This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jyUJVRCqzjajJJgv3iIJl0qsA-A.roa File: jyUJVRCqzjajJJgv3iIJl0qsA-A.roa (raw, json) Hash identifier: 3+RlTexO0JMqBXDRAYsSSh4eZU/uHJpsWNenjP/P59k= Subject key identifier: 8F:25:09:55:10:AA:CE:36:A3:24:98:2F:DE:22:09:97:4A:AC:03:E0 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C130AE19E9E007F10E1A560223D0153 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jyUJVRCqzjajJJgv3iIJl0qsA-A.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213011 IP address blocks: 194.209.39.0/24 maxlen: 24 194.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0a:e1:9e:9e:00:7f:10:e1:a5:60:22:3d:01:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f25095510aace36a324982fde2209974aac03e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:bf:96:66:a1:17:41:32:34:8b:0a:cc:0d: 3f:95:43:68:4a:5b:52:40:3e:6c:5b:71:58:5e:2d: fd:2f:b5:ae:c5:a0:07:44:63:67:4d:f1:c0:7b:d8: 36:bf:d7:e9:5b:25:6a:c5:e6:ce:c5:de:6b:e4:69: e8:f3:36:9a:02:8d:d3:58:54:c6:17:62:82:8f:52: fe:f2:ca:32:b6:da:40:5d:f4:a9:b3:31:7a:50:ae: 39:7e:6b:2f:78:fb:d4:f1:0f:41:1d:9d:39:29:ac: bc:bc:b8:03:3b:40:2d:85:30:26:73:33:a3:0b:81: d8:29:3e:8d:d4:a4:36:0b:c3:b8:12:a6:84:c7:c0: 0b:ca:01:74:b2:a8:58:dc:25:51:db:31:d1:fe:33: 36:a3:3d:db:e6:c3:9d:38:e4:ee:1f:30:b6:be:31: 5e:be:30:5b:c4:20:5b:22:1a:78:2e:95:3f:37:5e: 6f:00:e0:f5:84:d7:40:b5:97:dc:b6:40:83:48:be: 26:23:91:71:32:b4:3f:2a:0e:d8:9f:24:00:e9:8b: b5:9a:60:e9:84:b8:cd:ab:0d:68:5d:38:b7:2d:05: e0:41:db:89:e3:a4:02:db:7f:70:ab:bc:d4:2a:b9: 69:f2:f0:86:c9:1b:73:37:67:df:0f:4f:7d:d5:75: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:09:55:10:AA:CE:36:A3:24:98:2F:DE:22:09:97:4A:AC:03:E0 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/jyUJVRCqzjajJJgv3iIJl0qsA-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.39.0/24 194.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:5d:45:7c:98:35:ba:c7:d9:11:77:72:e4:2a:91:fb:29:98: 64:f5:8b:fd:93:6f:d2:cd:9c:70:69:98:d5:c7:35:65:38:b5: a5:24:7e:5c:d8:f8:40:26:ec:e3:fc:24:79:24:0b:b1:59:41: 11:99:4a:d6:51:f4:2b:d6:64:3e:9b:e7:89:46:ae:2a:c1:b7: 3e:6c:ca:fe:51:6a:99:3e:cf:3c:67:ba:8e:f9:3a:98:a4:0e: 7b:41:63:9b:b3:4e:5c:57:56:a2:ed:84:2f:9b:0f:dd:27:58: cc:65:4e:d5:4b:a3:d3:67:14:54:f0:26:6f:3f:d3:8a:77:73: 0c:e8:74:34:14:cc:44:dc:14:70:f6:a9:2c:55:95:ea:b3:4e: a8:05:0c:52:85:39:dc:e5:c7:48:7c:17:2c:ae:c0:6f:7d:17: 6c:ac:bb:0b:44:64:0f:bc:f5:48:b4:04:c5:92:50:2b:87:ce: 91:7a:84:06:2d:f7:6c:e3:01:18:bc:f1:0d:8c:7f:d1:c3:09: 76:06:8b:54:b0:25:7d:85:aa:95:3e:53:47:21:e4:57:72:40: 2e:6c:28:ba:96:6b:55:88:03:48:56:65:10:9d:a4:d2:8e:39: 89:d5:d3:58:d3:c4:8d:d7:24:af:cb:d2:80:56:2c:91:83:8c: a0:77:ba:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ewrhnp4AfxDhpWAiPQFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjI1MDk1NTEwYWFjZTM2YTMyNDk4MmZkZTIyMDk5NzRhYWMwM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVG/lmahF0EyNIsKzA0/lUNoSltS QD5sW3FYXi39L7WuxaAHRGNnTfHAe9g2v9fpWyVqxebOxd5r5Gno8zaaAo3TWFTG F2KCj1L+8soyttpAXfSpszF6UK45fmsvePvU8Q9BHZ05Kay8vLgDO0AthTAmczOj C4HYKT6N1KQ2C8O4EqaEx8ALygF0sqhY3CVR2zHR/jM2oz3b5sOdOOTuHzC2vjFe vjBbxCBbIhp4LpU/N15vAOD1hNdAtZfctkCDSL4mI5FxMrQ/Kg7YnyQA6Yu1mmDp hLjNqw1oXTi3LQXgQduJ46QC239wq7zUKrlp8vCGyRtzN2ffD0991XWXdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI8lCVUQqs42oySYL94iCZdKrAPgMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvanlVSlZSQ3F6amFqSkpndjNpSUpsMHFzQS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtEnAwQA wtHGMA0GCSqGSIb3DQEBCwUAA4IBAQBMXUV8mDW6x9kRd3LkKpH7KZhk9Yv9k2/S zZxwaZjVxzVlOLWlJH5c2PhAJuzj/CR5JAuxWUERmUrWUfQr1mQ+m+eJRq4qwbc+ bMr+UWqZPs88Z7qO+TqYpA57QWObs05cV1ai7YQvmw/dJ1jMZU7VS6PTZxRU8CZv P9OKd3MM6HQ0FMxE3BRw9qksVZXqs06oBQxShTnc5cdIfBcsrsBvfRdsrLsLRGQP vPVItATFklArh86ReoQGLfds4wEYvPENjH/Rwwl2BotUsCV9haqVPlNHIeRXckAu bCi6lmtViANIVmUQnaTSjjmJ1dNY08SN1ySvy9KAViyRg4ygd7om -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:56 2026 by rpki-client