This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/jva2M432j_rD8mTBUYUSbS90ZOo.roa File: jva2M432j_rD8mTBUYUSbS90ZOo.roa (raw, json) Hash identifier: x+Rwc4Wf1eEhVET3M68V/c6esRHOLkjEU8A0yZ6pNnE= Subject key identifier: 8E:F6:B6:33:8D:F6:8F:FA:C3:F2:64:C1:51:85:12:6D:2F:74:64:EA Certificate issuer: /CN=78f29e87382159ca5e81387d7ee77e512fad1636 Certificate serial: 019B7A5B1011C6BDFD0511E30EB5E93D815B Authority key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/jva2M432j_rD8mTBUYUSbS90ZOo.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51505 IP address blocks: 193.28.156.0/24 maxlen: 24 194.46.62.0/23 maxlen: 24 194.154.32.0/19 maxlen: 24 2a14:6700::/29 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:11:c6:bd:fd:05:11:e3:0e:b5:e9:3d:81:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78f29e87382159ca5e81387d7ee77e512fad1636 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ef6b6338df68ffac3f264c15185126d2f7464ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:16:37:fb:84:ca:38:5f:bb:16:ad:75:5a: 09:79:52:d6:50:77:12:c9:27:55:9d:73:29:c1:12: 56:f1:cf:df:fc:d7:ec:92:6f:e8:56:88:19:68:b8: c5:dd:7d:7c:24:19:85:d5:fe:46:68:5b:44:ef:2d: 61:0e:2c:1f:e9:2a:5d:b7:87:a8:f6:ce:53:87:50: 3f:48:36:8c:8a:4e:0f:35:90:f1:d4:7e:54:d1:12: 60:d7:34:59:e2:b8:53:45:d7:39:5c:fe:b4:0f:f8: 09:8a:aa:ca:12:33:b9:6a:70:1c:35:56:46:a7:13: 3f:22:38:30:93:46:cb:c2:93:a7:ba:18:d9:10:f5: 24:72:f0:86:3f:d8:e8:97:09:26:65:c3:c8:62:e3: c3:95:9c:76:d5:23:67:23:f1:b2:04:c0:9f:cf:0b: 16:d0:9d:78:d1:b9:11:c3:e0:8a:6f:d6:80:cd:b4: d0:33:0e:d9:97:1f:25:e6:2a:b8:65:19:ad:e2:e3: 51:ea:99:44:82:40:4b:64:dd:ae:49:1f:30:7c:35: ac:67:c7:b8:5a:43:01:a1:a9:b4:f8:e8:2c:e3:29: ed:02:43:24:fe:4f:a1:f9:b3:35:93:d5:28:71:bc: fb:6a:e2:1a:1c:e2:f9:75:0a:96:af:76:22:b5:22: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F6:B6:33:8D:F6:8F:FA:C3:F2:64:C1:51:85:12:6D:2F:74:64:EA X509v3 Authority Key Identifier: keyid:78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/jva2M432j_rD8mTBUYUSbS90ZOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.156.0/24 194.46.62.0/23 194.154.32.0/19 IPv6: 2a14:6700::/29 Signature Algorithm: sha256WithRSAEncryption 2b:9e:58:e1:d8:a2:c0:a0:0d:1a:3a:4e:b2:f4:48:c8:e8:3c: db:a0:53:33:d5:d1:7b:57:83:c1:c8:fc:f8:b0:ea:ac:a0:13: 1f:89:5d:8a:7b:c8:70:ed:db:a3:cf:e6:97:de:d6:e9:07:dd: 