This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa File: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (raw, json) Hash identifier: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4= Subject key identifier: 8E:B3:E0:E0:94:7C:4B:FC:9E:6F:D8:5D:EF:FA:87:02:82:79:FB:05 Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991 Certificate serial: 019B79EC853284E71E3827C5CE76A23D39D3 Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa Signing time: Thu 01 Jan 2026 14:18:22 +0000 ROA not before: Thu 01 Jan 2026 14:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 193.186.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:85:32:84:e7:1e:38:27:c5:ce:76:a2:3d:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991 Validity Not Before: Jan 1 14:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb3e0e0947c4bfc9e6fd85deffa87028279fb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:42:4c:13:c3:f4:1d:90:23:20:55:f7:74: bf:42:27:49:99:92:c2:cb:65:d1:7c:b1:bf:cb:33: 23:36:14:e3:51:30:fa:09:c1:4e:8a:ee:8b:6d:41: 50:e8:3a:f5:0e:c9:cd:75:82:d4:34:05:ad:09:66: 20:db:c0:70:24:96:b7:6e:28:97:e3:c8:38:32:bc: 49:b5:14:48:c1:08:47:1e:56:98:7a:11:cf:e2:b7: 9d:a0:c4:24:2f:cb:94:0f:dc:fc:47:76:67:16:09: 88:d4:3a:4f:8e:d6:3a:1b:57:a3:46:04:9c:61:e5: 7d:5f:7e:0b:0a:68:ea:b0:a0:00:84:c3:92:5b:7c: c2:6f:ee:b0:37:1f:bf:dd:8b:b0:85:6d:3f:8e:11: 06:41:89:1f:51:f8:e5:8e:f6:71:fb:61:5c:a1:9b: 5d:9a:81:f4:0a:38:0f:e6:70:0d:7e:b2:3f:48:ce: 3b:de:89:03:db:ad:9a:f6:09:63:a0:5d:3b:95:13: a3:0e:77:1c:dc:26:57:dd:21:00:ed:64:21:bb:75: f5:81:4c:89:34:a0:ec:11:56:9b:00:47:9b:fc:b9: 36:5d:35:8f:93:f7:8d:42:f0:f4:a7:49:f1:d5:16: 72:2e:5d:6b:b7:d0:5b:3f:67:fb:f7:7b:b2:63:e0: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B3:E0:E0:94:7C:4B:FC:9E:6F:D8:5D:EF:FA:87:02:82:79:FB:05 X509v3 Authority Key Identifier: keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:87:8b:27:07:52:fd:7e:0f:64:35:c2:1b:aa:bc:b4:bd:1a: 34:ba:b6:6b:3e:eb:e5:4d:71:f4:9d:88:b1:b6:cc:88:23:cf: c0:d5:b8:77:87:90:91:f2:9e:58:d3:3a:0f:f3:3c:5f:be:e8: 44:05:fd:0e:b1:c8:23:45:ce:3a:87:74:f3:9d:55:a3:ad:4f: 8c:da:e0:57:e6:dd:c7:ec:ed:4a:b7:a6:cd:c6:c7:f2:53:18: 10:3b:be:f8:64:9f:84:18:ca:91:93:14:d0:d1:3a:33:c0:92: 76:89:31:e5:d8:81:5f:58:35:23:bf:98:dc:74:87:95:90:a0: f2:5f:12:5e:a4:94:0e:77:f0:cb:67:ed:f6:25:8f:f8:e4:28: f4:15:d6:4a:06:62:4d:a4:d9:d3:22:61:37:9f:06:a6:76:21: 20:f1:1d:2b:be:ec:aa:a3:56:2b:50:38:ac:6e:b2:b1:4e:0c: 2c:f8:1a:68:7b:f3:7b:c5:8e:c4:11:56:2f:2b:68:8b:01:ed: aa:10:77:90:10:6c:a4:e8:f2:bb:07:ae:d0:1b:b1:64:42:a5: c0:cd:49:f0:e5:be:22:24:78:ff:86:6e:f9:50:98:a7:53:9c: c5:5b:79:5b:c5:b1:09:88:fe:e0:c7:d2:c3:0d:1f:17:f2:98: 78:75:36:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57IUyhOceOCfFznaiPTnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0 N2Y5OTEwHhcNMjYwMTAxMTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWIzZTBlMDk0N2M0YmZjOWU2ZmQ4NWRlZmZhODcwMjgyNzlmYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJCTBPD9B2QIyBV93S/QidJmZLC y2XRfLG/yzMjNhTjUTD6CcFOiu6LbUFQ6Dr1DsnNdYLUNAWtCWYg28BwJJa3biiX 48g4MrxJtRRIwQhHHlaYehHP4redoMQkL8uUD9z8R3ZnFgmI1DpPjtY6G1ejRgSc YeV9X34LCmjqsKAAhMOSW3zCb+6wNx+/3YuwhW0/jhEGQYkfUfjljvZx+2FcoZtd moH0CjgP5nANfrI/SM473okD262a9gljoF07lROjDncc3CZX3SEA7WQhu3X1gUyJ NKDsEVabAEeb/Lk2XTWPk/eNQvD0p0nx1RZyLl1rt9BbP2f793uyY+DTaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6z4OCUfEv8nm/YXe/6hwKCefsFMB8GA1UdIwQY MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt YTMwZTMzYTcwYjFlLzEvanJQZzRKUjhTX3llYjloZDdfcUhBb0o1LXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbrQMA0G CSqGSIb3DQEBCwUAA4IBAQAOh4snB1L9fg9kNcIbqry0vRo0urZrPuvlTXH0nYix tsyII8/A1bh3h5CR8p5Y0zoP8zxfvuhEBf0OscgjRc46h3TznVWjrU+M2uBX5t3H 7O1Kt6bNxsfyUxgQO774ZJ+EGMqRkxTQ0TozwJJ2iTHl2IFfWDUjv5jcdIeVkKDy XxJepJQOd/DLZ+32JY/45Cj0FdZKBmJNpNnTImE3nwamdiEg8R0rvuyqo1YrUDis brKxTgws+Bpoe/N7xY7EEVYvK2iLAe2qEHeQEGyk6PK7B67QG7FkQqXAzUnw5b4i JHj/hm75UJinU5zFW3lbxbEJiP7gx9LDDR8X8ph4dTZn -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:55 2026 by rpki-client