b6:95:b1:b9:d4:97:41:bc:96:84:91: 2d:d0:d8:c8:49:c5:3d:af:29:bf:a4:9e:98:b4:29: d6:b6:29:fa:71:e3:3a:49:2a:dd:c3:25:4e:ba:ed: 4f:c7:72:f9:9b:b2:b7:fc:1e:b2:76:38:f1:1b:1a: 39:20:04:5e:4c:68:c8:01:c8:d7:36:3c:c4:fa:4c: ea:22:f9:13:ce:7f:9c:a8:9a:60:8e:c0:27:04:6e: 6c:f0:80:58:89:f0:0e:57:75:c3:43:a6:05:87:fe: 40:aa:2d:4c:28:4d:a2:85:7f:e9:7d:c9:5b:28:78: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:2C:2A:90:B8:8D:B5:9B:9E:28:29:FC:DF:F1:6C:41:B0:B5:D5 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/jPosKpC4jbWbnigp_N_xbEGwtdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.10.0/24 IPv6: 2a0b:6b83::/32 2a0b:6b86:300::/40 Signature Algorithm: sha256WithRSAEncryption 89:79:47:55:3a:7a:5e:08:f5:2f:63:75:3c:bd:63:85:41:a1: 08:7d:45:3c:80:7b:1e:be:38:5e:fb:ea:82:d2:8a:cd:08:f1: 60:96:8f:4d:0c:c3:fc:24:0a:ba:9c:c0:68:26:d9:35:88:91: 3e:b3:e6:78:ad:48:90:66:9a:eb:2d:ab:72:f0:d7:67:87:39: 71:db:5c:59:8d:ed:4e:90:d4:cc:ab:00:06:82:09:30:1c:88: 01:84:0a:f5:be:76:aa:a2:66:40:cc:c1:39:4c:ee:56:d0:9a: 6e:9b:23:f7:a4:7b:44:d2:d3:8c:bf:2e:1d:a0:22:27:83:4f: b7:e8:84:e3:f1:bd:41:47:28:c5:9e:af:36:76:8c:a2:4d:ac: 14:7c:7f:5b:aa:31:a1:82:68:4d:20:4e:36:b5:d4:b1:bb:a1: 25:86:b9:aa:c2:ad:29:4f:e9:03:eb:9c:e1:30:ff:4e:c0:cc: 4a:e5:ed:13:d5:0a:1b:b3:82:ba:33:e0:59:a0:b5:3d:27:99: 55:45:a8:ad:51:71:fc:3d:86:39:9d:05:e1:69:7d:29:8b:e1: 7d:4a:5c:63:d3:49:82:01:fc:a6:29:15:6e:8e:7f:2e:7c:0b: da:f8:85:ee:c3:55:d5:b0:ba:c7:0c:6c:3c:91:ad:38:31:15: e8:3d:a4:a1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt262TY7OgD7Pikp3d9v6W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2ZhMmMyYTkwYjg4ZGI1OWI5ZTI4MjlmY2RmZjE2YzQxYjBiNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s1SfNzuY6Ha7BTIC02gEHPaIqHH 87CY7/fhJfSK+PXNG1KDZr6UxPReZslrmLnv0tkRvWk7rzmajgPD3mTaj5jsRPpX Xk9UzFfO+speoQE6vapJUxuOTt6FTVcEBzO2tI5IttbRsldXkCIurAO9LiJy6Acp TpuT2Kpo3D6ZfgkFT0bzo1iRePSLtpWxudSXQbyWhJEt0NjIScU9rym/pJ6YtCnW tin6ceM6SSrdwyVOuu1Px3L5m7K3/B6ydjjxGxo5IAReTGjIAcjXNjzE+kzqIvkT zn+cqJpgjsAnBG5s8IBYifAOV3XDQ6YFh/5Aqi1MKE2ihX/pfclbKHgKkwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIz6LCqQuI21m54oKfzf8WxBsLXVMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvalBvc0twQzRqYldibmlncF9OX3hiRUd3dGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAuboKMBUE AgACMA8DBQAqC2uDAwYAKgtrhgMwDQYJKoZIhvcNAQELBQADggEBAIl5R1U6el4I 9S9jdTy9Y4VBoQh9RTyAex6+OF776oLSis0I8WCWj00Mw/wkCrqcwGgm2TWIkT6z 5nitSJBmmustq3Lw12eHOXHbXFmN7U6Q1MyrAAaCCTAciAGECvW+dqqiZkDMwTlM 7lbQmm6bI/eke0TS04y/Lh2gIieDT7fohOPxvUFHKMWerzZ2jKJNrBR8f1uqMaGC aE0gTja11LG7oSWGuarCrSlP6QPrnOEw/07AzErl7RPVChuzgroz4FmgtT0nmVVF qK1Rcfw9hjmdBeFpfSmL4X1KXGPTSYIB/KYpFW6Ofy58C9r4he7DVdWwuscMbDyR rTgxFeg9pKE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:32 2026 by rpki-client