This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa File: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (raw, json) Hash identifier: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ= Subject key identifier: 26:FA:15:9D:11:6D:BE:62:77:02:94:B5:97:1F:3E:45:17:8C:66:FD Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc Certificate serial: 019B7A5A9F25664D37108B05B9DA17F69238 Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204415 IP address blocks: 69.19.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9f:25:66:4d:37:10:8b:05:b9:da:17:f6:92:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26fa159d116dbe62770294b5971f3e45178c66fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:06:03:29:e3:a7:e9:86:88:30:b8:a5:03: 83:55:68:6d:b8:2d:f6:75:3c:95:db:ed:28:10:da: 4e:c6:f5:20:7c:e2:3f:67:1a:fc:e3:82:80:66:73: f1:d3:ce:c3:99:67:d6:1a:fb:32:9d:f6:ae:a9:53: 4a:e0:0d:d0:b7:12:e7:35:0a:25:1c:a9:53:70:7e: 91:31:e7:34:0b:70:a8:e9:9b:2a:18:ba:c2:9d:72: d4:5f:6f:12:8b:5b:54:f1:fc:3d:bc:5f:1e:b1:23: 99:33:51:86:84:b9:dc:d2:f6:c9:ee:8f:5d:58:15: 3f:77:d9:75:c4:89:78:7c:0a:f9:60:e2:d3:b9:bb: 28:42:04:27:ed:a2:06:fe:91:f8:5c:cd:fd:05:89: 7d:46:5a:61:d1:75:cd:59:08:c7:ee:e5:63:93:05: 23:83:ae:5d:f2:01:8d:8e:ff:77:97:ed:05:f0:f6: 63:1b:b2:54:ce:c4:fa:7d:8a:b1:18:c8:44:39:40: 6c:44:a7:ba:fa:2f:1a:01:2f:51:1a:20:32:be:59: ad:af:d2:ce:11:fb:a9:7e:28:70:5c:12:66:ea:c6: bb:ee:e4:26:a3:0b:c6:92:8c:1f:97:98:b6:32:b0: 89:69:2c:d9:15:f3:c3:73:25:44:ea:2c:af:3b:43: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FA:15:9D:11:6D:BE:62:77:02:94:B5:97:1F:3E:45:17:8C:66:FD X509v3 Authority Key Identifier: keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.19.139.0/24 Signature Algorithm: sha256WithRSAEncryption 94:9c:41:b5:07:2d:9b:af:c1:bc:c7:b1:00:92:cb:a2:6f:a8: 5f:38:19:d4:64:a8:66:da:13:77:0d:ed:e6:03:1c:0c:34:b8: 02:b2:b6:47:93:af:a4:a8:70:d3:75:fa:43:bf:fb:fe:87:a7: 74:9d:3d:eb:24:91:58:76:fa:5c:dd:00:88:0f:5e:83:07:7c: 90:0e:f3:b7:4d:07:fb:19:aa:8f:36:b0:c4:16:40:9c:9b:11: 85:3b:c6:8b:0d:5b:17:a7:21:6c:31:02:fa:47:97:db:1a:43: 7d:ca:7c:5f:0f:28:41:c9:86:94:20:7f:53:4f:cf:e3:f8:80: 6a:b1:49:05:50:bc:eb:3e:e0:16:66:de:60:02:6e:d6:92:b9: ff:84:07:30:50:72:6a:ed:bb:68:bf:10:53:3d:d3:e7:a9:2a: 9a:d3:1b:e6:a1:a3:a9:5d:9f:eb:54:78:1a:1e:4a:67:19:85: 68:f9:62:97:e6:aa:31:3f:51:d4:ae:05:da:7e:69:61:00:a2: 85:eb:6b:95:bb:91:d8:22:af:d3:6f:8a:b9:61:17:36:9a:12: 7d:5a:3a:6a:f0:c0:a2:04:10:6f:f2:4e:33:a6:6a:e5:d3:75: 7f:3b:2f:2b:18:39:99:a1:7c:0d:0d:25:45:7d:77:b4:4b:bf: 76:3c:06:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp8lZk03EIsFudoX9pI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2 NTI4YmMwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmZhMTU5ZDExNmRiZTYyNzcwMjk0YjU5NzFmM2U0NTE3OGM2NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1cGAynjp+mGiDC4pQODVWhtuC32 dTyV2+0oENpOxvUgfOI/Zxr844KAZnPx087DmWfWGvsynfauqVNK4A3QtxLnNQol HKlTcH6RMec0C3Co6ZsqGLrCnXLUX28Si1tU8fw9vF8esSOZM1GGhLnc0vbJ7o9d WBU/d9l1xIl4fAr5YOLTubsoQgQn7aIG/pH4XM39BYl9Rlph0XXNWQjH7uVjkwUj g65d8gGNjv93l+0F8PZjG7JUzsT6fYqxGMhEOUBsRKe6+i8aAS9RGiAyvlmtr9LO EfupfihwXBJm6sa77uQmowvGkowfl5i2MrCJaSzZFfPDcyVE6iyvO0N1hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCb6FZ0Rbb5idwKUtZcfPkUXjGb9MB8GA1UdIwQY MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt YTRkNDEzZDdmODljLzEvSnZvVm5SRnR2bUozQXBTMWx4OC1SUmVNWnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARROLMA0G CSqGSIb3DQEBCwUAA4IBAQCUnEG1By2br8G8x7EAksuib6hfOBnUZKhm2hN3De3m AxwMNLgCsrZHk6+kqHDTdfpDv/v+h6d0nT3rJJFYdvpc3QCID16DB3yQDvO3TQf7 GaqPNrDEFkCcmxGFO8aLDVsXpyFsMQL6R5fbGkN9ynxfDyhByYaUIH9TT8/j+IBq sUkFULzrPuAWZt5gAm7Wkrn/hAcwUHJq7btovxBTPdPnqSqa0xvmoaOpXZ/rVHga HkpnGYVo+WKX5qoxP1HUrgXafmlhAKKF62uVu5HYIq/Tb4q5YRc2mhJ9Wjpq8MCi BBBv8k4zpmrl03V/Oy8rGDmZoXwNDSVFfXe0S792PAZQ -----END CERTIFICATE-----Generated at Sun Jan 11 14:55:20 2026 by rpki-client