This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa File: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (raw, json) Hash identifier: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU= Subject key identifier: 26:09:B8:D7:64:C3:AB:3F:1E:A9:CF:A3:53:B5:4A:03:2D:19:0E:CC Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c Certificate serial: 019B7E3927CE01034147CDF518C2E0103BC4 Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.59.137.0/24 maxlen: 24 194.59.139.0/24 maxlen: 24 2a07:cb81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:ce:01:03:41:47:cd:f5:18:c2:e0:10:3b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2609b8d764c3ab3f1ea9cfa353b54a032d190ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:42:b5:46:56:35:10:70:b0:d9:b0:ab:04: ce:d8:d2:ad:4f:26:fa:34:8e:92:60:dc:ae:dc:7f: ef:63:f5:32:05:01:16:ad:e5:fe:90:37:0b:1a:47: db:3f:80:9b:68:3b:de:50:04:af:ba:63:33:d4:8a: 85:73:c6:de:96:c0:90:c4:8e:22:18:16:51:2e:cd: 9b:e6:e3:1b:56:9c:48:63:dd:33:48:52:fc:93:71: bf:d8:0f:b7:6e:a1:8a:e2:9e:72:2d:73:ac:b3:e7: 36:2a:4a:44:45:bd:84:48:fc:00:19:d8:95:34:38: d1:1f:b4:e2:93:b9:5a:46:59:69:c1:7e:f5:68:9c: 8a:2d:28:f5:a0:bc:21:25:4e:51:8e:1b:ca:57:63: 47:36:22:6f:ad:77:3b:62:01:cc:2b:d5:3c:88:ef: d4:a2:ea:8f:6e:79:5b:64:f4:c1:48:b2:ba:59:d3: a0:a9:1e:9f:b4:82:59:bf:d8:4d:97:8a:af:7c:c0: 44:91:fa:0b:a8:a6:10:bd:4d:a6:4a:8d:b5:ef:df: 08:1e:66:90:e6:b4:9f:ca:db:39:58:63:48:3b:fa: 42:28:ca:9a:fb:2b:0c:ca:f0:b2:98:99:b1:c2:41: d8:bb:9e:ca:90:5d:b4:81:51:67:c3:9e:ea:1d:16: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:09:B8:D7:64:C3:AB:3F:1E:A9:CF:A3:53:B5:4A:03:2D:19:0E:CC X509v3 Authority Key Identifier: keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.137.0/24 194.59.139.0/24 IPv6: 2a07:cb81::/32 Signature Algorithm: sha256WithRSAEncryption 53:0d:00:8c:26:2c:86:d6:75:19:f6:2b:20:fb:b5:71:58:85: a1:07:c6:f0:94:eb:b2:bb:a0:3d:3c:82:39:fd:f1:bb:c9:36: ca:cb:d2:26:66:01:6f:82:48:8e:34:a2:a3:ae:92:c0:43:bd: d8:a0:b3:83:56:83:f8:8c:9f:3d:e1:e0:54:ea:39:2a:3b:b8: b2:65:36:32:17:cf:dc:6a:3b:b5:db:d2:9f:42:f6:84:73:06: 48:36:54:e9:5e:31:fd:12:22:a6:77:dc:5c:27:4a:ed:5f:db: 04:cf:cf:9a:d2:88:a8:dc:60:ad:e2:b2:dd:43:7f:7e:fb:4b: 73:f9:a4:37:ea:c6:f5:83:e6:23:37:76:3b:fc:b2:e4:ca:8f: e1:49:7b:e3:5f:f7:b4:54:97:df:cb:cb:1d:d6:dd:70:5b:aa: b5:1c:17:8f:91:77:a7:4f:86:44:9f:6c:40:c9:fe:8d:a1:e0: fa:ed:e1:c0:97:5e:d4:58:a1:59:30:b7:5b:6d:47:a2:ea:27: 63:dd:1b:0f:54:69:c2:f2:68:09:44:ce:5c:02:6b:e7:b0:66: f2:58:37:14:ae:9d:6d:d9:e5:c3:56:58:25:e6:96:33:8c:7e: 86:e5:8b:58:90:cd:bd:ca:bd:4e:a9:44:37:31:d9:c2:68:f7: 85:5b:01:6e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OSfOAQNBR831GMLgEDvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3 OTkwNWMwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjA5YjhkNzY0YzNhYjNmMWVhOWNmYTM1M2I1NGEwMzJkMTkwZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtspCtUZWNRBwsNmwqwTO2NKtTyb6 NI6SYNyu3H/vY/UyBQEWreX+kDcLGkfbP4CbaDveUASvumMz1IqFc8belsCQxI4i GBZRLs2b5uMbVpxIY90zSFL8k3G/2A+3bqGK4p5yLXOss+c2KkpERb2ESPwAGdiV NDjRH7Tik7laRllpwX71aJyKLSj1oLwhJU5RjhvKV2NHNiJvrXc7YgHMK9U8iO/U ouqPbnlbZPTBSLK6WdOgqR6ftIJZv9hNl4qvfMBEkfoLqKYQvU2mSo21798IHmaQ 5rSfyts5WGNIO/pCKMqa+ysMyvCymJmxwkHYu57KkF20gVFnw57qHRaa5wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCYJuNdkw6s/HqnPo1O1SgMtGQ7MMB8GA1UdIwQY MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt ZTIxYzQzNmI2MmVmLzEvSmdtNDEyVERxejhlcWMtalU3VktBeTBaRHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwjuJAwQA wjuLMA0EAgACMAcDBQAqB8uBMA0GCSqGSIb3DQEBCwUAA4IBAQBTDQCMJiyG1nUZ 9isg+7VxWIWhB8bwlOuyu6A9PII5/fG7yTbKy9ImZgFvgkiONKKjrpLAQ73YoLOD VoP4jJ894eBU6jkqO7iyZTYyF8/caju129KfQvaEcwZINlTpXjH9EiKmd9xcJ0rt X9sEz8+a0oio3GCt4rLdQ39++0tz+aQ36sb1g+YjN3Y7/LLkyo/hSXvjX/e0VJff y8sd1t1wW6q1HBePkXenT4ZEn2xAyf6NoeD67eHAl17UWKFZMLdbbUei6idj3RsP VGnC8mgJRM5cAmvnsGbyWDcUrp1t2eXDVlgl5pYzjH6G5YtYkM29yr1OqUQ3MdnC aPeFWwFu -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client