This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa File: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (raw, json) Hash identifier: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU= Subject key identifier: 27:93:F7:FC:95:31:AC:BA:AB:9D:70:D7:89:6C:C0:7B:D1:43:9D:13 Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Certificate serial: 019B7E37FE91BE000EBCEE8A856B4D85C8C5 Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 185.203.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fe:91:be:00:0e:bc:ee:8a:85:6b:4d:85:c8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2793f7fc9531acbaab9d70d7896cc07bd1439d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:11:7a:55:50:9f:63:f1:96:a8:28:4d:bb:cc: 6e:77:fb:79:61:9f:d5:d3:b4:28:5b:0d:c8:5f:b8: ee:94:3c:9c:b1:ab:d9:db:23:fb:1e:17:2e:7d:a8: 09:9b:91:83:d4:81:78:ac:bd:2f:c3:88:c2:aa:49: 42:94:e9:c3:8d:67:53:8c:ff:99:0d:fa:ab:67:d8: d5:d0:79:89:16:4a:7f:ed:f0:c6:1c:24:52:79:98: f2:78:6f:b8:3b:71:ce:c6:a7:9d:03:60:10:ae:71: 25:73:39:81:c7:90:b3:95:f8:3f:ac:9b:9e:35:79: 56:92:77:b6:c8:10:aa:cf:cb:39:01:63:3c:93:35: 96:29:71:4b:78:42:ff:1d:e2:5d:a1:64:fa:bd:1e: de:ba:02:79:19:bb:08:f5:1a:8a:b4:dc:52:a4:10: 50:14:06:42:c2:55:09:77:48:6e:5b:9e:ea:75:f6: 89:ef:36:38:79:44:31:0e:24:f9:8a:25:6f:5d:95: 6a:56:ea:1b:85:4d:04:d5:e9:ea:2a:09:fd:f7:43: c2:a8:77:7f:f8:4e:d5:a6:3e:67:47:a7:16:6f:db: a1:bd:cf:b8:41:7f:54:f1:ea:83:a3:6b:b5:e1:f4: 0a:3d:bc:4e:ff:f9:c3:39:07:f6:3b:4b:19:0d:b3: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:F7:FC:95:31:AC:BA:AB:9D:70:D7:89:6C:C0:7B:D1:43:9D:13 X509v3 Authority Key Identifier: keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.188.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:cf:a5:7f:c3:b3:f0:39:e6:5c:55:12:15:ad:90:cf:c5:04: 71:33:41:78:8e:3c:67:46:38:17:f3:15:7d:a3:18:d7:a2:ee: e4:b3:50:e2:f7:57:3d:57:fb:a7:b6:8c:0c:f3:cf:a8:a6:4c: f8:75:fe:58:65:91:8a:19:c4:87:0a:71:45:38:f9:11:01:05: c2:55:b2:98:e7:cf:d0:7f:1f:28:6a:31:2c:4d:d7:b6:c2:51: c4:c5:92:5f:04:60:cb:b7:31:71:ef:a3:ab:4b:6e:f7:bb:d3: 12:4c:ce:53:2a:bb:6a:37:df:94:47:b9:06:38:2f:d6:20:e1: 98:6c:b1:4a:a0:12:b0:47:7f:e8:bd:d3:e6:05:4b:86:6d:60: 77:92:0b:93:7c:c8:c1:ac:ad:0e:14:0e:aa:b9:51:c8:85:b0: b9:b9:2b:68:49:11:1e:7c:6d:a6:82:58:f6:31:e6:5a:b7:01: 9a:cd:80:85:02:07:a9:1d:00:a6:0d:d7:8a:98:87:4a:64:91: 55:3a:6b:e5:d3:1b:b2:cd:75:de:89:ea:3f:2a:71:95:91:b2: 72:2b:0c:f3:f0:52:73:83:55:f5:1e:1e:6e:14:37:23:6f:34: a7:1b:fe:85:19:dc:b8:f8:8d:d9:59:29:64:18:6d:61:7f:0c: 97:25:9e:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/6RvgAOvO6KhWtNhcjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh MjExYzgwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzkzZjdmYzk1MzFhY2JhYWI5ZDcwZDc4OTZjYzA3YmQxNDM5ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hF6VVCfY/GWqChNu8xud/t5YZ/V 07QoWw3IX7julDycsavZ2yP7HhcufagJm5GD1IF4rL0vw4jCqklClOnDjWdTjP+Z DfqrZ9jV0HmJFkp/7fDGHCRSeZjyeG+4O3HOxqedA2AQrnElczmBx5Czlfg/rJue NXlWkne2yBCqz8s5AWM8kzWWKXFLeEL/HeJdoWT6vR7eugJ5GbsI9RqKtNxSpBBQ FAZCwlUJd0huW57qdfaJ7zY4eUQxDiT5iiVvXZVqVuobhU0E1enqKgn990PCqHd/ +E7Vpj5nR6cWb9uhvc+4QX9U8eqDo2u14fQKPbxO//nDOQf2O0sZDbM9jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeT9/yVMay6q51w14lswHvRQ50TMB8GA1UdIwQY MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt YTg4NjZhYTk1YzcxLzEvSjVQM19KVXhyTHFyblhEWGlXekFlOUZEblJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucu8MA0G CSqGSIb3DQEBCwUAA4IBAQAPz6V/w7PwOeZcVRIVrZDPxQRxM0F4jjxnRjgX8xV9 oxjXou7ks1Di91c9V/untowM88+opkz4df5YZZGKGcSHCnFFOPkRAQXCVbKY58/Q fx8oajEsTde2wlHExZJfBGDLtzFx76OrS273u9MSTM5TKrtqN9+UR7kGOC/WIOGY bLFKoBKwR3/ovdPmBUuGbWB3kguTfMjBrK0OFA6quVHIhbC5uStoSREefG2mglj2 MeZatwGazYCFAgepHQCmDdeKmIdKZJFVOmvl0xuyzXXeieo/KnGVkbJyKwzz8FJz g1X1Hh5uFDcjbzSnG/6FGdy4+I3ZWSlkGG1hfwyXJZ6a -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:28 2026 by rpki-client