This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa File: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (raw, json) Hash identifier: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk= Subject key identifier: 24:21:F9:70:6B:6A:30:F0:0F:A6:85:55:19:31:FF:D1:82:C6:BD:65 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A85B0AF00FBB3A314BAC410EBCF7 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa Signing time: Fri 02 Jan 2026 08:17:40 +0000 ROA not before: Fri 02 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 141.226.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a8:5b:0a:f0:0f:bb:3a:31:4b:ac:41:0e:bc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2421f9706b6a30f00fa685551931ffd182c6bd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:be:d2:b2:bf:b7:73:d3:00:97:21:0f:5d: 97:82:09:f3:ea:c1:83:57:e7:39:9e:74:55:40:f9: 2d:26:32:49:70:d7:95:90:b7:c2:42:81:a0:5c:2d: 18:92:c9:b7:80:ef:26:58:bb:90:d4:96:ad:06:93: e2:09:31:01:65:7a:7b:c0:fa:51:7a:c6:43:5b:c7: 7a:ed:86:d7:ad:ee:7a:b2:71:27:55:3e:51:c8:b7: 1e:e5:ca:eb:26:95:e9:15:6d:49:02:65:e7:e9:8d: 5d:61:f6:ac:21:48:c6:cc:ae:ee:fd:23:91:8c:9f: aa:51:6f:a9:61:7e:8f:1d:97:41:d8:94:c3:0f:04: 07:79:32:8d:57:6b:be:55:f2:34:0c:f9:d5:0b:5c: 9c:5e:d0:ae:f5:c0:08:59:ce:fc:5c:ff:41:45:98: 90:c2:ef:d3:1a:79:37:ef:5b:88:ae:6e:c8:cc:4b: 9c:76:3d:93:77:49:25:50:c8:f5:83:06:9c:0b:8c: e1:51:1e:eb:a8:2d:95:c0:6f:0c:ed:21:be:e6:a7: f2:f3:ae:d2:98:6f:6b:fa:7e:8c:e6:35:b6:68:b6: 7a:18:ba:c7:48:1e:0a:7d:0c:6a:6f:c9:a9:78:55: 2d:17:13:ae:65:67:e0:59:db:77:61:cb:44:f2:b0: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:21:F9:70:6B:6A:30:F0:0F:A6:85:55:19:31:FF:D1:82:C6:BD:65 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.246.0/24 Signature Algorithm: sha256WithRSAEncryption 14:79:d3:78:ce:c1:4f:5e:37:82:0f:7c:3a:9e:31:c3:bf:1e: 7f:af:19:78:83:15:b1:52:7a:66:af:96:ff:c2:23:43:c5:e2: 8e:72:b0:67:a6:71:8e:16:5e:14:db:f9:0e:7b:9f:f8:5d:f2: 36:bb:2a:ae:44:25:dd:37:e1:a2:78:49:cb:6d:79:a7:3e:95: 84:12:54:fa:f0:90:ba:d7:37:88:99:11:23:ec:1c:f6:a2:85: 39:a8:6e:a9:b6:3a:c5:d8:b3:95:2f:29:30:79:6b:1d:a3:df: 2f:ba:7b:78:08:1f:b0:0a:6a:3a:73:84:ca:18:b5:46:7c:3c: 9b:aa:f2:93:56:83:a1:3e:ed:ff:1e:7e:81:92:3e:74:33:06: 07:ba:42:cb:48:ac:50:82:27:b4:78:9b:38:58:0c:f7:b7:b2: 16:4c:c8:96:36:f7:44:44:12:93:f6:79:a9:3f:2e:7d:ca:98: 00:fc:6a:e8:ca:26:3e:32:d4:69:f7:97:f6:d9:d8:a8:81:9f: 28:83:87:17:7b:84:c6:ce:dd:9d:b6:cd:fa:20:e6:72:8c:f7: c6:4f:85:21:2f:26:b9:14:99:87:ea:3e:a1:eb:1f:97:7b:2e: f2:4c:b2:f4:71:81:da:d6:2e:13:fb:92:a6:05:12:0d:d5:8d: 97:9f:56:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKhbCvAPuzoxS6xBDrz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDIxZjk3MDZiNmEzMGYwMGZhNjg1NTUxOTMxZmZkMTgyYzZiZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGq+0rK/t3PTAJchD12Xggnz6sGD V+c5nnRVQPktJjJJcNeVkLfCQoGgXC0Yksm3gO8mWLuQ1JatBpPiCTEBZXp7wPpR esZDW8d67YbXre56snEnVT5RyLce5crrJpXpFW1JAmXn6Y1dYfasIUjGzK7u/SOR jJ+qUW+pYX6PHZdB2JTDDwQHeTKNV2u+VfI0DPnVC1ycXtCu9cAIWc78XP9BRZiQ wu/TGnk371uIrm7IzEucdj2Td0klUMj1gwacC4zhUR7rqC2VwG8M7SG+5qfy867S mG9r+n6M5jW2aLZ6GLrHSB4KfQxqb8mpeFUtFxOuZWfgWdt3YctE8rANlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQh+XBrajDwD6aFVRkx/9GCxr1lMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvSkNINWNHdHFNUEFQcG9WVkdUSF8wWUxHdldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeL2MA0G CSqGSIb3DQEBCwUAA4IBAQAUedN4zsFPXjeCD3w6njHDvx5/rxl4gxWxUnpmr5b/ wiNDxeKOcrBnpnGOFl4U2/kOe5/4XfI2uyquRCXdN+GieEnLbXmnPpWEElT68JC6 1zeImREj7Bz2ooU5qG6ptjrF2LOVLykweWsdo98vunt4CB+wCmo6c4TKGLVGfDyb qvKTVoOhPu3/Hn6Bkj50MwYHukLLSKxQgie0eJs4WAz3t7IWTMiWNvdERBKT9nmp Py59ypgA/GroyiY+MtRp95f22diogZ8og4cXe4TGzt2dts36IOZyjPfGT4UhLya5 FJmH6j6h6x+Xey7yTLL0cYHa1i4T+5KmBRIN1Y2Xn1a9 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client