This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Jgw1Gx1dPclOABYcbQJfITbOPSs.roa File: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (raw, json) Hash identifier: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg= Subject key identifier: 26:0C:35:1B:1D:5D:3D:C9:4E:00:16:1C:6D:02:5F:21:36:CE:3D:2B Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B775900B697216F6BA2B89FD4E3162B90 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Jgw1Gx1dPclOABYcbQJfITbOPSs.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 128.139.0.0/17 maxlen: 17 128.139.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:b6:97:21:6f:6b:a2:b8:9f:d4:e3:16:2b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=260c351b1d5d3dc94e00161c6d025f2136ce3d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:e0:31:0d:23:cd:ff:45:0a:6b:2d:ae:ac: 1d:70:7f:42:8f:11:dd:d6:f8:9e:b3:04:df:6e:50: ff:48:5b:92:99:91:d4:ee:65:56:3c:ce:57:45:03: f0:22:ba:4c:2d:e5:7e:bc:74:1d:1e:38:94:0f:c9: 56:4b:d4:72:88:74:36:52:f3:ba:30:57:d5:d8:35: d6:e5:1c:b5:eb:5f:95:fb:ba:9e:81:6f:e2:42:9c: b9:13:8a:ed:bb:5f:d6:1c:ed:01:09:98:e9:af:51: 51:e2:08:9c:dd:6c:c9:1a:c6:44:c4:01:6c:61:f1: 9c:79:8c:27:81:87:ae:66:bd:b1:e5:47:bb:e3:28: 1d:33:8c:9d:2e:67:6d:32:d1:a7:ca:46:fd:dd:d3: c4:f3:fb:75:bd:76:63:58:ea:c9:c7:51:5c:18:d0: fe:f8:16:c7:cd:f4:84:47:8d:6b:8a:b4:0e:a8:cd: 16:9b:d5:8c:14:91:cf:66:00:cf:6b:71:61:a8:5e: 9b:cf:1a:20:32:25:1a:4a:4f:d4:5e:fe:a5:14:d4: 98:67:ad:13:0a:0d:f4:39:3a:13:3f:c9:13:33:24: 81:49:e8:b8:63:f4:1d:3a:90:90:fb:e1:c1:49:ce: 5f:2e:a6:39:2d:c5:b4:10:d3:0f:0f:13:44:94:a8: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0C:35:1B:1D:5D:3D:C9:4E:00:16:1C:6D:02:5F:21:36:CE:3D:2B X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Jgw1Gx1dPclOABYcbQJfITbOPSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.139.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:99:98:b8:af:10:9a:dd:a6:ea:65:6f:6e:34:db:d0:c6:e1: 5e:27:ce:74:ba:b5:71:f8:ae:0f:ce:1f:3c:17:b3:15:f6:cc: 9f:17:2d:86:94:dc:bd:45:66:38:9f:f7:8e:9b:8a:e4:2d:7e: 2d:2d:8d:72:e4:ac:db:f7:5f:0c:e9:d0:ae:29:63:0e:e0:51: 31:9e:29:26:18:49:da:f8:a2:90:89:0b:82:5b:03:f0:17:e3: fc:14:17:d0:77:d8:1b:4b:6f:22:ed:a6:99:a6:38:71:b9:41: a3:89:63:a9:93:75:c3:50:9a:d9:2d:3b:38:c8:e1:3e:f5:75: cd:e1:f6:8b:8e:4a:dd:b9:d2:77:2c:b0:95:65:bd:c0:af:26: d2:3f:de:13:29:f6:36:48:8c:b7:c0:cf:a7:bd:e6:e6:24:26: 6c:39:2c:de:29:26:2f:6f:07:69:21:4b:84:2f:6b:7a:41:51: 90:af:7c:82:78:67:70:e3:0f:d9:31:1d:8b:30:f0:09:e9:8e: 4a:95:f4:b4:be:3d:17:56:be:a1:0f:d2:0c:2d:1a:b8:33:3b: 73:1d:2f:30:be:ac:f1:aa:51:ec:3b:07:c0:01:bc:f6:94:d8: 80:1c:d3:b8:09:5d:ed:df:72:98:47:bb:af:90:34:db:40:4a: 14:41:b8:3a -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WQC2lyFva6K4n9TjFiuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjBjMzUxYjFkNWQzZGM5NGUwMDE2MWM2ZDAyNWYyMTM2Y2UzZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkfgMQ0jzf9FCmstrqwdcH9CjxHd 1vieswTfblD/SFuSmZHU7mVWPM5XRQPwIrpMLeV+vHQdHjiUD8lWS9RyiHQ2UvO6 MFfV2DXW5Ry161+V+7qegW/iQpy5E4rtu1/WHO0BCZjpr1FR4gic3WzJGsZExAFs YfGceYwngYeuZr2x5Ue74ygdM4ydLmdtMtGnykb93dPE8/t1vXZjWOrJx1FcGND+ +BbHzfSER41rirQOqM0Wm9WMFJHPZgDPa3FhqF6bzxogMiUaSk/UXv6lFNSYZ60T Cg30OToTP8kTMySBSei4Y/QdOpCQ++HBSc5fLqY5LcW0ENMPDxNElKh/2wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFCYMNRsdXT3JTgAWHG0CXyE2zj0rMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvSmd3MUd4MWRQY2xPQUJZY2JRSmZJVGJPUFNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIswDQYJ KoZIhvcNAQELBQADggEBACiZmLivEJrdpuplb24029DG4V4nznS6tXH4rg/OHzwX sxX2zJ8XLYaU3L1FZjif946biuQtfi0tjXLkrNv3Xwzp0K4pYw7gUTGeKSYYSdr4 opCJC4JbA/AX4/wUF9B32BtLbyLtppmmOHG5QaOJY6mTdcNQmtktOzjI4T71dc3h 9ouOSt250ncssJVlvcCvJtI/3hMp9jZIjLfAz6e95uYkJmw5LN4pJi9vB2khS4Qv a3pBUZCvfIJ4Z3DjD9kxHYsw8AnpjkqV9LS+PRdWvqEP0gwtGrgzO3MdLzC+rPGq Uew7B8ABvPaU2IAc07gJXe3fcphHu6+QNNtAShRBuDo= -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:33 2026 by rpki-client