This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JqBRh9ShciNipH59Y8T_Ih44x8M.roa File: JqBRh9ShciNipH59Y8T_Ih44x8M.roa (raw, json) Hash identifier: IuVEWkLMeInqCmp7vap099TJBFcHndxJqt8XxnTZX8Q= Subject key identifier: 26:A0:51:87:D4:A1:72:23:62:A4:7E:7D:63:C4:FF:22:1E:38:C7:C3 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8543DC99377F7BD4BC6890CAC21A3D Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JqBRh9ShciNipH59Y8T_Ih44x8M.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 192.124.170.0/24 maxlen: 24 192.124.180.0/24 maxlen: 24 194.87.205.0/24 maxlen: 24 212.192.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:43:dc:99:37:7f:7b:d4:bc:68:90:ca:c2:1a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a05187d4a1722362a47e7d63c4ff221e38c7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:39:7f:0c:9b:f1:e1:7f:98:00:1e:a2:c3:42: dc:b5:46:a3:44:b4:66:ab:c1:eb:61:28:ba:c3:e3: a5:89:20:1e:2a:74:47:ee:97:13:72:c6:20:98:b6: fb:b9:1a:83:1d:23:b5:60:dd:d7:5b:95:a8:b8:5b: 67:6a:73:a6:9b:fd:58:dc:12:d0:76:8f:db:fa:0b: 43:fa:ad:2b:e9:af:d8:ab:30:7a:46:c0:28:9f:25: 5e:b2:52:4e:2d:9b:05:44:8c:bf:2c:29:da:d8:71: 14:2c:97:2d:cd:38:c4:75:86:0f:c7:f5:7b:b1:d3: 83:bc:b0:b5:bf:25:b9:f7:25:59:94:d0:24:a8:df: 12:eb:b4:5a:bc:99:bf:90:65:f0:5e:0e:b5:68:0d: 7d:97:52:5b:ad:d2:f0:13:c8:f4:31:aa:50:22:76: 75:0a:01:22:34:e4:e2:a9:c9:8e:6f:6f:00:c6:95: 83:8f:a3:75:83:f5:3a:82:5e:ca:c6:10:9b:e9:fd: 1c:c9:6f:3a:41:65:a2:1f:51:0f:ce:bd:84:13:53: 4f:f1:5e:4f:02:75:8e:42:04:7c:b8:37:df:1a:2a: 08:ce:d0:38:d7:d5:21:b5:7b:a1:b1:83:18:f1:e8: f1:b2:69:b6:4b:1b:83:ad:65:5d:e3:d6:2e:aa:bd: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:51:87:D4:A1:72:23:62:A4:7E:7D:63:C4:FF:22:1E:38:C7:C3 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JqBRh9ShciNipH59Y8T_Ih44x8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.170.0/24 192.124.180.0/24 194.87.205.0/24 212.192.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:2d:11:17:ba:e0:1e:9d:67:cd:97:71:e9:ee:25:70:41:fa: b7:b0:f1:73:c0:a1:37:95:a9:25:2d:96:20:03:0f:03:ed:55: 30:1b:84:56:73:7d:67:3b:15:bb:b0:62:d7:e1:cb:70:c0:49: ca:4c:9b:14:55:f5:17:2f:e4:7a:f1:ec:f0:cb:34:6c:43:24: e6:f4:00:c9:b7:72:e7:de:79:4a:58:25:3c:c9:be:66:26:42: 09:b0:49:a9:d2:0c:c4:0f:93:56:66:10:20:33:43:2b:5b:18: 1e:9e:2d:5f:36:64:53:fd:5e:9a:1c:df:84:a2:24:57:f7:df: 49:32:aa:2a:1f:51:11:46:f3:6d:18:4b:32:78:9e:a6:78:29: e0:08:e6:09:be:04:33:6d:94:f3:bc:47:bf:45:06:74:ab:36: 91:f0:ab:56:34:64:b2:3a:5b:1f:92:75:d8:94:a3:a6:9d:57: bc:af:b3:c5:01:4e:7d:55:bf:17:74:ee:68:da:aa:68:0d:d6: 92:24:3f:49:c2:1d:cf:bc:71:cf:01:4e:a4:a8:d7:aa:e7:20: 2c:04:68:b7:21:fe:a2:bc:23:7e:11:7f:a2:ef:d2:b2:83:86: 2d:49:df:af:2a:fb:d5:db:c1:98:53:38:45:55:be:39:77:af: a2:81:cb:67 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hUPcmTd/e9S8aJDKwho9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmEwNTE4N2Q0YTE3MjIzNjJhNDdlN2Q2M2M0ZmYyMjFlMzhjN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tl/DJvx4X+YAB6iw0LctUajRLRm q8HrYSi6w+OliSAeKnRH7pcTcsYgmLb7uRqDHSO1YN3XW5WouFtnanOmm/1Y3BLQ do/b+gtD+q0r6a/YqzB6RsAonyVeslJOLZsFRIy/LCna2HEULJctzTjEdYYPx/V7 sdODvLC1vyW59yVZlNAkqN8S67RavJm/kGXwXg61aA19l1JbrdLwE8j0MapQInZ1 CgEiNOTiqcmOb28AxpWDj6N1g/U6gl7KxhCb6f0cyW86QWWiH1EPzr2EE1NP8V5P AnWOQgR8uDffGioIztA419UhtXuhsYMY8ejxsmm2SxuDrWVd49Yuqr3PsQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCagUYfUoXIjYqR+fWPE/yIeOMfDMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvSnFCUmg5U2hjaU5pcEg1OVk4VF9JaDQ0eDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHyqAwQA wHy0AwQAwlfNAwQA1MD9MA0GCSqGSIb3DQEBCwUAA4IBAQA9LREXuuAenWfNl3Hp 7iVwQfq3sPFzwKE3laklLZYgAw8D7VUwG4RWc31nOxW7sGLX4ctwwEnKTJsUVfUX L+R68ezwyzRsQyTm9ADJt3Ln3nlKWCU8yb5mJkIJsEmp0gzED5NWZhAgM0MrWxge ni1fNmRT/V6aHN+EoiRX999JMqoqH1ERRvNtGEsyeJ6meCngCOYJvgQzbZTzvEe/ RQZ0qzaR8KtWNGSyOlsfknXYlKOmnVe8r7PFAU59Vb8XdO5o2qpoDdaSJD9Jwh3P vHHPAU6kqNeq5yAsBGi3If6ivCN+EX+i79Kyg4YtSd+vKvvV28GYUzhFVb45d6+i gctn -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:59 2026 by rpki-client