This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/JnkLx50ImRIwe6DLwjoBPmLJiIM.roa File: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (raw, json) Hash identifier: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao= Subject key identifier: 26:79:0B:C7:9D:08:99:12:30:7B:A0:CB:C2:3A:01:3E:62:C9:88:83 Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Certificate serial: 019B7DCB6777971EC845C123092CAF05915E Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/JnkLx50ImRIwe6DLwjoBPmLJiIM.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206388 IP address blocks: 185.186.243.0/24 maxlen: 24 2a0f:f1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:67:77:97:1e:c8:45:c1:23:09:2c:af:05:91:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26790bc79d089912307ba0cbc23a013e62c98883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:32:c4:df:fb:cf:ec:1f:66:02:a3:21:ec: 9c:43:10:52:84:ef:0b:3b:f1:72:a7:3a:aa:af:69: 3b:22:ea:d5:33:15:8e:90:4a:78:f1:34:33:e4:67: c1:f8:e3:d0:6a:e0:10:26:5d:51:98:10:b6:c5:ea: 30:1e:20:58:76:30:9e:70:24:2e:86:5f:65:a3:df: f8:f2:d9:b6:ef:3f:c2:ff:7f:a5:ee:f1:f8:7e:0b: 48:0c:eb:ec:11:08:c5:1c:90:42:cb:37:06:84:f0: de:5b:10:80:05:10:bc:83:be:81:4f:25:b3:23:f4: d9:ad:7b:c6:21:47:ee:48:00:d8:3c:0e:d8:85:85: df:f4:1a:ef:f2:d0:32:0f:b0:c9:5c:7b:88:77:ec: db:8c:5b:02:63:ab:29:1c:0e:c6:42:aa:ac:c0:43: d8:89:32:d9:5b:23:89:1a:40:fa:24:16:7b:48:cc: 20:8d:db:c1:57:4c:a0:3c:09:06:1d:85:c0:3f:f1: fc:dd:5b:c9:55:a3:33:d0:73:31:4b:64:ca:30:17: c8:7e:bb:1a:10:dd:da:05:e9:0d:81:77:45:55:c2: 44:4f:12:b3:2c:16:89:dc:5d:8d:28:d4:da:5e:7d: 49:ab:bd:94:4b:c4:39:47:ee:d9:6a:44:06:c0:d3: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:0B:C7:9D:08:99:12:30:7B:A0:CB:C2:3A:01:3E:62:C9:88:83 X509v3 Authority Key Identifier: keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/JnkLx50ImRIwe6DLwjoBPmLJiIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.243.0/24 IPv6: 2a0f:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption a6:7c:e1:3f:66:3b:2a:e0:30:74:bf:a6:b1:af:0c:97:32:73: 30:1e:06:f1:fd:af:6a:d1:7a:63:86:d3:54:27:97:d7:eb:4c: c1:4f:89:72:6d:b8:a2:0d:fe:56:8b:74:a1:a2:2b:d0:f1:57: e3:66:a6:77:a2:72:ce:ee:96:ac:b8:6b:0b:5c:a0:82:d8:62: a3:45:92:da:9e:8c:22:42:89:bb:38:78:c5:fd:e7:34:74:48: 2a:d0:b7:79:00:75:1d:c5:89:d3:f4:b0:5a:3a:8f:1a:9c:7c: 08:21:23:4d:4d:6c:31:c1:5c:5d:d9:b9:5c:17:b4:0a:cc:60: 64:28:47:dd:6f:68:a7:68:4a:72:52:60:75:76:26:98:cc:0a: ee:3c:2d:bb:bf:63:a1:2e:4f:ee:f9:d7:dd:4f:58:a7:2a:b3: 4b:20:5c:1d:41:3a:a7:0a:8b:1b:52:94:5b:4d:d8:6e:10:5b: 1b:b7:b9:fc:70:b4:90:a6:24:46:a3:96:7f:d6:19:db:13:70: b4:6d:8b:7a:ee:ad:49:4e:6e:73:8c:87:c9:a9:c0:d9:39:14: 55:da:af:23:7e:a8:c4:b1:20:28:98:96:f3:e9:ec:5b:17:86: 68:61:51:c7:af:11:13:de:27:49:a2:29:f2:14:a2:41:16:f0: 1d:54:aa:5b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y2d3lx7IRcEjCSyvBZFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi MDY5MTEwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc5MGJjNzlkMDg5OTEyMzA3YmEwY2JjMjNhMDEzZTYyYzk4ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroAyxN/7z+wfZgKjIeycQxBShO8L O/Fypzqqr2k7IurVMxWOkEp48TQz5GfB+OPQauAQJl1RmBC2xeowHiBYdjCecCQu hl9lo9/48tm27z/C/3+l7vH4fgtIDOvsEQjFHJBCyzcGhPDeWxCABRC8g76BTyWz I/TZrXvGIUfuSADYPA7YhYXf9Brv8tAyD7DJXHuId+zbjFsCY6spHA7GQqqswEPY iTLZWyOJGkD6JBZ7SMwgjdvBV0ygPAkGHYXAP/H83VvJVaMz0HMxS2TKMBfIfrsa EN3aBekNgXdFVcJETxKzLBaJ3F2NKNTaXn1Jq72US8Q5R+7ZakQGwNPtqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCZ5C8edCJkSMHugy8I6AT5iyYiDMB8GA1UdIwQY MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt ZWU4MTBiODNhZGNkLzEvSm5rTHg1MEltUkl3ZTZETHdqb0JQbUxKaUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubrzMA0E AgACMAcDBQMqD/HAMA0GCSqGSIb3DQEBCwUAA4IBAQCmfOE/Zjsq4DB0v6axrwyX MnMwHgbx/a9q0XpjhtNUJ5fX60zBT4lybbiiDf5Wi3ShoivQ8VfjZqZ3onLO7pas uGsLXKCC2GKjRZLanowiQom7OHjF/ec0dEgq0Ld5AHUdxYnT9LBaOo8anHwIISNN TWwxwVxd2blcF7QKzGBkKEfdb2inaEpyUmB1diaYzAruPC27v2OhLk/u+dfdT1in KrNLIFwdQTqnCosbUpRbTdhuEFsbt7n8cLSQpiRGo5Z/1hnbE3C0bYt67q1JTm5z jIfJqcDZORRV2q8jfqjEsSAomJbz6exbF4ZoYVHHrxET3idJoinyFKJBFvAdVKpb -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:08 2026 by rpki-client