This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa File: j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa (raw, json) Hash identifier: rc09LpGqWbk6PYA80jVQRNeDW2Q3wDT/cj8KXISR7eo= Subject key identifier: 8F:E0:65:1F:A5:06:15:5E:64:24:36:41:1F:56:73:B9:1F:04:D5:F6 Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Certificate serial: 019B7C8063A079EEB48373504421624D51BA Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200657 IP address blocks: 194.99.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:a0:79:ee:b4:83:73:50:44:21:62:4d:51:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fe0651fa506155e642436411f5673b91f04d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:18:f5:5b:dc:a5:9d:7a:2b:72:5e:1c:5c: 11:9b:5e:f0:a3:d2:31:20:b6:af:bb:3f:56:22:64: de:66:af:36:6b:36:61:3b:f3:cd:e5:48:77:98:44: de:83:e5:02:85:07:58:13:ea:d7:25:01:20:2b:19: 3f:11:5c:ec:f6:75:06:19:81:0c:1e:49:db:97:67: 25:c8:0c:12:06:ab:b7:bd:09:cf:ed:54:56:9c:59: 44:43:1a:de:a8:d4:21:16:f5:2d:57:fc:a4:2d:8d: 24:a1:e5:81:19:10:e1:bb:70:6a:d7:3e:c1:6c:aa: fa:7a:d5:52:f4:7c:db:54:f9:df:7b:94:08:bb:00: 1d:07:a0:ce:c8:b1:93:46:fa:cd:a9:ae:68:ed:4d: 1a:74:8e:89:ee:a3:ee:88:ed:cd:21:a6:e7:84:c2: bb:0a:84:45:b3:b0:8d:50:bb:7a:76:8a:07:cf:a7: 51:f3:48:b3:e3:4e:68:8e:53:30:c3:08:e1:d0:2b: cb:5d:f4:fd:70:0d:f7:a9:84:b9:33:d0:36:87:4e: 8d:7e:26:bd:8e:d1:04:9a:0b:fc:94:c7:42:13:ee: a2:ee:42:a2:01:c6:86:fe:60:97:bd:b1:da:cf:ff: 78:d9:91:ba:73:7b:51:8d:5d:42:be:13:9e:3b:26: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E0:65:1F:A5:06:15:5E:64:24:36:41:1F:56:73:B9:1F:04:D5:F6 X509v3 Authority Key Identifier: keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.108.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:89:51:83:77:5e:53:19:e3:cc:9f:a0:d4:7d:98:19:01:8c: 75:39:68:c3:d2:38:aa:2b:31:10:3c:bd:01:c9:98:00:75:6c: ce:1d:7f:75:22:33:8f:5f:18:c1:42:31:d4:cf:a7:46:19:31: cc:53:0f:04:e6:cc:bf:42:92:fa:51:e4:73:f9:6e:7d:7f:90: 1b:7c:8c:97:0b:76:c1:71:b0:88:b8:3b:8a:35:ea:92:89:dc: 04:d6:7e:31:bb:de:04:d9:31:43:20:64:a8:dd:c1:03:3a:9c: 6c:45:8a:51:78:03:cc:de:d9:28:64:80:ce:d9:78:8e:69:46: bd:46:93:4f:e7:05:b9:84:4f:a4:41:0c:5f:85:83:a4:c2:ae: 11:75:de:c0:da:ad:e1:52:11:a4:86:a3:61:41:32:d4:a1:6f: ec:3f:35:66:31:68:5a:48:33:01:3b:91:c9:59:fb:d9:e4:d4: 6f:e5:4c:a0:17:79:3e:43:d6:0c:a2:14:ce:f6:bd:74:46:9b: f5:dd:8f:c9:7f:4b:67:51:60:8c:1e:0e:d0:14:1e:4f:81:ab: 5a:29:6b:7a:5e:43:5a:b9:db:17:d6:e4:2c:6b:a2:00:0a:f6: d6:e2:61:37:20:5b:e9:4f:9b:06:76:52:1a:7b:d9:10:db:4c: b3:7c:7e:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGOgee60g3NQRCFiTVG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTRkMDgxZjY1ZjBjOGIwNGYxZDJmZTczZTA5MGIwN2Fi MWFiNTgwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmUwNjUxZmE1MDYxNTVlNjQyNDM2NDExZjU2NzNiOTFmMDRkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQY9VvcpZ16K3JeHFwRm17wo9Ix ILavuz9WImTeZq82azZhO/PN5Uh3mETeg+UChQdYE+rXJQEgKxk/EVzs9nUGGYEM Hknbl2clyAwSBqu3vQnP7VRWnFlEQxreqNQhFvUtV/ykLY0koeWBGRDhu3Bq1z7B bKr6etVS9HzbVPnfe5QIuwAdB6DOyLGTRvrNqa5o7U0adI6J7qPuiO3NIabnhMK7 CoRFs7CNULt6dooHz6dR80iz405ojlMwwwjh0CvLXfT9cA33qYS5M9A2h06Nfia9 jtEEmgv8lMdCE+6i7kKiAcaG/mCXvbHaz/942ZG6c3tRjV1CvhOeOya7WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/gZR+lBhVeZCQ2QR9Wc7kfBNX2MB8GA1UdIwQY MBaAFFcU0IH2XwyLBPHS/nPgkLB6satYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODIt ZmMyNzRhZDkyMTBiLzEvai1CbEg2VUdGVjVrSkRaQkgxWnp1UjhFMWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODItZmMyNzRhZDkyMTBi LzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmNsMA0G CSqGSIb3DQEBCwUAA4IBAQBtiVGDd15TGePMn6DUfZgZAYx1OWjD0jiqKzEQPL0B yZgAdWzOHX91IjOPXxjBQjHUz6dGGTHMUw8E5sy/QpL6UeRz+W59f5AbfIyXC3bB cbCIuDuKNeqSidwE1n4xu94E2TFDIGSo3cEDOpxsRYpReAPM3tkoZIDO2XiOaUa9 RpNP5wW5hE+kQQxfhYOkwq4Rdd7A2q3hUhGkhqNhQTLUoW/sPzVmMWhaSDMBO5HJ WfvZ5NRv5UygF3k+Q9YMohTO9r10Rpv13Y/Jf0tnUWCMHg7QFB5PgataKWt6XkNa udsX1uQsa6IACvbW4mE3IFvpT5sGdlIae9kQ20yzfH5f -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:33 2026 by rpki-client