This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/jqg60u3udEXldRsO6lvjcjKURzE.roa File: jqg60u3udEXldRsO6lvjcjKURzE.roa (raw, json) Hash identifier: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU= Subject key identifier: 8E:A8:3A:D2:ED:EE:74:45:E5:75:1B:0E:EA:5B:E3:72:32:94:47:31 Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Certificate serial: 019B77591E236473F6E798FD22DEE5E74C05 Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/jqg60u3udEXldRsO6lvjcjKURzE.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 192.124.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:23:64:73:f6:e7:98:fd:22:de:e5:e7:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ea83ad2edee7445e5751b0eea5be37232944731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:aa:3a:56:0e:b9:b5:75:fd:0a:98:e1:aa: 6f:26:c7:10:25:df:05:0a:a6:82:96:07:12:73:d5: 52:f1:b0:07:a3:e5:e1:9f:98:48:4c:0a:5b:98:70: ea:9f:6c:43:a4:db:38:70:49:29:b2:d9:42:68:3e: e2:b0:bf:d8:80:9c:df:af:dd:ab:07:3e:12:96:6a: 42:dd:76:8d:82:af:b1:55:eb:38:fe:9d:b6:fc:b7: ee:e3:7c:76:b7:8b:a8:9a:cf:92:bb:cd:54:29:60: 76:bf:7f:80:29:ac:60:70:df:17:14:4f:41:9d:cc: f5:35:1f:37:11:bc:e7:e5:77:bd:68:3e:3e:18:ab: a2:5b:39:c1:be:f3:bc:80:f2:05:4d:0b:bb:db:5a: b1:e8:c3:8f:96:f4:92:27:fa:c5:93:06:b0:a7:2f: a1:76:97:0b:90:b1:c4:09:5c:53:ca:0e:bc:40:27: 35:5a:86:80:2e:e3:c7:8d:7a:3a:a0:44:80:0b:d3: fc:db:dd:79:88:db:84:e9:22:97:74:2e:06:4b:b9: 4d:8d:ee:2d:21:da:62:26:d7:8d:cb:f2:0b:34:09: 0a:20:22:1c:42:a1:bf:8c:2b:7d:6c:ba:b9:b4:07: 11:6a:83:cf:c9:02:64:3b:2a:48:62:93:38:71:95: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A8:3A:D2:ED:EE:74:45:E5:75:1B:0E:EA:5B:E3:72:32:94:47:31 X509v3 Authority Key Identifier: keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/jqg60u3udEXldRsO6lvjcjKURzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.112.0/24 Signature Algorithm: sha256WithRSAEncryption 42:27:c5:75:b4:28:74:82:0a:38:c0:c5:ee:71:01:c6:c4:4e: fa:cc:52:ec:8b:7c:bc:95:c4:8f:ad:29:6e:b9:3c:8e:04:c7: 8a:cb:9a:e0:55:3f:d2:29:87:22:6c:97:fa:88:bd:53:82:44: b9:b3:5e:a2:da:07:86:8e:bd:60:55:73:71:b5:0f:cc:68:83: 56:04:c4:4f:9b:9a:34:18:26:00:7c:48:27:e2:bb:65:e4:56: 40:30:74:1c:34:52:07:26:e4:99:c8:6c:e9:67:0b:37:d7:93: 4c:c2:48:b2:8f:4f:3f:f5:5e:f6:ba:3f:cc:04:6f:3e:f1:7f: 95:29:e5:16:fe:de:42:98:7a:e4:ec:78:fc:7f:38:4c:ac:88: 06:79:f7:a2:47:6a:33:12:db:91:ec:bc:6d:20:2b:0f:6e:7e: c4:48:c3:53:93:21:86:77:f7:94:1d:d9:d9:fd:12:7b:c3:25: 91:5d:ab:53:af:03:1f:e9:c6:25:b7:a1:28:64:f8:50:b7:5f: 98:85:3b:fe:e5:ce:f7:f1:7e:8a:ec:6f:bb:ec:98:4f:c2:8c: 20:ac:1d:2d:a3:56:29:c2:44:fb:91:82:5f:08:7f:e7:6f:86: 4f:43:c4:6a:6d:02:aa:58:7e:a3:6b:b5:91:6a:45:fd:a7:c3: 6f:ae:20:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WR4jZHP255j9It7l50wFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy ZDFkNTIwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWE4M2FkMmVkZWU3NDQ1ZTU3NTFiMGVlYTViZTM3MjMyOTQ0NzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/iqOlYOubV1/QqY4apvJscQJd8F CqaClgcSc9VS8bAHo+Xhn5hITApbmHDqn2xDpNs4cEkpstlCaD7isL/YgJzfr92r Bz4SlmpC3XaNgq+xVes4/p22/Lfu43x2t4uoms+Su81UKWB2v3+AKaxgcN8XFE9B ncz1NR83Ebzn5Xe9aD4+GKuiWznBvvO8gPIFTQu721qx6MOPlvSSJ/rFkwawpy+h dpcLkLHECVxTyg68QCc1WoaALuPHjXo6oESAC9P82915iNuE6SKXdC4GS7lNje4t IdpiJteNy/ILNAkKICIcQqG/jCt9bLq5tAcRaoPPyQJkOypIYpM4cZUt0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6oOtLt7nRF5XUbDupb43IylEcxMB8GA1UdIwQY MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt ODc2YTlkNzYyOWY2LzEvanFnNjB1M3VkRVhsZFJzTzZsdmpjaktVUnpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2 LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHxwMA0G CSqGSIb3DQEBCwUAA4IBAQBCJ8V1tCh0ggo4wMXucQHGxE76zFLsi3y8lcSPrSlu uTyOBMeKy5rgVT/SKYcibJf6iL1TgkS5s16i2geGjr1gVXNxtQ/MaINWBMRPm5o0 GCYAfEgn4rtl5FZAMHQcNFIHJuSZyGzpZws315NMwkiyj08/9V72uj/MBG8+8X+V KeUW/t5CmHrk7Hj8fzhMrIgGefeiR2ozEtuR7LxtICsPbn7ESMNTkyGGd/eUHdnZ /RJ7wyWRXatTrwMf6cYlt6EoZPhQt1+YhTv+5c738X6K7G+77JhPwowgrB0to1Yp wkT7kYJfCH/nb4ZPQ8RqbQKqWH6ja7WRakX9p8NvriA0 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:06 2026 by rpki-client