This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/jhWC4VcKEFCcAy7tHeec7gAf82w.roa File: jhWC4VcKEFCcAy7tHeec7gAf82w.roa (raw, json) Hash identifier: 7kjHvNbyfi414kEOc9U4Whd+kcEAvUzGwLY0UKhItcI= Subject key identifier: 8E:15:82:E1:57:0A:10:50:9C:03:2E:ED:1D:E7:9C:EE:00:1F:F3:6C Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019AE2910EFEAD8F424EE57E88F559AA608C Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/jhWC4VcKEFCcAy7tHeec7gAf82w.roa Signing time: Wed 03 Dec 2025 04:55:48 +0000 ROA not before: Wed 03 Dec 2025 04:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 195.222.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:91:0e:fe:ad:8f:42:4e:e5:7e:88:f5:59:aa:60:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Dec 3 04:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e1582e1570a10509c032eed1de79cee001ff36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:40:58:15:26:43:96:5f:a0:19:eb:6b:6f: f6:da:a4:b2:e1:13:f7:8d:9e:b3:4d:99:34:ac:ce: 55:c2:de:c5:c8:c8:99:e1:93:35:b5:3e:46:f5:e3: 05:08:9f:48:77:2b:6f:92:ea:0a:c2:ff:fd:cd:36: 78:39:e0:45:b6:ec:64:01:47:a8:11:c0:ef:0a:af: fd:3d:c7:67:1d:d4:09:e6:c1:52:ed:93:1a:26:ab: 17:11:32:c0:61:e4:2d:57:dc:b6:be:42:3a:06:f6: 3b:ff:e3:22:b0:e9:ec:af:bd:f0:e5:91:9a:86:a2: f1:09:59:56:c1:80:c3:bf:bd:67:c7:45:12:4f:e1: 4c:2b:b4:de:5f:d8:0b:26:f2:e0:fc:b4:82:c7:ad: d2:96:35:cb:b3:88:8f:f2:3e:10:ed:52:c6:0d:be: 26:41:5f:95:23:4b:31:dd:38:40:98:d7:97:3f:45: 19:83:22:7b:bf:d0:98:a9:f0:be:a6:57:6e:f1:fb: 61:c5:d9:8a:63:4d:ce:48:6d:a3:a5:bf:86:ad:f6: 65:53:bd:fa:85:7a:1e:c3:13:e3:90:9a:61:5d:7c: 9f:5e:91:72:00:b1:ec:ab:0d:05:ad:16:de:3c:c4: 03:f9:6d:44:64:f0:a6:1c:02:f5:e6:b6:ad:92:33: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:15:82:E1:57:0A:10:50:9C:03:2E:ED:1D:E7:9C:EE:00:1F:F3:6C X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/jhWC4VcKEFCcAy7tHeec7gAf82w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.222.127.0/24 Signature Algorithm: sha256WithRSAEncryption 29:76:36:3f:84:aa:9e:a4:d7:15:70:45:16:f4:b6:66:de:ec: 73:7c:4b:94:cf:22:94:03:aa:51:c6:c2:86:aa:98:ea:f0:97: 4f:ea:a3:f5:5c:39:65:d3:5b:61:cb:3f:e8:2c:dc:5e:59:b3: cf:e5:0e:52:e5:85:f3:bc:85:96:ad:b3:38:82:2d:7d:83:5b: 27:6b:be:af:14:91:ca:ad:86:14:f9:8e:02:da:25:b2:07:c3: 74:f0:69:9b:0f:27:ee:29:fa:33:4e:03:5e:df:19:1a:a3:33: 14:a2:ac:28:59:5f:e7:13:06:33:6c:af:75:56:10:62:ab:85: c8:d1:97:ab:84:86:26:f3:aa:ca:4f:6a:3b:e0:29:f8:bb:6c: e0:70:68:93:50:30:7f:22:1c:07:21:52:8b:b5:c5:fe:a7:d6: 98:4b:ad:c5:b5:28:a4:db:52:d3:fc:b2:53:a5:b3:f3:a4:5f: b7:1b:f5:10:11:5d:dc:48:4a:b0:9e:d3:cb:cb:79:6c:fe:85: 51:6b:95:1b:6d:fe:dc:ed:79:6b:5f:61:d7:73:a6:91:5f:ae: 43:04:4a:01:23:0c:e0:3a:f3:da:b3:9a:d1:2a:06:10:9e:7e: cb:4e:c9:8d:c7:72:2f:1d:9e:5e:8e:ef:3f:fc:a3:93:0a:50: 3c:53:e7:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrikQ7+rY9CTuV+iPVZqmCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMjAzMDQ1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTE1ODJlMTU3MGExMDUwOWMwMzJlZWQxZGU3OWNlZTAwMWZmMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKpAWBUmQ5ZfoBnra2/22qSy4RP3 jZ6zTZk0rM5Vwt7FyMiZ4ZM1tT5G9eMFCJ9IdytvkuoKwv/9zTZ4OeBFtuxkAUeo EcDvCq/9PcdnHdQJ5sFS7ZMaJqsXETLAYeQtV9y2vkI6BvY7/+MisOnsr73w5ZGa hqLxCVlWwYDDv71nx0UST+FMK7TeX9gLJvLg/LSCx63SljXLs4iP8j4Q7VLGDb4m QV+VI0sx3ThAmNeXP0UZgyJ7v9CYqfC+pldu8fthxdmKY03OSG2jpb+GrfZlU736 hXoewxPjkJphXXyfXpFyALHsqw0FrRbePMQD+W1EZPCmHAL15ratkjOLpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4VguFXChBQnAMu7R3nnO4AH/NsMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvamhXQzRWY0tFRkNjQXk3dEhlZWM3Z0FmODJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw95/MA0G CSqGSIb3DQEBCwUAA4IBAQApdjY/hKqepNcVcEUW9LZm3uxzfEuUzyKUA6pRxsKG qpjq8JdP6qP1XDll01thyz/oLNxeWbPP5Q5S5YXzvIWWrbM4gi19g1sna76vFJHK rYYU+Y4C2iWyB8N08GmbDyfuKfozTgNe3xkaozMUoqwoWV/nEwYzbK91VhBiq4XI 0ZerhIYm86rKT2o74Cn4u2zgcGiTUDB/IhwHIVKLtcX+p9aYS63FtSik21LT/LJT pbPzpF+3G/UQEV3cSEqwntPLy3ls/oVRa5Ubbf7c7XlrX2HXc6aRX65DBEoBIwzg OvPas5rRKgYQnn7LTsmNx3IvHZ5eju8//KOTClA8U+eH -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:40 2025 by rpki-client