This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JhUmeG7nGW2S_wwVv_HLwfrtLGc.roa File: JhUmeG7nGW2S_wwVv_HLwfrtLGc.roa (raw, json) Hash identifier: pjY0zgUCc02ykSlfnWGpKebuvjMFc42AEMzDOXCI2/E= Subject key identifier: 26:15:26:78:6E:E7:19:6D:92:FF:0C:15:BF:F1:CB:C1:FA:ED:2C:67 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FB15DD9D2CD84B238BF7A956076B Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JhUmeG7nGW2S_wwVv_HLwfrtLGc.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60190 IP address blocks: 212.243.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fb:15:dd:9d:2c:d8:4b:23:8b:f7:a9:56:07:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=261526786ee7196d92ff0c15bff1cbc1faed2c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:8b:8d:90:ee:a5:ad:85:5c:45:c9:05:66: af:be:15:8c:5f:66:33:05:f8:52:f0:3a:d6:7b:6c: 84:87:60:a4:14:19:2f:e7:2a:f2:80:cc:9c:f8:23: 25:a3:d4:05:d2:a5:94:d7:87:70:2e:ba:a1:9f:a2: 03:ab:bb:93:31:55:72:ef:39:42:be:55:e1:ee:16: 93:30:dc:1f:c4:10:8b:eb:56:f8:29:43:79:2e:76: 67:8d:be:96:3b:45:52:5f:43:e2:48:9c:11:d5:ed: ef:f7:8f:ce:8f:e0:a2:48:e6:e9:de:4f:9c:0c:59: cf:9a:ae:b7:0e:ab:f0:93:45:84:91:37:59:37:7e: 9b:9f:20:5b:3b:dc:86:c9:17:9f:6d:14:9e:4d:b6: b3:f3:59:ff:e7:0e:7c:5b:60:9a:ad:73:31:65:d0: 7a:5a:b5:af:46:f9:a5:f3:be:6c:95:43:bb:7d:96: 83:a9:af:87:d1:0c:a1:ff:35:64:81:cd:eb:38:ba: 46:6b:a7:20:79:8a:6c:d8:f1:54:52:3c:f5:7a:fc: dc:78:55:65:90:09:d9:4c:87:1a:7d:64:68:48:8b: 7a:c1:b1:74:7d:8c:47:e1:86:2c:c5:46:89:8e:76: 4d:37:cb:56:fe:1c:3b:70:cd:1e:d6:b1:d7:13:7a: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:15:26:78:6E:E7:19:6D:92:FF:0C:15:BF:F1:CB:C1:FA:ED:2C:67 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JhUmeG7nGW2S_wwVv_HLwfrtLGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.120.0/24 Signature Algorithm: sha256WithRSAEncryption a0:f4:bb:e5:9a:bf:da:61:a7:7c:ae:1e:a5:63:70:42:c6:28: 07:46:fe:4a:62:5e:68:4c:99:8a:1b:a0:20:aa:3f:9a:59:d7: 68:94:a8:3b:d0:d7:ea:ec:2b:83:64:33:74:43:85:14:7e:43: 5c:90:23:c2:eb:1c:db:21:37:2d:e3:0e:0d:b3:40:1d:46:72: 1b:84:92:43:f4:3f:12:eb:01:a2:83:db:54:fd:01:74:0b:67: d9:99:f9:29:c8:53:94:21:4d:c0:bd:71:f2:f6:31:bc:e9:44: 44:f3:6a:73:9c:5a:60:1c:e9:15:7b:8e:bc:29:df:77:d1:96: f8:c8:6b:1b:fa:55:ec:29:6f:1d:fb:47:b5:d4:0c:04:79:fe: cf:5f:d0:76:e9:ac:26:32:15:0d:e0:fb:4c:28:c7:8c:24:03: 1f:9c:67:8b:37:59:c0:fc:31:01:ef:57:77:5a:ad:4b:07:c2: d9:3a:4b:35:1b:b4:d6:25:86:b8:33:6b:8c:7a:99:73:b3:98: 1f:d6:8f:2c:07:92:35:52:37:12:34:0c:f0:2f:56:01:27:b4: e0:2e:26:8a:ae:60:55:31:dd:a9:3e:03:3b:9c:61:21:72:12: ea:3e:29:b4:33:0b:4c:e9:04:08:31:27:dd:6c:d6:1b:16:13: 65:9a:49:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvsV3Z0s2Esji/epVgdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjE1MjY3ODZlZTcxOTZkOTJmZjBjMTViZmYxY2JjMWZhZWQyYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/aLjZDupa2FXEXJBWavvhWMX2Yz BfhS8DrWe2yEh2CkFBkv5yrygMyc+CMlo9QF0qWU14dwLrqhn6IDq7uTMVVy7zlC vlXh7haTMNwfxBCL61b4KUN5LnZnjb6WO0VSX0PiSJwR1e3v94/Oj+CiSObp3k+c DFnPmq63Dqvwk0WEkTdZN36bnyBbO9yGyRefbRSeTbaz81n/5w58W2CarXMxZdB6 WrWvRvml875slUO7fZaDqa+H0Qyh/zVkgc3rOLpGa6cgeYps2PFUUjz1evzceFVl kAnZTIcafWRoSIt6wbF0fYxH4YYsxUaJjnZNN8tW/hw7cM0e1rHXE3o1PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYVJnhu5xltkv8MFb/xy8H67SxnMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvSmhVbWVHN25HVzJTX3d3VnZfSEx3ZnJ0TEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN4MA0G CSqGSIb3DQEBCwUAA4IBAQCg9Lvlmr/aYad8rh6lY3BCxigHRv5KYl5oTJmKG6Ag qj+aWddolKg70Nfq7CuDZDN0Q4UUfkNckCPC6xzbITct4w4Ns0AdRnIbhJJD9D8S 6wGig9tU/QF0C2fZmfkpyFOUIU3AvXHy9jG86URE82pznFpgHOkVe468Kd930Zb4 yGsb+lXsKW8d+0e11AwEef7PX9B26awmMhUN4PtMKMeMJAMfnGeLN1nA/DEB71d3 Wq1LB8LZOks1G7TWJYa4M2uMeplzs5gf1o8sB5I1UjcSNAzwL1YBJ7TgLiaKrmBV Md2pPgM7nGEhchLqPim0MwtM6QQIMSfdbNYbFhNlmkk6 -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:40 2026 by rpki-client