This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/JoNp07irydQW7d_RoW9vx6fomU8.roa File: JoNp07irydQW7d_RoW9vx6fomU8.roa (raw, json) Hash identifier: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k= Subject key identifier: 26:83:69:D3:B8:AB:C9:D4:16:ED:DF:D1:A1:6F:6F:C7:A7:E8:99:4F Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a Certificate serial: 019BFA4F7A2C6F62B6A43CFE85E9A5D5CE9D Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/JoNp07irydQW7d_RoW9vx6fomU8.roa Signing time: Mon 26 Jan 2026 12:37:51 +0000 ROA not before: Mon 26 Jan 2026 12:37:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.28.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:4f:7a:2c:6f:62:b6:a4:3c:fe:85:e9:a5:d5:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a Validity Not Before: Jan 26 12:37:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268369d3b8abc9d416eddfd1a16f6fc7a7e8994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:0a:5d:ac:12:7e:3f:1f:23:00:be:50:54: 7a:2b:94:e0:3e:84:f7:42:bd:87:1e:ae:14:0b:68: cc:29:7d:1a:f5:23:01:f6:19:3d:fd:03:f4:e1:e7: 76:e1:6b:20:b2:98:6b:88:db:08:84:da:91:10:34: 76:3a:ea:ad:18:ed:02:bb:54:57:d5:56:58:0e:1e: 2e:e6:9b:74:41:a1:3f:5f:96:51:19:3d:a5:75:f6: db:60:6f:b8:46:71:23:77:83:b1:1e:96:65:d3:ff: 42:4b:64:30:dd:3e:22:f6:3e:37:39:1b:0d:98:7a: bb:27:02:14:7d:24:d8:56:5e:27:d1:8e:08:58:66: de:60:13:0b:d6:17:10:ac:d5:6c:6c:8a:57:8e:87: 57:51:31:84:0d:23:ae:18:e9:5c:2e:5e:7e:7c:ba: c3:28:82:b2:07:ba:75:44:83:57:8e:c3:a3:44:af: ff:fc:3d:36:fd:1c:79:26:b5:64:cb:72:d3:b4:de: 02:bb:9f:27:d8:94:70:72:03:fe:3d:b6:32:d6:b8: 95:22:7b:67:c6:56:cd:ee:fc:4c:89:fc:fe:45:93: a4:d2:a6:d6:35:a8:d2:a1:0a:b6:99:8c:ac:4f:05: a3:d8:06:11:61:48:fa:0e:5d:6d:ef:4f:55:2a:fc: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:83:69:D3:B8:AB:C9:D4:16:ED:DF:D1:A1:6F:6F:C7:A7:E8:99:4F X509v3 Authority Key Identifier: keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/JoNp07irydQW7d_RoW9vx6fomU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.83.0/24 Signature Algorithm: sha256WithRSAEncryption 00:29:57:21:ea:81:e5:66:66:a9:c8:4c:eb:5f:f6:70:74:54: 0f:a4:3c:a4:2f:44:2d:c0:d3:44:db:02:88:e1:96:6d:57:22: ee:e0:33:77:80:01:2b:2b:4b:3f:35:da:62:b8:38:23:31:6d: ae:f8:ea:60:4f:6a:fe:0d:8a:be:ee:a3:fd:93:d8:68:7f:2e: 52:7e:f4:9a:97:e2:39:fc:36:46:f2:22:45:8f:33:b5:62:4e: 1c:fd:4e:c7:22:4b:95:11:1d:10:17:e4:0e:5f:8c:ab:b0:30: aa:41:fd:c8:60:12:97:e3:8a:95:8d:f9:06:43:8c:e2:da:97: 71:38:c0:7e:01:d6:56:67:e9:c0:1f:30:27:97:61:34:f1:75: 05:c3:d1:5a:72:6b:f1:94:90:d8:24:ba:fb:09:7b:fb:b5:f1: a0:7f:bf:1f:61:4e:a0:3b:2d:21:c0:00:e0:5c:be:24:7b:22: 0d:82:c2:ed:f9:6c:d4:ee:64:2d:95:94:aa:6b:82:e3:6f:4d: b2:94:54:7c:b4:94:09:42:5e:c1:0f:57:a3:a8:46:5f:65:c4: 0a:f9:6d:6e:dd:f7:4c:82:49:c1:4b:44:e8:85:97:8f:e4:9d: 19:08:d7:11:4b:01:d8:c3:a6:32:a3:76:26:a1:be:e6:98:17: 1c:c0:f5:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6T3osb2K2pDz+heml1c6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZDlhZDVkYjg5OWU3ZTdlM2NmZWNmOTdiYzQyZDM4Yjcy NjI3OWEwHhcNMjYwMTI2MTIzNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjgzNjlkM2I4YWJjOWQ0MTZlZGRmZDFhMTZmNmZjN2E3ZTg5OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp24KXawSfj8fIwC+UFR6K5TgPoT3 Qr2HHq4UC2jMKX0a9SMB9hk9/QP04ed24WsgsphriNsIhNqREDR2OuqtGO0Cu1RX 1VZYDh4u5pt0QaE/X5ZRGT2ldfbbYG+4RnEjd4OxHpZl0/9CS2Qw3T4i9j43ORsN mHq7JwIUfSTYVl4n0Y4IWGbeYBML1hcQrNVsbIpXjodXUTGEDSOuGOlcLl5+fLrD KIKyB7p1RINXjsOjRK///D02/Rx5JrVky3LTtN4Cu58n2JRwcgP+PbYy1riVIntn xlbN7vxMifz+RZOk0qbWNajSoQq2mYysTwWj2AYRYUj6Dl1t709VKvzIFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaDadO4q8nUFu3f0aFvb8en6JlPMB8GA1UdIwQY MBaAFBLZrV24mefn48/s+XvELTi3JieaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXRtdFhiaVo1LWZqei16NWU4UXRPTGNtSjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hYmY2YWUtZjZhZC00MzQxLWJkZTAt ZTU0NTJmMWNmNmEyLzEvSm9OcDA3aXJ5ZFFXN2RfUm9XOXZ4NmZvbVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hYmY2YWUtZjZhZC00MzQxLWJkZTAtZTU0NTJmMWNmNmEy LzEvRXRtdFhiaVo1LWZqei16NWU4UXRPTGNtSjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRxTMA0G CSqGSIb3DQEBCwUAA4IBAQAAKVch6oHlZmapyEzrX/ZwdFQPpDykL0QtwNNE2wKI 4ZZtVyLu4DN3gAErK0s/NdpiuDgjMW2u+OpgT2r+DYq+7qP9k9hofy5SfvSal+I5 /DZG8iJFjzO1Yk4c/U7HIkuVER0QF+QOX4yrsDCqQf3IYBKX44qVjfkGQ4zi2pdx OMB+AdZWZ+nAHzAnl2E08XUFw9FacmvxlJDYJLr7CXv7tfGgf78fYU6gOy0hwADg XL4keyINgsLt+WzU7mQtlZSqa4Ljb02ylFR8tJQJQl7BD1ejqEZfZcQK+W1u3fdM gknBS0TohZeP5J0ZCNcRSwHYw6Yyo3Ymob7mmBccwPVc -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:13 2026 by rpki-client