This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/JOJrGMU0qn8ngziJaeo4DZASmf4.roa File: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (raw, json) Hash identifier: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc= Subject key identifier: 24:E2:6B:18:C5:34:AA:7F:27:83:38:89:69:EA:38:0D:90:12:99:FE Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Certificate serial: 019B7759078E718DF6853DBC6FB829776664 Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/JOJrGMU0qn8ngziJaeo4DZASmf4.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209979 IP address blocks: 194.35.100.0/22 maxlen: 22 194.35.100.0/24 maxlen: 24 194.35.101.0/24 maxlen: 24 194.35.102.0/24 maxlen: 24 194.35.103.0/24 maxlen: 24 2a09:c580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:8e:71:8d:f6:85:3d:bc:6f:b8:29:77:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24e26b18c534aa7f2783388969ea380d901299fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:fe:67:ec:d3:54:57:f9:f4:68:e8:59:c5: 3e:5f:7f:07:af:7d:72:1c:09:1f:64:cc:57:86:c4: c0:a0:7b:a8:09:05:5d:42:63:06:6c:04:7e:12:d4: 27:1c:6b:ec:2e:e6:6e:70:7d:9f:f2:f9:09:5e:07: 90:53:9b:ac:a3:75:38:ec:83:f7:34:b9:cd:3d:7a: bd:78:12:04:34:55:35:6c:b6:e2:27:d2:26:1c:19: 69:47:02:eb:6e:63:50:87:4c:99:49:cd:dd:d9:65: d2:82:d1:e4:23:d5:03:ee:d9:d4:8f:fc:6b:0d:c0: 40:76:09:b2:a4:83:17:0a:5a:03:b3:ed:ce:c1:51: b1:7e:57:d4:92:1d:73:23:12:0c:d6:cd:b2:ee:0d: 26:9f:c1:87:f9:89:df:51:d6:42:ec:03:b3:44:0e: 33:a6:69:da:56:6a:5b:f7:d2:e4:9f:b8:67:31:6f: 9f:6f:47:16:f5:d1:15:d2:90:1b:8d:fa:f2:18:56: 65:9f:60:aa:02:07:b6:12:8b:71:b0:40:ac:ff:19: 23:af:cf:bd:4e:5a:8b:c3:7e:74:b2:ea:71:c6:a9: 1a:a2:6c:dc:7e:35:bd:e0:b8:68:ee:44:b0:c3:a1: 7a:01:ec:4a:b2:a4:58:f0:2c:86:db:f3:62:c1:b5: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:6B:18:C5:34:AA:7F:27:83:38:89:69:EA:38:0D:90:12:99:FE X509v3 Authority Key Identifier: keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/JOJrGMU0qn8ngziJaeo4DZASmf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.100.0/22 IPv6: 2a09:c580::/32 Signature Algorithm: sha256WithRSAEncryption 5f:95:c2:11:61:11:a1:f3:0f:b3:15:7b:40:d5:5a:4d:72:25: f4:17:f5:fe:f0:f4:cf:b5:ef:0b:68:07:66:84:38:b6:ea:e7: 87:cd:ef:23:40:0c:b1:ee:06:4f:0e:c5:44:13:a0:bc:20:6d: be:87:fd:28:db:b4:bf:f9:12:57:15:b7:e9:0d:45:0c:6c:77: 07:b7:33:f2:f4:26:a4:b3:f8:7b:38:1d:66:0f:c5:fa:6e:26: 59:e4:ae:07:16:43:30:47:6c:8c:fa:a4:7e:cd:8a:c5:a8:fd: 57:9a:4d:6e:67:15:a9:a8:4f:9b:3f:35:ba:a8:e6:71:9a:65: 5f:53:27:eb:8c:9d:9f:93:d9:f1:84:5f:69:1b:22:0b:83:22: 98:28:61:f3:c8:9b:1a:be:3e:9e:eb:b0:48:12:0b:5c:27:ca: f8:b8:a7:14:f2:b4:92:d0:f3:3f:ca:66:06:26:92:90:e5:3f: 50:24:d5:13:a8:39:c4:ce:01:6e:83:e2:db:e2:38:21:e1:7c: 82:1b:4c:1e:f3:63:7b:a6:9f:35:96:e7:fc:0e:68:8d:d8:10: 62:2d:1f:14:5d:7f:3e:28:7b:38:6f:d9:1f:dc:8e:fa:df:b8: 6d:69:88:dc:5a:20:8b:8e:6e:73:ea:09:2c:6b:70:b3:b5:38: 73:0e:bb:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WQeOcY32hT28b7gpd2ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1 YzcxNGMwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGUyNmIxOGM1MzRhYTdmMjc4MzM4ODk2OWVhMzgwZDkwMTI5OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQP+Z+zTVFf59GjoWcU+X38Hr31y HAkfZMxXhsTAoHuoCQVdQmMGbAR+EtQnHGvsLuZucH2f8vkJXgeQU5uso3U47IP3 NLnNPXq9eBIENFU1bLbiJ9ImHBlpRwLrbmNQh0yZSc3d2WXSgtHkI9UD7tnUj/xr DcBAdgmypIMXCloDs+3OwVGxflfUkh1zIxIM1s2y7g0mn8GH+YnfUdZC7AOzRA4z pmnaVmpb99Lkn7hnMW+fb0cW9dEV0pAbjfryGFZln2CqAge2EotxsECs/xkjr8+9 TlqLw350supxxqkaomzcfjW94Lho7kSww6F6AexKsqRY8CyG2/NiwbV8cwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCTiaxjFNKp/J4M4iWnqOA2QEpn+MB8GA1UdIwQY MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt ZmU0NDc3MmQ1YWUxLzEvSk9KckdNVTBxbjhuZ3ppSmFlbzREWkFTbWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwiNkMA0E AgACMAcDBQAqCcWAMA0GCSqGSIb3DQEBCwUAA4IBAQBflcIRYRGh8w+zFXtA1VpN ciX0F/X+8PTPte8LaAdmhDi26ueHze8jQAyx7gZPDsVEE6C8IG2+h/0o27S/+RJX FbfpDUUMbHcHtzPy9Caks/h7OB1mD8X6biZZ5K4HFkMwR2yM+qR+zYrFqP1Xmk1u ZxWpqE+bPzW6qOZxmmVfUyfrjJ2fk9nxhF9pGyILgyKYKGHzyJsavj6e67BIEgtc J8r4uKcU8rSS0PM/ymYGJpKQ5T9QJNUTqDnEzgFug+Lb4jgh4XyCG0we82N7pp81 luf8DmiN2BBiLR8UXX8+KHs4b9kf3I7637htaYjcWiCLjm5z6gksa3CztThzDruY -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:30 2026 by rpki-client