This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Jom3Z6hpsj4se4kJiJIserggFPU.roa File: Jom3Z6hpsj4se4kJiJIserggFPU.roa (raw, json) Hash identifier: SFhndB8J4dqbh8uSsMhQf4xorXlCR6T2jl4N2MNSv/E= Subject key identifier: 26:89:B7:67:A8:69:B2:3E:2C:7B:89:09:88:92:2C:7A:B8:20:14:F5 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F159B71871DBF60F18CB1E83E795A2A Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Jom3Z6hpsj4se4kJiJIserggFPU.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12389 IP address blocks: 2.16.20.0/24 maxlen: 24 2.16.21.0/24 maxlen: 24 2.16.53.0/24 maxlen: 24 2.17.144.0/24 maxlen: 24 2.17.145.0/24 maxlen: 24 2.17.146.0/24 maxlen: 24 2.19.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9b:71:87:1d:bf:60:f1:8c:b1:e8:3e:79:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2689b767a869b23e2c7b890988922c7ab82014f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:46:18:54:aa:3d:45:ff:60:69:7e:ba:26: b8:a1:42:82:76:1c:0e:dc:d9:2a:9c:c8:34:e8:b7: c6:bc:42:24:53:c0:a0:3a:38:9c:54:38:b0:6f:7b: 52:28:52:6f:f8:ae:e3:13:6b:8d:2d:7d:44:b4:24: 8a:bd:37:7c:e7:b3:a9:dd:bb:ed:71:3d:d4:5a:4c: 19:83:83:4a:4d:a4:cc:f8:e2:2c:2a:a3:e6:c1:f1: c4:8b:f9:72:e9:41:fb:58:d4:94:51:f8:b4:8d:c7: a7:2f:28:de:b2:33:e8:7b:bf:ab:a2:df:aa:33:59: e3:4f:b0:2b:72:5b:76:ef:53:1e:02:f1:18:72:6a: 9e:e5:98:7b:70:7d:81:1b:a2:4f:a3:79:1e:bd:fb: 10:19:f8:03:3a:dd:ae:8e:2d:65:4c:b8:27:41:fa: 12:c5:df:e5:11:bf:19:3b:9c:e4:34:49:8c:cd:1f: 22:a0:90:f0:0a:7f:48:6a:45:d3:7c:a7:8d:76:af: 66:f9:34:80:bd:f5:eb:60:ce:bf:10:37:a3:ee:f8: bf:1c:e2:89:39:7f:88:c8:35:dd:40:c9:3c:b9:1c: ca:59:be:3c:63:71:17:e7:97:4e:bd:61:67:24:e6: c9:52:46:60:45:e1:23:fb:15:b3:c3:af:4d:15:f7: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:89:B7:67:A8:69:B2:3E:2C:7B:89:09:88:92:2C:7A:B8:20:14:F5 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Jom3Z6hpsj4se4kJiJIserggFPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.16.20.0/23 2.16.53.0/24 2.17.144.0-2.17.146.255 2.19.181.0/24 Signature Algorithm: sha256WithRSAEncryption 23:17:7c:42:c8:65:4c:5a:b5:c5:3e:61:9f:ba:13:86:4c:d7: c3:39:41:23:13:8a:59:5b:0e:3f:ce:63:18:c3:e4:2b:05:57: 3e:a3:72:74:eb:b1:9a:8d:00:9f:fb:db:2b:aa:f3:43:b6:b4: 98:6e:35:d1:09:69:d1:fe:01:30:a1:90:52:83:57:66:43:12: d6:44:40:97:a6:6a:37:29:75:5a:16:9f:40:2b:e3:7b:f1:5d: 06:98:46:f3:c5:b2:c9:0b:15:7d:b5:7d:46:5f:17:d5:f8:01: 66:07:03:7e:97:68:8d:9e:0d:d0:4b:e8:b9:b4:f4:ba:25:1d: 05:3b:d2:d4:a6:49:74:90:13:4c:dd:d9:a2:40:64:4a:9c:05: 69:d5:b4:ec:20:25:ba:73:d7:c1:44:a7:a4:84:87:b2:68:aa: 77:ff:ee:99:3b:e9:1e:c4:85:8f:d9:ed:98:46:e1:d1:28:67: 43:27:1a:dc:fc:90:22:df:7c:a4:63:fa:a2:51:5c:1d:56:49: 37:f1:28:49:2f:ae:22:38:02:b9:22:e3:0f:f8:9e:39:fa:6a: ed:6e:ea:41:04:68:9d:b5:25:4d:0d:ba:0b:72:a0:ac:08:18: 62:92:04:b0:94:88:0e:0e:95:38:84:13:a3:49:4b:b9:07:d9: eb:f3:76:cc -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FZtxhx2/YPGMseg+eVoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjg5Yjc2N2E4NjliMjNlMmM3Yjg5MDk4ODkyMmM3YWI4MjAxNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1GGFSqPUX/YGl+uia4oUKCdhwO 3NkqnMg06LfGvEIkU8CgOjicVDiwb3tSKFJv+K7jE2uNLX1EtCSKvTd857Op3bvt cT3UWkwZg4NKTaTM+OIsKqPmwfHEi/ly6UH7WNSUUfi0jcenLyjesjPoe7+rot+q M1njT7Arclt271MeAvEYcmqe5Zh7cH2BG6JPo3kevfsQGfgDOt2uji1lTLgnQfoS xd/lEb8ZO5zkNEmMzR8ioJDwCn9IakXTfKeNdq9m+TSAvfXrYM6/EDej7vi/HOKJ OX+IyDXdQMk8uRzKWb48Y3EX55dOvWFnJObJUkZgReEj+xWzw69NFfcSCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCaJt2eoabI+LHuJCYiSLHq4IBT1MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvSm9tM1o2aHBzajRzZTRrSmlKSXNlcmdnRlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBAhAUAwQA AhA1MAwDBAQCEZADBAACEZIDBAACE7UwDQYJKoZIhvcNAQELBQADggEBACMXfELI ZUxatcU+YZ+6E4ZM18M5QSMTillbDj/OYxjD5CsFVz6jcnTrsZqNAJ/72yuq80O2 tJhuNdEJadH+ATChkFKDV2ZDEtZEQJemajcpdVoWn0Ar43vxXQaYRvPFsskLFX21 fUZfF9X4AWYHA36XaI2eDdBL6Lm09LolHQU70tSmSXSQE0zd2aJAZEqcBWnVtOwg Jbpz18FEp6SEh7Joqnf/7pk76R7EhY/Z7ZhG4dEoZ0MnGtz8kCLffKRj+qJRXB1W STfxKEkvriI4Arki4w/4njn6au1u6kEEaJ21JU0NugtyoKwIGGKSBLCUiA4OlTiE E6NJS7kH2evzdsw= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:41 2026 by rpki-client