This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/jrESc5APENrqQkJhnFt6y_8ea-8.roa File: jrESc5APENrqQkJhnFt6y_8ea-8.roa (raw, json) Hash identifier: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k= Subject key identifier: 8E:B1:12:73:90:0F:10:DA:EA:42:42:61:9C:5B:7A:CB:FF:1E:6B:EF Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578 Certificate serial: 019B79ED028C7E0AE8DE649309CFD21C2F79 Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/jrESc5APENrqQkJhnFt6y_8ea-8.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 31.131.188.0/23 maxlen: 23 91.232.248.0/24 maxlen: 24 195.69.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:02:8c:7e:0a:e8:de:64:93:09:cf:d2:1c:2f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0818344a520a3999279bb8247e179e88406e3578 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb11273900f10daea4242619c5b7acbff1e6bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:f3:58:67:5b:4d:9a:13:3e:4a:11:89:99: 07:7b:cf:12:01:7d:0b:51:23:e0:37:c4:25:75:1c: 93:6d:d6:bc:d6:94:7f:6f:3d:50:0a:66:20:43:ee: a8:28:f7:87:0a:21:b7:e0:6e:66:c6:0e:35:3b:f8: 48:54:3d:e6:71:fe:8d:41:08:da:50:81:33:0c:b3: 81:bf:23:d6:84:6e:cf:56:ea:eb:5c:97:c6:12:e6: 9a:b9:00:c0:81:ef:c6:0f:cd:9f:09:9c:0f:3b:1f: a0:c9:1e:10:09:d9:96:cc:e2:28:bc:8c:9f:e2:f2: 90:7e:8d:39:79:29:58:14:62:64:d3:1a:3b:aa:68: 53:72:29:ee:2f:4d:bf:d7:05:b0:fe:83:1e:0a:74: 77:05:bc:ac:bf:da:2e:7d:10:62:b1:41:52:19:6a: f2:d1:22:a6:49:64:6c:24:71:9e:6f:3e:b2:ee:03: fe:74:c8:07:f1:ce:94:e6:41:16:7d:88:39:96:7d: 42:36:7a:4e:91:1f:dc:a6:54:dd:34:fd:c1:63:aa: 25:b5:0f:64:95:7e:9e:57:de:cf:86:56:9c:5e:ee: 78:0a:af:a5:21:89:ad:60:d8:0f:53:9d:42:44:78: 46:cd:98:c2:75:2a:22:cc:50:22:af:ff:74:74:71: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:12:73:90:0F:10:DA:EA:42:42:61:9C:5B:7A:CB:FF:1E:6B:EF X509v3 Authority Key Identifier: keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/jrESc5APENrqQkJhnFt6y_8ea-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.188.0/23 91.232.248.0/24 195.69.224.0/24 Signature Algorithm: sha256WithRSAEncryption 22:4e:dc:4f:44:47:09:c7:71:cc:86:b9:57:c3:79:aa:52:bf: 99:4f:f3:fc:f5:6b:d7:a7:db:12:c2:61:cc:d9:24:e2:e0:5a: f9:43:7b:04:11:a5:1b:6b:a1:20:ed:50:2c:29:6e:b7:2b:56: 64:95:99:ce:b6:13:40:fc:14:78:3a:71:fc:33:80:a3:9d:61: b3:84:ae:f1:01:5f:7a:90:a5:16:f2:21:65:94:dd:15:8d:97: 1e:0d:fe:02:6d:f9:0b:47:f3:4d:96:52:38:cd:b6:ad:92:f5: fe:43:20:d2:82:33:59:a9:68:49:75:82:d0:c9:30:f8:ee:63: 22:6f:59:08:24:ee:42:bb:9d:9d:ce:d2:93:43:b5:a9:c2:86: 3b:ae:24:b5:f6:0f:d4:2c:c4:3b:82:1c:88:45:fb:cb:cc:90: af:c3:7a:a8:6b:f6:71:07:73:f8:0a:42:2a:63:a7:e5:99:9c: 20:cb:3a:c4:d9:30:3f:03:d7:d0:a3:eb:e5:b9:6b:f2:01:3a: 73:ae:1c:44:17:7a:27:64:bc:e8:8c:9e:b8:f6:66:ed:fd:de: 59:7f:70:f0:a1:11:7c:fb:bb:c6:4b:fa:3e:86:87:d1:f6:08: 68:ea:ba:be:18:a3:a3:93:49:b3:d3:a3:1e:8f:71:64:53:dc: d9:3c:27:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57QKMfgro3mSTCc/SHC95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2 ZTM1NzgwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWIxMTI3MzkwMGYxMGRhZWE0MjQyNjE5YzViN2FjYmZmMWU2YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoDzWGdbTZoTPkoRiZkHe88SAX0L USPgN8QldRyTbda81pR/bz1QCmYgQ+6oKPeHCiG34G5mxg41O/hIVD3mcf6NQQja UIEzDLOBvyPWhG7PVurrXJfGEuaauQDAge/GD82fCZwPOx+gyR4QCdmWzOIovIyf 4vKQfo05eSlYFGJk0xo7qmhTcinuL02/1wWw/oMeCnR3Bbysv9oufRBisUFSGWry 0SKmSWRsJHGebz6y7gP+dMgH8c6U5kEWfYg5ln1CNnpOkR/cplTdNP3BY6oltQ9k lX6eV97PhlacXu54Cq+lIYmtYNgPU51CRHhGzZjCdSoizFAir/90dHGgWwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI6xEnOQDxDa6kJCYZxbesv/HmvvMB8GA1UdIwQY MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt ODUxZWE2NWNiOThiLzEvanJFU2M1QVBFTnJxUWtKaG5GdDZ5XzhlYS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH4O8AwQA W+j4AwQAw0XgMA0GCSqGSIb3DQEBCwUAA4IBAQAiTtxPREcJx3HMhrlXw3mqUr+Z T/P89WvXp9sSwmHM2STi4Fr5Q3sEEaUba6Eg7VAsKW63K1ZklZnOthNA/BR4OnH8 M4CjnWGzhK7xAV96kKUW8iFllN0VjZceDf4CbfkLR/NNllI4zbatkvX+QyDSgjNZ qWhJdYLQyTD47mMib1kIJO5Cu52dztKTQ7WpwoY7riS19g/ULMQ7ghyIRfvLzJCv w3qoa/ZxB3P4CkIqY6flmZwgyzrE2TA/A9fQo+vluWvyATpzrhxEF3onZLzojJ64 9mbt/d5Zf3DwoRF8+7vGS/o+hofR9gho6rq+GKOjk0mz06Mej3FkU9zZPCcG -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client