This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/JYCsV2i5N2HKe8jWnVBbskEk35g.roa File: JYCsV2i5N2HKe8jWnVBbskEk35g.roa (raw, json) Hash identifier: bJ+6gtzP1kZJb4K84CU9VOHZvtsvVD/JCSadOrdU128= Subject key identifier: 25:80:AC:57:68:B9:37:61:CA:7B:C8:D6:9D:50:5B:B2:41:24:DF:98 Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6 Certificate serial: 019B7AC85D4D63F26F759CDE52CA679CF7AB Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/JYCsV2i5N2HKe8jWnVBbskEk35g.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51289 IP address blocks: 193.58.251.0/24 maxlen: 24 2001:67c:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5d:4d:63:f2:6f:75:9c:de:52:ca:67:9c:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2580ac5768b93761ca7bc8d69d505bb24124df98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:df:b5:b3:14:f0:cf:57:09:b1:5b:14:6e: ed:50:9c:eb:34:b3:e1:11:c0:02:d1:c0:af:85:f3: b3:e4:5b:4e:09:bf:a1:28:45:07:67:17:22:98:f6: af:da:77:b0:b1:1a:b3:7d:af:77:a8:1b:e6:15:8a: 70:39:c0:d8:a2:3e:92:f9:b9:55:ad:51:3b:79:8d: 2b:3d:8f:19:2a:f0:ef:7e:7d:84:98:17:92:29:0a: ce:e9:a0:bd:eb:24:51:c7:4f:a6:ca:93:1d:4d:49: ca:92:71:c4:68:d0:66:ab:a1:02:7d:92:38:cd:02: 49:41:3c:47:14:00:fe:96:33:ce:13:9a:44:57:1f: 75:f5:6b:12:1b:42:87:4c:62:b1:13:4a:a3:cd:da: a6:c6:4b:e7:d8:09:9a:55:7d:21:79:a5:f2:af:14: a1:56:79:9a:d6:11:1c:b3:eb:c3:44:f8:a4:04:7f: f3:09:40:42:45:03:9d:75:f6:79:21:c2:e2:03:d3: fd:0e:e7:46:b2:2d:8b:fe:03:49:1e:e0:7a:4f:1c: 8f:05:05:c9:62:71:c7:c5:2a:ab:17:3b:49:c9:ac: 9b:ec:c9:0e:9e:a1:5b:87:de:2a:26:fc:f7:b7:91: 6c:2a:0b:c8:e8:5f:c7:5d:48:10:b7:7e:b8:1c:1d: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:AC:57:68:B9:37:61:CA:7B:C8:D6:9D:50:5B:B2:41:24:DF:98 X509v3 Authority Key Identifier: keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/JYCsV2i5N2HKe8jWnVBbskEk35g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.251.0/24 IPv6: 2001:67c:20c::/48 Signature Algorithm: sha256WithRSAEncryption 4e:97:8e:6d:07:7f:16:9b:7e:1e:a4:7e:44:4f:42:f0:0b:fc: 88:06:1b:9c:5a:4f:71:f4:55:20:fd:41:3d:ca:ce:75:0c:76: 4d:0c:49:97:43:78:85:bd:e7:93:4e:9e:c0:a6:c0:68:16:68: 76:4d:65:0e:99:e8:82:dd:33:f5:6b:04:9c:d6:93:48:7a:d1: d5:fa:68:c5:a7:4b:47:4e:a3:f1:d2:b1:eb:9c:67:dc:45:2f: 78:75:9a:af:2d:ed:13:7f:44:fc:8a:2f:b2:bc:fa:07:67:9b: 3e:3b:e9:24:07:be:14:d8:1c:ee:9a:9c:b5:de:9d:3b:86:68: 56:13:58:56:d3:05:6b:d1:ac:56:85:2d:2e:d6:34:4a:81:70: 44:3e:0f:65:a0:e3:79:71:64:4b:75:bd:7f:df:cc:26:b9:cb: 59:c2:25:f4:85:9b:98:f0:58:cb:2b:21:61:bd:84:2e:c5:16: e1:88:66:73:d2:2a:08:81:e4:f7:29:1c:33:ee:83:aa:44:a4: 69:41:c9:c4:53:dc:76:da:ff:53:7f:27:68:cf:59:c1:4d:9f: 87:83:a4:c4:f9:f9:63:3a:8a:ab:98:1e:d8:71:e7:35:ac:68: f9:f4:01:29:6f:fb:6a:f5:33:1b:2b:b8:df:b7:bd:ef:0a:00: dc:cb:12:e1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yF1NY/JvdZzeUspnnPerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOWQwNjU3ZWFhZWYwOTZiZWM5NGIxMWY0ZDY5ZDBkM2Vk MDRjZTYwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTgwYWM1NzY4YjkzNzYxY2E3YmM4ZDY5ZDUwNWJiMjQxMjRkZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09vftbMU8M9XCbFbFG7tUJzrNLPh EcAC0cCvhfOz5FtOCb+hKEUHZxcimPav2newsRqzfa93qBvmFYpwOcDYoj6S+blV rVE7eY0rPY8ZKvDvfn2EmBeSKQrO6aC96yRRx0+mypMdTUnKknHEaNBmq6ECfZI4 zQJJQTxHFAD+ljPOE5pEVx919WsSG0KHTGKxE0qjzdqmxkvn2AmaVX0heaXyrxSh Vnma1hEcs+vDRPikBH/zCUBCRQOddfZ5IcLiA9P9DudGsi2L/gNJHuB6TxyPBQXJ YnHHxSqrFztJyayb7MkOnqFbh94qJvz3t5FsKgvI6F/HXUgQt364HB19WQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCWArFdouTdhynvI1p1QW7JBJN+YMB8GA1UdIwQY MBaAFCOdBlfqrvCWvslLEfTWnQ0+0EzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTUwR1YtcXU4SmEteVVzUjlOYWREVDdRVE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xZjFkNDMtNDNkYi00ZjRhLWI0OTQt N2RmOWFlNTNkNDg0LzEvSllDc1YyaTVOMkhLZThqV25WQmJza0VrMzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xZjFkNDMtNDNkYi00ZjRhLWI0OTQtN2RmOWFlNTNkNDg0 LzEvSTUwR1YtcXU4SmEteVVzUjlOYWREVDdRVE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwTr7MA8E AgACMAkDBwAgAQZ8AgwwDQYJKoZIhvcNAQELBQADggEBAE6Xjm0Hfxabfh6kfkRP QvAL/IgGG5xaT3H0VSD9QT3KznUMdk0MSZdDeIW955NOnsCmwGgWaHZNZQ6Z6ILd M/VrBJzWk0h60dX6aMWnS0dOo/HSseucZ9xFL3h1mq8t7RN/RPyKL7K8+gdnmz47 6SQHvhTYHO6anLXenTuGaFYTWFbTBWvRrFaFLS7WNEqBcEQ+D2Wg43lxZEt1vX/f zCa5y1nCJfSFm5jwWMsrIWG9hC7FFuGIZnPSKgiB5PcpHDPug6pEpGlBycRT3Hba /1N/J2jPWcFNn4eDpMT5+WM6iquYHthx5zWsaPn0ASlv+2r1MxsruN+3ve8KANzL EuE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:57 2026 by rpki-client