This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/jbRN5O5e-mAQP6DvxJri-1ev0eU.roa File: jbRN5O5e-mAQP6DvxJri-1ev0eU.roa (raw, json) Hash identifier: B7a75obD3+txWqZyg6OvLDBFk4OYjXKd64iJznIkS9A= Subject key identifier: 8D:B4:4D:E4:EE:5E:FA:60:10:3F:A0:EF:C4:9A:E2:FB:57:AF:D1:E5 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BA05889581E5FFC6B57F2B2CA99C Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/jbRN5O5e-mAQP6DvxJri-1ev0eU.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43697 IP address blocks: 194.179.36.0/24 maxlen: 24 195.57.128.0/24 maxlen: 24 195.57.169.0/24 maxlen: 24 195.235.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:05:88:95:81:e5:ff:c6:b5:7f:2b:2c:a9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db44de4ee5efa60103fa0efc49ae2fb57afd1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:31:06:77:0b:a2:25:92:87:7d:1f:f7:b0: 24:1c:c9:8f:68:fe:c9:72:35:e9:89:10:1a:0e:39: 8a:8d:7d:a7:f5:93:68:aa:90:c6:20:1d:0b:bf:25: bf:b5:04:8b:b1:69:b0:45:78:d2:ea:a8:aa:69:6c: c6:5f:4c:40:6b:56:62:6f:05:7f:77:0b:94:7d:e8: 0d:b8:90:f7:a5:e1:68:b9:c9:b6:e0:e0:d8:75:e3: 7c:5b:97:2d:e1:8d:c6:cb:79:3f:7c:5a:1d:e3:fa: a6:48:c9:ec:d0:ea:57:fd:25:70:79:cd:7e:71:4d: 8d:22:e2:5a:00:e4:b9:dd:20:93:ed:db:2d:d8:1e: 1d:5d:90:27:09:46:b1:2b:89:04:a7:cc:0e:e4:19: 7a:d4:9f:4c:ca:a0:a5:5c:ce:83:28:c7:34:0d:77: 64:18:28:e5:da:ea:a3:0e:fc:42:f9:2a:b2:0a:98: 9a:3a:69:11:19:3f:c3:50:18:06:10:cb:a7:44:a6: f0:71:99:d7:e7:4a:4e:89:a0:7a:3d:64:6e:0c:78: 0e:db:5c:8c:e0:0f:63:b5:34:a8:96:ae:69:95:af: ae:cc:03:bb:75:15:f0:20:b1:cb:4e:4f:61:92:dd: d1:71:87:c4:a8:44:c1:53:79:72:2e:b5:7b:20:cb: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:4D:E4:EE:5E:FA:60:10:3F:A0:EF:C4:9A:E2:FB:57:AF:D1:E5 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/jbRN5O5e-mAQP6DvxJri-1ev0eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.36.0/24 195.57.128.0/24 195.57.169.0/24 195.235.199.0/24 Signature Algorithm: sha256WithRSAEncryption ad:0c:75:3d:bd:0d:d0:b0:f9:4b:88:32:23:dd:a6:c0:a3:c5: 71:a1:e7:48:53:a6:cf:2d:39:cf:bb:42:ae:7e:a6:77:d3:7a: 7b:d2:fa:f5:65:4e:c1:7f:23:1d:58:9c:bc:68:00:65:3d:67: 0f:bf:62:57:af:58:9a:db:9f:56:e3:41:99:fd:fe:ac:3c:9e: 86:0c:54:51:bd:5b:8f:e8:15:49:64:f1:31:ba:49:15:5c:e6: c5:a4:48:ae:f0:92:da:9b:8e:ed:79:99:7a:58:93:fd:0d:e7: 1e:5d:be:46:b4:cc:87:59:80:f7:c4:8c:44:61:a5:14:b8:bb: 40:ef:07:91:01:bc:b6:40:fd:16:04:8c:af:b8:ab:51:6f:e1: 27:ab:cb:27:8b:9d:2f:22:06:12:37:63:3a:41:28:47:cb:dc: 4d:ea:97:63:df:c0:a9:2f:aa:fb:e8:f9:38:a1:dc:b8:cc:b0: 5d:3a:fa:e0:54:fe:58:14:f7:48:f7:c8:34:0c:95:a6:5f:cf: 14:d3:8c:4d:0a:2e:70:47:b7:79:87:06:86:a4:50:b1:6d:f7: 9f:76:35:ed:91:f6:53:05:b6:59:01:5b:08:34:be:4c:bc:30: f8:05:ec:2a:61:2c:35:57:a5:cf:8d:0c:62:30:f5:47:29:f7: bb:a6:6c:e8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FboFiJWB5f/GtX8rLKmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI0NGRlNGVlNWVmYTYwMTAzZmEwZWZjNDlhZTJmYjU3YWZkMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWwxBncLoiWSh30f97AkHMmPaP7J cjXpiRAaDjmKjX2n9ZNoqpDGIB0LvyW/tQSLsWmwRXjS6qiqaWzGX0xAa1ZibwV/ dwuUfegNuJD3peFoucm24ODYdeN8W5ct4Y3Gy3k/fFod4/qmSMns0OpX/SVwec1+ cU2NIuJaAOS53SCT7dst2B4dXZAnCUaxK4kEp8wO5Bl61J9MyqClXM6DKMc0DXdk GCjl2uqjDvxC+SqyCpiaOmkRGT/DUBgGEMunRKbwcZnX50pOiaB6PWRuDHgO21yM 4A9jtTSolq5pla+uzAO7dRXwILHLTk9hkt3RcYfEqETBU3lyLrV7IMsTrwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI20TeTuXvpgED+g78Sa4vtXr9HlMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvamJSTjVPNWUtbUFRUDZEdnhKcmktMWV2MGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwrMkAwQA wzmAAwQAwzmpAwQAw+vHMA0GCSqGSIb3DQEBCwUAA4IBAQCtDHU9vQ3QsPlLiDIj 3abAo8VxoedIU6bPLTnPu0KufqZ303p70vr1ZU7BfyMdWJy8aABlPWcPv2JXr1ia 259W40GZ/f6sPJ6GDFRRvVuP6BVJZPExukkVXObFpEiu8JLam47teZl6WJP9Dece Xb5GtMyHWYD3xIxEYaUUuLtA7weRAby2QP0WBIyvuKtRb+Enq8sni50vIgYSN2M6 QShHy9xN6pdj38CpL6r76Pk4ody4zLBdOvrgVP5YFPdI98g0DJWmX88U04xNCi5w R7d5hwaGpFCxbfefdjXtkfZTBbZZAVsINL5MvDD4BewqYSw1V6XPjQxiMPVHKfe7 pmzo -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:23 2026 by rpki-client