This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/JPN0ZhHYSvkn7r532xwlghazy8M.roa File: JPN0ZhHYSvkn7r532xwlghazy8M.roa (raw, json) Hash identifier: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY= Subject key identifier: 24:F3:74:66:11:D8:4A:F9:27:EE:BE:77:DB:1C:25:82:16:B3:CB:C3 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019B7CEE2DC7BD4430E3038B95813B7E6CD2 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/JPN0ZhHYSvkn7r532xwlghazy8M.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207964 IP address blocks: 5.23.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2d:c7:bd:44:30:e3:03:8b:95:81:3b:7e:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f3746611d84af927eebe77db1c258216b3cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7f:a2:f7:8d:72:92:3e:96:e1:a6:58:b7:d5: d8:f6:66:6b:6f:72:89:e0:c5:aa:d4:d3:2a:ec:1e: 93:96:b2:0c:be:b9:d3:73:7c:89:ba:d8:dc:ea:7e: e7:8e:1a:7a:7a:79:61:54:83:e1:af:ae:0c:31:17: 1c:46:40:59:ce:a7:dd:24:18:08:12:6a:81:8e:c2: 82:9f:eb:16:36:47:c9:19:96:1b:17:2b:fa:9b:ca: 74:c7:a4:a0:5d:75:8f:01:f7:38:cc:1b:ea:e3:ec: f7:cd:b1:eb:03:64:ee:21:e6:ea:09:ec:b0:62:7e: b9:9e:01:37:54:0f:3e:c0:95:c4:bf:6a:cd:8d:b9: 13:c0:cc:74:12:9b:30:3c:46:4b:ea:6f:ae:d9:e3: ce:41:29:c2:c2:0e:f1:e8:b6:c4:3d:27:e6:6d:f6: 1e:36:70:fa:23:a2:d6:af:14:86:c3:fc:2b:4a:b0: 1a:1c:33:86:7d:60:15:13:be:b6:77:05:90:76:83: 84:90:94:94:16:b2:b1:ce:00:c1:1b:ad:f8:e5:41: 66:b7:67:4a:e8:87:7d:21:3b:23:ad:5b:13:66:ae: df:f3:ee:d4:2d:ff:0a:4b:19:0a:02:40:77:5f:be: 89:b4:f5:c9:a0:e8:99:dc:39:59:c1:0e:5a:de:70: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F3:74:66:11:D8:4A:F9:27:EE:BE:77:DB:1C:25:82:16:B3:CB:C3 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/JPN0ZhHYSvkn7r532xwlghazy8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.32.0/23 Signature Algorithm: sha256WithRSAEncryption 43:a7:14:52:4e:18:5c:6c:eb:a2:f6:a7:2e:ac:0d:fa:c0:80: d4:1b:4f:8c:33:ca:1c:d7:11:6f:d2:56:00:ac:8c:74:55:85: 57:7b:1e:5f:6c:0e:07:98:a2:1f:76:d9:33:3a:36:64:2c:bd: 49:e7:45:83:49:fb:80:43:75:77:9f:0d:8d:cd:11:9f:4e:03: a8:a3:ed:59:07:27:7d:ed:89:63:a2:d2:4b:fd:11:66:66:47: 6a:be:fa:9a:f2:57:9e:33:80:ea:93:93:ac:a4:af:91:8b:24: e7:bc:29:39:55:22:56:e8:58:7c:22:72:cd:87:e3:eb:be:4c: 0e:1b:46:b9:dc:a4:de:b6:e3:0d:38:9e:80:12:3d:6f:fa:c3: 7d:ea:da:44:7c:b3:f6:06:60:79:aa:38:b8:e5:7d:3a:0c:f7: dc:91:d9:2e:0b:64:4b:3b:fa:a9:43:23:1d:83:a1:43:2d:8e: 40:ac:86:f9:3f:05:53:d5:25:ff:f7:f6:44:1a:0f:f1:f7:23: 37:27:74:84:65:06:4f:25:77:34:cf:5f:51:d7:dd:77:c9:f0: 6b:08:f0:a8:09:37:4f:bc:75:a2:39:8c:77:d3:de:c7:80:8d: 66:7d:ff:09:4d:88:33:ef:bc:05:81:e8:b8:14:4a:43:d5:51: a1:89:3a:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i3HvUQw4wOLlYE7fmzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGYzNzQ2NjExZDg0YWY5MjdlZWJlNzdkYjFjMjU4MjE2YjNjYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9H+i941ykj6W4aZYt9XY9mZrb3KJ 4MWq1NMq7B6TlrIMvrnTc3yJutjc6n7njhp6enlhVIPhr64MMRccRkBZzqfdJBgI EmqBjsKCn+sWNkfJGZYbFyv6m8p0x6SgXXWPAfc4zBvq4+z3zbHrA2TuIebqCeyw Yn65ngE3VA8+wJXEv2rNjbkTwMx0EpswPEZL6m+u2ePOQSnCwg7x6LbEPSfmbfYe NnD6I6LWrxSGw/wrSrAaHDOGfWAVE762dwWQdoOEkJSUFrKxzgDBG6345UFmt2dK 6Id9ITsjrVsTZq7f8+7ULf8KSxkKAkB3X76JtPXJoOiZ3DlZwQ5a3nCTHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTzdGYR2Er5J+6+d9scJYIWs8vDMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvSlBOMFpoSFlTdmtuN3I1MzJ4d2xnaGF6eThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBRcgMA0G CSqGSIb3DQEBCwUAA4IBAQBDpxRSThhcbOui9qcurA36wIDUG0+MM8oc1xFv0lYA rIx0VYVXex5fbA4HmKIfdtkzOjZkLL1J50WDSfuAQ3V3nw2NzRGfTgOoo+1ZByd9 7YljotJL/RFmZkdqvvqa8leeM4Dqk5OspK+RiyTnvCk5VSJW6Fh8InLNh+PrvkwO G0a53KTetuMNOJ6AEj1v+sN96tpEfLP2BmB5qji45X06DPfckdkuC2RLO/qpQyMd g6FDLY5ArIb5PwVT1SX/9/ZEGg/x9yM3J3SEZQZPJXc0z19R1913yfBrCPCoCTdP vHWiOYx3097HgI1mff8JTYgz77wFgei4FEpD1VGhiTpm -----END CERTIFICATE-----Generated at Sun Jan 18 19:29:01 2026 by rpki-client