This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa File: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (raw, json) Hash identifier: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o= Subject key identifier: 8C:65:0F:85:D3:35:5D:94:DD:CE:C4:B7:94:3F:88:60:81:3D:4B:D8 Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Certificate serial: 019B77C705A39C11DE9B220E14DE911A1ACA Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 176.124.254.0/23 maxlen: 32 2001:678:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:05:a3:9c:11:de:9b:22:0e:14:de:91:1a:1a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c650f85d3355d94ddcec4b7943f8860813d4bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:f1:76:3d:04:13:26:3c:7d:bf:b4:44:91: 77:7a:cb:fd:48:58:94:35:99:9e:d8:7e:ba:c3:66: 93:f3:7d:6c:18:1c:06:ee:cc:1b:07:b5:c2:07:f8: d2:15:ec:a9:4f:a1:5a:82:45:a5:e4:b2:03:e8:eb: 31:29:1b:14:8e:18:e7:d9:76:00:97:2c:56:60:c7: 6d:7f:3d:79:a4:06:71:8e:91:be:42:48:8f:22:98: 15:c5:9e:c3:df:11:0e:6c:6f:a1:67:f7:0b:77:9d: b5:6c:f9:dd:9a:ba:c7:39:86:27:df:6f:fc:8b:0c: 4a:55:e0:e2:3e:cf:ce:88:94:41:17:8d:07:55:e9: 66:18:3f:a1:9f:e6:78:c3:02:ce:b5:c9:d2:03:a6: b6:b4:9b:ec:a7:0c:3d:f8:ab:a3:9c:75:de:13:0e: 71:0f:0d:06:28:c8:59:71:50:73:5c:c9:88:76:02: 44:60:80:ad:16:87:cf:ef:47:8c:74:ae:e7:46:f2: 9c:37:71:94:46:1f:fb:a9:14:44:65:cb:ce:57:20: c0:f2:3d:ed:bf:ae:c8:f4:22:54:61:60:12:a7:76: bc:2b:a9:b6:dc:c3:ea:52:58:b1:85:e5:7a:7f:84: f3:49:4e:8a:8f:dc:d8:8a:82:4e:54:7e:a3:55:74: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:65:0F:85:D3:35:5D:94:DD:CE:C4:B7:94:3F:88:60:81:3D:4B:D8 X509v3 Authority Key Identifier: keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.254.0/23 IPv6: 2001:678:dc::/48 Signature Algorithm: sha256WithRSAEncryption 12:d1:de:a2:15:29:d5:87:f4:0e:a9:36:81:e0:ca:de:a5:1d: e9:a1:1e:94:10:dc:70:fa:14:62:90:24:8a:fc:4e:12:c0:08: 58:65:0e:6f:fd:a5:2b:49:f2:cb:5a:6e:73:d8:f5:fd:40:0e: ee:cd:be:9e:9d:e0:77:cb:f3:9a:e9:3f:d2:12:bc:7d:44:73: 43:62:c6:db:9c:d8:7f:f6:e0:59:06:58:59:bb:5e:79:54:fb: ff:30:e5:0c:80:ac:77:70:dc:69:0c:c2:4a:e6:3f:48:cf:9d: 6b:59:39:02:9b:85:4d:26:e1:ff:67:d7:2b:5e:5b:5c:b6:52: 82:14:ab:11:35:2a:dd:99:8f:4c:5e:c6:56:ad:13:00:be:56: 49:ba:b6:64:94:0f:cc:f9:26:23:f3:6a:5f:07:28:6c:7a:54: b9:14:27:70:69:80:c0:71:d6:5d:9f:0e:cf:7c:4b:9a:60:e8: a5:84:46:56:a3:13:2a:b7:4a:f8:8c:eb:2d:f3:f8:44:c7:ec: 0c:98:a9:5f:91:0b:9f:45:85:d9:0e:b4:c5:c7:e5:d3:1d:6a: 71:4e:a2:e6:4d:8e:cb:82:63:2a:33:2e:42:75:8b:b7:84:ad: 1d:f4:ca:7c:9a:10:0c:b0:70:06:bc:19:cf:9b:58:ae:10:c9: 44:96:00:fb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xwWjnBHemyIOFN6RGhrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh ZGVjMDQwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzY1MGY4NWQzMzU1ZDk0ZGRjZWM0Yjc5NDNmODg2MDgxM2Q0YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTxdj0EEyY8fb+0RJF3esv9SFiU NZme2H66w2aT831sGBwG7swbB7XCB/jSFeypT6FagkWl5LID6OsxKRsUjhjn2XYA lyxWYMdtfz15pAZxjpG+QkiPIpgVxZ7D3xEObG+hZ/cLd521bPndmrrHOYYn32/8 iwxKVeDiPs/OiJRBF40HVelmGD+hn+Z4wwLOtcnSA6a2tJvspww9+KujnHXeEw5x Dw0GKMhZcVBzXMmIdgJEYICtFofP70eMdK7nRvKcN3GURh/7qRREZcvOVyDA8j3t v67I9CJUYWASp3a8K6m23MPqUlixheV6f4TzSU6Kj9zYioJOVH6jVXQVjwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIxlD4XTNV2U3c7Et5Q/iGCBPUvYMB8GA1UdIwQY MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It Nzk0NTNiNDc0ZTJlLzEvakdVUGhkTTFYWlRkenNTM2xELUlZSUU5UzlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBsHz+MA8E AgACMAkDBwAgAQZ4ANwwDQYJKoZIhvcNAQELBQADggEBABLR3qIVKdWH9A6pNoHg yt6lHemhHpQQ3HD6FGKQJIr8ThLACFhlDm/9pStJ8stabnPY9f1ADu7Nvp6d4HfL 85rpP9ISvH1Ec0Nixtuc2H/24FkGWFm7XnlU+/8w5QyArHdw3GkMwkrmP0jPnWtZ OQKbhU0m4f9n1yteW1y2UoIUqxE1Kt2Zj0xexlatEwC+Vkm6tmSUD8z5JiPzal8H KGx6VLkUJ3BpgMBx1l2fDs98S5pg6KWERlajEyq3SviM6y3z+ETH7AyYqV+RC59F hdkOtMXH5dMdanFOouZNjsuCYyozLkJ1i7eErR30ynyaEAywcAa8Gc+bWK4QyUSW APs= -----END CERTIFICATE-----Generated at Fri Jan 2 16:25:52 2026 by rpki-client