This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/j4jMnBAcA78bU49fCy36vYc0nRs.roa File: j4jMnBAcA78bU49fCy36vYc0nRs.roa (raw, json) Hash identifier: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg= Subject key identifier: 8F:88:CC:9C:10:1C:03:BF:1B:53:8F:5F:0B:2D:FA:BD:87:34:9D:1B Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019B7AC7DEC414D806703D341E31DEF23F88 Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/j4jMnBAcA78bU49fCy36vYc0nRs.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212865 IP address blocks: 2.59.120.0/22 maxlen: 24 95.214.148.0/22 maxlen: 24 194.69.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:de:c4:14:d8:06:70:3d:34:1e:31:de:f2:3f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f88cc9c101c03bf1b538f5f0b2dfabd87349d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:65:20:07:3a:a1:76:88:d8:34:1c:b6:c4: 83:ab:f3:15:7f:aa:cd:d1:00:59:cc:3f:00:de:ae: de:08:48:c2:80:79:14:62:41:f7:58:d0:63:36:c6: ae:f2:6f:71:e6:b1:71:fb:04:6b:50:37:8f:04:c1: 68:ff:c1:06:38:1f:97:68:15:e4:15:0f:59:f8:dc: be:60:8e:ac:c6:28:15:ae:95:1c:5d:7f:c1:f7:59: 6d:7d:d7:1a:b7:d0:9d:2f:e1:41:c9:36:a9:04:b8: f2:af:f2:8f:2e:63:e2:d6:d0:49:74:ef:b1:c4:2a: ea:b4:e1:32:b7:b8:31:e6:87:ae:4a:bc:78:be:af: 0a:4e:bc:51:ed:d2:87:3d:02:d8:43:bf:ca:51:6e: af:4b:33:57:29:df:2d:9f:c5:13:4e:84:0f:98:61: 61:bc:c7:cd:de:7c:60:82:16:ef:26:78:39:d5:7b: 8c:a9:f1:73:db:bd:b5:98:3c:62:d4:f8:57:a9:de: 98:cd:a2:3a:16:21:e8:5f:58:c0:72:32:fa:14:ef: 05:0d:bd:1a:41:98:ec:b5:b6:6a:05:4b:30:de:21: 36:fa:0d:2c:50:5f:a4:5f:c7:a2:ca:9e:fc:56:59: f0:a2:ad:74:de:b4:89:55:89:ff:f3:45:86:a1:2b: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:88:CC:9C:10:1C:03:BF:1B:53:8F:5F:0B:2D:FA:BD:87:34:9D:1B X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/j4jMnBAcA78bU49fCy36vYc0nRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.120.0/22 95.214.148.0/22 194.69.196.0/23 Signature Algorithm: sha256WithRSAEncryption 95:53:2a:f7:11:a7:c7:b9:66:4e:a3:0a:38:91:84:81:ce:4e: fb:cd:0e:8f:c5:d4:02:bd:c0:1d:05:1e:35:9f:ed:c9:fe:65: 16:0f:24:ae:fb:6d:93:23:ee:29:86:ce:4f:9f:1a:ed:0f:ac: 92:32:b6:13:9f:ef:75:90:0d:dd:96:d2:60:37:af:94:07:53: 42:12:bf:a1:b2:b6:16:71:6b:e4:e0:de:85:4d:e5:44:df:3a: 71:f8:91:c1:c0:96:6f:17:5f:00:5f:4a:68:04:10:90:94:3c: 18:4f:76:34:25:21:c1:94:5c:41:64:05:a5:69:b8:f6:76:a8: f2:54:36:aa:8a:4e:6a:dd:cf:06:8d:0c:30:21:3b:98:26:4f: a8:74:3d:b4:2e:85:ab:68:a9:f4:53:5d:cf:6f:24:7b:bb:fc: b7:c3:ca:78:7f:05:7f:85:56:90:d8:dd:60:01:e1:a1:00:1d: 06:9e:75:35:14:ac:96:50:67:99:ed:26:88:5c:f9:00:dd:3e: d8:11:83:27:bb:78:fa:8f:31:df:01:94:89:73:61:aa:45:5a: 89:2a:aa:cd:11:70:0b:0b:dd:09:02:64:cf:53:d3:e0:e4:68: 67:51:0a:f2:82:7a:16:41:73:4f:b6:f2:05:5a:7a:23:6b:29: 4f:6c:af:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x97EFNgGcD00HjHe8j+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjg4Y2M5YzEwMWMwM2JmMWI1MzhmNWYwYjJkZmFiZDg3MzQ5ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG9lIAc6oXaI2DQctsSDq/MVf6rN 0QBZzD8A3q7eCEjCgHkUYkH3WNBjNsau8m9x5rFx+wRrUDePBMFo/8EGOB+XaBXk FQ9Z+Ny+YI6sxigVrpUcXX/B91ltfdcat9CdL+FByTapBLjyr/KPLmPi1tBJdO+x xCrqtOEyt7gx5oeuSrx4vq8KTrxR7dKHPQLYQ7/KUW6vSzNXKd8tn8UTToQPmGFh vMfN3nxgghbvJng51XuMqfFz2721mDxi1PhXqd6YzaI6FiHoX1jAcjL6FO8FDb0a QZjstbZqBUsw3iE2+g0sUF+kX8eiyp78Vlnwoq103rSJVYn/80WGoSu0sQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI+IzJwQHAO/G1OPXwst+r2HNJ0bMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvajRqTW5CQWNBNzhiVTQ5ZkN5MzZ2WWMwblJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjt4AwQC X9aUAwQBwkXEMA0GCSqGSIb3DQEBCwUAA4IBAQCVUyr3EafHuWZOowo4kYSBzk77 zQ6PxdQCvcAdBR41n+3J/mUWDySu+22TI+4phs5PnxrtD6ySMrYTn+91kA3dltJg N6+UB1NCEr+hsrYWcWvk4N6FTeVE3zpx+JHBwJZvF18AX0poBBCQlDwYT3Y0JSHB lFxBZAWlabj2dqjyVDaqik5q3c8GjQwwITuYJk+odD20LoWraKn0U13PbyR7u/y3 w8p4fwV/hVaQ2N1gAeGhAB0GnnU1FKyWUGeZ7SaIXPkA3T7YEYMnu3j6jzHfAZSJ c2GqRVqJKqrNEXALC90JAmTPU9Pg5GhnUQrygnoWQXNPtvIFWnojaylPbK/X -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:48 2026 by rpki-client