This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JM1glz0upqxQbn_IZVoQOjK1Nck.roa File: JM1glz0upqxQbn_IZVoQOjK1Nck.roa (raw, json) Hash identifier: BXV+qaDI+LdyRe4dtK7QCIRvShXvyCY1rSF2vUeFYgM= Subject key identifier: 24:CD:60:97:3D:2E:A6:AC:50:6E:7F:C8:65:5A:10:3A:32:B5:35:C9 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B36066C1FC6DB979D21F3BD1FEF02D0 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JM1glz0upqxQbn_IZVoQOjK1Nck.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51192 IP address blocks: 193.163.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:06:6c:1f:c6:db:97:9d:21:f3:bd:1f:ef:02:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24cd60973d2ea6ac506e7fc8655a103a32b535c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:7d:c1:55:7b:c5:27:7c:67:6b:28:6e:ba: 90:ba:95:aa:83:82:5b:56:0d:74:87:2b:11:8e:1e: b9:5a:ef:fe:43:9b:90:2c:d9:ff:2d:e9:19:f1:ad: d2:9d:ef:66:9f:d8:94:e4:7b:9f:8a:b5:5b:b6:0e: 9e:2c:b5:7e:91:7b:5d:93:55:4d:3e:91:8c:5a:d9: 05:e2:55:a0:07:a4:82:b0:b2:fb:c0:cb:23:8b:82: 1e:76:e1:9b:2f:41:64:0d:7f:5c:bc:94:4d:ac:b5: 2b:92:47:63:77:6f:25:b8:ad:7f:c7:24:e9:29:a4: ba:7c:68:f9:67:23:c1:33:b8:a4:68:af:27:67:19: f6:fe:c4:89:fe:c6:11:af:93:84:13:93:e4:0e:0b: e7:f1:ba:2b:74:39:f6:08:c9:bd:d1:90:d9:15:5c: 12:b0:34:3c:f5:68:e5:33:76:9e:b7:49:bb:5a:62: 35:10:69:13:ea:5a:e1:d7:9f:61:10:b8:62:09:a3: 60:b6:dd:72:dd:b5:32:f0:5b:aa:8b:4f:e5:dc:03: 97:03:6c:f2:ec:46:5f:4c:3f:90:98:96:b6:36:be: 53:c0:5b:3e:02:63:6a:ec:6a:3b:be:b8:8a:ee:b2: 31:58:bb:a9:f6:36:a5:cf:be:9d:6f:e0:a3:ea:a2: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CD:60:97:3D:2E:A6:AC:50:6E:7F:C8:65:5A:10:3A:32:B5:35:C9 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JM1glz0upqxQbn_IZVoQOjK1Nck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.21.0/24 Signature Algorithm: sha256WithRSAEncryption 27:57:80:08:52:4e:44:7a:bb:3d:07:5a:c0:02:f6:4e:07:ea: 6a:0e:66:38:52:68:67:d6:27:54:64:63:75:4e:55:5a:5a:66: e2:b9:30:aa:d8:ad:00:ad:f2:b4:c0:3b:f0:c8:bb:de:64:75: 5b:76:52:b6:33:fa:fb:80:36:b8:03:e5:26:5c:68:ed:53:dc: a4:ca:c7:ce:5a:36:34:af:f0:e8:25:cb:5a:2a:c2:15:fc:e2: 0a:55:ca:49:fd:1b:39:5c:cc:79:31:6d:71:99:2b:b9:3c:d5: 9c:cf:a0:1a:85:8a:bd:b6:4e:68:1e:b8:5e:b1:e2:0d:64:32: e6:b4:9e:ce:45:2d:b5:72:51:d0:64:a0:e1:17:e1:e1:3f:2f: 8b:26:82:9b:5f:fc:24:13:ae:c2:e9:eb:0b:75:89:13:f4:88: e6:b8:f4:ef:50:bc:14:2a:38:d6:a3:97:1a:06:89:25:68:cf: 42:ab:e9:d4:60:b7:c4:49:a9:4b:93:12:1c:76:a2:f5:8a:b9: f3:eb:83:e2:11:d8:d7:40:37:b7:b4:20:a0:40:49:48:b4:8c: 16:64:c1:ca:77:b5:b0:ba:86:5f:39:ed:f8:d7:b3:27:ab:43: 19:a0:6e:ca:2d:2b:05:f4:02:9f:53:8a:24:53:36:48:41:3e: 1e:ad:3a:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgZsH8bbl50h870f7wLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGNkNjA5NzNkMmVhNmFjNTA2ZTdmYzg2NTVhMTAzYTMyYjUzNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUh9wVV7xSd8Z2sobrqQupWqg4Jb Vg10hysRjh65Wu/+Q5uQLNn/LekZ8a3Sne9mn9iU5HufirVbtg6eLLV+kXtdk1VN PpGMWtkF4lWgB6SCsLL7wMsji4IeduGbL0FkDX9cvJRNrLUrkkdjd28luK1/xyTp KaS6fGj5ZyPBM7ikaK8nZxn2/sSJ/sYRr5OEE5PkDgvn8bordDn2CMm90ZDZFVwS sDQ89WjlM3aet0m7WmI1EGkT6lrh159hELhiCaNgtt1y3bUy8Fuqi0/l3AOXA2zy 7EZfTD+QmJa2Nr5TwFs+AmNq7Go7vriK7rIxWLup9jalz76db+Cj6qLf1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTNYJc9LqasUG5/yGVaEDoytTXJMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvSk0xZ2x6MHVwcXhRYm5fSVpWb1FPaksxTmNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMVMA0G CSqGSIb3DQEBCwUAA4IBAQAnV4AIUk5Eers9B1rAAvZOB+pqDmY4Umhn1idUZGN1 TlVaWmbiuTCq2K0ArfK0wDvwyLveZHVbdlK2M/r7gDa4A+UmXGjtU9ykysfOWjY0 r/DoJctaKsIV/OIKVcpJ/Rs5XMx5MW1xmSu5PNWcz6AahYq9tk5oHrheseINZDLm tJ7ORS21clHQZKDhF+HhPy+LJoKbX/wkE67C6esLdYkT9IjmuPTvULwUKjjWo5ca BoklaM9Cq+nUYLfESalLkxIcdqL1irnz64PiEdjXQDe3tCCgQElItIwWZMHKd7Ww uoZfOe3417Mnq0MZoG7KLSsF9AKfU4okUzZIQT4erTrP -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:27 2026 by rpki-client