This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa File: JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa (raw, json) Hash identifier: YveWpi6AJgq5ydWYFnpgDOP/dgPBe846GgNOj6NIeio= Subject key identifier: 25:C4:6F:A3:D7:8A:C7:B3:9A:0F:F5:EA:17:AA:1F:32:26:55:5B:AB Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019B7AC78BDEA77F0BDC24D63F7BB132E492 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 145.43.252.0/24 maxlen: 24 145.43.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8b:de:a7:7f:0b:dc:24:d6:3f:7b:b1:32:e4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c46fa3d78ac7b39a0ff5ea17aa1f3226555bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:04:25:97:84:13:85:31:e9:d0:7c:af:45: e0:5f:ed:7f:6d:76:44:7c:c8:c2:b0:23:13:58:26: 37:5f:f1:da:e0:de:2c:dc:93:c0:e2:41:30:6f:53: 9f:7e:f1:2f:d8:ea:eb:e3:ef:8a:c3:93:1f:6e:b6: 96:ab:03:18:8c:7e:28:d1:64:14:4d:5f:46:9c:6f: 2e:56:83:d3:34:50:c1:9d:97:24:2c:ac:b5:6c:99: a2:69:45:77:08:fd:89:c5:c7:7f:ae:08:b2:db:97: 92:44:aa:5d:4f:bc:1c:8c:a2:f3:fe:de:17:4f:7e: 14:66:1b:87:df:28:e8:1b:6c:c4:e0:25:47:73:4e: e8:44:89:b4:1a:73:3e:21:9b:d8:60:c7:7e:78:18: 1d:0c:2f:58:88:38:f0:fc:51:c9:49:47:26:6b:ea: ff:03:a9:87:50:e1:17:2d:89:c0:f5:5b:fa:98:b6: 28:e6:d8:37:ba:22:f2:51:82:5a:6c:ea:35:ee:40: 4a:f0:9d:af:bb:24:80:62:73:8a:94:bb:42:5f:9d: 9a:42:1d:72:24:63:01:b1:33:f8:9f:01:a3:32:54: 4f:ba:88:54:46:bb:b7:05:49:89:b5:3f:e2:f6:da: c2:3c:f9:ed:4a:d5:e0:ac:ca:1d:90:bd:ed:92:fb: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:6F:A3:D7:8A:C7:B3:9A:0F:F5:EA:17:AA:1F:32:26:55:5B:AB X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.43.252.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:e6:6a:59:8e:3e:20:cb:28:b3:34:0e:c2:62:9a:b6:9d:fa: 3b:8a:33:f6:a2:2e:d5:76:fb:e8:b8:b6:8a:b9:f4:d7:0b:fe: b0:8f:24:45:e6:21:44:be:01:5f:e6:66:42:96:ec:2b:e3:f3: 28:73:aa:47:eb:e5:98:ad:8b:6f:7c:64:62:80:e5:81:a0:50: e7:ac:83:66:7a:9a:55:09:6f:40:b9:84:7b:8b:e8:9f:90:0c: 81:c1:f2:2a:e9:1d:ab:c1:2a:f2:f5:23:bf:3f:2c:91:16:86: 50:d4:a0:2b:33:32:25:33:f2:33:42:dd:95:6d:b2:f0:fb:3b: 5e:37:a1:24:0d:04:bf:75:ba:06:3c:00:c6:74:f5:1b:78:bf: d3:40:ce:ae:29:2b:91:61:dd:4c:37:78:23:b2:4e:31:66:2a: eb:6c:67:2d:8c:0c:bb:7d:93:36:f0:5d:06:5c:89:0c:2e:fc: ad:99:d0:31:d6:51:e4:0e:ca:cf:e6:b9:e8:db:bf:73:bb:75: b2:ae:6f:f8:e6:64:82:8a:33:31:22:3d:a8:bd:ee:9a:ad:51: ef:ec:ca:5f:f9:27:df:70:bb:12:be:9b:de:01:40:03:02:27: d4:52:29:56:58:be:42:63:9b:46:9e:b5:85:35:ca:f6:5d:e9: 42:a7:69:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4vep38L3CTWP3uxMuSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM0NmZhM2Q3OGFjN2IzOWEwZmY1ZWExN2FhMWYzMjI2NTU1YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyckEJZeEE4Ux6dB8r0XgX+1/bXZE fMjCsCMTWCY3X/Ha4N4s3JPA4kEwb1OffvEv2Orr4++Kw5MfbraWqwMYjH4o0WQU TV9GnG8uVoPTNFDBnZckLKy1bJmiaUV3CP2Jxcd/rgiy25eSRKpdT7wcjKLz/t4X T34UZhuH3yjoG2zE4CVHc07oRIm0GnM+IZvYYMd+eBgdDC9YiDjw/FHJSUcma+r/ A6mHUOEXLYnA9Vv6mLYo5tg3uiLyUYJabOo17kBK8J2vuySAYnOKlLtCX52aQh1y JGMBsTP4nwGjMlRPuohURru3BUmJtT/i9trCPPntStXgrModkL3tkvu+RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXEb6PXisezmg/16heqHzImVVurMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvSmNSdm85ZUt4N09hRF9YcUY2b2ZNaVpWVzZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkSv8MA0G CSqGSIb3DQEBCwUAA4IBAQB+5mpZjj4gyyizNA7CYpq2nfo7ijP2oi7VdvvouLaK ufTXC/6wjyRF5iFEvgFf5mZCluwr4/Moc6pH6+WYrYtvfGRigOWBoFDnrINmeppV CW9AuYR7i+ifkAyBwfIq6R2rwSry9SO/PyyRFoZQ1KArMzIlM/IzQt2VbbLw+zte N6EkDQS/dboGPADGdPUbeL/TQM6uKSuRYd1MN3gjsk4xZirrbGctjAy7fZM28F0G XIkMLvytmdAx1lHkDsrP5rno279zu3Wyrm/45mSCijMxIj2ove6arVHv7Mpf+Sff cLsSvpveAUADAifUUilWWL5CY5tGnrWFNcr2XelCp2md -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:14 2026 by rpki-client