This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jqtGqH2lJU-TdFDdLDZWkSqkbXA.roa File: jqtGqH2lJU-TdFDdLDZWkSqkbXA.roa (raw, json) Hash identifier: 1hMQEqM0ymDV4+nkd7uHIpluE7742LVvNesr5vo9kc8= Subject key identifier: 8E:AB:46:A8:7D:A5:25:4F:93:74:50:DD:2C:36:56:91:2A:A4:6D:70 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C729EF6833338C3A65FC8E4E4BBF34 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jqtGqH2lJU-TdFDdLDZWkSqkbXA.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2643 IP address blocks: 194.190.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:29:ef:68:33:33:8c:3a:65:fc:8e:4e:4b:bf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eab46a87da5254f937450dd2c3656912aa46d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:7b:fe:7e:ce:84:75:4f:34:b8:67:d3:c8: c0:73:c8:80:07:a3:d9:52:d0:85:e8:96:1c:f5:13: 39:7f:94:5a:16:66:32:8a:f3:85:dc:8a:c2:ee:5c: 12:18:5a:af:72:e5:19:c1:4e:81:88:eb:e2:68:a9: 72:70:60:cd:4e:94:87:16:2e:78:fc:28:e4:af:61: a7:99:47:38:45:1a:70:31:de:70:9c:7e:35:89:b9: 08:07:35:83:48:a7:89:92:aa:f1:2e:ba:86:31:e4: 03:45:8b:94:07:d9:23:6b:c5:8d:5e:9a:0f:bb:10: 4b:9d:14:12:ac:24:77:49:5c:34:55:da:55:c0:10: 40:55:18:2e:94:84:8a:9d:94:8c:a2:39:74:6b:29: f3:dd:19:d8:01:fd:02:33:1e:d0:52:9c:98:2c:e4: cb:f5:ab:95:6a:20:f9:b7:f5:b8:87:fb:21:30:37: 1c:e3:7b:9d:d3:4e:1a:1e:fb:c4:af:17:fb:ba:fd: 8a:d0:22:d4:de:02:82:b3:05:3b:45:1c:c8:99:ea: 42:85:bf:3b:b5:3d:cb:6c:fc:09:08:02:4c:5d:d5: 35:83:52:e1:6d:e9:ee:06:ab:c5:2e:45:f9:b9:80: 8c:78:04:12:0c:7e:8c:b8:16:7f:63:55:7c:b2:91: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AB:46:A8:7D:A5:25:4F:93:74:50:DD:2C:36:56:91:2A:A4:6D:70 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jqtGqH2lJU-TdFDdLDZWkSqkbXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.160.0/21 Signature Algorithm: sha256WithRSAEncryption 55:13:1f:8c:0a:c2:f5:e0:71:85:a2:b8:5e:4f:ea:d9:65:14: 9f:33:56:4f:d9:8f:15:3a:a0:9b:32:8d:85:90:31:26:30:15: db:4d:c2:57:c7:09:d1:8c:39:e6:1d:f0:6c:1d:e9:e7:0e:c8: 9b:28:52:a2:54:06:da:79:60:2c:ac:6b:77:00:96:4a:e6:00: 55:7a:08:79:5c:c3:dc:25:7b:c0:f4:47:81:7b:5f:f2:07:f6: 6a:1b:74:5f:19:55:2e:53:d4:ba:8f:7a:9d:64:35:bb:4a:89: 4a:70:c8:29:ee:b4:81:9f:97:04:f5:a4:aa:a9:8b:fe:82:2c: 2a:10:13:89:32:3a:01:ee:cc:39:8f:1f:31:b0:ba:67:84:5c: b3:5b:4d:c5:5b:3e:11:e6:2d:10:bb:30:4c:1f:ba:0d:48:42: 4d:8c:ff:d1:91:66:d9:5a:19:4c:57:2b:d1:90:ce:53:ab:62: a5:40:0d:88:82:f7:d3:33:a9:80:48:c1:98:3a:f5:fb:6f:5b: 9f:31:33:d9:2a:66:22:d3:ad:aa:24:fe:9c:3d:ee:fa:69:bc: b4:ad:96:12:e4:0c:25:36:41:0c:e7:77:5d:81:e1:fb:80:2a: 30:f9:20:40:22:f4:23:90:7d:21:f8:e8:1e:82:8d:21:e3:0b: fd:eb:30:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xynvaDMzjDpl/I5OS780MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWFiNDZhODdkYTUyNTRmOTM3NDUwZGQyYzM2NTY5MTJhYTQ2ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTd7/n7OhHVPNLhn08jAc8iAB6PZ UtCF6JYc9RM5f5RaFmYyivOF3IrC7lwSGFqvcuUZwU6BiOviaKlycGDNTpSHFi54 /Cjkr2GnmUc4RRpwMd5wnH41ibkIBzWDSKeJkqrxLrqGMeQDRYuUB9kja8WNXpoP uxBLnRQSrCR3SVw0VdpVwBBAVRgulISKnZSMojl0aynz3RnYAf0CMx7QUpyYLOTL 9auVaiD5t/W4h/shMDcc43ud004aHvvErxf7uv2K0CLU3gKCswU7RRzImepChb87 tT3LbPwJCAJMXdU1g1LhbenuBqvFLkX5uYCMeAQSDH6MuBZ/Y1V8spFlfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6rRqh9pSVPk3RQ3Sw2VpEqpG1wMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvanF0R3FIMmxKVS1UZEZEZExEWldrU3FrYlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwr6gMA0G CSqGSIb3DQEBCwUAA4IBAQBVEx+MCsL14HGForheT+rZZRSfM1ZP2Y8VOqCbMo2F kDEmMBXbTcJXxwnRjDnmHfBsHennDsibKFKiVAbaeWAsrGt3AJZK5gBVegh5XMPc JXvA9EeBe1/yB/ZqG3RfGVUuU9S6j3qdZDW7SolKcMgp7rSBn5cE9aSqqYv+giwq EBOJMjoB7sw5jx8xsLpnhFyzW03FWz4R5i0QuzBMH7oNSEJNjP/RkWbZWhlMVyvR kM5Tq2KlQA2IgvfTM6mASMGYOvX7b1ufMTPZKmYi062qJP6cPe76aby0rZYS5Awl NkEM53ddgeH7gCow+SBAIvQjkH0h+Ogego0h4wv96zCW -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:15 2026 by rpki-client