This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/kj8-3DtT32XqscwKCiQPzi9o7X4.roa File: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (raw, json) Hash identifier: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc= Subject key identifier: 92:3F:3E:DC:3B:53:DF:65:EA:B1:CC:0A:0A:24:0F:CE:2F:68:ED:7E Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B7F80B1D215389AE7FD736A92E982E0ED Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/kj8-3DtT32XqscwKCiQPzi9o7X4.roa Signing time: Fri 02 Jan 2026 16:18:19 +0000 ROA not before: Fri 02 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206575 IP address blocks: 185.98.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b1:d2:15:38:9a:e7:fd:73:6a:92:e9:82:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Jan 2 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=923f3edc3b53df65eab1cc0a0a240fce2f68ed7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:e6:97:a0:df:f3:67:1d:95:95:58:5a:d9: e6:3d:07:80:3f:ba:97:1b:29:33:64:3d:bf:e2:e2: 09:59:f7:95:a1:b3:72:68:11:80:59:b3:01:58:98: 61:a5:5d:a1:9d:09:ef:a2:f4:90:b7:47:40:c8:78: 45:f2:30:b8:6c:9d:ed:2a:a8:49:9f:ad:2f:95:85: 54:5e:a8:b3:2b:c3:41:da:35:82:a6:2f:21:17:ab: f0:c4:39:dc:a7:c1:f0:c9:fa:48:5f:d5:68:c4:5f: fc:eb:f5:39:5c:9c:e1:40:6a:e2:ae:d5:73:2e:1a: ec:e7:3a:ac:7d:c9:9b:bf:b2:a4:fa:bc:bf:8b:00: 25:96:0b:89:9f:d6:38:bf:ee:54:62:e1:12:c0:ba: 56:7a:e3:f0:1e:2a:5d:87:b7:9d:b1:8a:49:da:4f: 2b:8e:49:bd:43:e5:fd:16:fd:cd:f9:28:43:1f:2c: 69:c2:98:d1:56:0e:a6:fc:5f:eb:3b:c9:b3:7c:85: 0b:0a:b9:09:d2:17:f5:a9:a2:63:fd:eb:d4:56:f3: e5:61:6d:88:0b:00:75:34:5c:21:e2:2e:be:30:3b: 79:4c:2a:16:02:ef:5c:3f:3e:ef:7d:4e:5d:6a:b2: e3:0b:8f:51:fb:f3:de:44:34:9f:34:59:fe:27:a5: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:3E:DC:3B:53:DF:65:EA:B1:CC:0A:0A:24:0F:CE:2F:68:ED:7E X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/kj8-3DtT32XqscwKCiQPzi9o7X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.12.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:19:c8:04:08:98:36:69:6f:80:73:7e:b7:fc:54:c2:a9:41: d5:48:db:26:95:e6:ef:e7:eb:1f:cb:8e:02:bd:52:a0:dc:ae: 54:96:a4:a7:52:5c:03:12:74:e2:0e:5a:e7:04:ce:b6:d2:95: 02:9f:bb:db:61:eb:14:7a:b2:ef:48:1b:58:e8:65:61:c3:da: 4e:9a:75:e5:52:a7:78:51:fd:de:b0:49:3e:9a:ee:d2:84:38: eb:1e:b5:08:aa:8a:e2:b6:06:c7:2e:85:1c:66:53:18:75:14: 8c:52:62:32:ed:f5:2f:83:7a:47:09:66:17:35:b8:6e:9c:c3: c6:94:81:11:22:63:9f:72:05:dc:fb:30:6b:5e:f6:aa:bc:50: df:3e:53:78:10:b1:04:39:ab:75:9e:63:5c:ce:22:ae:44:5c: 75:11:3a:c6:4f:55:1e:26:9e:87:8d:d4:3c:b9:8d:ca:05:83: 53:86:56:ce:20:f4:88:74:21:f6:84:88:0d:c5:b2:01:fc:71: 30:09:83:0c:c7:35:cd:ed:83:cb:07:aa:e8:54:c2:7c:ad:cc: cb:b4:fd:34:db:93:a5:a5:1d:46:58:67:76:0d:77:f2:cf:5c: 46:b5:69:4f:94:db:1e:9a:8c:fd:7a:7a:14:fe:33:c9:90:4e: 4e:c8:e4:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gLHSFTia5/1zapLpguDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjYwMTAyMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjNmM2VkYzNiNTNkZjY1ZWFiMWNjMGEwYTI0MGZjZTJmNjhlZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPml6Df82cdlZVYWtnmPQeAP7qX GykzZD2/4uIJWfeVobNyaBGAWbMBWJhhpV2hnQnvovSQt0dAyHhF8jC4bJ3tKqhJ n60vlYVUXqizK8NB2jWCpi8hF6vwxDncp8HwyfpIX9VoxF/86/U5XJzhQGrirtVz Lhrs5zqsfcmbv7Kk+ry/iwAllguJn9Y4v+5UYuESwLpWeuPwHipdh7edsYpJ2k8r jkm9Q+X9Fv3N+ShDHyxpwpjRVg6m/F/rO8mzfIULCrkJ0hf1qaJj/evUVvPlYW2I CwB1NFwh4i6+MDt5TCoWAu9cPz7vfU5darLjC49R+/PeRDSfNFn+J6Uy5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJI/Ptw7U99l6rHMCgokD84vaO1+MB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEva2o4LTNEdFQzMlhxc2N3S0NpUVB6aTlvN1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWIMMA0G CSqGSIb3DQEBCwUAA4IBAQCPGcgECJg2aW+Ac363/FTCqUHVSNsmlebv5+sfy44C vVKg3K5UlqSnUlwDEnTiDlrnBM620pUCn7vbYesUerLvSBtY6GVhw9pOmnXlUqd4 Uf3esEk+mu7ShDjrHrUIqoritgbHLoUcZlMYdRSMUmIy7fUvg3pHCWYXNbhunMPG lIERImOfcgXc+zBrXvaqvFDfPlN4ELEEOat1nmNcziKuRFx1ETrGT1UeJp6HjdQ8 uY3KBYNThlbOIPSIdCH2hIgNxbIB/HEwCYMMxzXN7YPLB6roVMJ8rczLtP0025Ol pR1GWGd2DXfyz1xGtWlPlNsemoz9enoU/jPJkE5OyORM -----END CERTIFICATE-----Generated at Fri Jan 9 15:56:28 2026 by rpki-client