This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jDGDyENYBH6OpToNUYxJyYW5keg.roa File: jDGDyENYBH6OpToNUYxJyYW5keg.roa (raw, json) Hash identifier: r15+I9phCkgzeyZpoR3BPIKVvf/pp9cgwKXE1XHnJW8= Subject key identifier: 8C:31:83:C8:43:58:04:7E:8E:A5:3A:0D:51:8C:49:C9:85:B9:91:E8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABB10716E8AFBAAB145DA6D4F3B50 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jDGDyENYBH6OpToNUYxJyYW5keg.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 194.105.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:10:71:6e:8a:fb:aa:b1:45:da:6d:4f:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c3183c84358047e8ea53a0d518c49c985b991e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:94:6f:02:35:ed:39:58:b9:a6:3a:cd:b9: c5:98:94:ac:f5:9b:be:22:57:d0:02:8b:63:b5:bb: 6d:1b:6c:23:08:05:fa:59:b9:97:75:ce:8f:e7:9e: 18:60:38:50:85:46:94:e4:93:de:94:6a:6f:22:dc: c8:c3:e6:fc:0a:51:78:29:83:64:5b:30:9d:99:b2: b8:15:ab:9f:9f:8e:c2:07:1e:80:9f:f5:e2:fe:6f: cd:6b:77:52:40:90:9e:0d:08:f2:e9:ab:0c:f8:b2: 4a:05:94:fd:47:92:1a:b8:85:14:43:14:b5:65:43: 92:a5:e0:45:bd:1a:36:34:22:fe:c1:7b:6a:8b:3f: a2:5e:b7:e9:14:cd:c4:5c:93:a1:d4:5e:d3:25:17: 06:8a:cc:2f:d0:11:d8:93:a9:12:06:3d:3a:92:73: 6e:94:68:90:7f:fb:b7:fa:b5:8a:92:42:db:7c:50: 92:8a:e6:0e:0f:63:94:f8:82:a0:06:5b:7b:5d:02: 2d:9c:28:db:c2:42:72:cc:dd:d6:d9:79:36:21:a3: 18:75:4a:d4:e2:98:57:8e:f6:23:26:f5:d4:a0:32: 07:4a:63:61:ee:5f:c7:02:b7:76:e6:21:a5:9f:74: b5:b9:5d:70:ff:7f:89:10:68:1d:9b:e9:99:17:30: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:83:C8:43:58:04:7E:8E:A5:3A:0D:51:8C:49:C9:85:B9:91:E8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jDGDyENYBH6OpToNUYxJyYW5keg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.105.76.0/22 Signature Algorithm: sha256WithRSAEncryption 99:c5:c4:96:11:f7:ca:26:a4:ec:f3:f7:d7:96:1c:42:f9:3d: bd:f8:58:97:21:2b:eb:32:13:10:7e:18:ca:65:d2:fc:dd:22: a7:ea:4e:b5:b2:fa:28:e6:e7:7f:9a:6d:7c:69:a1:a7:46:53: 41:4f:4f:f3:16:5c:ef:2b:cf:5b:ca:37:66:c2:d6:47:74:4f: eb:3d:bb:d0:47:8a:46:b7:67:20:0c:2d:89:67:df:07:3d:c0: 49:82:9e:ce:b5:54:ea:32:78:ce:07:c9:01:4b:d6:3f:e9:12: b1:0e:79:4a:3e:93:6f:d8:2d:93:3c:c2:eb:4b:31:01:59:13: 26:55:18:f2:35:4f:db:4b:ea:fe:16:f0:45:b3:5e:13:2a:ae: c4:ce:dc:75:70:22:1e:d5:2e:55:cf:e7:28:a2:2c:96:30:2d: a2:6a:98:6b:43:17:91:73:d1:7f:dc:17:c4:24:9f:ff:fd:07: 3d:e9:08:2a:67:f5:1f:fa:b4:b1:59:ac:da:cb:7d:4c:7a:e6: c2:9f:91:c2:0d:c6:df:68:a2:1c:43:f2:e9:b8:a1:24:34:b4: 1a:1b:2d:53:60:cc:e6:0b:d5:6f:90:ad:88:aa:a4:3b:5b:df: 92:d6:83:3e:ab:3f:8e:58:ff:ec:ce:09:a5:9a:0c:53:ac:61: 39:58:0d:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrsQcW6K+6qxRdptTztQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzMxODNjODQzNTgwNDdlOGVhNTNhMGQ1MThjNDljOTg1Yjk5MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroKUbwI17TlYuaY6zbnFmJSs9Zu+ IlfQAotjtbttG2wjCAX6WbmXdc6P554YYDhQhUaU5JPelGpvItzIw+b8ClF4KYNk WzCdmbK4Faufn47CBx6An/Xi/m/Na3dSQJCeDQjy6asM+LJKBZT9R5IauIUUQxS1 ZUOSpeBFvRo2NCL+wXtqiz+iXrfpFM3EXJOh1F7TJRcGiswv0BHYk6kSBj06knNu lGiQf/u3+rWKkkLbfFCSiuYOD2OU+IKgBlt7XQItnCjbwkJyzN3W2Xk2IaMYdUrU 4phXjvYjJvXUoDIHSmNh7l/HArd25iGln3S1uV1w/3+JEGgdm+mZFzAsgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwxg8hDWAR+jqU6DVGMScmFuZHoMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvakRHRHlFTllCSDZPcFRvTlVZeEp5WVc1a2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwmlMMA0G CSqGSIb3DQEBCwUAA4IBAQCZxcSWEffKJqTs8/fXlhxC+T29+FiXISvrMhMQfhjK ZdL83SKn6k61svoo5ud/mm18aaGnRlNBT0/zFlzvK89byjdmwtZHdE/rPbvQR4pG t2cgDC2JZ98HPcBJgp7OtVTqMnjOB8kBS9Y/6RKxDnlKPpNv2C2TPMLrSzEBWRMm VRjyNU/bS+r+FvBFs14TKq7Eztx1cCIe1S5Vz+cooiyWMC2iaphrQxeRc9F/3BfE JJ///Qc96QgqZ/Uf+rSxWazay31MeubCn5HCDcbfaKIcQ/LpuKEkNLQaGy1TYMzm C9VvkK2IqqQ7W9+S1oM+qz+OWP/szgmlmgxTrGE5WA29 -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:27 2026 by rpki-client