This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa File: kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa (raw, json) Hash identifier: DYmIhG/wRif14OJ02fuyBK+O/9TIFv1/d//lBb/p9Yw= Subject key identifier: 91:4D:21:E8:34:00:5B:A0:0B:59:57:8D:84:6D:15:3A:5F:06:AE:8F Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B76EB117EFD793BBAF000CD825B671863 Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 37.153.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:11:7e:fd:79:3b:ba:f0:00:cd:82:5b:67:18:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=914d21e834005ba00b59578d846d153a5f06ae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:53:28:d2:d9:ee:d6:84:bf:23:91:c4:ed: 41:77:8e:5b:28:a0:7e:59:81:7c:d4:a5:24:73:33: 58:b7:00:36:c0:49:2f:4c:0d:19:43:81:5b:6d:ca: 3e:67:95:b1:e6:bd:81:36:a1:44:5d:32:64:15:a1: 5f:e3:31:38:2e:8b:68:fc:a1:5f:6e:8d:05:90:82: 11:7c:0e:03:46:60:0d:71:45:cf:2a:53:70:3a:82: 4f:25:df:8f:e3:38:4c:2a:b9:ce:bb:b3:4b:1e:14: 5e:5f:38:e9:00:67:be:3b:27:c9:eb:1e:dd:ea:7d: ab:cf:be:fd:1c:0e:88:dc:b0:93:06:b6:32:b2:5f: 92:a2:bd:2e:88:46:f0:d8:70:79:b3:b6:33:38:2b: 60:c7:5f:95:2c:4c:0f:b3:31:88:d9:05:02:55:c1: a9:16:19:6b:75:17:88:f1:f8:34:85:b3:eb:1f:4b: 32:0f:83:8d:16:df:44:05:ec:3f:04:ba:3d:c7:a3: fb:77:f1:3c:0c:b5:25:df:64:92:83:b5:32:55:7a: 9f:77:33:c3:fe:07:13:43:af:46:cc:2d:19:5a:92: f3:43:c6:60:e5:11:19:8e:bc:05:39:c9:cb:39:29: 6f:81:4d:14:50:ba:60:ff:cc:a0:a7:f3:43:6b:e0: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4D:21:E8:34:00:5B:A0:0B:59:57:8D:84:6D:15:3A:5F:06:AE:8F X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kU0h6DQAW6ALWVeNhG0VOl8Gro8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.155.0/24 Signature Algorithm: sha256WithRSAEncryption 19:3c:d2:d4:9c:dc:4c:36:d1:ec:5b:4d:d9:15:fb:66:67:7b: c1:d8:37:a3:6d:19:79:4f:b1:d3:73:a6:01:27:7a:38:a0:63: 47:bd:23:e9:35:92:4d:84:f5:51:15:d0:6b:eb:0a:ac:b9:2f: b8:5d:39:7a:a9:d1:90:f2:b4:d9:4e:d3:60:7d:d2:1e:33:c3: 06:0d:ba:05:e0:29:0a:bc:ab:ff:de:ec:95:a8:bc:ca:f7:fb: 09:1c:d3:b9:ba:61:71:26:bc:e8:ff:21:ef:12:6b:94:61:e2: 70:c5:66:65:7f:57:5c:96:d9:a7:50:c3:40:42:fa:91:37:5d: 2e:03:ee:60:ca:37:1e:0e:d5:3f:b9:05:60:c2:46:ef:51:15: 8d:d0:32:a5:1e:91:75:80:a2:69:0a:90:0d:4d:55:12:ea:d9: 34:b5:2c:e8:f2:e0:07:38:6b:23:ef:7d:fd:39:2b:1c:70:6e: 44:fa:f0:8c:24:e8:5f:92:8d:4f:13:05:fb:c9:2c:b1:79:67: fa:04:e2:0a:c5:80:77:30:ad:37:f3:f8:58:49:23:ac:fa:bb: 68:e9:83:ef:d3:98:5d:bf:8c:2b:b8:51:77:94:8f:63:ad:dc: c3:e6:ef:cb:97:33:28:6b:79:a4:ef:ad:82:36:52:ad:b7:d9: 0e:52:10:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xF+/Xk7uvAAzYJbZxhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTRkMjFlODM0MDA1YmEwMGI1OTU3OGQ4NDZkMTUzYTVmMDZhZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBTKNLZ7taEvyORxO1Bd45bKKB+ WYF81KUkczNYtwA2wEkvTA0ZQ4Fbbco+Z5Wx5r2BNqFEXTJkFaFf4zE4Loto/KFf bo0FkIIRfA4DRmANcUXPKlNwOoJPJd+P4zhMKrnOu7NLHhReXzjpAGe+OyfJ6x7d 6n2rz779HA6I3LCTBrYysl+Sor0uiEbw2HB5s7YzOCtgx1+VLEwPszGI2QUCVcGp FhlrdReI8fg0hbPrH0syD4ONFt9EBew/BLo9x6P7d/E8DLUl32SSg7UyVXqfdzPD /gcTQ69GzC0ZWpLzQ8Zg5REZjrwFOcnLOSlvgU0UULpg/8ygp/NDa+DzhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFNIeg0AFugC1lXjYRtFTpfBq6PMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEva1UwaDZEUUFXNkFMV1ZlTmhHMFZPbDhHcm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmbMA0G CSqGSIb3DQEBCwUAA4IBAQAZPNLUnNxMNtHsW03ZFftmZ3vB2DejbRl5T7HTc6YB J3o4oGNHvSPpNZJNhPVRFdBr6wqsuS+4XTl6qdGQ8rTZTtNgfdIeM8MGDboF4CkK vKv/3uyVqLzK9/sJHNO5umFxJrzo/yHvEmuUYeJwxWZlf1dcltmnUMNAQvqRN10u A+5gyjceDtU/uQVgwkbvURWN0DKlHpF1gKJpCpANTVUS6tk0tSzo8uAHOGsj7339 OSsccG5E+vCMJOhfko1PEwX7ySyxeWf6BOIKxYB3MK038/hYSSOs+rto6YPv05hd v4wruFF3lI9jrdzD5u/LlzMoa3mk762CNlKtt9kOUhBI -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:10 2026 by rpki-client