This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/jXdcvBqCE8rVio9YNuEiuZYnuIo.roa File: jXdcvBqCE8rVio9YNuEiuZYnuIo.roa (raw, json) Hash identifier: ZtkqLvQ4ehKRiTxaMSbbV1v3/KL7Hxac2TJ9AgS/V8k= Subject key identifier: 8D:77:5C:BC:1A:82:13:CA:D5:8A:8F:58:36:E1:22:B9:96:27:B8:8A Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Certificate serial: 019BF1AEE943B019CE258F95A3966B150593 Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/jXdcvBqCE8rVio9YNuEiuZYnuIo.roa Signing time: Sat 24 Jan 2026 20:25:30 +0000 ROA not before: Sat 24 Jan 2026 20:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25780 IP address blocks: 185.206.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:ae:e9:43:b0:19:ce:25:8f:95:a3:96:6b:15:05:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Validity Not Before: Jan 24 20:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d775cbc1a8213cad58a8f5836e122b99627b88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:92:a5:65:1c:ac:1f:9f:b0:48:e6:3d:bc: 71:59:a1:8a:be:30:69:5f:84:ac:3a:7d:1b:a8:66: 66:41:e0:ea:30:fb:35:d8:3d:8c:95:90:84:36:f9: a8:a4:b0:9a:29:0a:63:9d:19:fd:26:a0:0f:d8:6e: 2a:ca:4a:23:07:00:36:c7:be:d0:78:eb:22:b7:af: 08:88:6d:7c:a6:f5:71:44:d1:f2:22:b7:b2:38:d6: de:a8:95:5b:da:8a:b7:d5:1f:1e:01:38:20:10:33: 56:39:f2:a3:a1:c4:05:85:3e:db:88:63:3c:69:a9: e3:26:2f:4c:aa:25:cf:1e:c3:f3:eb:72:a2:fb:47: ea:e6:df:08:04:de:c0:0c:fa:bc:e2:57:ff:77:ed: ba:9c:86:e0:cd:07:49:1e:6a:23:97:ed:29:7a:1b: 72:0c:7f:80:5c:b4:97:e3:0a:30:7b:f6:2a:36:19: 69:c2:0d:79:5b:7a:5d:b8:99:3f:11:72:27:a4:46: ff:65:05:8f:1c:81:51:ff:de:90:9e:10:11:55:95: 5e:47:b1:a3:96:5a:d5:9a:1e:04:7f:d3:4e:89:31: f6:07:57:24:44:da:7a:98:ba:32:0f:51:af:6f:4b: 80:fb:e7:48:f2:33:bd:39:dc:65:dd:f4:31:7d:fd: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:77:5C:BC:1A:82:13:CA:D5:8A:8F:58:36:E1:22:B9:96:27:B8:8A X509v3 Authority Key Identifier: keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/jXdcvBqCE8rVio9YNuEiuZYnuIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.168.0/22 Signature Algorithm: sha256WithRSAEncryption 15:76:28:8d:80:8f:30:52:06:66:6e:08:99:e4:aa:49:8f:6d: 00:66:58:72:3b:19:ba:bc:5d:a3:f8:8e:ea:7e:af:64:13:5c: 44:c0:d0:9c:5f:67:a0:6a:86:f3:3a:3e:3b:98:14:84:28:b9: a4:4c:0a:59:4b:b3:7b:6e:3a:90:f1:be:9c:56:fc:22:b3:ee: e9:74:81:af:39:be:02:ac:91:ef:b0:a0:ef:5f:02:6c:dc:4d: 44:1f:f7:c7:3b:71:04:8a:db:66:8a:a7:bb:78:16:c8:6e:6a: 3e:60:18:b0:f0:7e:f3:e3:22:90:4c:41:44:89:8a:e2:71:2f: 4a:53:20:32:53:9c:08:3f:04:f8:d9:3f:18:96:77:20:61:39: 0a:67:61:7a:80:32:92:69:07:de:15:82:b1:3f:b1:73:b1:4c: 72:ca:28:23:2f:03:14:07:d4:56:cf:97:c1:4a:e3:75:ec:b6: 62:a8:15:34:b1:d8:62:96:e4:b5:53:e3:9b:f2:f2:54:23:75: a9:d7:5e:0c:d7:87:56:98:a7:d1:98:3e:20:11:bd:f0:f3:82: e5:26:e4:43:12:fb:0a:f1:d2:c7:c4:42:8f:e0:f2:02:73:86: 1e:6f:f0:de:f4:15:81:ed:e6:e2:2c:77:41:f6:84:f9:19:66: 7d:43:ff:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvxrulDsBnOJY+Vo5ZrFQWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm MTZhOWYwHhcNMjYwMTI0MjAyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc3NWNiYzFhODIxM2NhZDU4YThmNTgzNmUxMjJiOTk2MjdiODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YuSpWUcrB+fsEjmPbxxWaGKvjBp X4SsOn0bqGZmQeDqMPs12D2MlZCENvmopLCaKQpjnRn9JqAP2G4qykojBwA2x77Q eOsit68IiG18pvVxRNHyIreyONbeqJVb2oq31R8eATggEDNWOfKjocQFhT7biGM8 aanjJi9MqiXPHsPz63Ki+0fq5t8IBN7ADPq84lf/d+26nIbgzQdJHmojl+0pehty DH+AXLSX4wowe/YqNhlpwg15W3pduJk/EXInpEb/ZQWPHIFR/96QnhARVZVeR7Gj llrVmh4Ef9NOiTH2B1ckRNp6mLoyD1Gvb0uA++dI8jO9Odxl3fQxff26GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI13XLwaghPK1YqPWDbhIrmWJ7iKMB8GA1UdIwQY MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt ODZhNTUxOGUyZDUyLzEvalhkY3ZCcUNFOHJWaW85WU51RWl1WlludUlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc6oMA0G CSqGSIb3DQEBCwUAA4IBAQAVdiiNgI8wUgZmbgiZ5KpJj20AZlhyOxm6vF2j+I7q fq9kE1xEwNCcX2egaobzOj47mBSEKLmkTApZS7N7bjqQ8b6cVvwis+7pdIGvOb4C rJHvsKDvXwJs3E1EH/fHO3EEittmiqe7eBbIbmo+YBiw8H7z4yKQTEFEiYricS9K UyAyU5wIPwT42T8YlncgYTkKZ2F6gDKSaQfeFYKxP7FzsUxyyigjLwMUB9RWz5fB SuN17LZiqBU0sdhiluS1U+Ob8vJUI3Wp114M14dWmKfRmD4gEb3w84LlJuRDEvsK 8dLHxEKP4PICc4Yeb/De9BWB7ebiLHdB9oT5GWZ9Q//w -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:51 2026 by rpki-client