This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/JuhHdC_-wskYknvP7LIY1ggd8So.roa File: JuhHdC_-wskYknvP7LIY1ggd8So.roa (raw, json) Hash identifier: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik= Subject key identifier: 26:E8:47:74:2F:FE:C2:C9:18:92:7B:CF:EC:B2:18:D6:08:1D:F1:2A Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Certificate serial: 019B7A59BF2B3E0DAB069B69A5BE48799F26 Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/JuhHdC_-wskYknvP7LIY1ggd8So.roa Signing time: Thu 01 Jan 2026 16:17:40 +0000 ROA not before: Thu 01 Jan 2026 16:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9044 IP address blocks: 194.147.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:bf:2b:3e:0d:ab:06:9b:69:a5:be:48:79:9f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Validity Not Before: Jan 1 16:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26e847742ffec2c918927bcfecb218d6081df12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:4d:72:f3:73:b9:35:19:34:28:8d:10:7c: f6:be:62:b6:f5:d9:bc:dc:42:04:c4:e0:36:0e:fc: 43:9a:60:6d:ea:8e:c8:c0:b3:48:1e:6f:66:30:44: 42:7b:aa:5b:b5:ad:47:dd:ea:f5:6b:6e:79:10:da: 28:63:fa:fa:52:37:78:22:e1:fd:32:85:f8:38:91: 87:83:2b:6b:eb:64:9b:e7:e4:23:62:47:8d:6c:c0: 0b:41:c6:bc:cf:92:dd:25:5a:5b:aa:ef:15:4b:78: a9:4f:13:27:95:b3:eb:46:98:f2:a9:40:d3:0f:ce: 1c:7e:04:fd:6e:fb:7f:b8:f9:69:8e:a5:f2:60:e7: ce:1c:2d:b1:69:e0:f1:a5:bc:31:17:62:b5:e5:41: be:bb:b7:e6:a4:1e:6f:6d:3d:3a:9d:0a:9b:ce:49: f6:f3:4c:e0:75:7f:dd:d1:ef:e5:ab:ec:a8:34:81: 96:76:b3:74:6f:69:38:b5:f5:f6:37:c7:f6:f4:6e: 19:ef:48:fa:50:0c:a8:29:d2:9b:03:e2:13:3d:16: 8c:51:12:b5:32:df:81:62:e7:c6:6a:3d:12:7a:99: 8f:01:48:0a:57:4e:07:65:c1:69:14:b2:bb:31:b2: 07:6d:d2:18:da:c1:ca:c9:64:81:8f:54:dc:65:13: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:47:74:2F:FE:C2:C9:18:92:7B:CF:EC:B2:18:D6:08:1D:F1:2A X509v3 Authority Key Identifier: keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/JuhHdC_-wskYknvP7LIY1ggd8So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.73.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:95:67:e5:92:40:5b:35:ba:5c:c0:db:4c:05:7c:85:1f:cf: 32:0f:18:0b:a4:92:2f:8e:f6:ed:44:58:23:26:5a:5c:49:4a: 3c:ce:d5:b5:36:b7:34:4b:4e:d8:14:d1:c2:47:08:e8:9d:10: 2f:40:d3:f1:87:b6:1b:c9:b1:43:e1:a0:3a:42:1a:3d:20:b3: fc:96:7b:3e:fc:a7:85:0f:6b:69:4d:0a:38:6d:c1:01:56:3c: 7d:d8:9e:12:bd:37:4a:e7:fb:51:d9:80:e6:29:d3:f2:b6:83: 57:94:89:4f:0f:2d:a6:55:1d:b1:57:8f:ca:e3:5d:28:a3:b4: ce:27:ae:b0:b6:20:21:fb:90:17:ce:ef:30:f2:20:81:b8:14: 9f:69:58:ad:6e:2c:19:85:ef:95:99:a0:4b:4d:47:ab:e7:9f: e6:84:a1:38:43:1e:16:da:e1:07:a5:da:92:dd:0a:a0:4b:6d: 6a:9a:5a:93:a8:e3:e7:4c:70:95:80:e1:96:a8:b4:7c:f5:c0: 10:07:34:66:e4:e1:d7:64:d9:df:86:63:a0:4b:f7:49:d0:87: eb:8a:89:16:e4:ad:b0:17:37:e1:3e:2f:fc:65:2c:22:4f:bf: 4b:4c:a7:4c:f5:b5:1a:e3:75:1f:55:13:0c:24:34:6d:ff:db: aa:65:a3:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wb8rPg2rBptppb5IeZ8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3 OWM2ZGEwHhcNMjYwMTAxMTYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmU4NDc3NDJmZmVjMmM5MTg5MjdiY2ZlY2IyMThkNjA4MWRmMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27pNcvNzuTUZNCiNEHz2vmK29dm8 3EIExOA2DvxDmmBt6o7IwLNIHm9mMERCe6pbta1H3er1a255ENooY/r6Ujd4IuH9 MoX4OJGHgytr62Sb5+QjYkeNbMALQca8z5LdJVpbqu8VS3ipTxMnlbPrRpjyqUDT D84cfgT9bvt/uPlpjqXyYOfOHC2xaeDxpbwxF2K15UG+u7fmpB5vbT06nQqbzkn2 80zgdX/d0e/lq+yoNIGWdrN0b2k4tfX2N8f29G4Z70j6UAyoKdKbA+ITPRaMURK1 Mt+BYufGaj0SepmPAUgKV04HZcFpFLK7MbIHbdIY2sHKyWSBj1TcZRPvqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCboR3Qv/sLJGJJ7z+yyGNYIHfEqMB8GA1UdIwQY MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt ZDYwYWE3MzNjZDEwLzEvSnVoSGRDXy13c2tZa252UDdMSVkxZ2dkOFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNJMA0G CSqGSIb3DQEBCwUAA4IBAQANlWflkkBbNbpcwNtMBXyFH88yDxgLpJIvjvbtRFgj JlpcSUo8ztW1Nrc0S07YFNHCRwjonRAvQNPxh7YbybFD4aA6Qho9ILP8lns+/KeF D2tpTQo4bcEBVjx92J4SvTdK5/tR2YDmKdPytoNXlIlPDy2mVR2xV4/K410oo7TO J66wtiAh+5AXzu8w8iCBuBSfaVitbiwZhe+VmaBLTUer55/mhKE4Qx4W2uEHpdqS 3QqgS21qmlqTqOPnTHCVgOGWqLR89cAQBzRm5OHXZNnfhmOgS/dJ0IfriokW5K2w FzfhPi/8ZSwiT79LTKdM9bUa43UfVRMMJDRt/9uqZaMF -----END CERTIFICATE-----Generated at Mon Jan 26 19:16:11 2026 by rpki-client