This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa File: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (raw, json) Hash identifier: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM= Subject key identifier: 8E:A9:1C:DA:FF:84:0D:F0:EA:C9:7D:D1:80:60:64:F1:6E:4A:74:4C Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019B76EB9F715AC62B5B06CB1D0178352CEA Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3549 IP address blocks: 185.114.184.0/24 maxlen: 24 185.114.185.0/24 maxlen: 24 185.114.186.0/24 maxlen: 24 185.114.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9f:71:5a:c6:2b:5b:06:cb:1d:01:78:35:2c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ea91cdaff840df0eac97dd1806064f16e4a744c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:3e:72:d4:f1:8d:07:6b:f3:e6:3f:4a:f1: 4a:0a:ac:43:08:d8:e3:bb:38:ce:83:35:75:27:ce: db:a7:83:ed:2e:72:b1:85:f1:3b:ef:17:c5:d1:61: fc:ae:c9:63:0a:6d:99:ab:dc:94:2a:fa:3c:b1:13: 7a:16:b3:e8:65:64:67:d4:db:9b:e3:60:d5:af:62: c2:92:09:91:b1:b9:e8:9d:df:12:91:03:1c:7d:10: a0:55:9c:82:9d:82:78:c0:38:70:a2:5f:ff:c3:f7: 05:f5:0c:e5:10:9b:57:82:fe:2e:38:68:f8:2e:f6: 01:e8:50:11:84:3b:45:0a:7d:1e:c1:9b:0c:66:91: d3:ab:12:b9:e0:da:81:af:7d:4d:94:47:ec:64:70: c8:91:71:fe:b0:91:c3:6f:fd:97:49:30:86:c7:67: 32:03:6e:84:66:1b:92:23:46:f1:2f:be:8f:a2:8c: 32:5b:42:65:95:d9:2b:28:ee:e0:2e:5e:ad:ec:39: 62:d3:a3:34:af:3c:8e:e8:a3:b0:60:c3:47:35:39: a1:80:26:1e:c9:ea:c8:ae:d7:b1:64:62:7d:d2:19: d5:d6:cf:b9:eb:cb:f3:3d:21:dd:87:2e:b7:71:bd: cf:fc:d7:ca:7e:42:80:4e:6e:56:20:d9:fb:34:92: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A9:1C:DA:FF:84:0D:F0:EA:C9:7D:D1:80:60:64:F1:6E:4A:74:4C X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.184.0/22 Signature Algorithm: sha256WithRSAEncryption 38:a7:6d:86:95:b4:05:ee:d8:39:31:80:56:8b:2c:f9:2e:97: fb:df:bf:36:d9:b2:11:39:b3:82:e4:65:ab:7a:8c:33:3d:b0: 52:72:dd:0a:7a:e2:c6:3e:23:82:9f:ee:88:6c:ed:ff:3c:20: 02:43:75:27:4f:a3:d4:7c:6c:4c:bd:53:50:89:b3:90:b1:12: 04:d9:6d:a1:02:60:a7:35:c9:fc:fc:0d:77:21:3d:f0:92:1d: 75:6f:57:10:c2:db:a4:6f:f5:00:4c:b2:9e:16:f9:56:03:78: bf:5b:3a:22:98:dc:08:e4:c8:75:4e:d4:0a:62:4d:5c:6f:7e: 20:69:af:16:5d:8f:8e:72:6c:c2:9b:00:f6:3c:42:f6:39:e9: d5:f0:54:33:6a:1c:1b:47:16:27:52:6c:ae:58:1c:bf:1d:85: 07:37:72:08:59:92:57:24:72:a1:78:b5:31:1a:6d:9f:90:3e: 71:dc:a0:29:7b:d5:be:88:41:9b:73:38:c6:66:cb:fa:9a:66: 54:24:0e:04:38:09:7d:15:2f:ff:4a:08:cb:7a:92:84:f9:81: 23:41:04:dd:fa:a2:4e:f6:8c:87:91:02:19:64:de:0b:b4:12: da:e3:4f:59:53:bb:c7:02:e3:0a:50:81:2c:e3:e9:4d:df:22: 95:78:7a:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2659xWsYrWwbLHQF4NSzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWE5MWNkYWZmODQwZGYwZWFjOTdkZDE4MDYwNjRmMTZlNGE3NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLQ+ctTxjQdr8+Y/SvFKCqxDCNjj uzjOgzV1J87bp4PtLnKxhfE77xfF0WH8rsljCm2Zq9yUKvo8sRN6FrPoZWRn1Nub 42DVr2LCkgmRsbnond8SkQMcfRCgVZyCnYJ4wDhwol//w/cF9QzlEJtXgv4uOGj4 LvYB6FARhDtFCn0ewZsMZpHTqxK54NqBr31NlEfsZHDIkXH+sJHDb/2XSTCGx2cy A26EZhuSI0bxL76PoowyW0JlldkrKO7gLl6t7Dli06M0rzyO6KOwYMNHNTmhgCYe yerIrtexZGJ90hnV1s+568vzPSHdhy63cb3P/NfKfkKATm5WINn7NJK33QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6pHNr/hA3w6sl90YBgZPFuSnRMMB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvanFrYzJ2LUVEZkRxeVgzUmdHQms4VzVLZEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXK4MA0G CSqGSIb3DQEBCwUAA4IBAQA4p22GlbQF7tg5MYBWiyz5Lpf737822bIRObOC5GWr eowzPbBSct0KeuLGPiOCn+6IbO3/PCACQ3UnT6PUfGxMvVNQibOQsRIE2W2hAmCn Ncn8/A13IT3wkh11b1cQwtukb/UATLKeFvlWA3i/WzoimNwI5Mh1TtQKYk1cb34g aa8WXY+OcmzCmwD2PEL2OenV8FQzahwbRxYnUmyuWBy/HYUHN3IIWZJXJHKheLUx Gm2fkD5x3KApe9W+iEGbczjGZsv6mmZUJA4EOAl9FS//SgjLepKE+YEjQQTd+qJO 9oyHkQIZZN4LtBLa409ZU7vHAuMKUIEs4+lN3yKVeHrB -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:20 2026 by rpki-client