This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jRVI_eAINH0DHfSbrJ1Lb2a1J0M.roa File: jRVI_eAINH0DHfSbrJ1Lb2a1J0M.roa (raw, json) Hash identifier: 6aHi9LTwWzQ2J8HFQmZN9AhMvjpcOSiPnJAqVLKRvcg= Subject key identifier: 8D:15:48:FD:E0:08:34:7D:03:1D:F4:9B:AC:9D:4B:6F:66:B5:27:43 Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B212CE773EC8A5276D24ECEDB489432A0 Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jRVI_eAINH0DHfSbrJ1Lb2a1J0M.roa Signing time: Mon 15 Dec 2025 08:42:29 +0000 ROA not before: Mon 15 Dec 2025 08:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 185.240.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2c:e7:73:ec:8a:52:76:d2:4e:ce:db:48:94:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Dec 15 08:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d1548fde008347d031df49bac9d4b6f66b52743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:22:82:8d:89:84:9c:93:6d:9f:aa:4e:1a: 36:45:19:0c:b0:a9:94:ee:fb:b9:f6:7b:1f:4a:e1: 18:89:33:3f:dc:a3:30:ea:17:41:c8:a6:e5:71:b9: 38:68:b0:cd:9a:f9:a4:1f:68:5a:91:4b:4a:5d:47: d7:34:06:ba:6a:aa:49:a1:09:ee:42:24:af:87:37: db:72:f7:27:fd:c8:4b:9c:55:2b:79:c4:f5:8e:4b: e2:bf:0a:1f:ad:43:ff:a4:3c:16:9e:75:32:7d:f8: cd:00:ef:73:c2:1a:f9:81:e3:d9:e6:26:7a:ec:80: f5:53:42:68:97:ec:e5:56:e8:96:36:d1:30:1f:ae: 99:26:3f:e4:c2:5f:a9:73:3c:99:d2:9e:2a:98:50: de:b5:4d:94:9e:98:45:ce:b0:ca:16:06:ae:7c:33: 56:b5:5e:9d:87:80:f9:e7:0b:53:56:50:77:91:50: 47:0a:d7:1e:3d:8f:5c:10:c3:d6:62:05:d5:85:37: 1d:6c:4a:6c:d6:b7:bd:1a:85:8d:f8:17:cc:65:49: 2c:90:ed:4b:49:9e:ea:9d:77:cf:7e:59:19:1a:c1: ee:9e:68:20:0c:24:b9:00:d9:e0:61:08:9b:22:4c: ae:c0:34:fa:9d:39:c1:23:51:e0:6e:1a:de:f2:5f: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:48:FD:E0:08:34:7D:03:1D:F4:9B:AC:9D:4B:6F:66:B5:27:43 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/jRVI_eAINH0DHfSbrJ1Lb2a1J0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:b2:97:f9:f3:e0:30:1c:ab:58:16:ef:fc:1f:de:c1:13:64: 4f:21:83:d4:5d:15:e6:a5:f3:31:27:a0:24:55:75:3a:54:02: ad:a5:98:c1:3e:ab:d7:2f:3e:6f:b4:ea:93:aa:84:80:f0:74: 21:3a:30:2e:b5:15:9c:cf:12:b7:c1:52:90:29:65:b6:b5:bf: 1e:cd:38:b4:d5:e7:9a:7c:f9:7a:f5:1d:e3:67:a2:80:d9:b0: d8:8b:02:b6:53:1c:48:bb:1d:4c:4e:6d:72:17:af:c7:04:74: 73:f5:79:b0:91:c8:1b:91:33:f2:b1:59:de:aa:4f:a9:45:46: 95:7d:cf:45:7c:3f:01:f3:f0:27:18:e8:0b:3f:18:bd:c2:52: 53:9f:f8:89:d4:52:7a:c2:15:fa:87:12:5a:20:d8:bb:b9:9f: 2a:6c:5a:0a:20:fa:68:9b:87:cb:d4:f1:59:86:75:1b:3f:0b: 19:48:b5:8d:5d:cf:39:37:8f:8d:2a:98:74:ab:a5:ba:1f:ca: f9:78:42:7d:07:fa:4b:d8:ff:6a:e9:b7:76:a6:b0:37:20:6e: c1:18:7a:e3:4e:e1:d0:17:07:50:c0:6e:64:09:44:19:61:42: 6a:f8:20:68:b0:8d:9f:04:d1:7f:f2:f5:25:93:71:a4:3d:ff: 99:50:33:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshLOdz7IpSdtJOzttIlDKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjUxMjE1MDg0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDE1NDhmZGUwMDgzNDdkMDMxZGY0OWJhYzlkNGI2ZjY2YjUyNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwIigo2JhJyTbZ+qTho2RRkMsKmU 7vu59nsfSuEYiTM/3KMw6hdByKblcbk4aLDNmvmkH2hakUtKXUfXNAa6aqpJoQnu QiSvhzfbcvcn/chLnFUrecT1jkvivwofrUP/pDwWnnUyffjNAO9zwhr5gePZ5iZ6 7ID1U0Jol+zlVuiWNtEwH66ZJj/kwl+pczyZ0p4qmFDetU2UnphFzrDKFgaufDNW tV6dh4D55wtTVlB3kVBHCtcePY9cEMPWYgXVhTcdbEps1re9GoWN+BfMZUkskO1L SZ7qnXfPflkZGsHunmggDCS5ANngYQibIkyuwDT6nTnBI1Hgbhre8l825QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0VSP3gCDR9Ax30m6ydS29mtSdDMB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEvalJWSV9lQUlOSDBESGZTYnJKMUxiMmExSjBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufCAMA0G CSqGSIb3DQEBCwUAA4IBAQB8spf58+AwHKtYFu/8H97BE2RPIYPUXRXmpfMxJ6Ak VXU6VAKtpZjBPqvXLz5vtOqTqoSA8HQhOjAutRWczxK3wVKQKWW2tb8ezTi01eea fPl69R3jZ6KA2bDYiwK2UxxIux1MTm1yF6/HBHRz9XmwkcgbkTPysVneqk+pRUaV fc9FfD8B8/AnGOgLPxi9wlJTn/iJ1FJ6whX6hxJaINi7uZ8qbFoKIPpom4fL1PFZ hnUbPwsZSLWNXc85N4+NKph0q6W6H8r5eEJ9B/pL2P9q6bd2prA3IG7BGHrjTuHQ FwdQwG5kCUQZYUJq+CBosI2fBNF/8vUlk3GkPf+ZUDNn -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:28 2025 by rpki-client