This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jkHAenTpuidnXByxveNkRSju7uY.roa File: jkHAenTpuidnXByxveNkRSju7uY.roa (raw, json) Hash identifier: cpn+ySzKd4iMnG4Jk2/pb+mw+Adqpv3Wll4fkTbcVt4= Subject key identifier: 8E:41:C0:7A:74:E9:BA:27:67:5C:1C:B1:BD:E3:64:45:28:EE:EE:E6 Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Certificate serial: 019B7DC877E2ADE773C76CDAD0661795DC68 Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jkHAenTpuidnXByxveNkRSju7uY.roa Signing time: Fri 02 Jan 2026 08:17:28 +0000 ROA not before: Fri 02 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20649 IP address blocks: 78.111.97.0/24 maxlen: 24 78.111.98.0/24 maxlen: 24 78.111.106.0/24 maxlen: 24 80.93.208.0/24 maxlen: 24 80.93.212.0/24 maxlen: 24 80.93.213.0/24 maxlen: 24 80.93.216.0/24 maxlen: 24 217.195.192.0/24 maxlen: 24 217.195.196.0/24 maxlen: 24 217.195.198.0/24 maxlen: 24 217.195.203.0/24 maxlen: 24 217.195.204.0/24 maxlen: 24 217.195.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:77:e2:ad:e7:73:c7:6c:da:d0:66:17:95:dc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Validity Not Before: Jan 2 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e41c07a74e9ba27675c1cb1bde3644528eeeee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:fd:9c:7c:ef:1c:7e:9a:23:3b:72:9b:0f: 02:25:f8:5c:36:55:fa:54:9a:c7:f2:31:fe:f6:9d: ed:c7:e9:0c:1d:0e:92:80:14:55:ae:82:e3:c3:6f: e8:ec:70:54:94:a5:bf:c4:36:98:25:12:c8:f8:de: d1:1d:ea:eb:6c:8c:45:b3:f8:10:99:19:4e:c9:45: 7c:56:04:14:d2:84:7c:70:b5:5c:9f:75:17:86:fd: 57:68:78:9f:c7:bc:84:eb:e8:03:2f:d8:a4:64:25: bc:41:49:14:fa:99:52:7c:0c:68:44:88:5a:06:63: 80:cc:e6:b9:97:ca:1c:fe:4b:73:5b:ac:ae:7e:8d: 03:96:98:84:df:ed:90:1d:9a:a5:b5:f2:67:5e:4d: d2:e8:e4:1c:12:75:7c:59:81:d6:39:bd:43:d0:08: 4d:c8:80:0b:0c:d0:96:0a:cf:09:a9:b4:60:16:57: 2d:bf:8a:ac:68:59:4c:ab:7f:17:cf:3b:10:58:f1: f8:e9:2a:c1:c2:87:2f:88:dc:a2:2e:49:b6:ef:f0: 3d:55:4b:eb:6f:3b:82:d4:5d:91:93:c7:27:9a:93: f8:d9:56:b6:53:11:b3:8d:3c:be:1e:af:e3:5b:3b: 70:68:22:4c:88:58:87:ad:b9:ef:16:ba:59:5f:c0: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:41:C0:7A:74:E9:BA:27:67:5C:1C:B1:BD:E3:64:45:28:EE:EE:E6 X509v3 Authority Key Identifier: keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/jkHAenTpuidnXByxveNkRSju7uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.97.0-78.111.98.255 78.111.106.0/24 80.93.208.0/24 80.93.212.0/23 