This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/jm5djjCBI4GuTu1q__jIGCgAw8M.roa File: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (raw, json) Hash identifier: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM= Subject key identifier: 8E:6E:5D:8E:30:81:23:81:AE:4E:ED:6A:FF:F8:C8:18:28:00:C3:C3 Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Certificate serial: 019B78A33B2A091C8C5C11941DB17AB63FC3 Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/jm5djjCBI4GuTu1q__jIGCgAw8M.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39599 IP address blocks: 185.51.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:2a:09:1c:8c:5c:11:94:1d:b1:7a:b6:3f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e6e5d8e30812381ae4eed6afff8c8182800c3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:40:22:be:ad:e0:06:00:c1:72:cc:af:dd: 41:31:7c:9d:eb:de:32:49:1b:a3:d3:ce:7a:c5:30: 1d:74:1a:b4:37:59:dd:2d:f9:f0:6f:d6:d1:3b:2a: fd:6a:bf:27:14:58:3d:dc:5e:39:40:1a:22:0d:b6: 6e:98:8f:f3:a7:39:32:f9:d5:7f:77:c6:b4:c2:e7: 54:73:87:0b:bc:80:a2:ee:27:e0:3e:ab:99:07:59: bd:37:d9:62:a2:b7:a6:3d:43:52:b0:88:ea:6a:2e: 01:39:ba:20:b1:0e:31:74:dd:24:bd:dc:fe:7d:f2: f7:e2:22:be:da:c1:7c:83:08:df:14:a1:cc:dd:5b: 95:52:6d:f5:f3:31:d3:c6:85:aa:8e:e6:85:18:ab: c2:80:07:7d:31:3d:d5:f2:49:61:2c:4b:91:e0:a2: 98:52:af:02:e7:f7:11:0c:d0:41:8e:e0:f8:a7:c1: fb:99:a8:b6:4e:79:99:4c:cd:c8:f3:7d:74:11:b5: 60:1f:32:d6:30:50:f6:5c:13:13:fb:15:40:4a:8e: 68:ef:7a:86:22:7d:0f:b1:15:87:2d:b0:0e:ea:91: 01:3a:62:7f:c6:54:15:93:7f:ee:18:99:66:aa:82: 75:e0:a4:39:d6:1e:63:b4:f0:a8:04:c1:66:40:f9: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:5D:8E:30:81:23:81:AE:4E:ED:6A:FF:F8:C8:18:28:00:C3:C3 X509v3 Authority Key Identifier: keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/jm5djjCBI4GuTu1q__jIGCgAw8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.117.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:82:00:85:e9:84:f4:57:6c:6d:29:eb:32:7a:bf:85:34:09: c6:a3:ca:9b:d2:bf:1a:ca:0d:6e:bd:f5:36:17:d9:fb:b5:f6: b9:23:9a:1d:6e:87:ef:79:49:3f:bd:68:23:ef:d2:92:6a:4a: 33:dd:f2:77:36:07:72:8e:f6:84:d7:c8:6b:bb:f5:d0:9f:f8: ae:35:22:a9:34:8d:e7:90:3b:66:07:74:08:39:0d:b5:83:e8: 75:87:a7:36:ba:e2:33:90:5b:d1:f9:60:40:51:f0:16:69:22: 26:38:3d:10:40:42:20:60:bc:de:ad:dd:2f:4d:15:47:e1:1f: 31:4d:d5:e3:cc:59:5b:cf:a5:f6:1e:35:95:05:5d:02:2f:9e: 02:31:d7:9a:e1:c2:c7:48:aa:65:cd:fa:65:0b:29:f1:f9:75: 6b:5f:67:b0:59:f9:48:40:26:1e:eb:6a:aa:b6:b4:c2:3b:17: 8c:86:5e:35:fc:1d:d1:fb:06:3f:2f:b0:4b:a0:1e:34:1c:0c: 36:5a:f4:30:fc:16:9c:66:4e:39:15:2d:9f:f1:8f:9f:05:82: 5b:23:b6:fb:42:3a:af:c3:ef:ad:39:90:07:e5:53:11:9f:c7: 75:ee:c0:0f:79:62:f6:f4:de:73:98:7d:47:28:63:21:d4:e4: 2b:e1:40:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozsqCRyMXBGUHbF6tj/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk ZDliMjgwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTZlNWQ4ZTMwODEyMzgxYWU0ZWVkNmFmZmY4YzgxODI4MDBjM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxhAIr6t4AYAwXLMr91BMXyd694y SRuj0856xTAddBq0N1ndLfnwb9bROyr9ar8nFFg93F45QBoiDbZumI/zpzky+dV/ d8a0wudUc4cLvICi7ifgPquZB1m9N9lioremPUNSsIjqai4BObogsQ4xdN0kvdz+ ffL34iK+2sF8gwjfFKHM3VuVUm318zHTxoWqjuaFGKvCgAd9MT3V8klhLEuR4KKY Uq8C5/cRDNBBjuD4p8H7mai2TnmZTM3I8310EbVgHzLWMFD2XBMT+xVASo5o73qG In0PsRWHLbAO6pEBOmJ/xlQVk3/uGJlmqoJ14KQ51h5jtPCoBMFmQPmpMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5uXY4wgSOBrk7tav/4yBgoAMPDMB8GA1UdIwQY MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt OGQ0OTg4MjdmNDVjLzEvam01ZGpqQ0JJNEd1VHUxcV9faklHQ2dBdzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN1MA0G CSqGSIb3DQEBCwUAA4IBAQAdggCF6YT0V2xtKesyer+FNAnGo8qb0r8ayg1uvfU2 F9n7tfa5I5odbofveUk/vWgj79KSakoz3fJ3NgdyjvaE18hru/XQn/iuNSKpNI3n kDtmB3QIOQ21g+h1h6c2uuIzkFvR+WBAUfAWaSImOD0QQEIgYLzerd0vTRVH4R8x TdXjzFlbz6X2HjWVBV0CL54CMdea4cLHSKplzfplCynx+XVrX2ewWflIQCYe62qq trTCOxeMhl41/B3R+wY/L7BLoB40HAw2WvQw/BacZk45FS2f8Y+fBYJbI7b7Qjqv w++tOZAH5VMRn8d17sAPeWL29N5zmH1HKGMh1OQr4UBo -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:42 2026 by rpki-client