This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa File: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (raw, json) Hash identifier: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0= Subject key identifier: 24:1F:11:A4:CC:BC:12:5A:9C:F7:4B:99:C2:84:93:2F:B5:1B:F4:E3 Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Certificate serial: 019B76EB970A3BB6450FE003C365164D5ECD Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133199 IP address blocks: 194.41.36.0/24 maxlen: 24 194.41.37.0/24 maxlen: 24 194.41.58.0/24 maxlen: 24 194.41.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:97:0a:3b:b6:45:0f:e0:03:c3:65:16:4d:5e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241f11a4ccbc125a9cf74b99c284932fb51bf4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:9b:09:87:9c:46:9d:3e:da:27:cd:62:bd: 24:2c:27:27:b1:62:01:74:18:e0:0d:f8:97:6f:46: f9:79:dc:e3:3e:6b:b1:68:b9:2b:41:eb:ae:85:b5: 50:e4:bf:9c:5f:e3:d3:99:ae:19:b6:a0:e7:d0:fc: b5:5a:6f:7d:d4:07:d2:df:24:10:0b:e7:a5:51:73: 9e:1c:ec:b5:45:9d:a8:a3:a6:90:c3:e2:0f:19:30: 7d:de:56:f9:f8:60:4d:15:ec:ba:e3:46:3c:9b:61: 00:bb:4f:c5:81:64:76:f6:44:47:da:e8:82:b7:11: 9a:a7:3f:72:22:57:e0:60:cf:e3:22:6b:6f:9d:06: df:2c:e1:da:7d:79:a8:f0:f6:28:3b:a1:f2:f5:bf: 5c:aa:4b:33:06:74:f6:d8:0c:d2:a4:c0:7d:a7:75: 41:ca:55:da:4e:47:34:c9:52:96:1c:01:d4:8f:23: 44:2c:f6:05:7e:2c:80:72:41:72:8d:cf:f0:43:d7: 27:72:34:89:91:f9:fa:a2:78:ca:d0:8b:2f:a5:09: 8e:ea:b6:1d:15:cc:68:3e:2a:76:37:8f:c0:76:0b: f8:18:31:db:7d:b5:5b:60:99:0e:ae:bd:d5:39:1d: a4:04:4a:29:ba:05:22:11:8c:0b:5b:77:6b:8e:ca: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:11:A4:CC:BC:12:5A:9C:F7:4B:99:C2:84:93:2F:B5:1B:F4:E3 X509v3 Authority Key Identifier: keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.36.0/23 194.41.58.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:cd:36:37:05:f0:12:e1:b2:8f:78:9d:d5:c4:e1:d5:f8:a7: 0f:dd:00:09:e9:fe:77:8e:33:12:d6:c1:02:e3:73:bf:d3:c5: 97:91:ec:f6:77:7a:d7:9c:09:a6:6e:9f:d3:26:ee:18:4e:a8: f7:f7:3d:46:22:0c:e6:35:0d:07:89:2b:87:73:3c:5d:61:f6: ae:e0:11:35:42:87:4d:31:f0:6d:2a:08:f5:ff:ad:0d:ae:73: de:80:17:e2:7e:84:a2:47:d6:6a:60:b7:ad:f1:5d:ed:7e:4a: c0:34:ee:bf:fe:02:f6:34:3d:38:aa:ed:74:66:ba:5d:96:f2: c7:f2:93:a1:fe:48:37:80:43:89:c3:47:bc:55:d0:2e:0d:c6: 32:72:33:87:59:a7:83:8b:e8:33:51:46:1f:91:2a:0c:01:35: 51:68:f5:18:85:1d:31:50:16:d6:87:bf:b5:40:ff:fd:e7:26: be:03:e9:60:fc:e7:86:42:1e:49:52:3c:6c:b1:64:7e:d2:01: f5:2a:6f:bd:bd:37:f2:ad:dd:d5:91:ff:79:32:8a:81:2a:11: 68:17:44:9d:b6:c8:55:fc:4d:91:70:66:ca:80:c0:7f:bc:aa: f4:dd:2e:aa:9a:fa:9b:00:fd:24:c3:ce:93:00:59:8a:69:53: 1b:39:c5:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265cKO7ZFD+ADw2UWTV7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw NGRhYjIwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFmMTFhNGNjYmMxMjVhOWNmNzRiOTljMjg0OTMyZmI1MWJmNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QmbCYecRp0+2ifNYr0kLCcnsWIB dBjgDfiXb0b5edzjPmuxaLkrQeuuhbVQ5L+cX+PTma4ZtqDn0Py1Wm991AfS3yQQ C+elUXOeHOy1RZ2oo6aQw+IPGTB93lb5+GBNFey640Y8m2EAu0/FgWR29kRH2uiC txGapz9yIlfgYM/jImtvnQbfLOHafXmo8PYoO6Hy9b9cqkszBnT22AzSpMB9p3VB ylXaTkc0yVKWHAHUjyNELPYFfiyAckFyjc/wQ9cncjSJkfn6onjK0IsvpQmO6rYd FcxoPip2N4/Adgv4GDHbfbVbYJkOrr3VOR2kBEopugUiEYwLW3drjsoQXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQfEaTMvBJanPdLmcKEky+1G/TjMB8GA1UdIwQY MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt ZDRmNTAyNzYwMGFlLzEvSkI4UnBNeThFbHFjOTB1WndvU1RMN1ViOU9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwikkAwQB wik6MA0GCSqGSIb3DQEBCwUAA4IBAQBOzTY3BfAS4bKPeJ3VxOHV+KcP3QAJ6f53 jjMS1sEC43O/08WXkez2d3rXnAmmbp/TJu4YTqj39z1GIgzmNQ0HiSuHczxdYfau 4BE1QodNMfBtKgj1/60NrnPegBfifoSiR9ZqYLet8V3tfkrANO6//gL2ND04qu10 ZrpdlvLH8pOh/kg3gEOJw0e8VdAuDcYycjOHWaeDi+gzUUYfkSoMATVRaPUYhR0x UBbWh7+1QP/95ya+A+lg/OeGQh5JUjxssWR+0gH1Km+9vTfyrd3Vkf95MoqBKhFo F0SdtshV/E2RcGbKgMB/vKr03S6qmvqbAP0kw86TAFmKaVMbOcWw -----END CERTIFICATE-----Generated at Wed Feb 4 06:57:50 2026 by rpki-client