This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/jJUpXp-wy4eDj-VTQpn033oPZ88.roa File: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (raw, json) Hash identifier: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc= Subject key identifier: 8C:95:29:5E:9F:B0:CB:87:83:8F:E5:53:42:99:F4:DF:7A:0F:67:CF Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B7C7F741C42E1B45FB0640FE99B939F87 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/jJUpXp-wy4eDj-VTQpn033oPZ88.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17767 IP address blocks: 185.192.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:74:1c:42:e1:b4:5f:b0:64:0f:e9:9b:93:9f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c95295e9fb0cb87838fe5534299f4df7a0f67cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:6c:99:15:3a:c0:76:e1:67:57:a6:a4:2f: fe:95:f0:b4:24:b4:97:b6:c2:24:44:6c:9b:bf:d6: 87:5b:5a:c1:e2:b7:4e:94:d4:bf:36:32:d7:ec:2e: 05:24:70:62:f4:99:4b:21:f8:9b:d5:2e:f7:66:4a: 54:34:0c:f2:21:11:2b:76:2b:ec:92:5d:a3:ab:89: f1:48:03:0f:93:c7:79:3c:f6:00:d8:40:b5:e4:58: c3:82:fa:a0:dd:af:ed:04:ba:d5:fc:4a:b0:44:cb: 00:c3:65:ca:a6:6d:7a:d2:a8:0b:95:af:76:a2:96: 00:fb:41:3c:32:1e:76:77:91:35:28:f1:43:55:f7: af:40:85:7a:4e:92:02:0b:db:0f:c6:2a:eb:4f:03: d6:77:f7:bd:65:a9:2d:75:df:bd:d6:78:c5:c6:39: 36:5c:4c:5a:90:56:ec:a2:69:25:85:a0:21:05:25: e0:ef:8b:da:4b:6a:e0:b4:fe:0c:5c:36:36:d9:53: 33:6a:30:f8:3c:c7:47:60:a6:5c:c8:ea:1e:d5:35: b9:f6:00:48:61:81:95:dd:4d:96:d5:9e:ff:98:4c: 46:50:10:e5:74:f8:8e:dc:f9:75:e7:5e:36:ae:3e: c2:2e:5f:eb:7d:41:72:b3:4f:dd:e1:2b:25:36:09: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:95:29:5E:9F:B0:CB:87:83:8F:E5:53:42:99:F4:DF:7A:0F:67:CF X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/jJUpXp-wy4eDj-VTQpn033oPZ88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.56.0/22 Signature Algorithm: sha256WithRSAEncryption e4:fe:8d:9c:8a:e3:2b:95:48:59:f1:b5:18:90:0e:6b:35:5b: a6:3a:f2:ad:f2:f1:df:6a:62:1a:fb:40:ae:90:20:45:10:ee: 85:fc:7c:3b:f4:a1:84:4f:03:d3:73:55:7c:60:b0:23:da:f4: 12:07:ac:4c:cd:d3:49:2a:92:7b:cf:90:98:a4:99:33:1e:0e: 23:41:0a:8e:92:ae:e4:87:e5:25:bb:24:32:4d:fd:5f:04:3c: c5:15:06:4d:a4:61:25:60:9a:d9:e4:ac:e7:2d:90:a0:aa:5b: 21:0f:78:9c:c4:3e:19:63:85:aa:54:cc:22:ba:a2:ac:9f:86: e9:fa:f3:57:d3:97:3e:4a:1d:f3:eb:0e:ec:b1:9f:81:91:8e: 4c:a5:8e:b3:dc:fe:f3:52:4f:ca:05:69:e8:a3:e7:d7:02:47: 88:14:01:03:3d:59:c5:66:fb:1f:02:da:cd:c8:25:5b:b0:d2: e3:67:ef:76:b8:24:ff:f6:2f:a7:6a:a2:40:0f:34:a0:e2:c4: 26:94:e6:e2:91:23:a7:77:2e:26:87:c9:f3:80:cd:c5:15:51: ef:00:e4:80:71:05:2b:af:87:97:40:ce:5f:2e:7d:42:81:6c: 29:ef:4e:e1:0b:f7:b6:73:09:62:d4:6d:f9:0b:db:df:aa:25: 39:e9:3d:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3QcQuG0X7BkD+mbk5+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzk1Mjk1ZTlmYjBjYjg3ODM4ZmU1NTM0Mjk5ZjRkZjdhMGY2N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJsmRU6wHbhZ1empC/+lfC0JLSX tsIkRGybv9aHW1rB4rdOlNS/NjLX7C4FJHBi9JlLIfib1S73ZkpUNAzyIRErdivs kl2jq4nxSAMPk8d5PPYA2EC15FjDgvqg3a/tBLrV/EqwRMsAw2XKpm160qgLla92 opYA+0E8Mh52d5E1KPFDVfevQIV6TpICC9sPxirrTwPWd/e9Zaktdd+91njFxjk2 XExakFbsomklhaAhBSXg74vaS2rgtP4MXDY22VMzajD4PMdHYKZcyOoe1TW59gBI YYGV3U2W1Z7/mExGUBDldPiO3Pl15142rj7CLl/rfUFys0/d4SslNgkIEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyVKV6fsMuHg4/lU0KZ9N96D2fPMB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvakpVcFhwLXd5NGVEai1WVFFwbjAzM29QWjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G CSqGSIb3DQEBCwUAA4IBAQDk/o2ciuMrlUhZ8bUYkA5rNVumOvKt8vHfamIa+0Cu kCBFEO6F/Hw79KGETwPTc1V8YLAj2vQSB6xMzdNJKpJ7z5CYpJkzHg4jQQqOkq7k h+UluyQyTf1fBDzFFQZNpGElYJrZ5KznLZCgqlshD3icxD4ZY4WqVMwiuqKsn4bp +vNX05c+Sh3z6w7ssZ+BkY5MpY6z3P7zUk/KBWnoo+fXAkeIFAEDPVnFZvsfAtrN yCVbsNLjZ+92uCT/9i+naqJADzSg4sQmlObikSOndy4mh8nzgM3FFVHvAOSAcQUr r4eXQM5fLn1CgWwp707hC/e2cwli1G35C9vfqiU56T0j -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:33 2026 by rpki-client