This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa File: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (raw, json) Hash identifier: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM= Subject key identifier: 25:F2:A8:0E:DA:E1:27:E8:BE:1B:D6:95:CB:FD:C4:C9:94:C7:85:D4 Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba Certificate serial: 019B79ECC6EB13C498BE797D7F289773227C Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24833 IP address blocks: 195.244.10.0/23 maxlen: 23 2a00:7460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c6:eb:13:c4:98:be:79:7d:7f:28:97:73:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25f2a80edae127e8be1bd695cbfdc4c994c785d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:39:40:e2:38:3f:cc:b4:b7:82:6a:7d:cc: e9:98:da:9a:1e:cf:be:20:69:d1:bb:1e:43:15:f1: 52:05:b4:b6:90:75:c5:df:bb:43:c6:08:b2:0d:69: 69:e5:1e:ae:6d:c4:2b:34:a9:2e:09:26:a7:1c:1d: 3a:e2:21:de:38:7c:3d:f3:76:86:bd:97:44:9f:cc: e9:70:d6:bc:5a:98:92:23:52:85:2b:47:47:f5:87: 81:8e:08:71:2d:1d:0d:b1:1a:25:a0:75:76:91:c6: 2a:7e:82:01:22:9f:9e:ec:e6:e1:5c:2d:4d:05:27: 8a:37:5f:ee:8e:93:f6:cf:b6:46:8c:6f:47:14:e0: 24:02:22:41:f3:90:09:e6:2a:fc:64:00:d0:07:84: 55:72:06:6c:f6:ee:7d:01:c9:fc:2a:9c:c6:fb:38: fc:47:1c:2d:ba:6d:f2:05:18:d1:eb:31:6f:f8:6b: 75:6a:02:7e:b5:e9:d4:a9:4d:7e:60:f8:ab:ed:3d: 07:18:e8:0d:22:05:0f:8d:81:f2:32:07:66:15:83: c8:f7:75:c6:4e:ba:5b:5c:df:c0:e6:11:89:7f:cc: 86:61:2e:fe:eb:f5:f3:dd:55:46:12:5e:20:e3:c0: 81:c2:3a:81:a7:2e:fd:ed:3c:26:f1:03:65:95:7a: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F2:A8:0E:DA:E1:27:E8:BE:1B:D6:95:CB:FD:C4:C9:94:C7:85:D4 X509v3 Authority Key Identifier: keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.10.0/23 IPv6: 2a00:7460::/32 Signature Algorithm: sha256WithRSAEncryption 92:29:60:e3:f5:7a:ec:1c:a2:45:ab:01:ae:f3:2f:cf:e5:e9: 19:37:8e:c3:d7:30:ec:ab:88:cf:6c:e6:f8:dc:79:f0:dd:b5: 4b:cf:eb:1d:b1:9a:76:2e:e5:2d:13:c4:12:2d:48:3e:50:dc: a8:0c:fc:f5:e8:35:b5:8b:fc:ed:53:a9:57:94:a1:e1:c9:7c: b3:bf:e9:5a:6c:d3:4b:52:7c:1f:18:21:2b:75:b0:7e:ee:32: f5:52:d2:0a:0b:15:2e:0a:da:6d:71:35:ac:e4:06:c2:a5:de: 94:86:21:d1:6c:e8:0e:c4:97:4e:1c:de:b0:11:cf:4a:ea:2a: 77:41:af:b5:0f:03:38:7f:37:50:90:c5:a8:52:37:f6:f2:d8: 31:0d:58:dd:c3:eb:41:5f:68:b4:7a:f1:5f:c0:50:06:6d:4b: 62:e3:6b:44:96:dd:27:49:de:f4:0f:cd:cd:62:0d:ec:50:84: bb:5c:43:59:4a:2a:91:03:46:25:8b:64:80:88:f7:26:8f:3d: f8:b2:3b:e3:93:f8:8c:91:74:ae:64:31:38:87:ca:e9:9b:d3: 68:f8:06:88:2a:d0:e7:d0:ca:ce:3c:da:8d:5f:d0:c0:9d:88: 89:41:43:8c:cf:e5:0f:e2:4b:d7:79:f2:b1:9b:eb:31:4b:a0: 3a:78:1f:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MbrE8SYvnl9fyiXcyJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5 YWE5YmEwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWYyYTgwZWRhZTEyN2U4YmUxYmQ2OTVjYmZkYzRjOTk0Yzc4NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxQ5QOI4P8y0t4JqfczpmNqaHs++ IGnRux5DFfFSBbS2kHXF37tDxgiyDWlp5R6ubcQrNKkuCSanHB064iHeOHw983aG vZdEn8zpcNa8WpiSI1KFK0dH9YeBjghxLR0NsRoloHV2kcYqfoIBIp+e7ObhXC1N BSeKN1/ujpP2z7ZGjG9HFOAkAiJB85AJ5ir8ZADQB4RVcgZs9u59Acn8KpzG+zj8 Rxwtum3yBRjR6zFv+Gt1agJ+tenUqU1+YPir7T0HGOgNIgUPjYHyMgdmFYPI93XG TrpbXN/A5hGJf8yGYS7+6/Xz3VVGEl4g48CBwjqBpy797Twm8QNllXrbWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCXyqA7a4SfovhvWlcv9xMmUx4XUMB8GA1UdIwQY MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt NDNkYzJiNWVlYjViLzEvSmZLb0R0cmhKLWktRzlhVnlfM0V5WlRIaGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBw/QKMA0E AgACMAcDBQAqAHRgMA0GCSqGSIb3DQEBCwUAA4IBAQCSKWDj9XrsHKJFqwGu8y/P 5ekZN47D1zDsq4jPbOb43Hnw3bVLz+sdsZp2LuUtE8QSLUg+UNyoDPz16DW1i/zt U6lXlKHhyXyzv+labNNLUnwfGCErdbB+7jL1UtIKCxUuCtptcTWs5AbCpd6UhiHR bOgOxJdOHN6wEc9K6ip3Qa+1DwM4fzdQkMWoUjf28tgxDVjdw+tBX2i0evFfwFAG bUti42tElt0nSd70D83NYg3sUIS7XENZSiqRA0Yli2SAiPcmjz34sjvjk/iMkXSu ZDE4h8rpm9No+AaIKtDn0MrOPNqNX9DAnYiJQUOMz+UP4kvXefKxm+sxS6A6eB+e -----END CERTIFICATE-----Generated at Thu Jan 8 19:15:43 2026 by rpki-client