This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jmgnzzXKHNWCXs1YUwHet_VC_5g.roa File: jmgnzzXKHNWCXs1YUwHet_VC_5g.roa (raw, json) Hash identifier: IuYNZZ+cdQ4E7zjrKhZDgx+d3EvESgb/tI8LTJT2/+s= Subject key identifier: 8E:68:27:CF:35:CA:1C:D5:82:5E:CD:58:53:01:DE:B7:F5:42:FF:98 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FE7C2997715A71319F79DE73FBB8 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jmgnzzXKHNWCXs1YUwHet_VC_5g.roa Signing time: Fri 02 Jan 2026 14:19:35 +0000 ROA not before: Fri 02 Jan 2026 14:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207239 IP address blocks: 195.64.140.0/23 maxlen: 23 195.64.140.0/24 maxlen: 24 195.64.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fe:7c:29:97:71:5a:71:31:9f:79:de:73:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e6827cf35ca1cd5825ecd585301deb7f542ff98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:2d:a8:22:ae:d7:f3:90:52:67:38:f5:b6: 3e:70:73:d7:99:7e:13:da:08:bd:6d:af:54:87:8a: 4c:26:54:7f:ce:af:f7:a4:9a:b0:c5:14:0f:ad:37: af:eb:2c:7a:90:39:98:26:9c:17:04:cb:2e:10:ee: 04:59:8a:8f:5c:2c:d4:af:06:d0:b5:2f:1c:7f:1c: 9d:75:4b:9f:0e:6d:c1:36:35:00:e1:5a:6e:d0:0f: 96:70:f8:bf:fd:da:c7:97:08:3e:a0:05:a6:16:0e: 2a:31:c4:94:15:c9:33:91:e0:da:16:cb:4b:13:0f: 64:d6:7d:68:84:68:cf:61:d7:75:1a:d0:a0:11:94: 67:a2:ce:0e:b4:34:de:42:59:70:a4:48:2a:b1:d1: d3:a4:82:5d:3c:7d:b4:55:44:2c:cf:1c:bf:2a:5f: 08:91:21:e3:15:ed:b0:cc:a2:28:43:26:c0:67:c0: b2:94:06:8b:e3:6c:92:1f:3e:d9:76:33:b4:7a:1b: c4:cd:a7:3a:ef:9e:9b:d2:b1:64:54:b2:97:a6:99: df:43:57:48:9f:63:43:44:89:01:7b:80:20:01:f9: 4b:52:cc:d5:b9:e1:b5:ed:10:d3:ec:a2:4e:77:0f: c0:39:83:5f:34:ac:57:cd:11:9d:41:cd:bb:50:e8: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:27:CF:35:CA:1C:D5:82:5E:CD:58:53:01:DE:B7:F5:42:FF:98 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jmgnzzXKHNWCXs1YUwHet_VC_5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.140.0/23 Signature Algorithm: sha256WithRSAEncryption aa:8f:9a:db:98:59:5f:fd:6b:71:30:48:e7:db:42:98:30:3d: b8:ec:9c:02:32:e7:46:4b:6f:ae:ce:fe:5d:5e:be:ba:84:13: 82:fe:1a:d1:34:f3:8c:d2:02:c4:b7:3a:c8:5f:21:91:fa:cb: 5d:e5:eb:20:9c:fe:b7:9d:64:f4:58:29:fc:dc:9a:23:47:ea: 27:4c:82:1d:1d:e8:10:c5:4f:68:6a:1d:65:b6:2c:e2:d6:2e: fb:ff:88:93:17:18:0e:af:9e:82:d0:12:78:f5:bc:25:7d:98: 9a:47:a0:0e:8d:fd:36:26:8f:7c:59:71:90:24:ab:3c:3b:1c: 92:c7:a8:0f:21:49:31:e3:1b:4f:ac:c4:bf:37:a2:88:f8:43: d4:db:6e:a3:fe:67:29:58:c4:71:ff:30:80:e2:02:9f:c6:b6: 3c:b4:c0:ea:95:51:90:e2:f2:09:5a:dc:23:d8:f8:f1:5d:32: 28:aa:b5:78:ff:7d:f1:40:88:d8:64:80:70:73:c0:0e:82:eb: 22:90:03:f7:00:b6:b5:8c:c1:4f:76:80:60:f7:c2:5e:6d:cb: fd:d6:4f:f3:d9:c2:0e:32:cb:48:e8:a5:36:76:5b:d7:88:0f: a1:7a:7c:5d:f7:bb:9b:5b:cc:98:d8:83:90:a8:0e:ef:68:4a: 40:b8:3f:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E/58KZdxWnExn3nec/u4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTY4MjdjZjM1Y2ExY2Q1ODI1ZWNkNTg1MzAxZGViN2Y1NDJmZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru4tqCKu1/OQUmc49bY+cHPXmX4T 2gi9ba9Uh4pMJlR/zq/3pJqwxRQPrTev6yx6kDmYJpwXBMsuEO4EWYqPXCzUrwbQ tS8cfxyddUufDm3BNjUA4Vpu0A+WcPi//drHlwg+oAWmFg4qMcSUFckzkeDaFstL Ew9k1n1ohGjPYdd1GtCgEZRnos4OtDTeQllwpEgqsdHTpIJdPH20VUQszxy/Kl8I kSHjFe2wzKIoQybAZ8CylAaL42ySHz7ZdjO0ehvEzac6756b0rFkVLKXppnfQ1dI n2NDRIkBe4AgAflLUszVueG17RDT7KJOdw/AOYNfNKxXzRGdQc27UOhjSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5oJ881yhzVgl7NWFMB3rf1Qv+YMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvam1nbnp6WEtITldDWHMxWVV3SGV0X1ZDXzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0CMMA0G CSqGSIb3DQEBCwUAA4IBAQCqj5rbmFlf/WtxMEjn20KYMD247JwCMudGS2+uzv5d Xr66hBOC/hrRNPOM0gLEtzrIXyGR+std5esgnP63nWT0WCn83JojR+onTIIdHegQ xU9oah1ltizi1i77/4iTFxgOr56C0BJ49bwlfZiaR6AOjf02Jo98WXGQJKs8OxyS x6gPIUkx4xtPrMS/N6KI+EPU226j/mcpWMRx/zCA4gKfxrY8tMDqlVGQ4vIJWtwj 2PjxXTIoqrV4/33xQIjYZIBwc8AOgusikAP3ALa1jMFPdoBg98Jebcv91k/z2cIO MstI6KU2dlvXiA+henxd97ubW8yY2IOQqA7vaEpAuD89 -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:41 2026 by rpki-client