This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa File: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (raw, json) Hash identifier: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374= Subject key identifier: 27:96:4E:94:95:05:3A:5B:6E:E0:6A:A8:54:53:6C:2C:07:3F:62:17 Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Certificate serial: 019B7EA4F6F29113A586A4C794DAFB2890A6 Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa Signing time: Fri 02 Jan 2026 12:18:18 +0000 ROA not before: Fri 02 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28771 IP address blocks: 92.118.216.0/24 maxlen: 24 92.118.217.0/24 maxlen: 24 92.118.218.0/24 maxlen: 24 92.118.219.0/24 maxlen: 24 185.188.19.0/24 maxlen: 24 193.32.28.0/23 maxlen: 23 193.43.158.0/24 maxlen: 24 217.61.241.0/24 maxlen: 24 2001:67c:2b04::/48 maxlen: 48 2a09:d7c0::/30 maxlen: 30 2a09:d7c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f6:f2:91:13:a5:86:a4:c7:94:da:fb:28:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27964e9495053a5b6ee06aa854536c2c073f6217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:df:8f:8c:79:69:04:80:19:e0:55:7c:7e: 7e:54:67:c5:58:19:4e:1f:3d:86:28:9b:f5:67:3d: 59:16:d8:f8:7e:82:34:b7:da:28:ec:a0:e7:aa:3f: a3:06:ca:2e:ea:dc:58:ff:72:14:05:1f:13:4a:81: 0c:1c:70:6a:5c:9a:a0:ac:e7:cf:34:5f:06:c7:18: d4:1a:59:34:bc:4f:30:8d:d4:8e:d3:4e:dd:65:70: de:64:57:a4:3c:a6:43:4c:1a:66:26:47:24:1b:d4: 6e:05:58:7c:0a:46:e2:35:19:c6:f0:f3:b4:84:44: 08:1a:6f:07:b9:29:d3:e1:58:95:cc:d9:e1:07:45: 68:de:e3:47:98:25:85:be:f0:6b:62:13:a0:a8:70: 95:50:73:01:21:58:6e:30:85:9a:df:9b:ed:90:0e: 23:e6:5b:74:43:72:92:15:1e:82:ae:31:c5:0a:a8: 40:31:4f:d5:bf:eb:d6:07:29:9f:7c:dd:fa:24:30: fa:a0:00:23:67:5d:16:4a:b2:7a:ce:18:fd:2b:1f: 34:f3:47:74:9c:2c:0a:b1:bb:cf:e5:1f:78:be:e3: 35:93:a1:33:f3:d1:26:e6:7e:be:da:d4:3c:6e:92: a6:3b:88:75:94:b1:67:77:8d:81:88:fb:25:01:77: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:4E:94:95:05:3A:5B:6E:E0:6A:A8:54:53:6C:2C:07:3F:62:17 X509v3 Authority Key Identifier: keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.216.0/22 185.188.19.0/24 193.32.28.0/23 193.43.158.0/24 217.61.241.0/24 IPv6: 2001:67c:2b04::/48 2a09:d7c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:d0:90:d9:32:5f:c5:41:29:de:36:fc:b4:d5:f7:86:b0:e6: 78:46:f9:53:27:0b:00:79:6f:4d:8c:1d:e3:98:96:03:b4:b4: 95:82:2f:75:55:9d:dc:c7:dd:ca:8d:11:2a:37:e3:b1:d0:8e: 9e:36:36:e3:ba:d1:df:3e:fc:02:10:dc:03:ff:ca:d0:46:c4: e1:8c:f1:66:08:c5:19:3f:15:73:2e:ef:28:6d:d1:5c:3f:24: 98:09:37:8d:d5:48:ef:b5:1c:37:ab:8e:62:9b:38:44:ac:c4: 55:56:27:fc:b7:72:0a:64:9c:32:8f:87:dc:50:2b:4c:62:96: 5c:5f:a8:47:87:0a:db:f2:60:f1:29:e9:0c:e8:fe:db:a8:c7: 02:fc:83:dd:0b:2c:aa:c3:2f:d5:77:31:8c:d3:d0:93:b0:78: 73:24:e1:cc:6f:11:20:d7:30:5b:df:42:c6:f6:6e:e8:a1:61: ba:a1:e9:a2:35:03:26:db:69:1c:a1:80:98:09:f5:78:87:5c: d0:3a:a2:92:da:90:18:98:b0:0c:3b:46:c3:73:57:2a:c2:cd: 43:17:6f:4f:f5:77:a6:fd:37:33:ca:35:49:a2:4f:bf:60:84: bf:d9:e6:98:4b:f5:05:91:89:4b:b8:c5:d2:f6:0e:a6:f4:a3: 1e:0f:c6:61 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pPbykROlhqTHlNr7KJCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl YTQ3NDMwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzk2NGU5NDk1MDUzYTViNmVlMDZhYTg1NDUzNmMyYzA3M2Y2MjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfDfj4x5aQSAGeBVfH5+VGfFWBlO Hz2GKJv1Zz1ZFtj4foI0t9oo7KDnqj+jBsou6txY/3IUBR8TSoEMHHBqXJqgrOfP NF8GxxjUGlk0vE8wjdSO007dZXDeZFekPKZDTBpmJkckG9RuBVh8CkbiNRnG8PO0 hEQIGm8HuSnT4ViVzNnhB0Vo3uNHmCWFvvBrYhOgqHCVUHMBIVhuMIWa35vtkA4j 5lt0Q3KSFR6CrjHFCqhAMU/Vv+vWBymffN36JDD6oAAjZ10WSrJ6zhj9Kx8080d0 nCwKsbvP5R94vuM1k6Ez89Em5n6+2tQ8bpKmO4h1lLFnd42BiPslAXeMSQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFCeWTpSVBTpbbuBqqFRTbCwHP2IXMB8GA1UdIwQY MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt NjljNjI5ODQxNWY4LzEvSjVaT2xKVUZPbHR1NEdxb1ZGTnNMQWNfWWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4 LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQCXHbYAwQA ubwTAwQBwSAcAwQAwSueAwQA2T3xMBYEAgACMBADBwAgAQZ8KwQDBQMqCdfAMA0G CSqGSIb3DQEBCwUAA4IBAQB50JDZMl/FQSneNvy01feGsOZ4RvlTJwsAeW9NjB3j mJYDtLSVgi91VZ3cx93KjREqN+Ox0I6eNjbjutHfPvwCENwD/8rQRsThjPFmCMUZ PxVzLu8obdFcPySYCTeN1UjvtRw3q45imzhErMRVVif8t3IKZJwyj4fcUCtMYpZc X6hHhwrb8mDxKekM6P7bqMcC/IPdCyyqwy/VdzGM09CTsHhzJOHMbxEg1zBb30LG 9m7ooWG6oemiNQMm22kcoYCYCfV4h1zQOqKS2pAYmLAMO0bDc1cqws1DF29P9Xem /TczyjVJok+/YIS/2eaYS/UFkYlLuMXS9g6m9KMeD8Zh -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:21 2026 by rpki-client