This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Jj6QniBhg0ekrss-TvVc94h0S2M.roa File: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (raw, json) Hash identifier: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY= Subject key identifier: 26:3E:90:9E:20:61:83:47:A4:AE:CB:3E:4E:F5:5C:F7:88:74:4B:63 Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B7E37F1CE7FC6006BAF64882B855119B5 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Jj6QniBhg0ekrss-TvVc94h0S2M.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 192.102.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f1:ce:7f:c6:00:6b:af:64:88:2b:85:51:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=263e909e20618347a4aecb3e4ef55cf788744b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:b8:3f:b7:d0:45:62:87:03:12:59:e5:aa: 78:b2:40:7d:66:cb:8f:4c:47:8e:70:91:ee:87:b8: ff:2c:35:53:e4:e9:0e:0a:5e:74:e6:5b:df:bd:c4: b5:e0:f2:b6:6f:7e:63:bf:01:7b:2a:60:46:95:d4: b0:a8:82:28:a2:67:ce:71:11:43:33:15:ca:a2:98: 38:55:9b:f5:8a:28:8e:2b:a0:81:3f:b5:01:68:09: 95:8e:80:45:01:fb:d5:1b:51:9c:f9:ff:cc:e0:e8: 95:ef:24:ac:cb:19:2d:b9:25:d7:68:52:0a:71:fd: f1:3a:b3:ef:e6:34:ff:fd:b9:ad:46:9a:b2:cd:1c: 0a:73:b4:24:90:1d:2a:ed:df:ad:8e:4e:bb:d4:63: e0:cf:ea:30:89:1c:4e:0a:e8:80:fd:7a:77:1f:86: 8f:9b:a5:e5:2b:c3:48:12:49:f5:25:ea:0e:89:d4: c6:83:b6:0e:10:e8:11:8b:e2:5d:7c:e3:8c:cc:da: ca:e5:10:14:de:68:6a:d0:95:86:4e:57:c2:8a:38: b7:1b:0b:7c:f6:79:8f:2a:cb:eb:6e:f2:a3:63:eb: 39:49:e7:c4:0f:b4:86:f9:5c:b1:11:1c:c7:3c:b7: 83:e7:66:a7:78:ce:fc:73:97:1a:8c:05:86:be:9e: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3E:90:9E:20:61:83:47:A4:AE:CB:3E:4E:F5:5C:F7:88:74:4B:63 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Jj6QniBhg0ekrss-TvVc94h0S2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.102.165.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ac:cd:7f:d6:01:30:50:65:d6:1b:08:cb:6d:05:52:e8:c9: a1:43:45:b4:cb:05:f6:86:13:e7:b2:85:1e:a9:b8:8b:50:8d: 4e:30:a7:cc:2f:3f:b6:d9:bf:f6:8a:95:75:f1:11:b0:9b:84: cc:51:3b:ea:5a:e8:8b:f8:47:87:49:24:54:ed:1e:a9:99:b1: 15:4e:15:23:48:0d:15:92:0b:ca:58:cb:65:81:ad:f2:b2:f5: 81:b0:f0:f7:34:d4:9a:a5:49:78:9c:c9:9c:3b:c4:0f:d9:ba: 69:fc:fb:12:c7:dc:39:4b:c1:30:f3:2e:6d:c3:7a:71:ce:12: b6:aa:0c:c9:c4:f9:1e:54:53:a1:3b:f2:57:60:c1:ca:58:04: 1a:3d:24:c7:52:a3:be:cb:35:9b:5f:9f:ea:ad:24:0c:de:ed: 33:bf:d1:68:9a:93:20:cd:1e:5c:18:2b:2b:b5:20:e1:cc:de: c7:11:bd:de:f6:42:a4:99:b5:b1:9c:71:b9:b1:0f:69:79:35: f2:f4:7f:3c:af:1c:d1:54:64:32:10:81:c5:bf:8a:e2:69:1c: b1:6d:56:56:af:4a:e2:23:2b:ee:d6:0c:12:c2:26:c0:b5:d0: a5:cd:3c:1b:11:36:10:4f:cf:4a:13:ad:8d:2a:b8:b6:c4:2a: d7:d5:ab:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/HOf8YAa69kiCuFURm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjNlOTA5ZTIwNjE4MzQ3YTRhZWNiM2U0ZWY1NWNmNzg4NzQ0YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfO4P7fQRWKHAxJZ5ap4skB9ZsuP TEeOcJHuh7j/LDVT5OkOCl505lvfvcS14PK2b35jvwF7KmBGldSwqIIoomfOcRFD MxXKopg4VZv1iiiOK6CBP7UBaAmVjoBFAfvVG1Gc+f/M4OiV7ySsyxktuSXXaFIK cf3xOrPv5jT//bmtRpqyzRwKc7QkkB0q7d+tjk671GPgz+owiRxOCuiA/Xp3H4aP m6XlK8NIEkn1JeoOidTGg7YOEOgRi+JdfOOMzNrK5RAU3mhq0JWGTlfCiji3Gwt8 9nmPKsvrbvKjY+s5SefED7SG+VyxERzHPLeD52aneM78c5cajAWGvp7vEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCY+kJ4gYYNHpK7LPk71XPeIdEtjMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvSmo2UW5pQmhnMGVrcnNzLVR2VmM5NGgwUzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGalMA0G CSqGSIb3DQEBCwUAA4IBAQA+rM1/1gEwUGXWGwjLbQVS6MmhQ0W0ywX2hhPnsoUe qbiLUI1OMKfMLz+22b/2ipV18RGwm4TMUTvqWuiL+EeHSSRU7R6pmbEVThUjSA0V kgvKWMtlga3ysvWBsPD3NNSapUl4nMmcO8QP2bpp/PsSx9w5S8Ew8y5tw3pxzhK2 qgzJxPkeVFOhO/JXYMHKWAQaPSTHUqO+yzWbX5/qrSQM3u0zv9FompMgzR5cGCsr tSDhzN7HEb3e9kKkmbWxnHG5sQ9peTXy9H88rxzRVGQyEIHFv4riaRyxbVZWr0ri Iyvu1gwSwibAtdClzTwbETYQT89KE62NKri2xCrX1atb -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:48 2026 by rpki-client