This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/J4mHGlSY7agF8AXFPW8l8IBLAAI.roa File: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (raw, json) Hash identifier: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g= Subject key identifier: 27:89:87:1A:54:98:ED:A8:05:F0:05:C5:3D:6F:25:F0:80:4B:00:02 Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4 Certificate serial: 019B7910A123D610B72E87E637724DA080AF Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/J4mHGlSY7agF8AXFPW8l8IBLAAI.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4214120002 IP address blocks: 185.168.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a1:23:d6:10:b7:2e:87:e6:37:72:4d:a0:80:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4 Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2789871a5498eda805f005c53d6f25f0804b0002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:e2:28:a1:25:c5:c4:1d:fa:76:9b:1e:17: fe:49:e7:a5:78:ee:a2:9d:f4:d0:ba:38:61:5a:d7: 4c:7c:5c:fa:ee:d6:2e:62:1b:e9:03:5a:4d:e2:f3: 4d:31:5c:a3:0e:4b:ed:ad:1c:a8:4a:cd:00:24:3d: d7:c3:f4:a8:b4:c2:05:f8:e5:be:10:dd:dd:2e:ff: 2e:d3:e1:60:4c:19:d5:b1:1d:76:f8:c9:d4:90:33: 52:31:2b:a7:91:99:cc:cb:2b:ac:d0:96:14:66:d7: 17:89:44:07:78:bb:f4:66:73:f5:4f:85:96:f4:b3: 9d:1d:ec:b8:af:02:8e:14:aa:73:13:8e:68:e7:07: 0f:96:82:aa:a6:eb:10:c5:48:15:e0:6f:cd:42:c9: 9a:d5:7c:7c:87:d0:4b:93:da:b1:34:c1:c4:ad:1d: 64:de:f4:5c:ea:6c:63:62:9f:f5:c5:8c:ae:b4:17: 65:78:13:e2:5c:f6:8c:cc:6c:67:aa:3c:77:59:43: 3a:61:36:65:bb:cc:92:ec:29:ee:73:3d:d9:c0:28: a4:cc:d4:60:46:24:80:e2:8c:5d:5f:be:06:05:ca: 41:72:76:55:4c:de:71:54:d6:b0:eb:1c:03:eb:aa: 36:34:3c:26:0d:86:b2:eb:82:37:5e:90:45:f6:4a: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:89:87:1A:54:98:ED:A8:05:F0:05:C5:3D:6F:25:F0:80:4B:00:02 X509v3 Authority Key Identifier: keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/J4mHGlSY7agF8AXFPW8l8IBLAAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.163.0/24 Signature Algorithm: sha256WithRSAEncryption 84:cb:fc:dc:b9:9b:fb:62:65:32:6e:5c:c7:8a:3e:34:be:43: 9b:b2:cb:12:82:17:28:da:8f:2e:66:06:59:c0:69:0d:39:6a: 8a:80:4b:dd:db:8d:7f:57:7a:9e:bd:13:07:a6:7b:cd:ae:0b: e9:ad:d3:15:ea:bb:a3:17:3a:fd:33:14:4a:20:63:20:3a:d3: 59:ef:0c:ad:e1:a8:d3:ba:79:20:61:ff:e1:f8:d8:66:23:0b: d1:1a:a7:14:db:5a:e7:b7:6c:44:f2:07:7a:3f:ae:49:34:e8: fd:87:8c:11:dd:84:09:9e:6f:ac:c1:1f:5d:94:d4:7f:0d:69: 7b:0b:3b:4e:53:bf:86:c2:27:bf:43:f5:ad:f3:5d:ea:0c:67: ca:67:97:87:48:22:e4:11:d2:e7:79:f3:05:91:27:3f:55:7e: c4:88:02:12:0a:01:14:ea:34:2b:e4:b2:91:49:04:b6:2b:19: 68:5e:19:da:a5:b9:30:f8:1b:3c:e4:d7:47:5f:9e:e1:cf:05: ae:3a:ac:54:0c:73:93:b6:9b:51:bc:8f:08:85:b7:11:62:13: 14:4f:80:d2:76:28:d1:25:24:c1:1a:ff:18:36:f5:8d:22:2e: 81:04:a2:7b:cb:1e:ee:4e:75:b2:c8:08:a9:91:de:37:77:65: f0:74:1b:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKEj1hC3LofmN3JNoICvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz NGY1ZjQwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzg5ODcxYTU0OThlZGE4MDVmMDA1YzUzZDZmMjVmMDgwNGIwMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszfiKKElxcQd+nabHhf+SeeleO6i nfTQujhhWtdMfFz67tYuYhvpA1pN4vNNMVyjDkvtrRyoSs0AJD3Xw/SotMIF+OW+ EN3dLv8u0+FgTBnVsR12+MnUkDNSMSunkZnMyyus0JYUZtcXiUQHeLv0ZnP1T4WW 9LOdHey4rwKOFKpzE45o5wcPloKqpusQxUgV4G/NQsma1Xx8h9BLk9qxNMHErR1k 3vRc6mxjYp/1xYyutBdleBPiXPaMzGxnqjx3WUM6YTZlu8yS7Cnucz3ZwCikzNRg RiSA4oxdX74GBcpBcnZVTN5xVNaw6xwD66o2NDwmDYay64I3XpBF9kr0JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeJhxpUmO2oBfAFxT1vJfCASwACMB8GA1UdIwQY MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut NWRhOGQ2NzdkODQ3LzEvSjRtSEdsU1k3YWdGOEFYRlBXOGw4SUJMQUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3 LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaijMA0G CSqGSIb3DQEBCwUAA4IBAQCEy/zcuZv7YmUyblzHij40vkObsssSghco2o8uZgZZ wGkNOWqKgEvd241/V3qevRMHpnvNrgvprdMV6rujFzr9MxRKIGMgOtNZ7wyt4ajT unkgYf/h+NhmIwvRGqcU21rnt2xE8gd6P65JNOj9h4wR3YQJnm+swR9dlNR/DWl7 CztOU7+Gwie/Q/Wt813qDGfKZ5eHSCLkEdLnefMFkSc/VX7EiAISCgEU6jQr5LKR SQS2KxloXhnapbkw+Bs85NdHX57hzwWuOqxUDHOTtptRvI8IhbcRYhMUT4DSdijR JSTBGv8YNvWNIi6BBKJ7yx7uTnWyyAipkd43d2XwdBu4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:53 2026 by rpki-client