05:4e:59:91:4b:a7:1f:07:30:a3:01:3c:c1:4d:cb:7f:d6:99: 92:4d:38:0a:8f:4e:10:18:7a:ff:dd:59:9e:73:bb:f0:ca:9f: 5c:fe:68:f0:1e:f1:c9:9e:14:6d:ca:77:7f:39:03:06:46:e4: 9a:f2:ca:04:0e:07:ab:39:d8:ac:51:96:f2:6f:a6:f0:df:2b: 43:0f:86:75:1b:1f:db:83:09:7f:45:f0:55:9e:ca:66:a4:6a: 63:26:85:75:1a:a3:a4:e4:2c:00:4a:ad:f0:2b:cc:44:ff:30: 25:54:da:90:f1:da:07:53:ff:8f:d4:f0:ba:c6:74:ad:84:6e: 30:c5:18:b0:02:3f:57:be:70:8d:cd:fe:0f:8f:f2:19:b5:1a: 18:86:b4:b5:3a:08:1a:ea:8c:7b:f5:5c:9d:89:3b:89:97:53: d0:73:e6:45:bb:0e:16:ce:a9:fe:be:74:2a:22:6b:70:b2:41: cd:ec:05:ff:75:59:84:ad:30:22:fb:8f:f2:9c:8e:40:fd:0c: 59:72:fc:8a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WxARxr39BRHjDrXpPYFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZjI5ZTg3MzgyMTU5Y2E1ZTgxMzg3ZDdlZTc3ZTUxMmZh ZDE2MzYwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWY2YjYzMzhkZjY4ZmZhYzNmMjY0YzE1MTg1MTI2ZDJmNzQ2NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48WN/uEyjhfuxatdVoJeVLWUHcS ySdVnXMpwRJW8c/f/Nfskm/oVogZaLjF3X18JBmF1f5GaFtE7y1hDiwf6Spdt4eo 9s5Th1A/SDaMik4PNZDx1H5U0RJg1zRZ4rhTRdc5XP60D/gJiqrKEjO5anAcNVZG pxM/Ijgwk0bLwpOnuhjZEPUkcvCGP9jolwkmZcPIYuPDlZx21SNnI/GyBMCfzwsW 0J140bkRw+CKb9aAzbTQMw7Zlx8l5iq4ZRmt4uNR6plEgkBLZN2uSR8wfDWsZ8e4 WkMBoam0+Ogs4yntAkMk/k+h+bM1k9Uocbz7auIaHOL5dQqWr3YitSJzdQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFI72tjON9o/6w/JkwVGFEm0vdGTqMB8GA1UdIwQY MBaAFHjynoc4IVnKXoE4fX7nflEvrRY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBLZWh6Z2hXY3BlZ1RoOWZ1ZC1VUy10RmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hNGI0OGItNDYyZS00NWE2LTg2MGQt ODJmODljYmEyNmQ4LzEvanZhMk00MzJqX3JEOG1UQlVZVVNiUzkwWk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hNGI0OGItNDYyZS00NWE2LTg2MGQtODJmODljYmEyNmQ4 LzEvZVBLZWh6Z2hXY3BlZ1RoOWZ1ZC1VUy10RmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwRycAwQB wi4+AwQFwpogMA0EAgACMAcDBQMqFGcAMA0GCSqGSIb3DQEBCwUAA4IBAQArnljh 2KLAoA0aOk6y9EjI6DzboFMz1dF7V4PByPz4sOqsoBMfiV2Ke8hw7dujz+aX3tbp B90FTlmRS6cfBzCjATzBTct/1pmSTTgKj04QGHr/3Vmec7vwyp9c/mjwHvHJnhRt ynd/OQMGRuSa8soEDgerOdisUZbyb6bw3ytDD4Z1Gx/bgwl/RfBVnspmpGpjJoV1 GqOk5CwASq3wK8xE/zAlVNqQ8doHU/+P1PC6xnSthG4wxRiwAj9XvnCNzf4Pj/IZ tRoYhrS1Ogga6ox79VydiTuJl1PQc+ZFuw4Wzqn+vnQqImtwskHN7AX/dVmErTAi +4/ynI5A/QxZcvyK -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:15 2026 by rpki-client