This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_JnhSJS19JlHl9jJTexqDWYqi9A.roa File: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (raw, json) Hash identifier: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g= Subject key identifier: FC:99:E1:48:94:B5:F4:99:47:97:D8:C9:4D:EC:6A:0D:66:2A:8B:D0 Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2 Certificate serial: 019B7D5B5869C89772759187F435F0C57F6C Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_JnhSJS19JlHl9jJTexqDWYqi9A.roa Signing time: Fri 02 Jan 2026 06:18:16 +0000 ROA not before: Fri 02 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.92.133.0/24 maxlen: 24 192.136.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:58:69:c8:97:72:75:91:87:f4:35:f0:c5:7f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2 Validity Not Before: Jan 2 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc99e14894b5f4994797d8c94dec6a0d662a8bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:f0:50:be:d1:a7:61:6b:48:09:60:41:03: cf:79:3a:68:da:ed:34:f9:19:1f:b6:60:58:16:22: 44:50:8e:e9:7e:00:d8:ca:40:d7:2a:a1:0d:56:b9: a7:8c:6e:66:a4:94:cf:29:04:5e:35:f1:53:52:82: 33:c5:9b:10:1d:61:7e:40:b8:7a:6c:61:1b:5c:7e: 00:18:8b:e3:20:1e:ff:7b:85:30:c0:43:77:57:18: 60:e5:58:5d:80:36:77:07:92:17:73:63:87:8a:f6: 16:ab:e5:8f:a1:5a:27:f7:d4:b4:ef:24:71:e6:e1: 78:f3:00:fe:0a:12:6c:f4:80:0b:7b:e3:22:94:b0: 0e:77:de:07:4e:23:cf:64:dd:0d:f6:c5:40:96:92: af:3b:af:c7:81:a1:0d:3d:e8:e9:5c:73:27:2d:ec: 88:97:b8:bf:80:40:fd:43:a7:b5:07:06:51:c1:35: 8c:34:99:53:63:97:c5:3a:27:2f:06:85:9c:a5:c4: 09:91:29:97:ce:dc:1a:68:bf:3f:46:05:25:72:83: 5e:cf:53:68:ab:f9:e5:60:86:30:a6:12:32:43:7a: 8a:ac:91:cd:08:ee:b1:fb:1e:66:15:7c:4e:75:ae: 30:be:44:c2:43:7f:b1:55:d9:9f:81:dc:e2:75:72: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:99:E1:48:94:B5:F4:99:47:97:D8:C9:4D:EC:6A:0D:66:2A:8B:D0 X509v3 Authority Key Identifier: keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_JnhSJS19JlHl9jJTexqDWYqi9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.92.133.0/24 192.136.52.0/24 Signature Algorithm: sha256WithRSAEncryption 30:37:a9:a0:6f:62:3e:98:fd:a0:66:d0:f1:02:dc:43:d6:08: 2e:33:60:21:c7:c4:bd:0a:f7:c2:a0:51:d4:8f:c9:b5:83:aa: 27:50:ae:58:53:b6:90:55:ed:b0:1b:f7:b0:c7:c2:5b:32:35: 1f:65:0d:66:c0:7d:52:2c:c0:10:48:59:1f:f6:84:a6:53:61: d8:c6:8d:d8:83:80:47:f5:10:53:9d:34:63:b9:86:8d:9f:e8: 67:15:5d:60:44:fa:7d:0b:49:ed:dc:d4:85:fe:07:33:fb:50: 30:7d:95:a0:c7:b7:31:71:1e:8f:49:2c:e9:18:f1:e6:3c:53: 52:2b:d7:9f:d9:06:55:df:e9:9f:43:3e:67:bf:4e:4e:f4:c6: 04:6f:8d:33:f2:75:20:40:8c:cc:8c:42:76:4b:91:cc:60:c3: 33:aa:4a:fc:1e:8c:dc:b1:ad:65:8f:2a:1c:57:17:2f:f6:58: 79:d2:14:ae:72:60:9c:b6:5b:9e:4f:93:cf:2d:b4:a9:14:98: ca:6a:55:ed:d8:2f:54:4f:f4:17:cb:a5:41:a0:13:32:33:f3: 3b:30:68:f8:d0:7d:39:9e:22:71:e5:a8:3a:2b:c7:83:b8:5f: 68:d8:13:28:87:d3:b7:23:dc:00:81:7c:16:58:e6:46:74:f7: 36:42:af:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W1hpyJdydZGH9DXwxX9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzI5Yjk4OTA0YTJlY2U4NDgyZTBmMjU4ZjVjMzRmZWFk NThjZTIwHhcNMjYwMTAyMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzk5ZTE0ODk0YjVmNDk5NDc5N2Q4Yzk0ZGVjNmEwZDY2MmE4YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos7wUL7Rp2FrSAlgQQPPeTpo2u00 +RkftmBYFiJEUI7pfgDYykDXKqENVrmnjG5mpJTPKQReNfFTUoIzxZsQHWF+QLh6 bGEbXH4AGIvjIB7/e4UwwEN3Vxhg5VhdgDZ3B5IXc2OHivYWq+WPoVon99S07yRx 5uF48wD+ChJs9IALe+MilLAOd94HTiPPZN0N9sVAlpKvO6/HgaENPejpXHMnLeyI l7i/gED9Q6e1BwZRwTWMNJlTY5fFOicvBoWcpcQJkSmXztwaaL8/RgUlcoNez1No q/nlYIYwphIyQ3qKrJHNCO6x+x5mFXxOda4wvkTCQ3+xVdmfgdzidXJWowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPyZ4UiUtfSZR5fYyU3sag1mKovQMB8GA1UdIwQY MBaAFP8ym5iQSi7OhILg8lj1w0/q1YziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMt M2RmNDcxYzAxYzllLzEvX0puaFNKUzE5SmxIbDlqSlRleHFEV1lxaTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMtM2RmNDcxYzAxYzll LzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFyFAwQA wIg0MA0GCSqGSIb3DQEBCwUAA4IBAQAwN6mgb2I+mP2gZtDxAtxD1gguM2Ahx8S9 CvfCoFHUj8m1g6onUK5YU7aQVe2wG/ewx8JbMjUfZQ1mwH1SLMAQSFkf9oSmU2HY xo3Yg4BH9RBTnTRjuYaNn+hnFV1gRPp9C0nt3NSF/gcz+1AwfZWgx7cxcR6PSSzp GPHmPFNSK9ef2QZV3+mfQz5nv05O9MYEb40z8nUgQIzMjEJ2S5HMYMMzqkr8Hozc sa1ljyocVxcv9lh50hSucmCctlueT5PPLbSpFJjKalXt2C9UT/QXy6VBoBMyM/M7 MGj40H05niJx5ag6K8eDuF9o2BMoh9O3I9wAgXwWWOZGdPc2Qq/3 -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:58 2026 by rpki-client