This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa File: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (raw, json) Hash identifier: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ= Subject key identifier: 8C:64:8D:1C:CA:45:35:B4:24:3B:F3:F1:80:5B:C2:FF:81:9F:F1:01 Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019B7A5AF8864FBDD147FCC77BE53C6E3762 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206813 IP address blocks: 87.253.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f8:86:4f:bd:d1:47:fc:c7:7b:e5:3c:6e:37:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c648d1cca4535b4243bf3f1805bc2ff819ff101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:16:a4:de:b0:6d:14:b4:6f:54:7e:ae:02:5e: 53:e1:ea:ee:db:f5:e8:e3:42:3f:26:5b:a0:2a:65: 3b:80:b3:f8:99:d9:40:ea:30:c4:b9:3d:3e:63:90: c8:87:21:d1:3d:e1:d5:59:86:79:fd:ca:a2:4e:8e: 11:ec:0a:d8:c9:2c:45:fb:e5:a2:f5:71:72:f8:06: ce:84:d2:d5:33:b4:2f:cd:bb:4d:ad:d2:84:6e:f9: 1e:30:89:76:37:ae:da:1a:62:78:6a:b3:f2:3c:8e: 67:09:13:68:52:2d:ce:e9:40:1f:62:b2:d3:47:b6: fe:63:39:b5:e0:1c:c2:1e:51:59:7f:72:1a:b0:0e: f7:6d:d0:c3:74:0c:7a:b3:46:b6:a9:80:fd:10:7c: 66:02:05:8b:01:12:c7:cd:fe:77:1e:2b:92:b2:33: e9:23:22:20:02:e6:f6:eb:23:62:a5:86:5f:da:e7: d0:6d:00:09:7e:d9:f9:25:88:f6:e5:5f:00:20:8a: 47:b6:eb:b9:93:5c:c0:97:b8:c2:0d:85:a0:7f:f4: fe:86:e3:6d:d5:07:98:95:bf:5d:16:4f:ec:81:d7: e3:03:7c:72:70:18:10:6e:18:ab:12:fe:00:99:72: 7c:36:7b:33:4c:e3:48:98:23:3c:43:fa:6f:be:92: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:8D:1C:CA:45:35:B4:24:3B:F3:F1:80:5B:C2:FF:81:9F:F1:01 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.253.188.0/24 Signature Algorithm: sha256WithRSAEncryption 38:8a:8d:97:52:f6:3d:f5:31:98:48:e4:fd:8d:0a:14:d0:c8: 7c:c9:c7:84:82:af:dd:0e:f8:3b:9a:2a:13:3e:d1:47:08:ff: d2:64:da:00:81:cc:10:4d:4d:fa:b1:09:f0:39:1c:b3:42:05: 4e:71:77:5a:36:13:ac:f6:18:a9:d1:bb:86:cd:06:cb:a6:23: bc:c6:92:e6:5c:ab:29:99:6c:a4:d0:ae:59:30:77:3a:69:34: 62:89:b6:bc:2e:17:7a:83:99:bd:08:39:6e:eb:c2:c6:11:81: 40:b2:01:a8:72:2a:b5:54:04:f7:ca:29:87:26:83:2f:38:03: a4:8a:56:67:cd:82:0c:6c:59:6b:af:b3:ce:5e:94:70:1c:ae: fa:29:28:5d:70:cd:fe:06:1f:3b:2b:1a:76:8c:59:2f:0d:f3: db:d1:b6:d5:a6:9b:b1:90:7d:5e:46:82:56:83:64:92:1c:2b: 0e:09:37:89:b4:b5:73:48:f7:0a:7e:f8:4c:f3:25:26:c6:e4: 2a:c7:c8:13:a7:58:72:27:3d:fe:b4:bb:31:ea:a4:68:4a:fb: cd:7d:c3:5a:ec:52:ac:17:97:fc:1f:9d:69:65:28:b6:b3:4c: 06:73:df:b6:d0:6a:97:d5:16:6f:26:d8:3e:56:50:45:4d:53: 96:9e:da:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WviGT73RR/zHe+U8bjdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzY0OGQxY2NhNDUzNWI0MjQzYmYzZjE4MDViYzJmZjgxOWZmMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xak3rBtFLRvVH6uAl5T4eru2/Xo 40I/JlugKmU7gLP4mdlA6jDEuT0+Y5DIhyHRPeHVWYZ5/cqiTo4R7ArYySxF++Wi 9XFy+AbOhNLVM7QvzbtNrdKEbvkeMIl2N67aGmJ4arPyPI5nCRNoUi3O6UAfYrLT R7b+Yzm14BzCHlFZf3IasA73bdDDdAx6s0a2qYD9EHxmAgWLARLHzf53HiuSsjPp IyIgAub26yNipYZf2ufQbQAJftn5JYj25V8AIIpHtuu5k1zAl7jCDYWgf/T+huNt 1QeYlb9dFk/sgdfjA3xycBgQbhirEv4AmXJ8NnszTONImCM8Q/pvvpIxoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxkjRzKRTW0JDvz8YBbwv+Bn/EBMB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvakdTTkhNcEZOYlFrT19QeGdGdkNfNEdmOFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/28MA0G CSqGSIb3DQEBCwUAA4IBAQA4io2XUvY99TGYSOT9jQoU0Mh8yceEgq/dDvg7mioT PtFHCP/SZNoAgcwQTU36sQnwORyzQgVOcXdaNhOs9hip0buGzQbLpiO8xpLmXKsp mWyk0K5ZMHc6aTRiiba8Lhd6g5m9CDlu68LGEYFAsgGociq1VAT3yimHJoMvOAOk ilZnzYIMbFlrr7POXpRwHK76KShdcM3+Bh87Kxp2jFkvDfPb0bbVppuxkH1eRoJW g2SSHCsOCTeJtLVzSPcKfvhM8yUmxuQqx8gTp1hyJz3+tLsx6qRoSvvNfcNa7FKs F5f8H51pZSi2s0wGc9+20GqX1RZvJtg+VlBFTVOWntrU -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:13 2026 by rpki-client