This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQwF2vhJZE_DdhtcKRkcB1c7Cqg.roa File: JQwF2vhJZE_DdhtcKRkcB1c7Cqg.roa (raw, json) Hash identifier: FGCjU0yqBmWY5GIHUG/Aj8YIwOybRKVY74Peb8L74Sw= Subject key identifier: 25:0C:05:DA:F8:49:64:4F:C3:76:1B:5C:29:19:1C:07:57:3B:0A:A8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABE8737B4F010E36016CE97936ACD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQwF2vhJZE_DdhtcKRkcB1c7Cqg.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206509 IP address blocks: 81.5.128.0/18 maxlen: 18 81.168.0.0/17 maxlen: 17 82.152.0.0/15 maxlen: 15 109.176.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:be:87:37:b4:f0:10:e3:60:16:ce:97:93:6a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=250c05daf849644fc3761b5c29191c07573b0aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:a1:53:59:6e:5a:48:ad:d0:56:3c:3b:b3: ef:50:36:05:3e:96:3a:25:a0:e8:f3:22:18:58:a2: 49:6e:51:c6:0a:fa:ae:4f:0e:ef:2a:c5:b2:5a:10: 99:1e:23:fa:a3:a2:08:32:27:26:47:44:1a:f1:e6: 17:e8:72:44:9f:27:b9:8c:bc:d5:d6:f6:5b:3d:a0: 9d:6c:04:b3:74:a1:22:6c:06:00:5e:15:b6:da:bb: 53:92:dc:f3:96:97:96:69:1c:f8:77:53:41:4d:3c: ee:b9:6d:cc:41:80:68:d5:20:6d:be:c3:06:c6:c4: d9:c8:9d:13:c6:fb:68:68:ee:27:14:8d:85:41:f1: 78:5a:16:fe:82:6f:f3:c7:01:20:99:0a:4f:66:0d: f9:12:f0:cb:5a:04:96:f7:d7:09:14:cf:12:e2:36: 18:bf:39:67:f7:df:42:f8:7b:79:72:c7:c7:d0:ec: 0a:ab:fa:fe:8c:3a:5f:d8:df:ce:84:0b:53:f2:0a: 53:b2:e8:1b:2e:b8:1d:40:35:d3:8f:08:14:48:41: 0c:92:67:a2:00:24:de:52:52:2b:aa:7f:ce:d2:0d: 49:de:94:dd:1a:33:9c:a2:dd:2b:66:bf:58:a4:61: ef:c4:7b:1b:d3:0c:2a:62:2c:9f:e1:74:1f:7b:b2: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:05:DA:F8:49:64:4F:C3:76:1B:5C:29:19:1C:07:57:3B:0A:A8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JQwF2vhJZE_DdhtcKRkcB1c7Cqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.128.0/18 81.168.0.0/17 82.152.0.0/15 109.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:04:6b:6e:c4:d8:9e:89:8c:75:02:d1:28:62:9c:a2:c4:4e: 2d:61:89:7b:c5:64:97:91:f5:14:d3:b7:c9:8e:6f:1d:5e:49: a4:35:e9:d1:0c:57:5e:1b:83:37:44:5e:98:99:4f:f5:a5:64: 99:8a:fb:0f:3a:cb:f0:00:35:82:ea:5e:66:cb:21:dd:1f:f5: 69:ea:c9:30:ab:b6:de:45:d5:49:49:2d:8b:2f:cc:7c:52:73: c0:0c:45:7b:7a:6b:2e:d8:ad:63:ff:a7:7b:d1:af:68:71:9d: d4:5a:53:d2:18:f2:48:79:7e:ac:09:b0:97:ec:08:d8:c0:b0: 29:ea:13:71:c3:6b:15:62:0d:22:9c:d4:76:1c:1d:56:b2:d4: e6:52:6f:ba:66:3d:48:c1:fe:5f:0b:82:ca:cf:f8:dc:b7:90: 82:03:52:6e:a9:e4:56:c0:4d:48:e8:b2:05:7f:1b:d3:dd:f3: fc:6e:11:94:4c:63:26:cc:3d:0a:3d:c2:f5:b7:a3:60:12:4c: a5:9b:9d:ae:d8:19:0a:27:f3:c1:fe:1a:b6:46:d8:3e:ce:e6: 32:c2:2a:24:f3:f3:43:c9:7a:6a:5d:e7:ee:28:88:81:b8:c4: 7e:50:10:fb:1c:65:ea:5a:c4:d8:57:d2:fb:80:c7:5b:0e:f6: 81:d8:85:98 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6Wr6HN7TwEONgFs6Xk2rNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTBjMDVkYWY4NDk2NDRmYzM3NjFiNWMyOTE5MWMwNzU3M2IwYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvuhU1luWkit0FY8O7PvUDYFPpY6 JaDo8yIYWKJJblHGCvquTw7vKsWyWhCZHiP6o6IIMicmR0Qa8eYX6HJEnye5jLzV 1vZbPaCdbASzdKEibAYAXhW22rtTktzzlpeWaRz4d1NBTTzuuW3MQYBo1SBtvsMG xsTZyJ0TxvtoaO4nFI2FQfF4Whb+gm/zxwEgmQpPZg35EvDLWgSW99cJFM8S4jYY vzln999C+Ht5csfH0OwKq/r+jDpf2N/OhAtT8gpTsugbLrgdQDXTjwgUSEEMkmei ACTeUlIrqn/O0g1J3pTdGjOcot0rZr9YpGHvxHsb0wwqYiyf4XQfe7IQXQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFCUMBdr4SWRPw3YbXCkZHAdXOwqoMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSlF3RjJ2aEpaRV9EZGh0Y0tSa2NCMWM3Q3FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAATAWAwQGUQWAAwQH UagAAwMBUpgDAwBtsDANBgkqhkiG9w0BAQsFAAOCAQEAYQRrbsTYnomMdQLRKGKc osROLWGJe8Vkl5H1FNO3yY5vHV5JpDXp0QxXXhuDN0RemJlP9aVkmYr7DzrL8AA1 gupeZssh3R/1aerJMKu23kXVSUktiy/MfFJzwAxFe3prLtitY/+ne9GvaHGd1FpT 0hjySHl+rAmwl+wI2MCwKeoTccNrFWINIpzUdhwdVrLU5lJvumY9SMH+XwuCys/4 3LeQggNSbqnkVsBNSOiyBX8b093z/G4RlExjJsw9Cj3C9bejYBJMpZudrtgZCifz wf4atkbYPs7mMsIqJPPzQ8l6al3n7iiIgbjEflAQ+xxl6lrE2FfS+4DHWw72gdiF mA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:51 2026 by rpki-client