This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/pJGp42TNNVRFmc0VMNYNDz0RXj0.roa File: pJGp42TNNVRFmc0VMNYNDz0RXj0.roa (raw, json) Hash identifier: kwRKyNh99M0qDya3cQpvgNZdWFnHWaeh5dPoEC7mGjg= Subject key identifier: A4:91:A9:E3:64:CD:35:54:45:99:CD:15:30:D6:0D:0F:3D:11:5E:3D Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B78A22E6C6FB7EDFFC1DB143446D5FED9 Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/pJGp42TNNVRFmc0VMNYNDz0RXj0.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 194.104.188.0/24 maxlen: 24 194.104.189.0/24 maxlen: 24 194.104.190.0/24 maxlen: 24 194.104.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2e:6c:6f:b7:ed:ff:c1:db:14:34:46:d5:fe:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a491a9e364cd35544599cd1530d60d0f3d115e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:4e:83:12:fe:82:d1:a9:fd:f1:c8:20:90: e9:25:d0:e1:62:11:04:03:b3:52:df:d0:e2:f3:f9: 62:75:78:49:02:1d:63:e8:a5:a7:b9:81:59:0a:bb: 30:66:5a:ba:a9:5e:fe:cf:5b:39:df:f2:7f:01:b6: fa:76:37:04:f9:61:1c:25:82:d5:b7:ec:cc:fe:05: 2d:9a:60:42:61:5b:e9:07:ea:8e:7f:2d:a4:d9:d7: 8d:ee:0b:aa:d8:00:08:43:7e:46:57:88:c7:93:41: 1d:9d:54:02:6b:71:14:f0:82:35:a2:52:75:b8:5c: 71:42:a9:02:15:69:0b:7f:9e:09:21:38:7a:63:42: 1a:f7:57:d7:c7:20:b1:cc:ac:6e:55:13:de:c0:14: 67:11:7d:62:32:75:7c:ec:97:3f:db:70:5b:50:45: 60:98:a7:10:43:f1:15:80:3e:30:75:6b:4f:ba:79: 2c:3d:09:1c:d7:5a:08:da:7c:0b:e9:ef:a2:a4:de: 00:a5:e5:6e:56:3d:01:84:90:37:9d:51:a6:f4:dd: cc:d7:8a:33:38:b3:60:9f:3f:67:1d:c0:db:62:64: 6f:78:b3:eb:31:f1:72:22:77:ed:02:ac:21:39:9d: 79:11:67:64:6c:81:81:e3:20:ce:bd:a7:93:29:9e: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:A9:E3:64:CD:35:54:45:99:CD:15:30:D6:0D:0F:3D:11:5E:3D X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/pJGp42TNNVRFmc0VMNYNDz0RXj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.188.0/22 Signature Algorithm: sha256WithRSAEncryption a0:37:39:32:3d:68:d9:d2:7e:ed:0f:fd:2a:68:e3:0b:88:91: fa:ba:a7:a3:74:c9:bd:96:72:13:9c:7d:ed:84:e4:b2:85:3a: db:e8:fd:a9:e0:06:02:37:1e:9c:4d:54:ae:1e:8d:89:10:56: b3:3e:3f:b2:a1:73:c4:c5:15:b3:14:3f:42:30:a6:69:c2:ce: 2f:4e:23:45:76:4c:8c:96:dc:a8:ac:dd:62:e7:61:bd:03:c7: ea:b6:b8:8c:15:4c:92:ac:83:04:d7:f7:1d:5e:04:78:9b:e2: 4d:fa:b1:82:75:98:32:ac:7a:d3:c6:dc:64:d3:39:a7:d2:7d: 3b:aa:39:3b:43:fc:18:51:75:42:46:64:93:84:65:e5:bb:0b: ab:f3:d1:a5:5f:36:51:58:5b:42:42:be:76:e1:b3:6b:74:37: 7f:d4:97:b8:a1:43:2c:18:43:66:90:3f:68:85:79:56:bd:62: 06:a9:90:e6:af:50:47:e7:13:73:d4:31:5c:8b:3b:5d:83:a6: d5:fc:24:d1:f0:82:a0:31:f7:5b:67:4e:f1:f2:25:16:74:60: 3a:cf:ae:40:2b:2b:5f:e3:90:e3:92:71:e0:67:41:2e:c7:72: 8f:e6:f3:ad:31:9e:09:24:c7:bb:a9:df:48:66:ee:b9:55:89: 25:6f:d2:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi5sb7ft/8HbFDRG1f7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDkxYTllMzY0Y2QzNTU0NDU5OWNkMTUzMGQ2MGQwZjNkMTE1ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhOgxL+gtGp/fHIIJDpJdDhYhEE A7NS39Di8/lidXhJAh1j6KWnuYFZCrswZlq6qV7+z1s53/J/Abb6djcE+WEcJYLV t+zM/gUtmmBCYVvpB+qOfy2k2deN7guq2AAIQ35GV4jHk0EdnVQCa3EU8II1olJ1 uFxxQqkCFWkLf54JITh6Y0Ia91fXxyCxzKxuVRPewBRnEX1iMnV87Jc/23BbUEVg mKcQQ/EVgD4wdWtPunksPQkc11oI2nwL6e+ipN4ApeVuVj0BhJA3nVGm9N3M14oz OLNgnz9nHcDbYmRveLPrMfFyInftAqwhOZ15EWdkbIGB4yDOvaeTKZ5v9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSRqeNkzTVURZnNFTDWDQ89EV49MB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvcEpHcDQyVE5OVlJGbWMwVk1OWU5EejBSWGowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwmi8MA0G CSqGSIb3DQEBCwUAA4IBAQCgNzkyPWjZ0n7tD/0qaOMLiJH6uqejdMm9lnITnH3t hOSyhTrb6P2p4AYCNx6cTVSuHo2JEFazPj+yoXPExRWzFD9CMKZpws4vTiNFdkyM ltyorN1i52G9A8fqtriMFUySrIME1/cdXgR4m+JN+rGCdZgyrHrTxtxk0zmn0n07 qjk7Q/wYUXVCRmSThGXluwur89GlXzZRWFtCQr524bNrdDd/1Je4oUMsGENmkD9o hXlWvWIGqZDmr1BH5xNz1DFciztdg6bV/CTR8IKgMfdbZ07x8iUWdGA6z65AKytf 45DjknHgZ0Eux3KP5vOtMZ4JJMe7qd9IZu65VYklb9LB -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:04 2026 by rpki-client