This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/JcRsIAV11TxO42T56xBXGNtE8kc.roa File: JcRsIAV11TxO42T56xBXGNtE8kc.roa (raw, json) Hash identifier: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow= Subject key identifier: 25:C4:6C:20:05:75:D5:3C:4E:E3:64:F9:EB:10:57:18:DB:44:F2:47 Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa Certificate serial: 019BFA5224A338E3C81DEF3D55E424E8B4E7 Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/JcRsIAV11TxO42T56xBXGNtE8kc.roa Signing time: Mon 26 Jan 2026 12:40:45 +0000 ROA not before: Mon 26 Jan 2026 12:40:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.5.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:52:24:a3:38:e3:c8:1d:ef:3d:55:e4:24:e8:b4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa Validity Not Before: Jan 26 12:40:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c46c200575d53c4ee364f9eb105718db44f247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:e1:f6:d4:20:a1:c6:42:ba:80:05:0e:17: fa:e6:0d:5d:97:d9:62:ab:5b:77:b9:a5:06:7d:3e: c1:48:22:13:07:5d:eb:d5:72:43:86:9a:a7:95:14: f7:07:d1:6c:d4:a9:bc:c8:67:84:67:ce:84:9f:3c: cc:87:63:ca:cb:16:8b:3a:87:11:e9:00:e2:2e:74: e1:1c:db:50:a4:ff:d2:03:89:f1:49:b5:9e:d9:67: b6:c4:6d:0b:38:99:c3:cf:ac:88:e4:d9:2d:49:ca: b0:0e:cc:50:8a:20:5a:e3:64:9d:ca:6d:84:36:79: ad:1f:0d:10:82:a5:0e:6d:3d:8b:51:63:67:73:0c: 21:55:b8:96:2f:90:88:fc:73:f2:c3:30:3e:35:98: 48:15:62:c7:90:18:1d:a5:f6:24:75:81:a2:6b:63: 33:30:9b:6b:2a:fe:00:62:82:1f:30:2e:c3:d0:7b: 1e:95:d3:02:26:0a:16:82:93:fa:7c:15:00:f9:f5: 19:cb:f8:05:7e:15:02:93:23:a7:44:29:73:6f:d7: 6f:72:99:79:d0:2c:05:43:e3:89:1f:15:e6:18:54: 2c:63:07:32:af:44:f5:1d:cc:e7:09:5f:68:d0:80: f6:94:61:0f:27:da:77:50:e4:48:d3:bd:0e:15:30: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:6C:20:05:75:D5:3C:4E:E3:64:F9:EB:10:57:18:DB:44:F2:47 X509v3 Authority Key Identifier: keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/JcRsIAV11TxO42T56xBXGNtE8kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.123.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d3:6b:e1:b3:4c:3d:fb:a7:b9:b0:10:80:79:7c:2b:9c:79: 8d:24:cd:c0:cd:3c:ac:a9:89:df:1d:9f:9b:4e:a4:80:cf:e3: 83:81:1e:a1:89:bb:08:8d:6d:9b:62:7b:c8:4b:e0:64:6f:6e: 4e:73:22:78:47:7a:65:06:2b:a5:69:f1:8f:3b:a7:63:97:10: 9f:c9:83:5a:bf:11:ff:76:09:2c:8b:39:21:3e:35:50:f8:4e: a2:86:54:42:62:c9:ca:09:e4:62:70:7b:66:f4:b4:fb:ef:84: 0f:bf:ed:45:1c:11:ef:e0:23:79:4b:97:79:29:f1:15:86:e6: 53:b6:62:83:d8:3d:0c:66:52:41:5f:cf:98:8d:f9:ba:5f:bc: 34:9a:1f:f2:9b:ad:1c:ee:00:9b:7f:42:0a:64:e5:38:af:bb: 96:c4:fe:79:46:55:a1:11:83:52:b1:5b:99:2a:42:24:8b:b7: 97:65:d0:00:33:f2:fd:16:3e:ba:4c:bd:63:6c:29:3f:79:ce: 14:d9:a2:cb:f0:2a:fc:58:76:4f:1b:a4:14:59:2e:93:2a:7b: b7:b8:d6:d8:aa:df:66:62:03:fc:c6:a6:0d:9f:2a:b0:00:e0: 1f:2d:a3:c7:3d:6a:91:4e:1d:19:db:53:ff:1e:66:2f:13:5d: d6:fa:db:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6UiSjOOPIHe89VeQk6LTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx YTk3ZmEwHhcNMjYwMTI2MTI0MDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM0NmMyMDA1NzVkNTNjNGVlMzY0ZjllYjEwNTcxOGRiNDRmMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPh9tQgocZCuoAFDhf65g1dl9li q1t3uaUGfT7BSCITB13r1XJDhpqnlRT3B9Fs1Km8yGeEZ86EnzzMh2PKyxaLOocR 6QDiLnThHNtQpP/SA4nxSbWe2We2xG0LOJnDz6yI5NktScqwDsxQiiBa42Sdym2E NnmtHw0QgqUObT2LUWNncwwhVbiWL5CI/HPywzA+NZhIFWLHkBgdpfYkdYGia2Mz MJtrKv4AYoIfMC7D0HseldMCJgoWgpP6fBUA+fUZy/gFfhUCkyOnRClzb9dvcpl5 0CwFQ+OJHxXmGFQsYwcyr0T1HcznCV9o0ID2lGEPJ9p3UORI070OFTB94QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXEbCAFddU8TuNk+esQVxjbRPJHMB8GA1UdIwQY MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt OGFkMjMwMThhNWFkLzEvSmNSc0lBVjExVHhPNDJUNTZ4QlhHTnRFOGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQV7MA0G CSqGSIb3DQEBCwUAA4IBAQCc02vhs0w9+6e5sBCAeXwrnHmNJM3AzTysqYnfHZ+b TqSAz+ODgR6hibsIjW2bYnvIS+Bkb25OcyJ4R3plBiulafGPO6djlxCfyYNavxH/ dgksizkhPjVQ+E6ihlRCYsnKCeRicHtm9LT774QPv+1FHBHv4CN5S5d5KfEVhuZT tmKD2D0MZlJBX8+Yjfm6X7w0mh/ym60c7gCbf0IKZOU4r7uWxP55RlWhEYNSsVuZ KkIki7eXZdAAM/L9Fj66TL1jbCk/ec4U2aLL8Cr8WHZPG6QUWS6TKnu3uNbYqt9m YgP8xqYNnyqwAOAfLaPHPWqRTh0Z21P/HmYvE13W+ttJ -----END CERTIFICATE-----Generated at Wed Jan 28 16:19:43 2026 by rpki-client