This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/1jXhnTlNcIH-F__GRf4PM4BYn8I.roa File: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (raw, json) Hash identifier: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU= Subject key identifier: D6:35:E1:9D:39:4D:70:81:FE:17:FF:C6:45:FE:0F:33:80:58:9F:C2 Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Certificate serial: 019B7DCA8AAB306A2029F4BA91687BCB6C64 Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/1jXhnTlNcIH-F__GRf4PM4BYn8I.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 138.43.11.0/24 maxlen: 24 217.147.180.0/23 maxlen: 24 217.147.180.0/24 maxlen: 24 217.147.181.0/24 maxlen: 24 2a0b:2900:1100::/40 maxlen: 48 2a0b:2900:1f00::/40 maxlen: 40 2a0b:2900:1f00::/48 maxlen: 48 2a0b:2900:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8a:ab:30:6a:20:29:f4:ba:91:68:7b:cb:6c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d635e19d394d7081fe17ffc645fe0f3380589fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:c7:2c:22:6c:12:3c:62:b2:de:8e:d0:6c: c5:88:ff:81:67:be:77:d1:d6:2f:53:d9:5e:53:7d: 9d:82:47:c9:30:05:2c:29:40:8f:23:26:ae:2b:a7: 60:32:5f:8d:c1:14:16:19:3a:88:b4:fc:d4:f8:c6: f4:70:e9:15:63:1f:3b:bf:84:77:d7:ac:66:b8:d7: 04:17:eb:93:9d:5d:05:cd:2e:97:22:ff:73:5f:c6: a5:a4:5a:5a:c8:ac:09:73:8a:ff:88:09:5a:f6:b1: cc:d7:e9:eb:3b:da:b1:65:6e:7d:5d:a9:a9:68:f8: 5a:1b:21:72:42:af:e2:f4:ab:2d:db:71:df:a3:4e: f9:27:7a:36:00:ea:e3:ee:43:bd:10:0c:d8:b0:ac: 2c:9d:c7:b9:6c:66:f9:43:69:4a:f2:c3:22:63:7d: 0d:cb:9a:23:93:07:c0:fd:20:4c:23:23:bb:b9:ea: 4b:40:8c:17:3e:83:81:59:e4:2c:d6:f5:a6:d6:2b: bf:c9:c5:1e:2f:a8:dc:f1:a4:2d:62:b6:a9:c1:55: dd:50:f1:e1:c9:25:d9:c1:34:e6:77:c0:a8:43:56: ba:7a:a2:c9:24:7a:fe:67:f7:6f:91:c1:15:ea:14: b9:f7:31:2b:61:31:de:7d:20:87:da:8c:fa:00:69: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:E1:9D:39:4D:70:81:FE:17:FF:C6:45:FE:0F:33:80:58:9F:C2 X509v3 Authority Key Identifier: keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/1jXhnTlNcIH-F__GRf4PM4BYn8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.43.11.0/24 217.147.180.0/23 IPv6: 2a0b:2900:1100::/40 2a0b:2900:1f00::/40 2a0b:2900:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 99:f1:35:84:15:8c:be:fb:b2:11:d8:74:d9:4d:d9:38:29:6a: ba:67:12:b6:29:c8:6f:b7:52:d0:5c:d0:a9:86:6e:7d:43:75: c8:4b:25:ee:6c:e7:b8:83:25:03:b3:c3:85:4e:5c:6f:d5:cb: bb:e4:7e:09:92:ab:2a:68:49:2a:ea:ac:89:1b:69:87:50:d9: 8a:c5:3d:49:78:33:f2:d5:35:f1:77:55:6d:ad:90:34:bd:ea: 48:d8:2b:3d:28:d6:4d:f9:66:9a:63:40:f6:26:16:ef:7d:11: c2:73:92:49:80:be:97:fd:8a:16:da:a1:cb:dd:8f:2e:e0:97: 46:6b:a5:b6:b0:40:53:20:f7:81:85:70:3e:da:d8:e7:a3:02: c9:0a:7a:62:3c:99:5a:9a:17:a8:25:d8:53:3a:59:85:84:f2: 3c:00:65:0b:98:d7:da:9e:60:b5:47:82:07:87:d3:08:6c:da: 4f:c0:50:29:fb:8b:ff:60:e0:58:64:41:17:05:16:90:3d:a6: 6f:d5:58:36:e3:4c:1e:bb:3b:84:ad:a5:24:0d:9d:e9:cc:1a: ba:77:b3:39:0b:fc:9a:15:1e:2f:30:ea:7b:37:ee:a3:07:25: bc:2f:2f:6e:a8:71:f0:c1:3e:f3:cd:3b:d4:12:ea:9a:8d:ee: e3:c9:78:dd -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9yoqrMGogKfS6kWh7y2xkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk MzRlNTEwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjM1ZTE5ZDM5NGQ3MDgxZmUxN2ZmYzY0NWZlMGYzMzgwNTg5ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9LHLCJsEjxist6O0GzFiP+BZ753 0dYvU9leU32dgkfJMAUsKUCPIyauK6dgMl+NwRQWGTqItPzU+Mb0cOkVYx87v4R3 16xmuNcEF+uTnV0FzS6XIv9zX8alpFpayKwJc4r/iAla9rHM1+nrO9qxZW59Xamp aPhaGyFyQq/i9Kst23Hfo075J3o2AOrj7kO9EAzYsKwsnce5bGb5Q2lK8sMiY30N y5ojkwfA/SBMIyO7uepLQIwXPoOBWeQs1vWm1iu/ycUeL6jc8aQtYrapwVXdUPHh ySXZwTTmd8CoQ1a6eqLJJHr+Z/dvkcEV6hS59zErYTHefSCH2oz6AGkg6QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNY14Z05TXCB/hf/xkX+DzOAWJ/CMB8GA1UdIwQY MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt NWFhNjIwYTgxMTQ5LzEvMWpYaG5UbE5jSUgtRl9fR1JmNFBNNEJZbjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5 LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDASBAIAATAMAwQAiisLAwQB 2ZO0MB4EAgACMBgDBgAqCykAEQMGACoLKQAfAwYAKgspAP8wDQYJKoZIhvcNAQEL BQADggEBAJnxNYQVjL77shHYdNlN2TgparpnErYpyG+3UtBc0KmGbn1DdchLJe5s 57iDJQOzw4VOXG/Vy7vkfgmSqypoSSrqrIkbaYdQ2YrFPUl4M/LVNfF3VW2tkDS9 6kjYKz0o1k35ZppjQPYmFu99EcJzkkmAvpf9ihbaocvdjy7gl0ZrpbawQFMg94GF cD7a2OejAskKemI8mVqaF6gl2FM6WYWE8jwAZQuY19qeYLVHggeH0whs2k/AUCn7 i/9g4FhkQRcFFpA9pm/VWDbjTB67O4StpSQNnenMGrp3szkL/JoVHi8w6ns37qMH JbwvL26ocfDBPvPNO9QS6pqN7uPJeN0= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:33 2026 by rpki-client