This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa File: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (raw, json) Hash identifier: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg= Subject key identifier: 69:E2:51:0B:F6:6B:B3:55:DD:B3:36:B7:9B:E0:69:F7:86:C9:D5:D9 Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Certificate serial: 019B77596C6F9393753BBDD1139A6C36A481 Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 87.239.121.0/24 maxlen: 24 87.239.122.0/24 maxlen: 24 87.239.123.0/24 maxlen: 24 87.239.124.0/24 maxlen: 24 87.239.125.0/24 maxlen: 24 87.239.126.0/24 maxlen: 24 87.239.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:6f:93:93:75:3b:bd:d1:13:9a:6c:36:a4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e2510bf66bb355ddb336b79be069f786c9d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:44:2c:f2:4d:c9:bd:55:7d:2b:0d:89:72: 2a:45:3e:61:32:3c:74:cc:47:a2:e7:32:e4:55:08: df:b9:82:bf:09:48:ff:34:36:d3:1f:d3:8e:02:88: 71:11:b1:08:9c:3d:a2:97:32:ad:76:b8:3b:33:c2: bd:0f:70:31:c2:74:38:67:20:6a:28:32:57:88:62: fe:f0:8a:8d:85:df:72:8f:cc:8c:4a:76:44:8e:9c: 19:99:8a:0f:0e:e0:9f:33:50:86:64:b6:b5:30:da: 67:d8:80:17:dc:fc:71:a0:a8:81:74:62:51:25:9b: 53:e1:d3:b4:21:37:88:1d:c4:d1:f2:41:4f:db:36: 99:cf:ee:29:15:a7:ec:a2:00:fa:67:6f:54:82:7e: 0b:29:18:b0:ef:bc:d9:2c:e8:95:3c:f4:62:80:b0: 52:d8:66:c4:c7:9e:7c:90:bf:80:58:4d:77:7d:1d: f7:44:4a:c2:97:d9:fe:3b:9b:cd:b8:24:56:bb:d9: 7b:57:98:14:02:be:95:22:b7:36:85:3d:af:3e:09: fa:6e:f5:28:4d:e8:df:f1:e8:98:65:0d:4c:c7:9a: 40:29:cd:d6:bc:d3:bd:22:51:f3:89:3c:a0:0b:a8: 15:9a:d2:9b:53:95:38:12:28:77:af:78:51:d0:e4: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:51:0B:F6:6B:B3:55:DD:B3:36:B7:9B:E0:69:F7:86:C9:D5:D9 X509v3 Authority Key Identifier: keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.121.0-87.239.127.255 Signature Algorithm: sha256WithRSAEncryption 7d:c5:e0:a1:64:68:81:0e:55:49:e8:33:ad:84:bf:b2:13:2b: 17:db:8b:28:e7:11:14:ef:58:c1:bc:d3:fc:65:03:3f:ef:32: ad:c7:8d:48:8c:67:70:9a:a9:57:52:b5:1b:1c:70:d5:99:28: ec:ea:ba:ab:e5:6f:b5:7b:dd:5e:0e:f1:7b:e1:b7:d4:df:5c: 32:ca:ce:59:1c:6b:ea:cc:37:40:dc:c5:9c:84:93:e5:65:42: 6f:fe:82:83:1c:71:e0:de:49:cc:12:a0:d9:23:8e:15:11:8a: 22:62:66:bb:89:61:d1:a8:9e:e4:e2:4c:e4:c2:1f:eb:3c:57: 6d:27:3c:18:34:2f:81:4d:e2:3a:16:e6:18:a8:2b:1a:ea:6b: 1c:17:3c:ba:fb:c6:32:cf:5e:66:60:96:2d:bb:2a:6e:54:c0: 65:1e:69:0d:ea:58:6b:9e:1b:7b:c6:b2:f8:53:82:15:23:3b: e1:d3:f6:8c:97:d8:4b:0b:7a:83:43:42:d7:aa:3a:33:2b:61: 5a:e7:52:d2:50:06:cf:8a:3b:4d:65:03:b7:47:9d:34:b8:8f: 26:10:a6:94:63:07:32:67:72:67:c2:e2:94:b2:55:f7:be:78: 56:0e:53:d8:64:14:8f:94:29:7c:3c:1f:b6:2c:ea:53:51:07: 4a:19:56:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWxvk5N1O73RE5psNqSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWNlZGE1YmYzNzkwMWZlOWU0NGY3M2I1YmY4MmI2ODdi MzQ1NzIwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWUyNTEwYmY2NmJiMzU1ZGRiMzM2Yjc5YmUwNjlmNzg2YzlkNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxdELPJNyb1VfSsNiXIqRT5hMjx0 zEei5zLkVQjfuYK/CUj/NDbTH9OOAohxEbEInD2ilzKtdrg7M8K9D3AxwnQ4ZyBq KDJXiGL+8IqNhd9yj8yMSnZEjpwZmYoPDuCfM1CGZLa1MNpn2IAX3PxxoKiBdGJR JZtT4dO0ITeIHcTR8kFP2zaZz+4pFafsogD6Z29Ugn4LKRiw77zZLOiVPPRigLBS 2GbEx558kL+AWE13fR33RErCl9n+O5vNuCRWu9l7V5gUAr6VIrc2hT2vPgn6bvUo Tejf8eiYZQ1Mx5pAKc3WvNO9IlHziTygC6gVmtKbU5U4Eih3r3hR0OS/vwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGniUQv2a7NV3bM2t5vgafeGydXZMB8GA1UdIwQY MBaAFJac7aW/N5Af6eRPc7W/graHs0VyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQt MjFmYzlhZmM4YWMxLzEvYWVKUkNfWnJzMVhkc3phM20tQnA5NGJKMWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQtMjFmYzlhZmM4YWMx LzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABX73kD BAdX7wAwDQYJKoZIhvcNAQELBQADggEBAH3F4KFkaIEOVUnoM62Ev7ITKxfbiyjn ERTvWMG80/xlAz/vMq3HjUiMZ3CaqVdStRsccNWZKOzquqvlb7V73V4O8Xvht9Tf XDLKzlkca+rMN0DcxZyEk+VlQm/+goMcceDeScwSoNkjjhURiiJiZruJYdGonuTi TOTCH+s8V20nPBg0L4FN4joW5hioKxrqaxwXPLr7xjLPXmZgli27Km5UwGUeaQ3q WGueG3vGsvhTghUjO+HT9oyX2EsLeoNDQteqOjMrYVrnUtJQBs+KO01lA7dHnTS4 jyYQppRjBzJncmfC4pSyVfe+eFYOU9hkFI+UKXw8H7Ys6lNRB0oZVvo= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client