This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jLaOV2v95mq8QZg3tRGYYUfuW0I.roa File: jLaOV2v95mq8QZg3tRGYYUfuW0I.roa (raw, json) Hash identifier: 9TPnNSlDpEI29/uK/Jyd4/fC+AVCmIotOy35HEOb+8I= Subject key identifier: 8C:B6:8E:57:6B:FD:E6:6A:BC:41:98:37:B5:11:98:61:47:EE:5B:42 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3582B2D63EA79356862B7EC810F7F9 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jLaOV2v95mq8QZg3tRGYYUfuW0I.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60657 IP address blocks: 80.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:82:b2:d6:3e:a7:93:56:86:2b:7e:c8:10:f7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cb68e576bfde66abc419837b511986147ee5b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:15:03:a2:c4:5b:ca:23:33:e1:dc:b3:67: 42:07:a8:e5:e0:5a:bc:fb:12:37:7c:22:06:2f:c0: a8:a7:89:1f:44:40:f4:5d:7e:58:79:42:45:92:65: 87:30:a5:a4:fc:ef:64:3d:ed:0d:51:de:08:5c:95: 97:17:22:8e:c9:90:f8:eb:05:7b:c3:d4:b6:50:e8: bb:fa:6d:18:ca:d1:ec:61:84:0e:d6:36:9e:ab:e4: 2d:1c:72:89:17:b0:44:05:55:fc:eb:1f:d5:2d:1f: 51:e7:78:e3:ff:2a:10:46:32:cb:32:15:7b:82:ea: 2a:c3:ae:bf:39:d2:39:e4:74:45:c2:b2:4a:e4:9a: 06:78:d6:0e:25:d4:65:ba:c7:f7:07:5c:6f:27:82: 4d:54:12:23:e3:58:3e:fe:3a:3c:fe:6f:2f:53:b7: 94:12:37:5d:a3:70:18:83:70:15:9c:6e:ff:ba:62: 71:ed:fe:ed:aa:e2:f0:ec:61:84:d4:f4:b2:26:ab: d9:a6:12:be:fc:89:1a:73:a5:6c:21:84:fe:e3:65: f7:c4:91:fc:fa:fe:e4:63:ab:45:ea:78:ff:fd:ba: 42:5a:97:b7:f3:44:97:29:ab:fe:47:07:9b:29:f2: c3:f3:a2:d8:7b:0e:43:3c:5c:24:f1:c1:7e:53:b4: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B6:8E:57:6B:FD:E6:6A:BC:41:98:37:B5:11:98:61:47:EE:5B:42 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jLaOV2v95mq8QZg3tRGYYUfuW0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 86:23:55:5f:3b:40:f2:32:9d:c3:6c:16:b1:da:61:a2:fb:e6: 8a:f2:89:bc:33:44:ba:c0:6e:fd:6d:2b:a9:02:b3:60:f5:53: d5:df:0c:68:1e:7f:61:73:eb:87:c1:1c:7a:cc:c6:d6:2e:dd: b1:b3:5e:61:16:70:04:f1:97:de:02:c8:4d:90:05:17:71:60: 75:9b:f6:f2:76:75:43:ab:28:a1:04:d3:12:4b:6b:ae:41:f7: a7:77:76:c0:e6:85:67:b2:30:47:53:f7:7d:17:09:49:b7:1a: 23:dc:e0:68:80:8b:dc:64:24:3c:6a:8e:11:ee:64:72:f2:90: 35:82:59:98:5b:8b:c4:41:a7:d9:0d:d9:ae:a9:ba:40:71:9f: ed:a0:ca:33:06:5c:60:67:ce:be:b1:02:99:a4:fd:51:40:c8: ff:55:df:36:1a:7c:47:7d:a5:25:1e:7d:f1:eb:17:63:25:56: 5d:7d:12:18:67:47:d9:8a:46:ce:d4:e0:ed:a9:d4:98:67:19: b3:21:ac:4d:81:29:fc:38:54:04:d6:d0:f9:71:04:f3:e4:e2: 33:0c:84:09:2c:c9:0f:d1:4b:f5:de:24:7a:a3:dc:19:9b:e8: 28:3e:8f:b4:91:38:ca:ea:68:ef:0a:11:a3:80:e6:bc:37:22: 1b:b4:ef:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYKy1j6nk1aGK37IEPf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2I2OGU1NzZiZmRlNjZhYmM0MTk4MzdiNTExOTg2MTQ3ZWU1YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhoVA6LEW8ojM+Hcs2dCB6jl4Fq8 +xI3fCIGL8Cop4kfRED0XX5YeUJFkmWHMKWk/O9kPe0NUd4IXJWXFyKOyZD46wV7 w9S2UOi7+m0YytHsYYQO1jaeq+QtHHKJF7BEBVX86x/VLR9R53jj/yoQRjLLMhV7 guoqw66/OdI55HRFwrJK5JoGeNYOJdRlusf3B1xvJ4JNVBIj41g+/jo8/m8vU7eU Ejddo3AYg3AVnG7/umJx7f7tquLw7GGE1PSyJqvZphK+/Ikac6VsIYT+42X3xJH8 +v7kY6tF6nj//bpCWpe380SXKav+RwebKfLD86LYew5DPFwk8cF+U7QSCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIy2jldr/eZqvEGYN7URmGFH7ltCMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvakxhT1Yydjk1bXE4UVpnM3RSR1lZVWZ1VzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGAuMA0G CSqGSIb3DQEBCwUAA4IBAQCGI1VfO0DyMp3DbBax2mGi++aK8om8M0S6wG79bSup ArNg9VPV3wxoHn9hc+uHwRx6zMbWLt2xs15hFnAE8ZfeAshNkAUXcWB1m/bydnVD qyihBNMSS2uuQfend3bA5oVnsjBHU/d9FwlJtxoj3OBogIvcZCQ8ao4R7mRy8pA1 glmYW4vEQafZDdmuqbpAcZ/toMozBlxgZ86+sQKZpP1RQMj/Vd82GnxHfaUlHn3x 6xdjJVZdfRIYZ0fZikbO1ODtqdSYZxmzIaxNgSn8OFQE1tD5cQTz5OIzDIQJLMkP 0Uv13iR6o9wZm+goPo+0kTjK6mjvChGjgOa8NyIbtO85 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:18 2026 by rpki-client