This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/JBq5eeimT_KUG5CSYUSbXpxqVWI.roa File: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (raw, json) Hash identifier: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0= Subject key identifier: 24:1A:B9:79:E8:A6:4F:F2:94:1B:90:92:61:44:9B:5E:9C:6A:55:62 Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Certificate serial: 019B7F84F1E80A7BDFB1A4A251825C13575E Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/JBq5eeimT_KUG5CSYUSbXpxqVWI.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 194.153.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f1:e8:0a:7b:df:b1:a4:a2:51:82:5c:13:57:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241ab979e8a64ff2941b909261449b5e9c6a5562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:f2:b3:77:b1:87:c2:5c:84:63:94:1b:d9: 88:d4:a3:99:e2:4e:eb:88:0e:05:bf:8a:88:10:2d: 40:46:a4:45:66:17:67:04:bb:a4:6e:ef:8f:eb:5c: b5:9e:b7:55:07:ac:70:75:29:3f:cf:82:6e:7f:67: bb:02:89:89:38:52:b4:70:44:d6:6d:d0:1c:26:64: 1b:3d:f3:ab:95:81:c3:37:9a:bf:15:8a:9c:c1:87: 21:10:c2:1c:21:b2:b6:93:6a:6b:4e:65:bf:43:42: ea:a1:18:33:49:fc:8d:96:bd:95:52:52:0c:c4:8b: 58:7e:ac:73:e2:a5:aa:21:9d:50:55:6e:b6:6e:34: 65:ee:a4:06:a5:e8:7e:fa:68:73:ad:56:ac:30:6b: 5c:86:2b:17:36:f0:85:30:ff:72:f0:7a:89:13:23: 67:49:a8:30:0e:dc:e8:d5:9d:62:f0:c8:0f:49:f5: 18:48:86:fb:43:b9:6b:0e:18:dd:7a:1c:7d:1c:cc: bf:8a:8d:17:65:89:c1:fd:f1:a6:44:60:f4:a4:93: 9b:ef:e5:43:dc:69:b2:8c:f8:bb:c2:e1:f4:99:e5: 31:89:8a:c7:27:35:e4:a2:02:f4:a6:4b:0e:e8:5b: 31:4b:57:08:9e:51:6e:07:c7:a0:a6:bd:b7:ab:2d: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:B9:79:E8:A6:4F:F2:94:1B:90:92:61:44:9B:5E:9C:6A:55:62 X509v3 Authority Key Identifier: keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/JBq5eeimT_KUG5CSYUSbXpxqVWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.248.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cb:06:4a:62:50:b7:13:a7:ed:0c:3d:f8:b7:7c:3e:15:52: ac:dd:ca:9a:b6:7e:a1:2d:d7:0a:0e:cb:88:b2:96:e3:78:76: 86:47:ee:47:33:b5:74:1d:cf:31:57:fa:41:10:31:3f:f3:94: ca:b0:a9:5d:f0:9b:1e:7d:f9:ea:a7:91:bf:4b:45:80:e5:d9: bb:aa:91:ea:35:11:da:2a:8e:f8:a3:87:dc:a3:e1:e7:c9:7f: 0a:9c:f3:0a:fc:f8:6c:17:23:fe:0e:a0:b7:5a:a8:c8:64:0f: b6:6c:9e:3a:5e:8c:3f:22:05:78:a2:02:81:e0:9b:0c:99:53: 45:9c:89:f9:21:1f:7a:e9:70:bb:0f:6b:c2:8b:5f:0a:13:ef: fb:15:ac:6b:04:24:bf:bd:cc:48:c4:4c:61:72:ff:7f:61:a4: 33:d1:0b:37:e8:97:f3:3e:a1:90:16:13:d7:4f:a2:ce:30:01: ab:3e:4b:9a:ef:99:2d:4b:e1:b8:d9:71:38:83:f5:bb:6b:57: 59:1b:c7:df:dd:56:3e:55:2b:32:35:79:f7:d6:12:22:1a:29: f0:16:a7:f3:cb:d8:8d:c0:af:ab:f7:7d:f4:a8:e1:b7:51:65: 64:e3:73:77:e1:ba:61:ff:1c:f6:31:08:68:51:bf:b5:42:81: a1:d0:d4:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPHoCnvfsaSiUYJcE1deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh OGFlMzYwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFhYjk3OWU4YTY0ZmYyOTQxYjkwOTI2MTQ0OWI1ZTljNmE1NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLys3exh8JchGOUG9mI1KOZ4k7r iA4Fv4qIEC1ARqRFZhdnBLukbu+P61y1nrdVB6xwdSk/z4Juf2e7AomJOFK0cETW bdAcJmQbPfOrlYHDN5q/FYqcwYchEMIcIbK2k2prTmW/Q0LqoRgzSfyNlr2VUlIM xItYfqxz4qWqIZ1QVW62bjRl7qQGpeh++mhzrVasMGtchisXNvCFMP9y8HqJEyNn SagwDtzo1Z1i8MgPSfUYSIb7Q7lrDhjdehx9HMy/io0XZYnB/fGmRGD0pJOb7+VD 3GmyjPi7wuH0meUxiYrHJzXkogL0pksO6FsxS1cInlFuB8egpr23qy3E+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQauXnopk/ylBuQkmFEm16calViMB8GA1UdIwQY MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt NGU3YmNhNTVmODIxLzEvSkJxNWVlaW1UX0tVRzVDU1lVU2JYcHhxVldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpn4MA0G CSqGSIb3DQEBCwUAA4IBAQAYywZKYlC3E6ftDD34t3w+FVKs3cqatn6hLdcKDsuI spbjeHaGR+5HM7V0Hc8xV/pBEDE/85TKsKld8Jseffnqp5G/S0WA5dm7qpHqNRHa Ko74o4fco+HnyX8KnPMK/PhsFyP+DqC3WqjIZA+2bJ46Xow/IgV4ogKB4JsMmVNF nIn5IR966XC7D2vCi18KE+/7FaxrBCS/vcxIxExhcv9/YaQz0Qs36JfzPqGQFhPX T6LOMAGrPkua75ktS+G42XE4g/W7a1dZG8ff3VY+VSsyNXn31hIiGinwFqfzy9iN wK+r9330qOG3UWVk43N34bph/xz2MQhoUb+1QoGh0NQx -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:55 2026 by rpki-client