This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JGscMVmX7CfZ3uNxJBViP8SAmeI.roa File: JGscMVmX7CfZ3uNxJBViP8SAmeI.roa (raw, json) Hash identifier: QEcLWUmsG9HL4xIDGBSGa5vPYel0BedK2c4c8Lp6A9Y= Subject key identifier: 24:6B:1C:31:59:97:EC:27:D9:DE:E3:71:24:15:62:3F:C4:80:99:E2 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79107B2D6CA214FD4C6D0243D8D3456F Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JGscMVmX7CfZ3uNxJBViP8SAmeI.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 188.132.150.0/24 maxlen: 24 188.132.249.0/24 maxlen: 24 212.68.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7b:2d:6c:a2:14:fd:4c:6d:02:43:d8:d3:45:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=246b1c315997ec27d9dee3712415623fc48099e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:13:91:5d:76:a1:f1:c3:76:91:73:ff:fa: ff:91:90:57:7f:20:ea:22:6a:d5:87:90:b7:28:69: f2:15:a5:82:12:3e:5e:40:0f:95:6a:f9:ce:65:e9: f0:14:a1:83:1b:8d:e5:48:a8:49:f9:00:40:9e:ea: 36:80:93:25:9f:a8:3d:0b:e3:b6:66:ff:28:7f:dc: b3:ef:19:74:fb:50:c3:35:14:a2:11:eb:b1:fc:2d: 0e:a0:20:6b:03:5c:ba:63:75:ca:b5:5b:41:91:bc: ec:34:9b:03:34:66:69:55:a1:d4:fc:1a:f2:45:64: 1f:b6:5c:8e:0c:cf:ce:a5:97:37:22:f3:c3:91:9e: 2e:96:c4:4b:ec:94:73:d9:2e:14:9f:06:3e:bd:11: c9:95:73:f1:c9:fe:a7:fc:40:21:56:a3:27:99:00: f0:97:35:54:e9:cb:5e:b6:b0:02:1e:b2:02:97:03: ac:ca:c2:fd:19:7f:4b:69:35:b5:f9:fd:a1:6b:94: ac:0d:98:88:d5:f2:cd:5d:2a:bd:35:fd:51:c0:4b: eb:12:a2:dc:f6:c4:8c:6b:cb:b0:ec:f5:e2:2e:a1: b4:57:ef:7a:14:2a:9a:30:a0:4a:cf:36:e0:29:b5: c2:a1:bf:af:c6:de:1a:58:3e:21:ea:86:75:5b:01: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6B:1C:31:59:97:EC:27:D9:DE:E3:71:24:15:62:3F:C4:80:99:E2 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JGscMVmX7CfZ3uNxJBViP8SAmeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.150.0/24 188.132.249.0/24 212.68.59.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:32:07:5e:e9:26:fa:86:3b:7b:b3:09:9d:5d:94:4b:0c:33: 5d:a7:45:ee:03:92:5f:dd:60:ce:eb:e9:30:8e:30:54:36:4f: 9d:ba:88:c4:ed:c2:70:5f:2e:18:55:f9:ba:6d:c5:be:6a:ef: 17:e2:cf:48:51:93:8c:36:cf:42:49:e1:21:73:a8:aa:b0:21: b1:46:77:ad:2c:da:9d:bb:ba:02:a7:03:45:c1:78:a8:b3:2a: 76:c9:aa:bd:c2:12:55:87:35:6c:86:26:bf:f9:bf:bc:7f:52: e0:bd:95:49:d8:7c:1d:6c:9b:32:4a:2f:69:1b:c4:d1:22:e8: aa:95:ce:90:4d:fa:ca:0b:22:c1:b3:ee:42:89:eb:e0:ca:ae: fb:37:e7:bf:48:0f:7b:79:a7:0f:db:cc:56:9e:ed:e0:7f:de: 1a:eb:40:2b:7f:bd:f1:ea:d7:48:9d:fc:20:7f:05:03:08:87: cf:81:d8:d9:60:5a:05:75:0a:47:76:1e:dd:3b:b1:aa:c8:0c: f7:8a:d0:45:b7:4e:bb:2c:07:30:11:3f:26:ba:51:f1:6e:63: bc:3b:1d:01:1d:b0:9e:e6:21:69:4d:b8:2d:43:1a:e9:f8:d9: af:45:58:43:d3:a8:88:a5:78:1d:bd:40:f1:1d:10:d2:53:db: 23:1c:93:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EHstbKIU/UxtAkPY00VvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDZiMWMzMTU5OTdlYzI3ZDlkZWUzNzEyNDE1NjIzZmM0ODA5OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNMTkV12ofHDdpFz//r/kZBXfyDq ImrVh5C3KGnyFaWCEj5eQA+VavnOZenwFKGDG43lSKhJ+QBAnuo2gJMln6g9C+O2 Zv8of9yz7xl0+1DDNRSiEeux/C0OoCBrA1y6Y3XKtVtBkbzsNJsDNGZpVaHU/Bry RWQftlyODM/OpZc3IvPDkZ4ulsRL7JRz2S4UnwY+vRHJlXPxyf6n/EAhVqMnmQDw lzVU6ctetrACHrIClwOsysL9GX9LaTW1+f2ha5SsDZiI1fLNXSq9Nf1RwEvrEqLc 9sSMa8uw7PXiLqG0V+96FCqaMKBKzzbgKbXCob+vxt4aWD4h6oZ1WwFRbwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCRrHDFZl+wn2d7jcSQVYj/EgJniMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvSkdzY01WbVg3Q2ZaM3VOeEpCVmlQOFNBbWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvISWAwQA vIT5AwQA1EQ7MA0GCSqGSIb3DQEBCwUAA4IBAQCeMgde6Sb6hjt7swmdXZRLDDNd p0XuA5Jf3WDO6+kwjjBUNk+duojE7cJwXy4YVfm6bcW+au8X4s9IUZOMNs9CSeEh c6iqsCGxRnetLNqdu7oCpwNFwXiosyp2yaq9whJVhzVshia/+b+8f1LgvZVJ2Hwd bJsySi9pG8TRIuiqlc6QTfrKCyLBs+5Cievgyq77N+e/SA97eacP28xWnu3gf94a 60Arf73x6tdInfwgfwUDCIfPgdjZYFoFdQpHdh7dO7GqyAz3itBFt067LAcwET8m ulHxbmO8Ox0BHbCe5iFpTbgtQxrp+NmvRVhD06iIpXgdvUDxHRDSU9sjHJNx -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:51 2026 by rpki-client