This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa File: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (raw, json) Hash identifier: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk= Subject key identifier: 46:3A:BC:A8:CA:14:55:3B:FC:42:E3:CA:01:F9:7F:B3:0E:9B:0D:60 Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Certificate serial: 019B76EB7129D80ED4DA739619F9A028EB2C Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:29:d8:0e:d4:da:73:96:19:f9:a0:28:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=463abca8ca14553bfc42e3ca01f97fb30e9b0d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:08:02:02:42:17:36:40:9f:7b:87:ee:76: aa:1c:9b:16:88:24:9c:59:f4:e6:e0:4c:b2:6c:31: e8:8b:92:dc:a1:ef:63:3c:ac:85:18:02:f2:f4:09: 09:ff:57:72:83:23:58:2c:2d:07:3b:22:2e:7c:f4: 6f:b3:74:e4:29:79:bb:b8:58:59:ad:cd:3e:7a:9f: 24:de:e3:63:87:9d:15:f1:70:2c:ed:fb:05:31:55: ea:c0:49:fc:10:c6:e0:86:d1:1a:78:65:ee:82:96: 83:8e:4c:a1:ad:d1:2f:ee:ba:b5:3e:4d:fb:39:3d: b4:25:0a:eb:54:a6:e6:9a:3e:49:b3:df:d0:dd:07: 6e:89:9e:59:13:72:49:91:85:92:86:2a:a4:a2:55: a2:20:6c:db:f2:de:dd:92:63:e0:f4:81:5b:07:f0: 85:6b:d6:e6:42:c7:0b:7d:d2:27:e0:08:48:b3:11: 5c:f9:b1:b9:32:67:2c:45:db:c1:51:c8:e3:ad:2a: 77:ee:d9:8e:b0:7b:70:9e:ae:8c:4a:42:2c:ab:86: e8:8a:ba:78:bf:2d:23:68:08:ec:76:f1:5c:7c:25: 1b:ad:28:30:a1:6d:01:57:0f:19:7e:76:3b:90:88: 46:8b:61:b0:3c:ea:a6:99:7a:b0:77:c1:36:95:c4: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:BC:A8:CA:14:55:3B:FC:42:E3:CA:01:F9:7F:B3:0E:9B:0D:60 X509v3 Authority Key Identifier: keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:a7:b9:89:dc:5c:6a:54:9c:3f:c4:41:7f:4c:fe:a2:6b:b6: 9e:cd:d1:ac:ad:af:1f:17:ff:5c:1c:55:d5:d1:3b:2c:3b:af: cc:1a:92:be:87:11:8a:36:52:0e:3e:85:7a:5e:e8:74:34:b4: cb:c6:c2:cb:dc:95:a0:42:ba:65:44:23:a7:2b:0c:6a:13:be: b8:29:e1:6d:91:69:54:9f:21:00:7b:60:b9:b3:e7:ed:cf:f9: 5a:f8:54:5a:cc:3e:77:22:98:77:ae:5a:07:18:b0:89:89:77: 60:d2:81:ca:bb:24:bd:0e:72:85:99:1b:0a:34:4c:f6:02:2e: d4:06:4f:e5:09:40:bf:af:47:02:32:97:2c:85:38:91:92:a7: f2:6d:4c:f2:2d:e6:60:a9:90:c5:71:4c:8f:69:1c:a7:b9:58: 32:75:f2:4d:75:b1:68:47:07:df:8d:e3:c2:cb:86:72:7f:f4: a1:28:17:f1:86:2f:7c:a7:12:78:b8:80:df:97:81:fa:44:19: 9c:1f:ec:29:b6:cd:bb:9d:9d:a7:54:c9:d9:4d:24:b9:15:75: 84:e9:2d:32:ed:36:b4:d2:60:d6:be:67:a1:6e:d3:20:39:ed: 8e:1c:fa:67:44:22:36:6c:3a:f4:98:40:59:da:a5:4b:c8:5d: 35:49:f8:c9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt263Ep2A7U2nOWGfmgKOssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4 OWQ3ZmIwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjNhYmNhOGNhMTQ1NTNiZmM0MmUzY2EwMWY5N2ZiMzBlOWIwZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMIAgJCFzZAn3uH7naqHJsWiCSc WfTm4EyybDHoi5Lcoe9jPKyFGALy9AkJ/1dygyNYLC0HOyIufPRvs3TkKXm7uFhZ rc0+ep8k3uNjh50V8XAs7fsFMVXqwEn8EMbghtEaeGXugpaDjkyhrdEv7rq1Pk37 OT20JQrrVKbmmj5Js9/Q3QduiZ5ZE3JJkYWShiqkolWiIGzb8t7dkmPg9IFbB/CF a9bmQscLfdIn4AhIsxFc+bG5MmcsRdvBUcjjrSp37tmOsHtwnq6MSkIsq4boirp4 vy0jaAjsdvFcfCUbrSgwoW0BVw8ZfnY7kIhGi2GwPOqmmXqwd8E2lcRhpwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEY6vKjKFFU7/ELjygH5f7MOmw1gMB8GA1UdIwQY MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt OWQzZTU5ZGE1YWQxLzEvUmpxOHFNb1VWVHY4UXVQS0FmbF9zdzZiRFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSowDQYJ KoZIhvcNAQELBQADggEBAIanuYncXGpUnD/EQX9M/qJrtp7N0aytrx8X/1wcVdXR Oyw7r8wakr6HEYo2Ug4+hXpe6HQ0tMvGwsvclaBCumVEI6crDGoTvrgp4W2RaVSf IQB7YLmz5+3P+Vr4VFrMPncimHeuWgcYsImJd2DSgcq7JL0OcoWZGwo0TPYCLtQG T+UJQL+vRwIylyyFOJGSp/JtTPIt5mCpkMVxTI9pHKe5WDJ18k11sWhHB9+N48LL hnJ/9KEoF/GGL3ynEni4gN+XgfpEGZwf7Cm2zbudnadUydlNJLkVdYTpLTLtNrTS YNa+Z6Fu0yA57Y4c+mdEIjZsOvSYQFnapUvIXTVJ+Mk= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:14 2026 by rpki-client