This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa File: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (raw, json) Hash identifier: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c= Subject key identifier: 8E:B3:1A:BC:CE:D3:E6:58:79:56:DF:C6:86:F1:3B:3C:14:63:32:CF Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782 Certificate serial: 019B7BA3E753AD7BE6CF5DF2D9AD9D12BAAE Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204516 IP address blocks: 213.190.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e7:53:ad:7b:e6:cf:5d:f2:d9:ad:9d:12:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782 Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb31abcced3e6587956dfc686f13b3c146332cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:a7:4c:4a:58:ce:ee:36:47:33:d2:0f:67: 1d:38:2e:c2:1a:a6:0e:99:74:57:b8:67:c0:46:93: ac:7f:6e:55:5a:48:63:43:83:6b:eb:16:fc:7d:2c: ed:9d:27:03:c3:7c:04:8b:fa:fe:99:a0:8b:e7:62: 0e:15:0b:a7:36:7a:a8:76:cd:23:84:ab:2c:c5:5d: dd:a0:25:45:df:5e:68:3b:6c:58:e7:a7:35:8d:5a: fe:f7:0d:ec:10:e7:d2:99:8f:be:2e:9a:9e:95:ec: 8c:ea:6d:74:d1:88:ba:49:f1:b5:22:d0:cb:a6:52: 73:09:aa:c3:4f:40:f8:8b:af:82:37:f8:f0:02:67: a3:b6:02:06:94:80:17:93:ab:e5:30:aa:cc:66:26: b1:09:ee:cf:d5:78:33:f4:a2:ef:b8:a1:d2:b9:f7: 52:7f:96:85:e7:ef:f6:41:ed:f6:4a:21:3a:5d:90: cc:2d:f5:eb:b4:a0:0b:81:e9:ce:f8:94:d1:75:47: c8:08:96:a1:f4:0f:29:e6:8d:fb:8b:92:9a:dd:cf: 5e:68:31:48:cf:a3:43:f3:7a:fa:f2:fb:f7:07:a1: b3:a7:e6:79:fd:51:ed:d4:9a:cd:99:41:fd:fa:8e: 6e:3e:cd:da:e6:35:ca:c2:35:f1:7a:25:36:af:c7: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B3:1A:BC:CE:D3:E6:58:79:56:DF:C6:86:F1:3B:3C:14:63:32:CF X509v3 Authority Key Identifier: keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.70.0/24 Signature Algorithm: sha256WithRSAEncryption bc:e1:cc:5f:35:44:6a:0c:98:fa:1f:32:14:a0:93:11:8c:b9: db:78:8e:74:36:61:0b:f5:fd:61:7a:47:26:f8:7f:ed:b8:78: cd:10:fa:b6:8b:13:e3:51:5a:f4:01:4d:a9:76:00:b6:f6:e3: 19:b4:99:59:52:24:ea:ed:b9:ab:d9:e6:f4:78:e2:5b:3e:3a: 73:2c:aa:04:8d:f2:08:ae:ea:de:b0:a0:04:84:26:7d:6f:ac: 15:1c:82:20:9c:a9:2a:ed:08:81:26:a7:fd:95:0b:f2:43:ea: 13:76:ab:b8:49:95:16:e7:a4:7d:92:39:8a:84:67:71:56:7e: 97:be:7c:24:18:35:3a:1e:c4:6a:a9:26:2a:c0:29:ca:4e:3a: c3:1b:4f:66:ef:70:d8:fc:e8:df:29:3d:d8:2f:04:60:7b:80: 77:26:c8:00:40:90:06:4f:4b:b2:96:58:c9:ae:3a:d7:0b:b5: fa:60:18:2f:c5:cd:18:4d:74:83:34:03:e9:6a:94:43:19:82: 34:78:27:e3:1a:a9:71:6b:77:c9:0f:6c:1c:e0:2d:ad:6f:f7: 84:7e:48:2e:9e:cc:55:b2:d8:8a:16:9b:9b:de:c7:32:f5:4b: 7b:dd:12:87:8f:75:99:90:9c:af:c3:84:80:40:c9:1f:25:5b: dc:f5:18:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+dTrXvmz13y2a2dErquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw OGY3ODIwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWIzMWFiY2NlZDNlNjU4Nzk1NmRmYzY4NmYxM2IzYzE0NjMzMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB2nTEpYzu42RzPSD2cdOC7CGqYO mXRXuGfARpOsf25VWkhjQ4Nr6xb8fSztnScDw3wEi/r+maCL52IOFQunNnqods0j hKssxV3doCVF315oO2xY56c1jVr+9w3sEOfSmY++LpqeleyM6m100Yi6SfG1ItDL plJzCarDT0D4i6+CN/jwAmejtgIGlIAXk6vlMKrMZiaxCe7P1Xgz9KLvuKHSufdS f5aF5+/2Qe32SiE6XZDMLfXrtKALgenO+JTRdUfICJah9A8p5o37i5Ka3c9eaDFI z6ND83r68vv3B6Gzp+Z5/VHt1JrNmUH9+o5uPs3a5jXKwjXxeiU2r8fifwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6zGrzO0+ZYeVbfxobxOzwUYzLPMB8GA1UdIwQY MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt NGU0YTM1ZGQzNjc3LzEvanJNYXZNN1Q1bGg1VnRfR2h2RTdQQlJqTXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3 LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b5GMA0G CSqGSIb3DQEBCwUAA4IBAQC84cxfNURqDJj6HzIUoJMRjLnbeI50NmEL9f1hekcm +H/tuHjNEPq2ixPjUVr0AU2pdgC29uMZtJlZUiTq7bmr2eb0eOJbPjpzLKoEjfII ruresKAEhCZ9b6wVHIIgnKkq7QiBJqf9lQvyQ+oTdqu4SZUW56R9kjmKhGdxVn6X vnwkGDU6HsRqqSYqwCnKTjrDG09m73DY/OjfKT3YLwRge4B3JsgAQJAGT0uylljJ rjrXC7X6YBgvxc0YTXSDNAPpapRDGYI0eCfjGqlxa3fJD2wc4C2tb/eEfkgunsxV stiKFpub3scy9Ut73RKHj3WZkJyvw4SAQMkfJVvc9Rh0 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:21 2026 by rpki-client