This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa File: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (raw, json) Hash identifier: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg= Subject key identifier: 27:19:29:CB:23:FB:77:F1:3E:D0:28:A2:F0:25:BE:E6:DE:01:B0:CD Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD3B4FA18C0EFCB62192C6D7B4557 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201414 IP address blocks: 192.162.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:b4:fa:18:c0:ef:cb:62:19:2c:6d:7b:45:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=271929cb23fb77f13ed028a2f025bee6de01b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:51:a3:ee:4c:21:42:75:ca:76:24:ab:59: ed:43:b2:23:47:1b:d9:27:96:75:1e:a2:4f:a9:04: da:0f:b1:45:bb:68:32:76:29:0b:63:42:22:47:d7: c4:3d:4c:51:18:63:3b:e1:50:7b:4c:a2:7c:85:91: 80:16:9e:b3:41:70:71:21:f9:21:c3:dd:29:30:9c: d1:ed:ee:1c:6a:46:bc:9a:a1:b2:cc:74:48:4c:38: 1a:8a:54:a9:e5:6a:c1:8a:39:9d:eb:85:eb:ae:d0: cf:d8:ed:cc:35:25:a1:33:bf:7b:ad:d2:70:1c:a7: e7:ab:82:b2:b9:d7:a0:9c:75:80:26:1a:70:08:31: a2:d2:5b:65:27:4c:7d:3f:c9:da:7e:d7:f0:80:29: 3e:0b:f2:d2:a5:17:77:f3:b9:71:24:85:01:a5:08: 4f:3a:ae:6e:67:d8:5d:9b:84:e5:fd:41:57:c3:a3: 1a:27:49:e5:c5:0c:ae:03:5c:e0:37:e3:83:35:3a: 6c:d1:83:65:50:b4:93:66:d7:ba:cc:71:eb:79:7f: 0b:37:ea:37:38:6c:08:be:1c:91:5a:d8:63:c7:39: bd:c6:ac:77:5c:2e:14:c2:e8:a8:89:b3:5d:63:bb: 43:07:6c:0a:cc:81:de:ab:37:82:8d:b8:30:cd:d1: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:29:CB:23:FB:77:F1:3E:D0:28:A2:F0:25:BE:E6:DE:01:B0:CD X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.64.0/24 Signature Algorithm: sha256WithRSAEncryption 92:29:47:4e:aa:e4:25:5a:5b:c9:1e:00:6c:67:36:be:cf:9c: ee:ed:c3:4c:43:b9:77:22:6d:01:5f:03:74:e6:0d:64:53:48: 52:d5:8f:b0:a2:0e:c3:23:58:7a:d1:1e:61:03:8a:cf:f5:69: 46:23:8f:0f:a0:e0:d9:bd:05:72:6d:9e:3b:69:91:db:02:bb: 9e:c9:47:6b:4c:3d:7d:41:fd:e4:9c:ee:f1:de:62:34:32:5a: a3:89:2a:66:bc:35:1b:13:78:f6:f3:4c:0e:ac:d9:28:02:d5: 95:47:0d:1b:3e:b0:a1:01:f6:e2:c8:61:05:64:96:70:d4:51: 9d:98:0d:27:b1:1a:48:c7:6e:c3:09:41:6e:e7:1e:4c:ba:a9: 52:3d:4b:58:1e:e7:2e:f8:ca:0a:bf:2a:91:20:8a:37:1d:27: 36:f8:7d:10:cb:5a:48:80:d2:6c:fd:28:e8:38:cb:63:46:fa: 4e:57:dd:f6:5a:e4:bd:1a:22:ba:87:29:cf:c6:e0:fa:26:1e: 04:f8:ed:24:24:f6:f0:3e:19:44:40:9b:83:04:18:bf:76:3e: be:51:30:b0:89:c8:f8:75:dc:31:c9:b8:63:88:f3:0d:4c:a2: 19:02:2e:49:fd:62:9e:4c:0b:4a:6f:54:5a:b1:c7:35:2e:6d: 5a:dc:31:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNO0+hjA78tiGSxte0VXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzE5MjljYjIzZmI3N2YxM2VkMDI4YTJmMDI1YmVlNmRlMDFiMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm1Ro+5MIUJ1ynYkq1ntQ7IjRxvZ J5Z1HqJPqQTaD7FFu2gydikLY0IiR9fEPUxRGGM74VB7TKJ8hZGAFp6zQXBxIfkh w90pMJzR7e4caka8mqGyzHRITDgailSp5WrBijmd64XrrtDP2O3MNSWhM797rdJw HKfnq4KyudegnHWAJhpwCDGi0ltlJ0x9P8naftfwgCk+C/LSpRd387lxJIUBpQhP Oq5uZ9hdm4Tl/UFXw6MaJ0nlxQyuA1zgN+ODNTps0YNlULSTZte6zHHreX8LN+o3 OGwIvhyRWthjxzm9xqx3XC4UwuioibNdY7tDB2wKzIHeqzeCjbgwzdGS1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcZKcsj+3fxPtAoovAlvubeAbDNMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvSnhrcHl5UDdkX0UtMENpaThDVy01dDRCc00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKJAMA0G CSqGSIb3DQEBCwUAA4IBAQCSKUdOquQlWlvJHgBsZza+z5zu7cNMQ7l3Im0BXwN0 5g1kU0hS1Y+wog7DI1h60R5hA4rP9WlGI48PoODZvQVybZ47aZHbArueyUdrTD19 Qf3knO7x3mI0MlqjiSpmvDUbE3j280wOrNkoAtWVRw0bPrChAfbiyGEFZJZw1FGd mA0nsRpIx27DCUFu5x5MuqlSPUtYHucu+MoKvyqRIIo3HSc2+H0Qy1pIgNJs/Sjo OMtjRvpOV932WuS9GiK6hynPxuD6Jh4E+O0kJPbwPhlEQJuDBBi/dj6+UTCwicj4 ddwxybhjiPMNTKIZAi5J/WKeTAtKb1Rascc1Lm1a3DFA -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:14 2026 by rpki-client