This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/jteFQiK73wa6i4lrpiIPNofIe0U.roa File: jteFQiK73wa6i4lrpiIPNofIe0U.roa (raw, json) Hash identifier: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM= Subject key identifier: 8E:D7:85:42:22:BB:DF:06:BA:8B:89:6B:A6:22:0F:36:87:C8:7B:45 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D6FA9044F9726B3DE8EF54161C45 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/jteFQiK73wa6i4lrpiIPNofIe0U.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200746 IP address blocks: 185.109.220.0/24 maxlen: 24 2a0b:8f80:1::/48 maxlen: 48 2a0b:8f80:200::/48 maxlen: 48 2a0b:8f80:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d6:fa:90:44:f9:72:6b:3d:e8:ef:54:16:1c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ed7854222bbdf06ba8b896ba6220f3687c87b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:e1:5f:4a:a6:5f:78:5b:65:07:e1:9d:85: ea:36:7b:47:de:7a:fa:03:c2:c9:58:1c:cb:74:26: 46:dd:a7:c8:2d:24:32:7a:7a:f0:a1:00:67:67:08: b7:1d:52:1c:34:f6:38:d7:ff:a0:db:b5:e5:fd:a5: c3:d8:0b:6a:b2:bc:f2:f1:97:d7:d1:18:cd:d5:69: 4e:cf:15:d2:33:2f:7a:fa:a8:0b:23:4e:34:ca:96: cf:77:42:7c:31:43:21:bb:c7:1e:84:fc:42:02:bd: 5a:1a:76:a5:4b:0c:54:4b:c3:33:02:76:e9:a2:b3: df:31:5d:8e:4f:2d:95:9f:90:fe:a4:79:9a:23:95: 39:2f:15:3b:97:1c:35:72:3d:b6:1c:82:75:35:28: a5:8e:c5:a2:58:7a:e4:d7:91:9e:55:bf:91:2e:04: 01:94:eb:f3:ad:e4:60:5f:34:4e:9e:bb:c7:dd:fa: 6a:b7:f7:e5:ad:56:2f:dc:ad:4a:f8:83:ae:7a:65: cd:df:6c:b4:ab:5a:52:91:e3:41:8c:47:21:ca:7f: 90:18:df:d0:73:bf:ed:4a:b5:54:da:b8:33:fb:30: ff:08:54:9c:a0:9c:53:dc:a6:52:79:5c:20:49:e8: 42:9f:d8:f2:b6:bb:cd:60:cb:55:6f:7e:a3:6d:ba: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D7:85:42:22:BB:DF:06:BA:8B:89:6B:A6:22:0F:36:87:C8:7B:45 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/jteFQiK73wa6i4lrpiIPNofIe0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.220.0/24 IPv6: 2a0b:8f80:1::/48 2a0b:8f80:200::/48 2a0b:8f80:300::/48 Signature Algorithm: sha256WithRSAEncryption 98:20:c5:67:f0:f8:7a:24:97:d8:bd:be:8a:84:fa:37:33:9e: e5:35:87:bb:29:4a:d3:02:08:19:11:e3:ed:4a:10:e7:b3:c3: 14:d1:91:ad:fe:b0:69:22:00:4e:8c:15:d1:0d:8a:3d:44:fb: df:c5:31:a8:4e:ed:30:de:b0:f4:05:69:67:66:09:7b:74:f9: b9:62:7f:12:4c:a4:79:3c:be:12:a4:9b:c5:5c:cd:dd:df:61: fd:be:0c:0c:0f:16:7b:dd:b5:0d:d6:8d:b1:cb:e3:f5:ed:30: a2:96:3e:bf:1f:d6:16:2f:fd:8b:7f:2d:99:e0:10:98:e8:50: 6a:f9:9f:1a:78:09:69:24:bd:41:1d:25:cd:7a:6d:11:46:1e: 49:ef:16:d4:62:fb:66:3c:a3:d3:51:43:3d:8e:7f:89:1d:b9: 1d:e4:d2:1e:7c:c8:1b:9e:3d:1d:82:c7:40:dc:78:13:b0:fa: e8:1c:0b:4c:7a:39:a7:5c:eb:4e:70:1f:63:c9:1d:d2:86:36: ca:af:a1:cc:2e:7d:3e:e6:1d:a0:ef:23:67:6a:17:13:3b:45: d4:49:df:76:e8:57:db:ff:17:27:a5:26:a7:bf:14:bc:61:ee: 51:de:7f:99:7b:4a:12:70:92:84:eb:64:00:34:cf:3a:5a:93: 6a:f3:75:a5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/gNb6kET5cms96O9UFhxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWQ3ODU0MjIyYmJkZjA2YmE4Yjg5NmJhNjIyMGYzNjg3Yzg3YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4bhX0qmX3hbZQfhnYXqNntH3nr6 A8LJWBzLdCZG3afILSQyenrwoQBnZwi3HVIcNPY41/+g27Xl/aXD2Atqsrzy8ZfX 0RjN1WlOzxXSMy96+qgLI040ypbPd0J8MUMhu8cehPxCAr1aGnalSwxUS8MzAnbp orPfMV2OTy2Vn5D+pHmaI5U5LxU7lxw1cj22HIJ1NSiljsWiWHrk15GeVb+RLgQB lOvzreRgXzROnrvH3fpqt/flrVYv3K1K+IOuemXN32y0q1pSkeNBjEchyn+QGN/Q c7/tSrVU2rgz+zD/CFScoJxT3KZSeVwgSehCn9jytrvNYMtVb36jbbrDRQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFI7XhUIiu98GuouJa6YiDzaHyHtFMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvanRlRlFpSzczd2E2aTRscnBpSVBOb2ZJZTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAuW3cMCEE AgACMBsDBwAqC4+AAAEDBwAqC4+AAgADBwAqC4+AAwAwDQYJKoZIhvcNAQELBQAD ggEBAJggxWfw+Hokl9i9voqE+jcznuU1h7spStMCCBkR4+1KEOezwxTRka3+sGki AE6MFdENij1E+9/FMahO7TDesPQFaWdmCXt0+blifxJMpHk8vhKkm8Vczd3fYf2+ DAwPFnvdtQ3WjbHL4/XtMKKWPr8f1hYv/Yt/LZngEJjoUGr5nxp4CWkkvUEdJc16 bRFGHknvFtRi+2Y8o9NRQz2Of4kduR3k0h58yBuePR2Cx0DceBOw+ugcC0x6Oadc 605wH2PJHdKGNsqvocwufT7mHaDvI2dqFxM7RdRJ33boV9v/FyelJqe/FLxh7lHe f5l7ShJwkoTrZAA0zzpak2rzdaU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:35 2026 by rpki-client