80.93.216.0/24 217.195.192.0/24 217.195.196.0/24 217.195.198.0/24 217.195.203.0-217.195.204.255 217.195.206.0/24 Signature Algorithm: sha256WithRSAEncryption a9:04:3b:3e:1d:66:71:a9:fb:8e:5c:bd:90:70:9a:40:43:47: ba:d2:4b:9b:03:f4:f0:5e:a1:9f:69:34:c5:8b:fe:7d:88:2c: be:89:76:c4:b2:c2:4c:d9:24:bb:ba:87:2c:a6:34:d5:96:c1: 87:3d:ec:3f:42:d6:f6:f2:eb:60:cf:67:24:42:3a:3e:ff:b3: 48:e7:e1:fc:fd:c4:4b:ca:26:68:3c:96:66:59:92:83:3f:21: 40:76:48:1d:76:7c:d2:bc:a6:be:ed:c9:69:56:5c:60:7f:a1: 0a:6c:42:d1:27:0e:07:f2:2f:96:df:c7:6f:54:85:44:f4:7d: 58:52:b8:b7:c6:43:46:0c:f2:b6:2e:97:69:3d:ad:25:bd:50: ba:fa:26:f1:ef:5f:8f:07:3d:c4:23:9a:79:4f:a5:d5:f7:57: 65:8d:12:a8:45:9f:6e:7a:3c:10:97:9e:c2:0f:ea:28:91:3f: c9:78:d0:2a:23:1c:32:41:c2:e1:4e:e0:b5:45:80:54:78:74: 69:0b:f2:8b:75:4b:f4:7f:e0:7b:fd:37:83:c0:3c:13:7f:ed: a1:00:3e:e9:d8:e2:4c:f4:1a:ba:8b:67:0f:1c:b0:b7:0c:4f: 9c:73:93:e2:62:10:9a:cc:91:81:4d:99:cd:92:06:19:0e:6d: b6:7c:8b:f2 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt9yHfiredzx2za0GYXldxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3 NzdmMjQwHhcNMjYwMTAyMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQxYzA3YTc0ZTliYTI3Njc1YzFjYjFiZGUzNjQ0NTI4ZWVlZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqf9nHzvHH6aIztymw8CJfhcNlX6 VJrH8jH+9p3tx+kMHQ6SgBRVroLjw2/o7HBUlKW/xDaYJRLI+N7RHerrbIxFs/gQ mRlOyUV8VgQU0oR8cLVcn3UXhv1XaHifx7yE6+gDL9ikZCW8QUkU+plSfAxoRIha BmOAzOa5l8oc/ktzW6yufo0DlpiE3+2QHZqltfJnXk3S6OQcEnV8WYHWOb1D0AhN yIALDNCWCs8JqbRgFlctv4qsaFlMq38XzzsQWPH46SrBwocviNyiLkm27/A9VUvr bzuC1F2Rk8cnmpP42Va2UxGzjTy+Hq/jWztwaCJMiFiHrbnvFrpZX8CQcQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFI5BwHp06bonZ1wcsb3jZEUo7u7mMB8GA1UdIwQY MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt YTVmZGI1NzBmZTlhLzEvamtIQWVuVHB1aWRuWEJ5eHZlTmtSU2p1N3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBABOb2ED BABOb2IDBABOb2oDBABQXdADBAFQXdQDBABQXdgDBADZw8ADBADZw8QDBADZw8Yw DAMEANnDywMEANnDzAMEANnDzjANBgkqhkiG9w0BAQsFAAOCAQEAqQQ7Ph1mcan7 jly9kHCaQENHutJLmwP08F6hn2k0xYv+fYgsvol2xLLCTNkku7qHLKY01ZbBhz3s P0LW9vLrYM9nJEI6Pv+zSOfh/P3ES8omaDyWZlmSgz8hQHZIHXZ80rymvu3JaVZc YH+hCmxC0ScOB/Ivlt/Hb1SFRPR9WFK4t8ZDRgzyti6XaT2tJb1Quvom8e9fjwc9 xCOaeU+l1fdXZY0SqEWfbno8EJeewg/qKJE/yXjQKiMcMkHC4U7gtUWAVHh0aQvy i3VL9H/ge/03g8A8E3/toQA+6djiTPQauotnDxywtwxPnHOT4mIQmsyRgU2ZzZIG GQ5ttnyL8g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:40 2026 by rpki-client