This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JgQFyvhK48UsiHLo2GClJOr_UYg.roa File: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (raw, json) Hash identifier: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I= Subject key identifier: 26:04:05:CA:F8:4A:E3:C5:2C:88:72:E8:D8:60:A5:24:EA:FF:51:88 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C80830B64341349FFF531B64384EB09 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JgQFyvhK48UsiHLo2GClJOr_UYg.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211462 IP address blocks: 188.119.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:83:0b:64:34:13:49:ff:f5:31:b6:43:84:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=260405caf84ae3c52c8872e8d860a524eaff5188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:cd:c9:10:af:ca:48:59:79:42:cc:39:02: b4:5a:3f:3b:68:f5:c2:ff:65:e7:5a:5b:e9:65:29: 35:2e:84:3c:e6:e3:46:37:dd:19:05:c2:62:98:46: f2:33:6b:e1:72:8c:6a:e3:e4:71:cc:56:52:75:a3: 16:10:01:df:d6:82:78:4e:69:83:d8:1e:67:3b:8b: 9d:28:e5:c2:58:50:37:9d:0d:c9:94:0a:aa:19:27: 5d:72:5a:f9:fa:84:ac:5f:1d:7b:02:1d:13:3f:58: 48:62:42:09:d2:9f:b6:df:a1:b4:32:a0:4f:c0:2c: ff:fb:b2:90:36:7b:f5:9f:c4:11:d1:8a:5b:04:6c: b0:fd:3f:fd:d5:86:04:ae:42:a5:79:03:29:11:f1: 8d:e0:95:d9:72:76:6e:8a:2e:4a:06:3a:2f:bc:b8: 92:4f:56:ea:25:3e:40:a0:51:3a:9f:5d:5f:85:65: da:3e:54:12:70:70:c8:10:95:4d:56:8b:7c:50:46: f4:e1:c6:01:a9:97:3f:84:f6:0d:fc:85:75:c1:37: 66:fa:74:0e:12:24:07:62:fe:20:ae:2b:f7:4d:80: f5:d3:4f:71:85:07:ad:fa:a1:85:b7:55:05:56:f5: 0c:02:76:c2:3a:d5:58:1a:7f:1c:19:f8:47:08:ca: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:04:05:CA:F8:4A:E3:C5:2C:88:72:E8:D8:60:A5:24:EA:FF:51:88 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JgQFyvhK48UsiHLo2GClJOr_UYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.191.0/24 Signature Algorithm: sha256WithRSAEncryption 51:5a:cb:24:c3:79:23:db:2c:b9:a1:45:f4:e8:6e:4b:2a:5d: 0c:38:02:3a:19:0e:79:61:06:8d:c9:dd:63:d2:41:b8:fa:77: 79:92:26:f6:31:2e:3a:1a:61:93:53:da:a7:5e:ac:8d:db:2b: 7e:aa:91:3f:ac:03:b3:62:56:d8:fc:60:b6:24:e6:d4:a5:b2: ff:03:9c:3b:7e:e6:fd:bc:c6:6b:8a:81:83:47:dd:a8:f4:85: 63:8e:8f:44:7d:a9:92:6c:88:f0:9e:7b:ba:fd:69:0f:21:ce: 30:f1:2b:21:35:27:44:c9:d0:af:0f:0d:b4:35:57:25:e2:be: 95:9a:5a:b0:66:95:ee:0c:2b:22:ae:7d:1b:02:98:41:de:04: a5:00:6e:14:22:ef:7e:ae:87:95:b9:ce:4d:b9:3c:b7:47:0d: 02:a3:6a:e8:d9:f7:e4:f0:27:8c:ad:1d:6f:70:e2:d8:3c:ed: 44:b3:75:c7:c6:97:bb:ed:e6:a7:62:ee:e5:f0:30:7f:d4:81: 30:a6:ea:42:90:89:07:55:9f:c2:d8:25:32:63:b2:bb:fa:f1: 3b:93:f9:9e:1d:88:e6:88:db:c2:5f:85:8f:87:16:3d:40:65: af:8c:68:d9:6b:0d:2a:c9:ea:fc:4c:d8:ff:b1:80:3a:12:90: 38:03:8d:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIMLZDQTSf/1MbZDhOsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjA0MDVjYWY4NGFlM2M1MmM4ODcyZThkODYwYTUyNGVhZmY1MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkfNyRCvykhZeULMOQK0Wj87aPXC /2XnWlvpZSk1LoQ85uNGN90ZBcJimEbyM2vhcoxq4+RxzFZSdaMWEAHf1oJ4TmmD 2B5nO4udKOXCWFA3nQ3JlAqqGSddclr5+oSsXx17Ah0TP1hIYkIJ0p+236G0MqBP wCz/+7KQNnv1n8QR0YpbBGyw/T/91YYErkKleQMpEfGN4JXZcnZuii5KBjovvLiS T1bqJT5AoFE6n11fhWXaPlQScHDIEJVNVot8UEb04cYBqZc/hPYN/IV1wTdm+nQO EiQHYv4griv3TYD1009xhQet+qGFt1UFVvUMAnbCOtVYGn8cGfhHCMqYzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYEBcr4SuPFLIhy6NhgpSTq/1GIMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvSmdRRnl2aEs0OFVzaUhMbzJHQ2xKT3JfVVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHe/MA0G CSqGSIb3DQEBCwUAA4IBAQBRWsskw3kj2yy5oUX06G5LKl0MOAI6GQ55YQaNyd1j 0kG4+nd5kib2MS46GmGTU9qnXqyN2yt+qpE/rAOzYlbY/GC2JObUpbL/A5w7fub9 vMZrioGDR92o9IVjjo9EfamSbIjwnnu6/WkPIc4w8SshNSdEydCvDw20NVcl4r6V mlqwZpXuDCsirn0bAphB3gSlAG4UIu9+roeVuc5NuTy3Rw0Co2ro2ffk8CeMrR1v cOLYPO1Es3XHxpe77eanYu7l8DB/1IEwpupCkIkHVZ/C2CUyY7K7+vE7k/meHYjm iNvCX4WPhxY9QGWvjGjZaw0qyer8TNj/sYA6EpA4A43x -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:28 2026 by rpki-client