This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/jccKxXf-KlBy0OODUdeGAP1Pln4.roa File: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (raw, json) Hash identifier: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8= Subject key identifier: 8D:C7:0A:C5:77:FE:2A:50:72:D0:E3:83:51:D7:86:00:FD:4F:96:7E Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B77C7228ADE2975C17796CF027FA0F7E7 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/jccKxXf-KlBy0OODUdeGAP1Pln4.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199998 IP address blocks: 185.39.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:8a:de:29:75:c1:77:96:cf:02:7f:a0:f7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dc70ac577fe2a5072d0e38351d78600fd4f967e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:f8:32:75:89:55:4d:9f:83:3c:d2:24:76: b5:63:18:b0:84:c9:79:f5:04:ed:e9:d4:8d:eb:55: 5a:7b:4b:33:b4:df:f5:3b:6e:2c:41:3b:24:2d:a9: 7c:ae:d7:77:5a:c3:90:75:86:dd:49:3e:b5:58:cd: dd:be:6a:c2:c3:7b:39:ca:e6:3f:c5:43:e3:65:a6: 7e:9a:91:16:6e:83:8b:68:07:60:f6:f9:3d:3d:65: f1:b1:a6:e1:6d:89:ca:2b:56:99:05:08:ab:ab:3c: 5e:57:1d:e1:f1:27:39:e0:8b:06:99:bc:05:54:3b: 17:36:2e:de:fe:ce:5e:ef:9e:30:c2:da:9a:d6:2c: ba:b3:c4:35:d5:22:ef:c3:43:20:00:1d:2b:f2:19: 38:07:49:64:df:07:69:c7:b1:af:e1:2d:2c:51:4c: fd:74:cd:3d:98:96:df:53:91:ba:f6:b8:e9:88:5f: cb:e3:42:0b:43:f3:f0:91:a2:7b:a3:39:f9:c9:1f: 54:31:4d:55:66:39:ad:ec:80:98:b5:eb:33:c6:34: 54:19:0b:8e:33:fc:03:88:a2:c4:66:48:06:8a:30: f6:71:83:8c:bb:b9:f9:82:9a:5b:58:e4:af:65:67: c1:39:b9:b1:d5:ac:ea:e8:f8:cc:df:32:0d:4e:e7: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:0A:C5:77:FE:2A:50:72:D0:E3:83:51:D7:86:00:FD:4F:96:7E X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/jccKxXf-KlBy0OODUdeGAP1Pln4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.124.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:bb:56:5d:73:ad:43:b9:0d:2b:9e:3c:ac:43:aa:42:dc:8c: 66:e0:36:16:19:ca:3f:f5:df:fd:1b:2d:53:84:1f:95:b9:e5: 9d:2a:69:a1:d5:74:74:db:b8:8a:88:d8:9a:bd:f3:2c:32:70: e7:b9:6e:ef:b3:2a:6c:a4:92:b5:3b:66:e6:8d:54:96:2c:1e: 7a:0a:21:22:cf:d9:50:7b:8d:3b:c6:64:67:24:10:ac:55:cf: f8:c4:f6:a7:4a:9b:24:d9:40:40:3a:1f:f6:7f:47:20:0e:91: 96:e8:61:7a:d9:09:72:f4:c9:25:ed:05:70:e5:de:7b:c0:21: 25:3a:e1:48:cf:b5:77:01:36:cc:94:34:95:ca:c9:83:32:5e: 13:5c:60:2d:96:fe:ec:4e:76:1f:ef:1d:d8:e2:c0:34:c6:24: a7:11:a0:58:a4:37:90:79:dd:06:1b:57:22:b3:0c:38:92:cb: 5f:a9:1d:7e:7d:ac:50:02:4d:e8:1a:24:5f:8b:c5:60:0d:57: a7:3d:7d:c8:4f:dc:55:1a:c9:2c:f1:e1:0f:b9:64:e1:76:0d: 78:6b:26:37:7e:a0:f1:82:81:98:49:e3:2a:d1:02:23:48:e2: e8:29:25:3d:04:11:fc:13:44:49:08:e3:78:25:a1:50:60:41: e8:d5:fe:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyKK3il1wXeWzwJ/oPfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGM3MGFjNTc3ZmUyYTUwNzJkMGUzODM1MWQ3ODYwMGZkNGY5NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqD4MnWJVU2fgzzSJHa1YxiwhMl5 9QTt6dSN61Vae0sztN/1O24sQTskLal8rtd3WsOQdYbdST61WM3dvmrCw3s5yuY/ xUPjZaZ+mpEWboOLaAdg9vk9PWXxsabhbYnKK1aZBQirqzxeVx3h8Sc54IsGmbwF VDsXNi7e/s5e754wwtqa1iy6s8Q11SLvw0MgAB0r8hk4B0lk3wdpx7Gv4S0sUUz9 dM09mJbfU5G69rjpiF/L40ILQ/PwkaJ7ozn5yR9UMU1VZjmt7ICYteszxjRUGQuO M/wDiKLEZkgGijD2cYOMu7n5gppbWOSvZWfBObmx1azq6PjM3zINTufOTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI3HCsV3/ipQctDjg1HXhgD9T5Z+MB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvamNjS3hYZi1LbEJ5ME9PRFVkZUdBUDFQbG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSd8MA0G CSqGSIb3DQEBCwUAA4IBAQA8u1Zdc61DuQ0rnjysQ6pC3Ixm4DYWGco/9d/9Gy1T hB+VueWdKmmh1XR027iKiNiavfMsMnDnuW7vsypspJK1O2bmjVSWLB56CiEiz9lQ e407xmRnJBCsVc/4xPanSpsk2UBAOh/2f0cgDpGW6GF62Qly9Mkl7QVw5d57wCEl OuFIz7V3ATbMlDSVysmDMl4TXGAtlv7sTnYf7x3Y4sA0xiSnEaBYpDeQed0GG1ci sww4kstfqR1+faxQAk3oGiRfi8VgDVenPX3IT9xVGsks8eEPuWThdg14ayY3fqDx goGYSeMq0QIjSOLoKSU9BBH8E0RJCON4JaFQYEHo1f4P -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:55 2026 by rpki-client