This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/JaTBpeRblrIhygW_gFmMKDRL-xY.roa File: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (raw, json) Hash identifier: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk= Subject key identifier: 25:A4:C1:A5:E4:5B:96:B2:21:CA:05:BF:80:59:8C:28:34:4B:FB:16 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B7F158EA40318924E09D7031AC46EDE8E Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/JaTBpeRblrIhygW_gFmMKDRL-xY.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 86.104.0.0/24 maxlen: 24 86.104.1.0/24 maxlen: 24 188.208.109.0/24 maxlen: 24 188.214.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8e:a4:03:18:92:4e:09:d7:03:1a:c4:6e:de:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a4c1a5e45b96b221ca05bf80598c28344bfb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:9e:ad:8e:55:93:72:64:64:e6:3f:2c:57: d4:fc:57:76:76:70:3e:f0:77:7f:d2:82:d5:2e:d7: a4:c9:17:38:d9:7b:ad:95:e3:02:70:25:1c:da:53: 0e:c7:56:72:df:c2:39:7f:1e:a6:6c:41:d6:22:ee: 33:da:67:d2:80:35:d5:78:ef:fc:59:48:b0:20:c3: 88:7a:a5:aa:d2:22:7b:f4:0e:17:e4:f1:f0:8a:7c: 0e:f2:05:11:d1:a6:89:e5:4c:5e:4f:73:7a:48:d0: a8:98:4a:45:45:75:02:ce:f6:bd:d0:d2:f2:df:68: 58:11:9e:e5:63:c3:6b:bf:7e:7e:13:c9:c6:fa:3e: db:6c:4c:28:4a:76:22:fe:d3:68:18:10:41:eb:d2: b2:a3:b6:37:26:a0:2a:34:bd:84:85:e7:a9:0c:1c: 27:3a:e0:ea:07:33:10:96:49:ee:a9:2b:d8:a2:4e: 11:c3:14:c1:00:68:ca:b8:9e:0d:1d:fe:29:ab:89: 84:7a:e1:be:34:52:b9:c5:7e:db:5e:bc:c7:76:86: 07:ee:06:cb:68:d7:03:77:c9:a4:1d:b3:29:6b:91: 8f:5b:3b:0f:b5:c6:6d:4c:26:fe:05:38:3f:33:5a: bb:ee:2d:74:df:54:10:d3:ed:5a:c1:a6:06:f5:17: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:C1:A5:E4:5B:96:B2:21:CA:05:BF:80:59:8C:28:34:4B:FB:16 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/JaTBpeRblrIhygW_gFmMKDRL-xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.0.0/23 188.208.109.0/24 188.214.94.0/24 Signature Algorithm: sha256WithRSAEncryption 98:5b:b5:c4:24:0a:1f:37:73:d4:f8:1f:32:90:c3:ce:60:40: 1b:51:88:f7:e1:75:1b:5b:2b:0e:0d:6c:2f:04:80:56:a7:06: 6c:e2:ae:7b:5b:9a:60:ae:f8:d4:05:93:3d:b7:52:f3:b3:d3: 48:86:11:95:74:4c:7f:bd:00:99:9c:b1:8d:ed:36:2e:13:d8: 7a:41:81:fb:d1:5d:2a:d7:fa:a5:ba:13:de:e4:07:e3:48:59: ec:d4:db:b2:92:6f:64:2b:d3:7a:83:c4:10:94:58:17:7f:fb: a0:fe:32:27:37:34:7f:e3:5c:89:cb:91:78:5e:b7:29:0a:b7: e4:f2:59:8d:91:ad:8e:aa:2c:9b:a4:c7:b4:0a:95:32:ac:90: ec:cd:9f:bd:1e:99:9b:1c:f0:46:aa:1c:50:20:3f:34:63:85: 5c:a1:b3:93:45:12:09:3c:3b:92:65:1d:86:83:0f:92:97:40: 8f:93:c0:85:d6:35:8a:65:6a:c5:17:d2:ba:7e:21:1d:8b:3e: 31:f4:88:a3:ab:b6:d8:7a:98:83:e4:0c:e1:f6:90:16:3b:f4: be:b5:6b:b6:bf:e2:bf:f0:ac:29:76:6a:7b:2c:ad:fb:b0:3a: b5:be:be:9a:10:a3:07:b7:40:f6:57:a9:ed:00:73:5e:5b:95: 10:9e:fe:5a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FY6kAxiSTgnXAxrEbt6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWE0YzFhNWU0NWI5NmIyMjFjYTA1YmY4MDU5OGMyODM0NGJmYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsyerY5Vk3JkZOY/LFfU/Fd2dnA+ 8Hd/0oLVLtekyRc42XutleMCcCUc2lMOx1Zy38I5fx6mbEHWIu4z2mfSgDXVeO/8 WUiwIMOIeqWq0iJ79A4X5PHwinwO8gUR0aaJ5UxeT3N6SNComEpFRXUCzva90NLy 32hYEZ7lY8Nrv35+E8nG+j7bbEwoSnYi/tNoGBBB69Kyo7Y3JqAqNL2EheepDBwn OuDqBzMQlknuqSvYok4RwxTBAGjKuJ4NHf4pq4mEeuG+NFK5xX7bXrzHdoYH7gbL aNcDd8mkHbMpa5GPWzsPtcZtTCb+BTg/M1q77i1031QQ0+1awaYG9RdTzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCWkwaXkW5ayIcoFv4BZjCg0S/sWMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvSmFUQnBlUmJsckloeWdXX2dGbU1LRFJMLXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVmgAAwQA vNBtAwQAvNZeMA0GCSqGSIb3DQEBCwUAA4IBAQCYW7XEJAofN3PU+B8ykMPOYEAb UYj34XUbWysODWwvBIBWpwZs4q57W5pgrvjUBZM9t1Lzs9NIhhGVdEx/vQCZnLGN 7TYuE9h6QYH70V0q1/qluhPe5AfjSFns1Nuykm9kK9N6g8QQlFgXf/ug/jInNzR/ 41yJy5F4XrcpCrfk8lmNka2OqiybpMe0CpUyrJDszZ+9HpmbHPBGqhxQID80Y4Vc obOTRRIJPDuSZR2Ggw+Sl0CPk8CF1jWKZWrFF9K6fiEdiz4x9Iijq7bYepiD5Azh 9pAWO/S+tWu2v+K/8Kwpdmp7LK37sDq1vr6aEKMHt0D2V6ntAHNeW5UQnv5a -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:20 2026 by rpki-client