This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/JOkPA8hTaCex6PevZHvmCNxtsfs.roa File: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (raw, json) Hash identifier: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok= Subject key identifier: 24:E9:0F:03:C8:53:68:27:B1:E8:F7:AF:64:7B:E6:08:DC:6D:B1:FB Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79 Certificate serial: 019B7C1223066DED59EFEDA8D640589159B2 Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/JOkPA8hTaCex6PevZHvmCNxtsfs.roa Signing time: Fri 02 Jan 2026 00:18:41 +0000 ROA not before: Fri 02 Jan 2026 00:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202574 IP address blocks: 193.57.17.0/24 maxlen: 24 193.57.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:23:06:6d:ed:59:ef:ed:a8:d6:40:58:91:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b613794927050b22525ab70091835408eee4c79 Validity Not Before: Jan 2 00:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24e90f03c8536827b1e8f7af647be608dc6db1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:de:b8:f8:52:d0:42:ca:eb:5b:9a:69:20: e7:6d:17:0b:fd:c1:aa:97:93:b2:d9:87:26:68:a0: ee:17:dc:fb:c4:e6:2e:ed:05:ac:9a:81:94:6f:72: ca:12:3d:47:8d:4b:6c:0d:89:40:c7:90:10:06:48: a9:cb:82:ce:d0:81:62:78:d4:d0:e7:2d:be:2c:fc: 2d:c3:64:8a:28:e3:f7:24:cf:31:59:f9:6a:0f:77: e8:9f:0e:72:e9:6c:d1:6e:56:97:72:c2:6f:11:6a: d6:5e:f4:46:67:6e:3b:d9:92:5d:ee:05:fc:fc:4e: 20:a9:77:34:72:a7:05:4a:ec:8c:87:58:8a:f7:a8: 7a:b2:c0:fc:78:c2:f1:fb:59:2b:69:68:9b:28:6d: f4:87:34:7f:2d:e2:8f:6e:5e:9c:c2:86:67:fe:b4: 96:ce:43:43:f5:67:89:77:7e:ef:96:f8:dd:6d:bc: c7:3a:12:bc:f5:21:fa:15:7c:63:a4:01:02:50:e5: 91:f2:fc:38:a3:87:41:28:53:b7:32:29:39:88:49: d2:2a:22:44:cb:32:f3:52:ab:b6:b9:cd:9e:40:f4: d3:09:e5:24:f0:6f:a8:2f:c5:86:04:46:3d:e1:df: b1:d6:45:b2:fe:7a:72:30:fa:c7:e7:b6:dc:d9:0e: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E9:0F:03:C8:53:68:27:B1:E8:F7:AF:64:7B:E6:08:DC:6D:B1:FB X509v3 Authority Key Identifier: keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/JOkPA8hTaCex6PevZHvmCNxtsfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.17.0-193.57.18.255 Signature Algorithm: sha256WithRSAEncryption 6f:77:fb:d5:f9:1c:60:6e:5c:80:7b:28:21:c6:fb:da:c5:38: 94:f0:53:48:9b:58:dd:fe:ed:89:a6:95:2e:0e:1e:39:c7:28: 44:f5:da:fe:f7:be:35:9b:c5:a4:26:44:99:6e:6e:05:71:b2: 73:82:97:09:e5:3f:0d:51:57:2f:8a:74:02:29:85:60:53:f1: 23:3e:8f:41:f3:16:d6:08:61:0a:c2:c8:3e:9e:74:d9:df:7c: 97:0b:28:dc:fd:98:a2:da:71:22:36:b8:62:88:ff:a8:b4:81: 6e:19:ab:db:f1:5b:92:90:27:eb:be:49:17:bf:04:ac:55:64: 0b:5d:c3:92:ce:67:1d:a4:62:d8:d2:09:65:91:f7:0f:ec:51: b8:3e:f4:6e:a0:68:39:25:87:5c:c4:47:1e:51:0e:70:2f:27: 44:7d:07:31:a8:f5:ac:de:34:11:e0:4a:19:8d:9f:51:ac:ac: 3d:de:4e:9a:2f:c2:ac:9d:12:9e:3d:bb:8a:09:36:bd:ae:9f: 36:73:ae:62:81:7b:73:e2:79:a7:67:01:53:f5:fa:71:2e:d5: df:e9:6c:4a:97:b9:83:77:68:48:29:0e:1b:94:50:5e:5c:07: 6d:a1:1a:38:87:ba:7c:25:21:78:3d:2e:82:72:c3:eb:b2:3d: a8:a0:4f:c8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EiMGbe1Z7+2o1kBYkVmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl ZTRjNzkwHhcNMjYwMTAyMDAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGU5MGYwM2M4NTM2ODI3YjFlOGY3YWY2NDdiZTYwOGRjNmRiMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov/euPhS0ELK61uaaSDnbRcL/cGq l5Oy2YcmaKDuF9z7xOYu7QWsmoGUb3LKEj1HjUtsDYlAx5AQBkipy4LO0IFieNTQ 5y2+LPwtw2SKKOP3JM8xWflqD3fonw5y6WzRblaXcsJvEWrWXvRGZ2472ZJd7gX8 /E4gqXc0cqcFSuyMh1iK96h6ssD8eMLx+1kraWibKG30hzR/LeKPbl6cwoZn/rSW zkND9WeJd37vlvjdbbzHOhK89SH6FXxjpAECUOWR8vw4o4dBKFO3Mik5iEnSKiJE yzLzUqu2uc2eQPTTCeUk8G+oL8WGBEY94d+x1kWy/npyMPrH57bc2Q6WPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCTpDwPIU2gnsej3r2R75gjcbbH7MB8GA1UdIwQY MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt ZWMwNWQwMTk1MDM2LzEvSk9rUEE4aFRhQ2V4NlBldlpIdm1DTnh0c2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2 LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBORED BADBORIwDQYJKoZIhvcNAQELBQADggEBAG93+9X5HGBuXIB7KCHG+9rFOJTwU0ib WN3+7YmmlS4OHjnHKET12v73vjWbxaQmRJlubgVxsnOClwnlPw1RVy+KdAIphWBT 8SM+j0HzFtYIYQrCyD6edNnffJcLKNz9mKLacSI2uGKI/6i0gW4Zq9vxW5KQJ+u+ SRe/BKxVZAtdw5LOZx2kYtjSCWWR9w/sUbg+9G6gaDklh1zERx5RDnAvJ0R9BzGo 9azeNBHgShmNn1GsrD3eTpovwqydEp49u4oJNr2unzZzrmKBe3PieadnAVP1+nEu 1d/pbEqXuYN3aEgpDhuUUF5cB22hGjiHunwlIXg9LoJyw+uyPaigT8g= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:21 2026 by rpki-client