This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa File: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (raw, json) Hash identifier: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY= Subject key identifier: 8E:F8:41:34:9B:FE:92:34:D4:59:ED:B0:EF:72:0E:AE:1B:07:F1:93 Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28 Certificate serial: 019B7CEE3F2B6B0A2870459539E4DA10FBE3 Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47973 IP address blocks: 51.163.160.0/19 maxlen: 24 51.163.192.0/18 maxlen: 24 185.174.124.0/23 maxlen: 24 2a0b:9f00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3f:2b:6b:0a:28:70:45:95:39:e4:da:10:fb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ef841349bfe9234d459edb0ef720eae1b07f193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:60:05:7c:21:10:62:0d:13:46:fa:75:4a: f7:d3:a1:16:62:bd:b1:8b:88:f6:09:62:0b:9a:88: 66:68:2b:43:40:22:02:e8:13:07:5b:c8:dc:bb:12: 1d:0c:80:ff:3c:bc:e0:3e:8f:79:52:2a:b3:d7:94: 7d:d0:27:47:d2:be:da:02:e4:2d:33:54:f1:fa:af: 54:66:4e:63:15:b1:d5:3c:4f:24:75:8a:d7:a8:ff: e9:4b:96:57:07:6e:3e:21:5a:1e:18:ce:a7:d2:bb: f6:ae:6b:00:e4:02:f4:6a:2f:82:0d:04:3c:3f:5a: 5a:f3:a1:ff:10:40:38:59:13:49:10:7c:93:d1:39: 6d:d6:02:20:7c:d9:e6:31:ac:9c:e8:4a:d8:1c:bb: 8e:89:3b:86:89:b7:d2:99:da:5b:1f:c7:46:3a:a1: 5f:79:39:44:73:e0:bf:0e:3a:b6:3f:b3:e5:6c:1f: 1b:58:23:5f:e4:4c:f8:17:43:9f:5f:64:c4:c9:f8: 9c:f9:39:df:52:bd:7c:6d:1f:b1:51:c9:c6:42:94: a9:00:04:e2:73:03:3c:4a:d4:09:fe:6a:e2:6f:02: fa:58:55:8b:5b:5f:9c:e0:33:d3:be:26:a7:e5:9e: fb:41:36:a6:f2:08:fd:ae:fc:fd:2a:0a:bd:d4:8e: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:41:34:9B:FE:92:34:D4:59:ED:B0:EF:72:0E:AE:1B:07:F1:93 X509v3 Authority Key Identifier: keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.163.160.0-51.163.255.255 185.174.124.0/23 IPv6: 2a0b:9f00::/29 Signature Algorithm: sha256WithRSAEncryption 26:24:e8:24:e0:a7:1c:88:7a:d6:8d:4f:c8:43:55:b9:ea:d7: 66:77:08:8e:c7:be:5b:8a:d5:22:bb:23:51:26:ae:52:b4:2e: c9:7b:cf:27:68:05:0a:a5:76:65:4e:e2:cf:21:25:e1:ac:bf: 3b:f7:4c:7a:17:b8:96:5e:8c:98:cf:a6:0c:9b:3b:5a:81:ab: 45:d2:57:96:17:b4:11:6a:65:b1:b8:e5:91:07:14:98:8e:c5: c8:35:52:cf:06:e5:c2:4e:55:0a:ad:c9:ef:49:3d:49:a8:af: 11:42:2b:f3:64:61:0e:77:15:d3:d1:a3:e6:0a:b7:8c:9d:d1: cf:e7:b8:8c:2e:c9:c8:57:26:3b:3b:6f:3a:0b:76:9d:bf:56: e1:96:87:d9:8d:ef:99:a1:ab:9a:3a:b3:5b:02:b9:c6:06:ec: 1d:25:49:68:e5:7e:bf:cf:99:fb:e3:2c:ef:8e:6f:06:2f:cb: dd:17:33:4f:93:76:1d:58:53:3b:bb:e9:d0:72:62:20:ac:89: 08:b8:15:3b:c9:53:3c:8c:fd:c7:3c:cf:58:47:52:14:cb:79: b9:a1:3d:35:1b:2c:58:9d:a3:a2:6d:9d:67:6a:0f:29:b4:43: c7:df:31:73:7c:50:b1:f2:b6:be:07:67:11:de:f6:59:b6:06: e8:e6:6d:2c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87j8rawoocEWVOeTaEPvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi MDVhMjgwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWY4NDEzNDliZmU5MjM0ZDQ1OWVkYjBlZjcyMGVhZTFiMDdmMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIRgBXwhEGINE0b6dUr306EWYr2x i4j2CWILmohmaCtDQCIC6BMHW8jcuxIdDID/PLzgPo95Uiqz15R90CdH0r7aAuQt M1Tx+q9UZk5jFbHVPE8kdYrXqP/pS5ZXB24+IVoeGM6n0rv2rmsA5AL0ai+CDQQ8 P1pa86H/EEA4WRNJEHyT0Tlt1gIgfNnmMayc6ErYHLuOiTuGibfSmdpbH8dGOqFf eTlEc+C/Djq2P7PlbB8bWCNf5Ez4F0OfX2TEyfic+TnfUr18bR+xUcnGQpSpAATi cwM8StQJ/mribwL6WFWLW1+c4DPTvian5Z77QTam8gj9rvz9Kgq91I5dgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI74QTSb/pI01FntsO9yDq4bB/GTMB8GA1UdIwQY MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt NzlhN2VhYTdhZTU4LzEvanZoQk5Kdi1ralRVV2UydzczSU9yaHNIOFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4 LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATMAsDBAUzo6AD AwIzoAMEAbmufDANBAIAAjAHAwUDKgufADANBgkqhkiG9w0BAQsFAAOCAQEAJiTo JOCnHIh61o1PyENVuerXZncIjse+W4rVIrsjUSauUrQuyXvPJ2gFCqV2ZU7izyEl 4ay/O/dMehe4ll6MmM+mDJs7WoGrRdJXlhe0EWplsbjlkQcUmI7FyDVSzwblwk5V Cq3J70k9SaivEUIr82RhDncV09Gj5gq3jJ3Rz+e4jC7JyFcmOztvOgt2nb9W4ZaH 2Y3vmaGrmjqzWwK5xgbsHSVJaOV+v8+Z++Ms745vBi/L3RczT5N2HVhTO7vp0HJi IKyJCLgVO8lTPIz9xzzPWEdSFMt5uaE9NRssWJ2jom2dZ2oPKbRDx98xc3xQsfK2 vgdnEd72WbYG6OZtLA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client