This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/j5qNO9OtWF2RRXgNjRWTNtloj5A.roa File: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (raw, json) Hash identifier: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek= Subject key identifier: 8F:9A:8D:3B:D3:AD:58:5D:91:45:78:0D:8D:15:93:36:D9:68:8F:90 Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff Certificate serial: 019B7F1542179465F5E77190221E312E39DC Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/j5qNO9OtWF2RRXgNjRWTNtloj5A.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2850 IP address blocks: 193.1.128.0/19 maxlen: 19 193.1.160.0/20 maxlen: 20 2001:770:98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:42:17:94:65:f5:e7:71:90:22:1e:31:2e:39:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f9a8d3bd3ad585d9145780d8d159336d9688f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:79:58:3b:4e:c5:f4:c1:ed:a4:92:16:86: e9:2d:3e:48:5f:3e:86:5f:15:43:33:fc:bd:ad:28: bf:eb:c6:c2:43:6c:e5:05:bf:22:56:47:ea:b1:35: 5c:ac:95:67:1e:ad:cd:f2:b0:a6:d9:c9:37:ae:38: d6:70:4f:d3:f8:30:60:55:e8:97:f9:70:f0:13:bb: a3:17:6f:d9:23:25:6b:b5:35:1b:d1:bd:94:ef:1e: c3:b8:63:3c:a8:f7:29:6a:86:a5:63:f5:ac:87:f5: fe:64:1f:04:d3:bb:86:df:fe:5f:1c:aa:05:0e:15: a2:6c:c9:a5:f6:55:3e:f1:44:d7:41:78:7c:4f:a4: 4d:4e:4c:46:3b:6d:80:a9:d2:43:a0:b7:c2:1b:b2: 80:ad:1b:c7:90:4e:6f:91:83:d8:e0:4a:6b:82:cd: 3c:f2:51:3c:19:c7:b7:5a:b6:d3:37:9f:15:d0:fa: 20:ba:6e:0e:50:38:a7:23:e6:bc:a7:73:2c:37:b5: f8:1c:de:9e:b7:08:4d:87:d3:67:d7:39:fe:6a:ad: 22:5c:66:13:72:ad:24:25:f1:42:11:bb:d7:36:46: bb:fe:0c:ca:6d:83:64:14:0b:e2:0d:bf:b6:e6:a6: 66:eb:e8:31:03:61:a5:2f:26:8b:21:11:9b:61:53: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:8D:3B:D3:AD:58:5D:91:45:78:0D:8D:15:93:36:D9:68:8F:90 X509v3 Authority Key Identifier: keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/j5qNO9OtWF2RRXgNjRWTNtloj5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.1.128.0-193.1.175.255 IPv6: 2001:770:98::/48 Signature Algorithm: sha256WithRSAEncryption 6c:57:d6:1c:b6:2f:42:3e:1e:a7:c5:0f:2a:d2:be:d4:d6:24: 13:34:73:73:26:32:b5:03:64:97:45:23:c1:d2:1b:65:72:e4: 53:61:52:b0:8c:3d:8c:8b:59:6d:86:30:e0:23:e9:40:94:06: e4:f3:01:8e:85:51:16:31:ca:38:e3:a7:c6:ec:e3:f3:65:3d: 89:ac:8d:0a:be:10:40:1f:ae:97:16:d0:8c:45:5c:d4:c2:58: d3:08:6d:a6:7a:e0:01:0f:28:1e:bf:d5:c6:30:b0:ce:2f:e1: f9:f2:ec:91:2f:18:76:da:44:05:92:aa:73:18:6b:bf:6b:50: b6:2c:b3:d7:34:99:fb:b4:9a:f7:b2:b3:2d:3b:75:f1:c6:31: 5f:5d:58:36:4b:25:11:e6:8b:5f:74:38:bf:35:fd:59:79:53: 03:84:d3:13:18:d9:bb:81:fb:4b:3c:5d:16:44:92:37:18:9e: 92:4a:bc:aa:09:7f:07:7c:d4:2d:8d:72:93:43:eb:9c:21:d3: 0e:e2:c9:a6:22:d7:0c:42:24:64:29:77:83:cf:0e:9a:c3:4e: e6:17:e4:ad:e6:b2:d6:c7:7b:5b:de:7b:19:44:b6:02:48:85: b1:2e:22:9e:8b:ab:44:ef:74:5d:c8:c1:7e:5d:15:7b:06:29: ab:34:39:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/FUIXlGX153GQIh4xLjncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj NWUzZmYwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjlhOGQzYmQzYWQ1ODVkOTE0NTc4MGQ4ZDE1OTMzNmQ5Njg4ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtV5WDtOxfTB7aSSFobpLT5IXz6G XxVDM/y9rSi/68bCQ2zlBb8iVkfqsTVcrJVnHq3N8rCm2ck3rjjWcE/T+DBgVeiX +XDwE7ujF2/ZIyVrtTUb0b2U7x7DuGM8qPcpaoalY/Wsh/X+ZB8E07uG3/5fHKoF DhWibMml9lU+8UTXQXh8T6RNTkxGO22AqdJDoLfCG7KArRvHkE5vkYPY4Eprgs08 8lE8Gce3WrbTN58V0Pogum4OUDinI+a8p3MsN7X4HN6etwhNh9Nn1zn+aq0iXGYT cq0kJfFCEbvXNka7/gzKbYNkFAviDb+25qZm6+gxA2GlLyaLIRGbYVPwJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+ajTvTrVhdkUV4DY0VkzbZaI+QMB8GA1UdIwQY MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt ZWE0NjljODYwZGM2LzEvajVxTk85T3RXRjJSUlhnTmpSV1ROdGxvajVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2 LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAfBAYAD BATBAaAwDwQCAAIwCQMHACABB3AAmDANBgkqhkiG9w0BAQsFAAOCAQEAbFfWHLYv Qj4ep8UPKtK+1NYkEzRzcyYytQNkl0UjwdIbZXLkU2FSsIw9jItZbYYw4CPpQJQG 5PMBjoVRFjHKOOOnxuzj82U9iayNCr4QQB+ulxbQjEVc1MJY0whtpnrgAQ8oHr/V xjCwzi/h+fLskS8YdtpEBZKqcxhrv2tQtiyz1zSZ+7Sa97KzLTt18cYxX11YNksl EeaLX3Q4vzX9WXlTA4TTExjZu4H7SzxdFkSSNxiekkq8qgl/B3zULY1yk0PrnCHT DuLJpiLXDEIkZCl3g88OmsNO5hfkreay1sd7W957GUS2AkiFsS4inourRO90XcjB fl0VewYpqzQ5ww== -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:37 2026 by rpki-client