This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jq9WZFOhyGEO0Mrjt853smzPzF4.roa File: jq9WZFOhyGEO0Mrjt853smzPzF4.roa (raw, json) Hash identifier: wG3b0saRJOQUubh3Dll6krangAR7wYUcYFZwcFNAUAU= Subject key identifier: 8E:AF:56:64:53:A1:C8:61:0E:D0:CA:E3:B7:CE:77:B2:6C:CF:CC:5E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1396F9E6873844E29DC7E5E3836E05 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jq9WZFOhyGEO0Mrjt853smzPzF4.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 193.58.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:96:f9:e6:87:38:44:e2:9d:c7:e5:e3:83:6e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eaf566453a1c8610ed0cae3b7ce77b26ccfcc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:1b:67:dc:a9:21:9c:2a:ab:35:e3:cb:2e: a2:3a:45:8b:6a:90:f6:d6:ca:ca:17:87:97:20:a0: 22:44:90:94:3b:6f:0b:dc:5f:64:a9:dd:91:88:e3: a0:30:c1:6c:d7:53:94:bb:cc:40:4c:a5:8f:79:8e: 0d:29:25:00:e3:f8:f0:f1:1f:3f:a9:85:ed:cb:a4: ec:af:3b:49:58:1b:d0:a3:94:93:87:76:e4:dd:8f: f6:0e:08:b0:71:68:9f:02:0c:47:bf:af:7a:f0:3b: c6:4b:43:d0:41:31:57:dd:78:60:ab:7d:b5:65:dc: 1a:fd:97:26:3f:dd:26:2d:24:c3:59:fc:75:fb:4f: 6c:ad:94:a0:cd:7e:71:e4:ce:40:45:fd:32:48:3a: bc:80:fa:67:8c:10:50:05:0d:9b:dd:d4:d8:05:27: a7:99:86:a8:2f:68:d3:85:67:aa:76:08:8d:b1:d0: b1:56:90:c4:e7:96:7b:30:8e:da:5b:bc:04:8a:71: 0b:02:b8:b3:1c:61:e2:82:51:5f:cb:27:f6:5f:e4: 4b:a8:f7:f6:fe:d4:dd:e0:ed:f7:92:00:ed:ce:15: d6:26:35:75:42:fa:2f:b1:70:39:6c:e4:ec:ec:9e: 04:5e:51:67:56:08:9f:7e:64:3e:18:13:8e:7d:06: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:56:64:53:A1:C8:61:0E:D0:CA:E3:B7:CE:77:B2:6C:CF:CC:5E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jq9WZFOhyGEO0Mrjt853smzPzF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.145.0/24 Signature Algorithm: sha256WithRSAEncryption 32:3f:c5:1f:13:3f:46:24:0b:16:e2:2d:a0:64:06:f6:fc:d9: 6b:a1:59:c7:ab:38:88:ea:71:1c:50:76:38:3d:41:4b:97:1a: 32:f1:63:d0:b9:6d:7d:2f:50:5c:3c:b6:be:42:29:ed:7e:2b: bf:5f:a0:75:e0:b3:f9:dc:a7:63:f8:05:d3:78:1e:df:74:e8: 99:ba:8d:2e:61:dc:22:2e:5e:3e:5a:31:86:ae:98:c7:8e:b9: 3d:73:9e:02:b9:39:a7:ea:45:d1:e9:20:a5:23:f8:44:e0:70: 13:73:6c:aa:55:74:f0:05:20:45:7d:2b:42:35:6d:34:db:24: a9:5b:96:36:2a:70:45:6c:87:82:5c:2f:89:31:9f:ba:9c:c2: a3:a2:23:96:02:68:18:4c:3a:fb:28:d9:ca:86:cb:44:9b:52: 68:4a:15:b6:4e:48:af:a0:8f:ad:4c:ae:0c:c8:f1:75:de:c1: fc:15:51:13:3a:0d:e4:e5:f3:1b:e7:93:b7:22:92:ea:67:1c: ff:0f:38:e9:bf:08:e7:cb:01:7b:0f:2b:c8:2e:2a:17:53:28: 98:2c:e7:c4:93:d4:45:0c:0f:b9:a3:21:dc:8c:ba:8c:eb:33: 19:62:0f:b6:26:1c:85:b1:34:de:e6:0e:43:91:b9:ad:58:c5: 61:0a:1d:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E5b55oc4ROKdx+Xjg24FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWFmNTY2NDUzYTFjODYxMGVkMGNhZTNiN2NlNzdiMjZjY2ZjYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5gbZ9ypIZwqqzXjyy6iOkWLapD2 1srKF4eXIKAiRJCUO28L3F9kqd2RiOOgMMFs11OUu8xATKWPeY4NKSUA4/jw8R8/ qYXty6TsrztJWBvQo5STh3bk3Y/2DgiwcWifAgxHv6968DvGS0PQQTFX3Xhgq321 Zdwa/ZcmP90mLSTDWfx1+09srZSgzX5x5M5ARf0ySDq8gPpnjBBQBQ2b3dTYBSen mYaoL2jThWeqdgiNsdCxVpDE55Z7MI7aW7wEinELArizHGHiglFfyyf2X+RLqPf2 /tTd4O33kgDtzhXWJjV1QvovsXA5bOTs7J4EXlFnVgiffmQ+GBOOfQZKvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6vVmRTochhDtDK47fOd7Jsz8xeMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvanE5V1pGT2h5R0VPME1yanQ4NTNzbXpQekY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqRMA0G CSqGSIb3DQEBCwUAA4IBAQAyP8UfEz9GJAsW4i2gZAb2/NlroVnHqziI6nEcUHY4 PUFLlxoy8WPQuW19L1BcPLa+Qintfiu/X6B14LP53Kdj+AXTeB7fdOiZuo0uYdwi Ll4+WjGGrpjHjrk9c54CuTmn6kXR6SClI/hE4HATc2yqVXTwBSBFfStCNW002ySp W5Y2KnBFbIeCXC+JMZ+6nMKjoiOWAmgYTDr7KNnKhstEm1JoShW2TkivoI+tTK4M yPF13sH8FVETOg3k5fMb55O3IpLqZxz/DzjpvwjnywF7DyvILioXUyiYLOfEk9RF DA+5oyHcjLqM6zMZYg+2JhyFsTTe5g5DkbmtWMVhCh0t -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:16 2026 by rpki-client