This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JQ17TJF4elG-waIiKJd-gZcxNPQ.roa File: JQ17TJF4elG-waIiKJd-gZcxNPQ.roa (raw, json) Hash identifier: AN+aSqXzn1SEfaysNfOqEu09hbA8DcYuD55JYpRvwOg= Subject key identifier: 25:0D:7B:4C:91:78:7A:51:BE:C1:A2:22:28:97:7E:81:97:31:34:F4 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AE97DD5DE5A21913056B914A6F3895842 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JQ17TJF4elG-waIiKJd-gZcxNPQ.roa Signing time: Thu 04 Dec 2025 13:12:09 +0000 ROA not before: Thu 04 Dec 2025 13:12:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 194.231.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:7d:d5:de:5a:21:91:30:56:b9:14:a6:f3:89:58:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 4 13:12:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=250d7b4c91787a51bec1a22228977e81973134f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:aa:3d:e4:c1:bd:09:4a:af:6d:ff:22:a9: eb:0b:1c:47:19:e4:48:fd:f5:72:c6:32:ce:c7:3e: d2:18:b5:9e:52:c2:08:0a:a2:2f:6a:b1:f4:1a:97: 2a:63:d0:f2:c8:16:26:52:6f:43:82:13:32:d9:59: 04:21:54:ac:b4:12:2b:ad:2e:8f:3a:db:44:8a:29: e5:87:82:3b:92:e6:72:95:a0:67:4a:70:40:4e:95: b5:b4:79:91:ec:44:0a:68:8e:c8:9c:eb:b0:10:59: d6:a9:16:b5:78:7a:e9:8a:1b:3a:1f:c8:3c:90:cf: c5:9f:05:e1:a8:93:a6:5f:d5:a0:7a:ef:fc:47:84: b4:be:db:6c:2b:a8:f7:5c:ff:c3:d6:c1:bc:28:64: 88:20:24:b4:5f:99:11:4b:48:86:ab:50:cb:b8:7f: 88:19:92:c1:27:01:47:ed:dc:fc:54:8f:c6:83:e6: 74:60:a4:33:b3:a5:35:61:6b:3b:24:11:56:25:31: 4b:89:23:6c:66:a2:08:a2:f6:5b:b9:77:72:30:ce: 13:4b:2e:18:b3:db:dc:19:08:6c:6a:1d:cd:42:ff: 00:29:da:51:5f:9c:38:ef:42:85:ae:69:64:2e:54: f3:da:b8:01:d0:8a:ad:56:6a:6a:bc:13:84:e7:ee: c0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:7B:4C:91:78:7A:51:BE:C1:A2:22:28:97:7E:81:97:31:34:F4 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JQ17TJF4elG-waIiKJd-gZcxNPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.194.0/24 Signature Algorithm: sha256WithRSAEncryption a1:96:19:cb:a9:c9:2d:11:1b:cd:4c:7e:7c:2c:f3:a5:ea:95: 5a:b1:36:ae:e5:77:cb:8d:38:54:2d:bd:a8:1a:89:87:1c:85: 17:2d:48:d6:06:a1:14:ab:b0:36:f1:f8:ac:9c:d3:5d:83:94: 38:be:a3:0e:c1:45:80:d6:97:83:78:f1:53:47:81:3f:ae:7d: 95:e0:12:0d:87:c3:58:38:3b:a4:81:30:60:6b:b0:a6:53:4c: ea:44:0e:31:53:97:81:3c:53:a2:ea:ab:36:b6:92:81:cd:0d: 98:fb:5b:81:ae:47:57:a7:11:4e:b4:07:b9:3a:c3:89:9d:99: 60:4f:f1:be:58:d1:92:03:b1:7e:82:d8:c4:e7:11:34:d6:60: 67:6b:85:ee:3b:dc:4b:57:fa:dc:a7:3d:af:fa:aa:01:ae:bc: c0:1b:1d:7f:3a:39:90:0c:e9:e8:90:42:fd:cc:6e:ea:44:33: 18:5b:f8:dc:a1:e7:68:67:d1:09:97:5b:03:af:8e:03:8b:b4: 90:4e:3b:51:88:e0:bf:56:10:b6:70:f0:a3:32:7a:90:e2:91: 8d:cc:a7:2e:2e:70:00:af:ac:f2:d1:4a:e4:8a:35:13:30:2e: de:41:c9:89:f3:85:00:8c:f4:af:e0:95:0d:02:b9:d8:7d:ab: dd:ea:7a:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpfdXeWiGRMFa5FKbziVhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjA0MTMxMjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTBkN2I0YzkxNzg3YTUxYmVjMWEyMjIyODk3N2U4MTk3MzEzNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVGqPeTBvQlKr23/IqnrCxxHGeRI /fVyxjLOxz7SGLWeUsIICqIvarH0GpcqY9DyyBYmUm9DghMy2VkEIVSstBIrrS6P OttEiinlh4I7kuZylaBnSnBATpW1tHmR7EQKaI7InOuwEFnWqRa1eHrpihs6H8g8 kM/FnwXhqJOmX9Wgeu/8R4S0vttsK6j3XP/D1sG8KGSIICS0X5kRS0iGq1DLuH+I GZLBJwFH7dz8VI/Gg+Z0YKQzs6U1YWs7JBFWJTFLiSNsZqIIovZbuXdyMM4TSy4Y s9vcGQhsah3NQv8AKdpRX5w470KFrmlkLlTz2rgB0IqtVmpqvBOE5+7A+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUNe0yReHpRvsGiIiiXfoGXMTT0MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSlExN1RKRjRlbEctd2FJaUtKZC1nWmN4TlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwufCMA0G CSqGSIb3DQEBCwUAA4IBAQChlhnLqcktERvNTH58LPOl6pVasTau5XfLjThULb2o GomHHIUXLUjWBqEUq7A28fisnNNdg5Q4vqMOwUWA1peDePFTR4E/rn2V4BINh8NY ODukgTBga7CmU0zqRA4xU5eBPFOi6qs2tpKBzQ2Y+1uBrkdXpxFOtAe5OsOJnZlg T/G+WNGSA7F+gtjE5xE01mBna4XuO9xLV/rcpz2v+qoBrrzAGx1/OjmQDOnokEL9 zG7qRDMYW/jcoedoZ9EJl1sDr44Di7SQTjtRiOC/VhC2cPCjMnqQ4pGNzKcuLnAA r6zy0UrkijUTMC7eQcmJ84UAjPSv4JUNArnYfavd6nrL -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:39 2025 by rpki-client