This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jorfWq_1YnE5kHaeGqCZdPdeWNY.roa File: jorfWq_1YnE5kHaeGqCZdPdeWNY.roa (raw, json) Hash identifier: Y1UP/CLj7/bw212cAWqRM94fuvrK4D40u1bvJepra2k= Subject key identifier: 8E:8A:DF:5A:AF:F5:62:71:39:90:76:9E:1A:A0:99:74:F7:5E:58:D6 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16BBF2E6C589E658B49F1FE6CBDE8 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jorfWq_1YnE5kHaeGqCZdPdeWNY.roa Signing time: Fri 02 Jan 2026 18:21:26 +0000 ROA not before: Fri 02 Jan 2026 18:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62068 IP address blocks: 43.240.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6b:bf:2e:6c:58:9e:65:8b:49:f1:fe:6c:bd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8adf5aaff562713990769e1aa09974f75e58d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:42:4a:72:77:27:46:19:7b:70:c0:85:3d: 40:0b:d0:89:64:3c:6e:3a:e4:a1:71:58:07:7a:c6: 18:de:ee:7e:6d:8b:25:1e:51:a7:61:f1:22:e7:99: 28:df:d7:f1:6c:73:16:71:48:66:4d:8c:dd:1b:6e: 2b:32:12:2a:12:8c:34:38:02:93:1c:74:75:82:96: 41:ec:08:da:be:f2:25:7c:22:e7:b2:b0:c0:04:d7: f3:ed:a7:09:32:5f:d9:e3:f2:72:b7:88:44:99:ce: 00:b4:d6:33:8b:9e:ae:ba:42:01:c3:7c:34:b0:d8: 1e:86:17:95:a3:71:25:48:41:eb:9d:00:08:21:ab: 14:8e:77:26:c0:01:23:1f:6c:c8:38:e7:1c:11:c3: 27:e5:5d:80:be:7f:ac:b7:c8:64:8b:b9:4e:16:17: 67:0c:1e:d8:70:14:11:5e:6c:66:35:89:56:bd:a9: 8f:a8:cc:d7:ff:c8:ac:cc:f1:c7:32:74:c6:6f:48: 0b:7a:d0:dd:c2:d2:35:99:a4:90:e4:58:d8:47:40: e8:e8:1e:5e:f3:53:ff:2e:cb:71:a4:c0:69:fd:26: b0:3f:27:69:34:1c:8c:e3:27:78:8f:b9:06:55:69: c8:74:fd:b9:ab:5f:ea:dd:41:68:28:9e:f9:69:d7: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:DF:5A:AF:F5:62:71:39:90:76:9E:1A:A0:99:74:F7:5E:58:D6 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jorfWq_1YnE5kHaeGqCZdPdeWNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.150.0/24 Signature Algorithm: sha256WithRSAEncryption 93:a7:69:77:84:61:92:0d:86:1d:4e:59:2d:a2:7c:6c:e2:5c: a7:f4:b0:34:bf:54:7f:b1:c8:bb:73:ef:05:04:11:2a:81:25: ba:12:6e:05:79:c7:49:36:db:a4:ec:8f:86:21:92:1b:30:71: c0:7a:66:97:1b:31:9f:b7:fe:92:66:5c:94:2a:aa:0f:85:38: a0:39:e3:0a:ae:e8:a4:c8:7a:d9:1e:d0:43:6e:28:83:97:65: ef:13:87:05:f1:89:95:66:79:35:7d:36:31:37:52:a3:c8:65: 5a:5f:01:f6:fd:47:07:03:2a:8f:dd:98:fb:27:b7:22:8e:51: 9e:31:ef:ee:a4:ae:41:8b:04:25:1f:d6:76:54:5a:f2:36:fe: cc:3b:b1:8f:1b:ed:a8:95:9b:a1:2c:5e:d5:70:76:a3:98:20: 50:c5:b5:fa:bd:94:b3:56:90:38:b2:b2:cf:03:da:24:cd:6a: 5d:09:ad:21:6c:ed:ef:f3:7d:44:ff:2e:a3:f0:23:81:c6:f7: c0:82:1b:e3:e4:4b:30:63:26:6b:e3:f2:d1:42:49:7c:5f:8a: 37:22:f6:d0:6f:3d:56:0a:4a:ce:2f:4b:6c:3a:95:7d:ca:f3: f7:bf:eb:1d:0d:83:f6:b1:84:19:56:91:a2:c0:6e:08:6c:a8: 74:40:8b:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Wu/LmxYnmWLSfH+bL3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThhZGY1YWFmZjU2MjcxMzk5MDc2OWUxYWEwOTk3NGY3NWU1OGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzBCSnJ3J0YZe3DAhT1AC9CJZDxu OuShcVgHesYY3u5+bYslHlGnYfEi55ko39fxbHMWcUhmTYzdG24rMhIqEow0OAKT HHR1gpZB7AjavvIlfCLnsrDABNfz7acJMl/Z4/Jyt4hEmc4AtNYzi56uukIBw3w0 sNgehheVo3ElSEHrnQAIIasUjncmwAEjH2zIOOccEcMn5V2Avn+st8hki7lOFhdn DB7YcBQRXmxmNYlWvamPqMzX/8iszPHHMnTGb0gLetDdwtI1maSQ5FjYR0Do6B5e 81P/LstxpMBp/SawPydpNByM4yd4j7kGVWnIdP25q1/q3UFoKJ75addxNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6K31qv9WJxOZB2nhqgmXT3XljWMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvam9yZldxXzFZbkU1a0hhZUdxQ1pkUGRlV05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/CWMA0G CSqGSIb3DQEBCwUAA4IBAQCTp2l3hGGSDYYdTlktonxs4lyn9LA0v1R/sci7c+8F BBEqgSW6Em4FecdJNtuk7I+GIZIbMHHAemaXGzGft/6SZlyUKqoPhTigOeMKruik yHrZHtBDbiiDl2XvE4cF8YmVZnk1fTYxN1KjyGVaXwH2/UcHAyqP3Zj7J7cijlGe Me/upK5BiwQlH9Z2VFryNv7MO7GPG+2olZuhLF7VcHajmCBQxbX6vZSzVpA4srLP A9okzWpdCa0hbO3v831E/y6j8COBxvfAghvj5EswYyZr4/LRQkl8X4o3IvbQbz1W CkrOL0tsOpV9yvP3v+sdDYP2sYQZVpGiwG4IbKh0QIty -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:29 2026 by rpki-client