This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa File: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (raw, json) Hash identifier: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I= Subject key identifier: 8C:A3:CD:82:56:41:FF:D0:B5:85:DF:1C:6B:82:70:FD:C5:8E:CC:E6 Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Certificate serial: 019B7AC8685E5FA351DE222DE711641886C9 Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.57.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:68:5e:5f:a3:51:de:22:2d:e7:11:64:18:86:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ca3cd825641ffd0b585df1c6b8270fdc58ecce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:e3:a3:ef:a9:00:92:67:c8:e8:d6:58:4a: 7c:62:c6:18:2d:28:80:3e:17:ad:98:dd:81:1b:af: ab:b1:73:b1:7a:a3:29:03:43:97:23:bf:63:e4:29: fd:24:ca:08:e4:3c:1f:9b:ef:09:2b:31:9e:04:ba: 49:36:6f:2b:73:50:1a:f3:d2:9e:8b:ba:b6:da:80: 9d:b8:d9:cc:2f:82:08:be:cb:74:d2:f1:e8:af:a9: 1c:19:cc:0f:43:e1:9c:4a:9c:12:db:b6:28:c1:45: 13:f0:34:ef:ee:47:06:36:31:e4:3d:1e:43:54:d0: 7a:e1:9a:b6:11:46:0f:e3:56:36:21:bc:76:3a:d1: a8:2b:1a:6f:da:75:df:21:a5:44:30:e4:7c:ce:65: b7:b6:ac:ad:2a:de:9f:0b:e6:42:19:47:44:1e:e9: 14:01:39:5d:bd:d2:50:82:81:80:db:5b:ac:2b:aa: f1:72:eb:d3:1e:0a:14:10:0f:06:ae:fd:e6:57:33: 29:e3:f6:65:6a:96:15:d4:ae:e3:d3:06:63:f2:4e: 3d:ac:49:dd:d8:2a:2b:a6:12:c4:5a:65:04:51:da: 2b:10:26:4a:2c:8b:4b:53:66:25:05:1c:01:96:9c: a6:17:08:48:d6:ef:a1:09:87:c0:8a:39:ae:f8:d6: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:CD:82:56:41:FF:D0:B5:85:DF:1C:6B:82:70:FD:C5:8E:CC:E6 X509v3 Authority Key Identifier: keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:8f:f5:3e:9f:64:28:50:aa:7e:c6:64:28:9c:4b:8d:9b:3b: 68:70:bf:96:75:54:e8:bb:26:5a:c7:e4:dd:59:97:61:a3:f1: 35:23:6f:1c:b5:b7:0c:96:49:f2:32:23:5c:46:34:86:b0:d2: f9:bf:60:b2:45:72:41:68:42:83:cb:fb:29:a3:ad:95:7f:ac: 01:58:32:15:f9:70:a5:3c:da:1d:12:f2:9f:50:32:02:45:9f: 85:7a:a5:1b:c9:ab:82:30:e3:4e:28:19:72:00:30:b1:6f:81: 21:00:d1:a7:dc:79:19:c5:85:56:87:12:5d:a4:c6:af:22:a6: da:c5:ec:55:4d:62:0d:87:95:b8:0c:5d:c2:94:ff:00:d9:11: 41:df:5c:c0:d6:01:6d:86:15:e2:60:74:ad:bb:48:fe:e1:3d: e6:b8:42:f9:68:4b:9e:c0:eb:09:c8:ae:c9:4b:cb:04:9b:b8: a2:88:ca:6d:03:b4:b8:a8:ac:c7:cc:ef:78:93:da:95:74:cc: 33:bc:06:a5:eb:0a:ff:0e:94:0a:6b:bb:fe:fe:b8:1d:14:f5: c3:02:07:a0:cf:e8:0e:10:56:d5:7e:25:59:f0:47:d5:43:8b: a1:22:eb:c9:c0:58:40:42:69:b7:0e:ba:64:34:04:d6:e8:09: 1f:c4:93:c0 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6yGheX6NR3iIt5xFkGIbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh ZWRiNzkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2EzY2Q4MjU2NDFmZmQwYjU4NWRmMWM2YjgyNzBmZGM1OGVjY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtazjo++pAJJnyOjWWEp8YsYYLSiA PhetmN2BG6+rsXOxeqMpA0OXI79j5Cn9JMoI5Dwfm+8JKzGeBLpJNm8rc1Aa89Ke i7q22oCduNnML4IIvst00vHor6kcGcwPQ+GcSpwS27YowUUT8DTv7kcGNjHkPR5D VNB64Zq2EUYP41Y2Ibx2OtGoKxpv2nXfIaVEMOR8zmW3tqytKt6fC+ZCGUdEHukU ATldvdJQgoGA21usK6rxcuvTHgoUEA8Grv3mVzMp4/ZlapYV1K7j0wZj8k49rEnd 2CorphLEWmUEUdorECZKLItLU2YlBRwBlpymFwhI1u+hCYfAijmu+NaIcwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFIyjzYJWQf/QtYXfHGuCcP3FjszmMB8GA1UdIwQY MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt YzQwYzBkYmUxZGUwLzEvaktQTmdsWkJfOUMxaGQ4Y2E0SndfY1dPek9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjTkwDQYJ KoZIhvcNAQELBQADggEBAIGP9T6fZChQqn7GZCicS42bO2hwv5Z1VOi7JlrH5N1Z l2Gj8TUjbxy1twyWSfIyI1xGNIaw0vm/YLJFckFoQoPL+ymjrZV/rAFYMhX5cKU8 2h0S8p9QMgJFn4V6pRvJq4Iw404oGXIAMLFvgSEA0afceRnFhVaHEl2kxq8iptrF 7FVNYg2HlbgMXcKU/wDZEUHfXMDWAW2GFeJgdK27SP7hPea4QvloS57A6wnIrslL ywSbuKKIym0DtLiorMfM73iT2pV0zDO8BqXrCv8OlApru/7+uB0U9cMCB6DP6A4Q VtV+JVnwR9VDi6Ei68nAWEBCabcOumQ0BNboCR/Ek8A= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:00 2026 by rpki-client