This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/J616ho14DKGXrY52dTz4rECA6rg.roa File: J616ho14DKGXrY52dTz4rECA6rg.roa (raw, json) Hash identifier: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4= Subject key identifier: 27:AD:7A:86:8D:78:0C:A1:97:AD:8E:76:75:3C:F8:AC:40:80:EA:B8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019B7DCB0E685D839D54B3F058A0BD65FE68 Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/J616ho14DKGXrY52dTz4rECA6rg.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 153.98.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0e:68:5d:83:9d:54:b3:f0:58:a0:bd:65:fe:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27ad7a868d780ca197ad8e76753cf8ac4080eab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:5d:a8:92:70:18:f4:74:8c:79:52:bb:f5: d4:8d:cb:ac:b0:20:56:37:e3:27:95:8d:26:3e:31: fd:2f:7b:e4:9f:28:65:b9:10:04:75:48:01:44:af: 78:d4:02:24:bd:fd:95:16:02:cb:a5:2a:26:dc:13: eb:3f:88:8b:e2:3a:22:46:60:8f:13:30:25:b2:62: 24:17:d4:16:72:39:f6:8c:03:df:04:87:61:e1:3b: 02:33:fb:e1:1b:ce:3f:3d:cd:ac:99:4b:45:b6:65: be:36:cd:43:03:cf:69:e6:ff:e2:40:a7:34:02:90: f0:62:c8:93:b5:22:e9:31:d9:5b:cf:9a:18:7e:39: e4:6c:a5:01:cc:c4:49:c1:85:68:1c:97:29:75:71: b2:b5:49:28:27:58:e4:c7:e5:3a:5b:2e:09:69:f8: a2:47:d1:a3:66:24:6b:2f:3c:c9:d6:82:2f:8e:39: 16:1b:3e:a0:7a:07:49:fb:c4:97:55:d4:57:90:c7: ca:ff:26:47:37:a7:d8:16:20:b9:c3:2c:72:ef:8b: 4f:ea:3e:4d:86:cc:6a:37:33:0b:d4:e0:d2:1b:b9: e3:ff:91:79:20:30:20:c5:e1:c0:82:b1:51:19:e4: 93:ea:b0:49:76:ca:31:20:65:30:8f:7b:f6:ff:95: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AD:7A:86:8D:78:0C:A1:97:AD:8E:76:75:3C:F8:AC:40:80:EA:B8 X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/J616ho14DKGXrY52dTz4rECA6rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.98.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:73:0a:c3:ba:60:15:d6:6b:dc:3a:36:8a:a4:5a:d6:72:25: d3:9b:a0:87:46:93:fa:46:bd:1b:df:d7:e5:c1:41:b4:f4:15: fd:45:a0:e9:e1:3a:c1:e5:d7:e1:46:29:92:53:a0:9b:47:be: 8a:f1:3d:b8:da:5e:b1:43:46:da:9a:05:b9:06:fe:7d:e9:39: 47:9b:4b:6b:5e:0c:8b:e5:0d:91:f9:a0:44:68:67:70:1b:15: f4:2f:63:ca:0a:c2:17:ea:d2:1e:d2:4e:99:f6:a4:6c:db:97: 22:5a:63:d6:f2:67:3d:c4:c8:84:8d:e1:31:a7:03:3e:54:9d: 96:20:a2:9b:86:1f:3b:96:74:f2:2e:3e:a8:d4:90:cf:ea:03: 8c:ed:6c:a2:bd:7a:94:58:bd:00:39:f4:73:7b:82:60:6c:2b: 3f:9c:e6:a5:e8:ff:04:a8:68:fe:6e:ad:1f:d3:76:a7:02:be: ec:6d:93:04:c7:a9:06:3f:2c:dc:a3:5c:84:19:34:2b:dc:98: 0c:59:bc:64:54:dc:1c:09:b9:e1:5b:0c:ff:98:fe:c3:db:25: 01:91:2b:35:d1:99:ce:4e:ef:a7:da:db:ea:ca:3d:db:20:56: 52:85:1e:09:a6:bf:69:c4:59:44:8d:9b:84:05:13:90:08:87: 3e:1e:2e:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yw5oXYOdVLPwWKC9Zf5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2FkN2E4NjhkNzgwY2ExOTdhZDhlNzY3NTNjZjhhYzQwODBlYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfVdqJJwGPR0jHlSu/XUjcussCBW N+MnlY0mPjH9L3vknyhluRAEdUgBRK941AIkvf2VFgLLpSom3BPrP4iL4joiRmCP EzAlsmIkF9QWcjn2jAPfBIdh4TsCM/vhG84/Pc2smUtFtmW+Ns1DA89p5v/iQKc0 ApDwYsiTtSLpMdlbz5oYfjnkbKUBzMRJwYVoHJcpdXGytUkoJ1jkx+U6Wy4Jafii R9GjZiRrLzzJ1oIvjjkWGz6gegdJ+8SXVdRXkMfK/yZHN6fYFiC5wyxy74tP6j5N hsxqNzML1ODSG7nj/5F5IDAgxeHAgrFRGeST6rBJdsoxIGUwj3v2/5WD9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeteoaNeAyhl62OdnU8+KxAgOq4MB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvSjYxNmhvMTRES0dYclk1MmRUejRyRUNBNnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmWIYMA0G CSqGSIb3DQEBCwUAA4IBAQCKcwrDumAV1mvcOjaKpFrWciXTm6CHRpP6Rr0b39fl wUG09BX9RaDp4TrB5dfhRimSU6CbR76K8T242l6xQ0bamgW5Bv596TlHm0trXgyL 5Q2R+aBEaGdwGxX0L2PKCsIX6tIe0k6Z9qRs25ciWmPW8mc9xMiEjeExpwM+VJ2W IKKbhh87lnTyLj6o1JDP6gOM7WyivXqUWL0AOfRze4JgbCs/nOal6P8EqGj+bq0f 03anAr7sbZMEx6kGPyzco1yEGTQr3JgMWbxkVNwcCbnhWwz/mP7D2yUBkSs10ZnO Tu+n2tvqyj3bIFZShR4Jpr9pxFlEjZuEBROQCIc+Hi4P -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:34 2026 by rpki-client