This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/JyOMnJgKMoFcNN43M_f5LI8XErA.roa File: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (raw, json) Hash identifier: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ= Subject key identifier: 27:23:8C:9C:98:0A:32:81:5C:34:DE:37:33:F7:F9:2C:8F:17:12:B0 Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Certificate serial: 019B7DCAB764FB6576FAE1A8B3EE060882AE Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/JyOMnJgKMoFcNN43M_f5LI8XErA.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26937 IP address blocks: 193.103.193.0/24 maxlen: 24 193.103.194.0/24 maxlen: 24 193.103.198.0/24 maxlen: 24 193.103.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b7:64:fb:65:76:fa:e1:a8:b3:ee:06:08:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27238c9c980a32815c34de3733f7f92c8f1712b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:4a:25:2c:b8:01:c8:17:a3:f7:e3:8c:b2: 40:1b:09:a8:3e:f4:11:bb:db:32:cb:7b:f5:dd:f1: 58:b1:58:61:1e:01:5c:30:b7:96:85:1a:75:54:44: 35:fb:23:ae:3f:92:1c:d2:31:a1:2d:23:e3:2f:79: 7f:da:a6:2a:d2:b1:4d:0e:ff:17:7a:85:9b:e1:80: 81:cb:67:b4:ce:5d:73:ad:d5:3b:89:13:3d:ca:90: 1a:54:8b:69:ce:2a:43:ba:e8:c9:84:b5:76:60:5f: 69:8e:af:69:80:bc:90:82:cd:13:ac:59:df:1a:83: 85:df:fd:5c:49:52:29:07:b5:62:56:a1:fc:82:56: 17:32:a3:76:ef:fc:29:1c:43:ca:3b:63:80:f2:d7: 2d:a0:cb:93:80:67:b2:b9:44:63:fa:a5:17:9a:b3: 8b:07:9a:dc:f2:64:73:72:84:fe:d0:eb:e2:9c:cd: 2a:ab:d7:0d:c1:d7:34:de:28:f3:25:f6:6a:aa:9d: 03:94:53:65:e7:e0:27:df:b1:42:c8:ee:6a:25:3a: fe:62:af:62:9e:f7:7e:ff:f1:e2:2b:85:2e:24:a5: 4d:64:8a:8e:2b:13:24:81:99:55:09:ad:73:7d:21: 18:39:e1:22:53:a7:1e:b4:55:18:38:dc:7a:0e:01: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:23:8C:9C:98:0A:32:81:5C:34:DE:37:33:F7:F9:2C:8F:17:12:B0 X509v3 Authority Key Identifier: keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/JyOMnJgKMoFcNN43M_f5LI8XErA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.103.193.0-193.103.194.255 193.103.198.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:9d:81:54:c2:e3:fe:1a:00:e5:01:0c:f4:f0:23:e4:bb:ff: 7e:16:5a:48:2a:8e:c7:03:81:df:0d:64:52:9d:ed:f3:c4:55: 60:f2:f2:43:f5:08:a7:70:f8:e2:d2:1f:b4:bd:11:ce:7a:aa: 84:dd:05:26:86:01:16:05:26:8e:f6:d9:34:52:ad:66:86:76: 2f:ff:85:20:8c:04:b8:10:40:4d:23:32:a9:6d:2b:cd:59:dd: 2b:73:08:b2:b9:10:6c:45:0d:14:9c:d4:35:83:08:d6:d2:0b: 51:77:93:2d:4e:f9:e2:4b:0a:ad:1c:f4:63:10:b8:93:cd:00: 54:f4:93:02:0d:d6:63:7b:d8:18:4b:e1:55:b5:67:80:ba:96: 71:13:87:bc:f9:41:2a:fa:79:f8:8c:d3:48:e0:80:f5:fd:11: ae:d5:98:de:22:da:64:88:09:1b:4b:e7:b2:5e:e4:70:6f:19: 8c:af:5b:e4:7f:93:26:10:1e:36:a7:95:a2:08:5d:a4:38:f2: 23:6f:44:9d:50:4c:c6:f6:76:a9:9d:14:20:f0:86:46:f7:d6: d8:4a:e8:54:32:5a:f1:be:40:e3:5a:7c:bf:47:a3:36:25:29: b7:e6:dd:c2:00:9a:46:f2:7a:ad:0e:ed:ab:a6:03:ba:39:4c: 3c:86:43:0f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yrdk+2V2+uGos+4GCIKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk NTY4ZmEwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzIzOGM5Yzk4MGEzMjgxNWMzNGRlMzczM2Y3ZjkyYzhmMTcxMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwhKJSy4AcgXo/fjjLJAGwmoPvQR u9syy3v13fFYsVhhHgFcMLeWhRp1VEQ1+yOuP5Ic0jGhLSPjL3l/2qYq0rFNDv8X eoWb4YCBy2e0zl1zrdU7iRM9ypAaVItpzipDuujJhLV2YF9pjq9pgLyQgs0TrFnf GoOF3/1cSVIpB7ViVqH8glYXMqN27/wpHEPKO2OA8tctoMuTgGeyuURj+qUXmrOL B5rc8mRzcoT+0OvinM0qq9cNwdc03ijzJfZqqp0DlFNl5+An37FCyO5qJTr+Yq9i nvd+//HiK4UuJKVNZIqOKxMkgZlVCa1zfSEYOeEiU6cetFUYONx6DgFfAwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCcjjJyYCjKBXDTeNzP3+SyPFxKwMB8GA1UdIwQY MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt MDRjNTM5N2ZlNWY4LzEvSnlPTW5KZ0tNb0ZjTk40M01fZjVMSThYRXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4 LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBZ8ED BADBZ8IDBAHBZ8YwDQYJKoZIhvcNAQELBQADggEBAF6dgVTC4/4aAOUBDPTwI+S7 /34WWkgqjscDgd8NZFKd7fPEVWDy8kP1CKdw+OLSH7S9Ec56qoTdBSaGARYFJo72 2TRSrWaGdi//hSCMBLgQQE0jMqltK81Z3StzCLK5EGxFDRSc1DWDCNbSC1F3ky1O +eJLCq0c9GMQuJPNAFT0kwIN1mN72BhL4VW1Z4C6lnETh7z5QSr6efiM00jggPX9 Ea7VmN4i2mSICRtL57Je5HBvGYyvW+R/kyYQHjanlaIIXaQ48iNvRJ1QTMb2dqmd FCDwhkb31thK6FQyWvG+QONafL9HozYlKbfm3cIAmkbyeq0O7aumA7o5TDyGQw8= -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:55 2026 by rpki-client