This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/Rj654wxOc7CYmhdeFWwzAPTGmcY.roa File: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (raw, json) Hash identifier: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8= Subject key identifier: 46:3E:B9:E3:0C:4E:73:B0:98:9A:17:5E:15:6C:33:00:F4:C6:99:C6 Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4 Certificate serial: 019B76EAC3703EB4AFD50A93572D74F88865 Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/Rj654wxOc7CYmhdeFWwzAPTGmcY.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 178.249.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c3:70:3e:b4:af:d5:0a:93:57:2d:74:f8:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=463eb9e30c4e73b0989a175e156c3300f4c699c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:7f:30:9c:1a:3c:70:1a:52:ee:21:8c:b5: f5:35:f4:16:1e:ec:bf:14:ce:2f:05:c2:fb:f4:f8: cf:50:59:41:69:2f:b8:f4:ca:75:84:65:bc:29:cd: df:c9:f0:6b:fc:5c:38:e6:f9:af:e7:fe:41:cf:9c: 47:40:22:8b:6f:79:cc:4a:9a:8e:d2:26:7b:c1:a5: b4:84:e9:cb:1c:3d:aa:cc:5c:70:49:b5:1a:38:d1: e4:61:da:60:95:f7:8d:68:8f:07:4c:0e:e0:43:35: 1d:40:a9:9d:43:25:b3:69:53:be:54:54:6b:6b:35: da:8a:c2:2e:ce:16:51:89:43:e9:07:10:35:b4:70: 55:47:fc:f9:48:f7:70:08:31:dc:06:f4:f3:c2:91: 9a:a1:08:a4:e7:c2:e8:2d:3a:14:97:86:00:14:8c: f4:f1:21:28:b6:47:0a:db:92:bc:e3:14:ad:48:85: f3:c9:b7:da:16:72:2d:d1:ba:a5:fe:0e:e2:5f:0f: 6f:99:63:a6:b1:39:ae:28:99:5e:74:e0:2c:39:5b: 0a:d1:0d:c5:9b:04:fe:86:28:a2:ae:72:90:e2:59: 8d:74:23:59:06:ab:01:51:a8:3d:93:91:27:cc:54: 19:7c:bb:59:f9:f6:f0:57:ea:71:cf:d3:60:f5:09: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3E:B9:E3:0C:4E:73:B0:98:9A:17:5E:15:6C:33:00:F4:C6:99:C6 X509v3 Authority Key Identifier: keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/Rj654wxOc7CYmhdeFWwzAPTGmcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.140.0/23 Signature Algorithm: sha256WithRSAEncryption 72:31:fe:25:c5:43:2b:24:5c:11:3e:1c:34:01:0b:0f:03:cb: 4a:32:46:2c:63:3b:89:17:04:85:b2:a9:bb:e1:bc:1f:ed:94: 3a:35:04:7c:3f:5a:f7:39:20:aa:1f:96:ac:21:78:60:34:e5: db:08:b2:e3:13:93:48:cf:8a:a0:93:a4:b9:fb:f7:db:e2:fa: 58:05:53:7e:89:19:9a:fb:2a:99:44:c2:48:6a:8e:54:91:32: a8:f5:0e:61:01:62:c4:b1:1b:56:42:5d:4e:68:8e:a3:41:18: e8:45:b1:b4:df:f4:e5:4a:5c:dd:f7:21:03:0e:70:61:e4:3d: 30:40:79:c7:51:b0:78:45:a9:22:db:77:ec:07:e6:c6:05:20: d1:e3:a7:3f:a8:8c:f2:96:03:f4:4b:48:f1:42:7c:7d:7f:e3: 80:1a:57:f7:c0:06:69:48:b1:1a:3d:c1:f1:a3:65:53:d9:d8: 38:c6:da:9c:f2:fa:e4:1d:72:93:d5:0e:94:19:65:a8:e5:66: 08:ab:42:58:7f:53:4f:2a:9b:93:46:b5:55:97:b4:de:32:b6: 92:5e:e6:fe:63:8c:23:c5:a8:ef:3b:38:b5:9e:69:7a:56:9d: f3:54:82:37:49:c7:af:54:31:00:64:f3:cc:82:0f:c2:e3:59: e8:ab:13:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sNwPrSv1QqTVy10+IhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODg1MTlkZTkxODE4NWZiNmUxZWJhZmQxZTA4MzVjYWEx MTMyZTQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjNlYjllMzBjNGU3M2IwOTg5YTE3NWUxNTZjMzMwMGY0YzY5OWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn9/MJwaPHAaUu4hjLX1NfQWHuy/ FM4vBcL79PjPUFlBaS+49Mp1hGW8Kc3fyfBr/Fw45vmv5/5Bz5xHQCKLb3nMSpqO 0iZ7waW0hOnLHD2qzFxwSbUaONHkYdpglfeNaI8HTA7gQzUdQKmdQyWzaVO+VFRr azXaisIuzhZRiUPpBxA1tHBVR/z5SPdwCDHcBvTzwpGaoQik58LoLToUl4YAFIz0 8SEotkcK25K84xStSIXzybfaFnIt0bql/g7iXw9vmWOmsTmuKJledOAsOVsK0Q3F mwT+hiiirnKQ4lmNdCNZBqsBUag9k5EnzFQZfLtZ+fbwV+pxz9Ng9Qk5ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEY+ueMMTnOwmJoXXhVsMwD0xpnGMB8GA1UdIwQY MBaAFGmIUZ3pGBhftuHrr9Hgg1yqETLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTIt ZWM3MmQ2YWRhMDRhLzEvUmo2NTR3eE9jN0NZbWhkZUZXd3pBUFRHbWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTItZWM3MmQ2YWRhMDRh LzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsvmMMA0G CSqGSIb3DQEBCwUAA4IBAQByMf4lxUMrJFwRPhw0AQsPA8tKMkYsYzuJFwSFsqm7 4bwf7ZQ6NQR8P1r3OSCqH5asIXhgNOXbCLLjE5NIz4qgk6S5+/fb4vpYBVN+iRma +yqZRMJIao5UkTKo9Q5hAWLEsRtWQl1OaI6jQRjoRbG03/TlSlzd9yEDDnBh5D0w QHnHUbB4Raki23fsB+bGBSDR46c/qIzylgP0S0jxQnx9f+OAGlf3wAZpSLEaPcHx o2VT2dg4xtqc8vrkHXKT1Q6UGWWo5WYIq0JYf1NPKpuTRrVVl7TeMraSXub+Y4wj xajvOzi1nml6Vp3zVII3ScevVDEAZPPMgg/C41noqxOR -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:18 2026 by rpki-client