This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Jcx0b1zHDF9UJEjNraMW7Wkin54.roa File: Jcx0b1zHDF9UJEjNraMW7Wkin54.roa (raw, json) Hash identifier: OyMTt7xgc2x7/DsfiJtLeI1ThqbxPs1lS0m0QvvcPzI= Subject key identifier: 25:CC:74:6F:5C:C7:0C:5F:54:24:48:CD:AD:A3:16:ED:69:22:9F:9E Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1 Certificate serial: 019B7E376EC73D764FB0DE42BC764951AD7A Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Jcx0b1zHDF9UJEjNraMW7Wkin54.roa Signing time: Fri 02 Jan 2026 10:18:40 +0000 ROA not before: Fri 02 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16167 IP address blocks: 185.243.0.0/24 maxlen: 24 193.41.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6e:c7:3d:76:4f:b0:de:42:bc:76:49:51:ad:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1 Validity Not Before: Jan 2 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25cc746f5cc70c5f542448cdada316ed69229f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:d1:25:aa:ba:43:9b:fb:a2:ab:19:f2:dd: 45:ca:6d:06:df:61:4a:1d:66:08:63:4a:9f:2e:14: 7a:03:67:e5:f4:42:41:47:61:08:5a:66:39:e3:36: 49:1a:97:20:7e:f5:89:85:55:03:db:7e:65:19:30: 34:db:63:20:cf:3a:6e:c5:43:9b:48:3f:37:15:db: 74:b3:55:6c:85:1e:d6:8d:a5:ec:75:ad:ef:f2:b9: e6:30:8b:da:68:75:75:db:ae:fe:46:4c:c6:ea:bf: b9:13:61:72:bb:28:74:53:25:f9:76:0f:fc:e6:d1: 84:2e:29:4d:ad:08:ac:67:90:45:16:08:d3:e4:ce: 90:d5:37:39:28:49:52:f4:fa:1a:33:5c:ed:dc:05: 3e:49:11:ed:cd:93:4a:4d:1a:a6:d2:ab:ae:92:25: 86:34:05:55:83:df:7a:31:0a:7d:3a:fa:20:05:b8: 0e:d3:df:ee:15:a8:94:f8:17:d7:f3:5f:fd:e8:9b: 41:56:36:fb:3a:71:1d:da:3f:07:65:06:15:c1:f0: ec:37:d4:f6:79:ed:a9:ba:ee:a8:72:93:0d:a9:bf: 76:70:6d:69:cd:cf:af:f8:5a:d4:ac:89:db:35:5e: 9e:7b:1e:7e:00:eb:f1:ce:a4:82:5c:67:6d:5c:16: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CC:74:6F:5C:C7:0C:5F:54:24:48:CD:AD:A3:16:ED:69:22:9F:9E X509v3 Authority Key Identifier: keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/Jcx0b1zHDF9UJEjNraMW7Wkin54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.0.0/24 193.41.230.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:00:11:93:52:25:34:9e:77:61:93:cc:72:d8:48:dd:32:45: 3e:8e:77:11:61:c3:38:d6:74:af:bd:6e:0e:ce:f9:36:53:47: dd:25:c9:26:2e:ad:04:be:76:6c:5c:20:66:83:b6:1e:c9:8f: d6:2e:8c:83:ff:94:56:a8:a7:5e:88:00:98:a0:28:f4:f5:5e: 4e:e2:7e:22:fe:5d:bf:b9:37:dc:67:ed:d8:12:7d:2b:0e:01: ea:39:b0:0f:83:7c:03:ea:09:00:09:ac:79:d4:40:6d:b7:d2: 1f:5b:93:92:a7:ce:9c:b3:c1:53:5a:55:25:23:af:13:d9:a1: fa:d7:0f:06:61:15:c0:43:79:ec:0a:85:c4:9f:12:1f:18:dd: 50:7e:f8:86:31:64:32:f6:32:cb:10:f7:d5:f3:f7:8e:ac:41: d1:21:6b:0b:cb:ee:78:d2:13:a4:89:57:93:d9:84:54:32:e1: 10:fc:f5:73:28:16:8f:26:fc:f7:ae:38:1b:0f:25:7d:02:91: 5e:79:64:61:f6:e3:c6:e3:ee:97:31:2f:dd:96:8c:0f:c7:2d: 13:4d:e8:2d:9f:d9:a1:82:78:21:8d:d2:c3:6f:5d:b6:4a:c6: a9:24:b3:78:6e:1f:a4:78:5f:7e:31:ed:0d:f7:00:e2:b9:bf: 9f:6a:6f:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N27HPXZPsN5CvHZJUa16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTQxNjA5Y2Q5NDdiZWRmYzk5MTI1ODQwMDMwMTA4YTNm MTQxYzEwHhcNMjYwMTAyMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWNjNzQ2ZjVjYzcwYzVmNTQyNDQ4Y2RhZGEzMTZlZDY5MjI5ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYjRJaq6Q5v7oqsZ8t1Fym0G32FK HWYIY0qfLhR6A2fl9EJBR2EIWmY54zZJGpcgfvWJhVUD235lGTA022MgzzpuxUOb SD83Fdt0s1VshR7WjaXsda3v8rnmMIvaaHV1267+RkzG6r+5E2Fyuyh0UyX5dg/8 5tGELilNrQisZ5BFFgjT5M6Q1Tc5KElS9PoaM1zt3AU+SRHtzZNKTRqm0quukiWG NAVVg996MQp9OvogBbgO09/uFaiU+BfX81/96JtBVjb7OnEd2j8HZQYVwfDsN9T2 ee2puu6ocpMNqb92cG1pzc+v+FrUrInbNV6eex5+AOvxzqSCXGdtXBYsgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCXMdG9cxwxfVCRIza2jFu1pIp+eMB8GA1UdIwQY MBaAFKVUFgnNlHvt/JkSWEADAQij8UHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUt NTRjMmMwY2FiN2MzLzEvSmN4MGIxekhERjlVSkVqTnJhTVc3V2tpbjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUtNTRjMmMwY2FiN2Mz LzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufMAAwQA wSnmMA0GCSqGSIb3DQEBCwUAA4IBAQCPABGTUiU0nndhk8xy2EjdMkU+jncRYcM4 1nSvvW4Ozvk2U0fdJckmLq0EvnZsXCBmg7YeyY/WLoyD/5RWqKdeiACYoCj09V5O 4n4i/l2/uTfcZ+3YEn0rDgHqObAPg3wD6gkACax51EBtt9IfW5OSp86cs8FTWlUl I68T2aH61w8GYRXAQ3nsCoXEnxIfGN1QfviGMWQy9jLLEPfV8/eOrEHRIWsLy+54 0hOkiVeT2YRUMuEQ/PVzKBaPJvz3rjgbDyV9ApFeeWRh9uPG4+6XMS/dlowPxy0T Tegtn9mhgnghjdLDb122SsapJLN4bh+keF9+Me0N9wDiub+fam+6 -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:44 2026 by rpki-client