This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/jbegeHRHAQFS4OhjdqswttUxcNE.roa File: jbegeHRHAQFS4OhjdqswttUxcNE.roa (raw, json) Hash identifier: H77Ee/ql8r6fO3a7jEQG5BO9lvRzT2On1CkeHfT7sq0= Subject key identifier: 8D:B7:A0:78:74:47:01:01:52:E0:E8:63:76:AB:30:B6:D5:31:70:D1 Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1 Certificate serial: 019B76EAD35416603BF506DA7D1D9F33850A Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/jbegeHRHAQFS4OhjdqswttUxcNE.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211701 IP address blocks: 193.169.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d3:54:16:60:3b:f5:06:da:7d:1d:9f:33:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96a769beca3b1932955158135596365c43c83b1 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db7a0787447010152e0e86376ab30b6d53170d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:bd:60:5c:a7:ff:9f:2f:f2:ec:1d:9e:24: 0a:6c:7b:08:a4:c4:60:eb:13:a9:ec:e9:49:2d:e1: b5:48:6c:dc:1a:20:9c:e6:9b:b5:48:ed:c3:70:09: 76:0c:54:c6:fe:c2:80:1a:e9:1e:72:33:89:a0:65: 2d:40:23:00:9c:aa:f4:8c:2a:22:c0:6a:ce:ed:b0: 43:76:39:bf:4f:db:8a:55:4b:33:ef:8f:6d:a0:c4: be:a7:c8:05:bf:a5:e6:80:79:c9:cc:41:76:58:62: 25:bc:1e:d3:f5:64:97:f0:40:2f:da:a6:90:b4:d2: bf:63:c9:d8:5b:de:ce:25:fb:f3:44:98:17:db:54: 1a:03:c1:a9:a0:3c:a8:c9:8a:c9:a9:13:8d:da:fe: 25:29:a5:67:c5:55:81:48:fe:57:f2:a3:8e:9a:16: 2e:93:51:8e:03:4a:61:d2:06:98:ef:b9:42:fd:a0: 81:9b:96:5e:50:97:90:96:78:19:d1:5d:ff:01:bf: ac:a1:7f:96:55:90:b9:6b:50:5a:43:00:93:f2:f2: c2:dd:ae:6d:1a:6e:29:ec:69:54:5c:df:44:88:66: c5:48:68:d2:b5:2c:df:2e:e6:40:73:1a:57:6b:be: f5:96:e0:86:c6:c6:a7:b8:ae:21:4b:8f:85:1a:39: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:A0:78:74:47:01:01:52:E0:E8:63:76:AB:30:B6:D5:31:70:D1 X509v3 Authority Key Identifier: keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/jbegeHRHAQFS4OhjdqswttUxcNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:80:89:d0:f1:21:a0:48:25:07:26:69:7c:5a:92:36:a7:bf: f1:5a:5a:f5:2c:06:37:10:f4:bf:a7:bc:f5:45:98:10:8c:21: ba:f1:eb:ae:ba:85:55:c1:17:2e:6d:2a:8b:49:00:82:d4:a0: 03:5d:d9:6b:78:f5:3d:90:f8:9a:bf:e7:5e:87:c5:f2:f1:fb: a4:f2:bd:a2:43:2c:7b:28:4a:a3:25:32:86:7d:d4:ee:66:dc: a8:2b:39:7e:98:73:a5:2f:36:29:32:70:bb:0e:67:d0:dc:51: 4a:88:4f:1a:2b:32:88:25:f7:94:12:fd:0c:20:c0:e3:2a:14: 0b:ff:46:5d:13:e4:2d:ee:e9:f5:34:84:ef:a7:26:bf:aa:d5: f3:e9:82:70:45:ac:17:77:fc:ad:69:aa:f4:52:b7:c7:f5:08: ab:f6:ae:a6:af:e8:3e:58:53:a2:31:86:c6:e0:fb:6b:2d:f8: 66:31:a9:13:63:ce:be:24:cb:f2:83:4e:dc:35:2d:76:5b:04: fb:f5:19:42:3b:9f:c3:37:ed:c9:3a:40:f3:04:87:ce:d5:f2: 26:6e:38:1c:0f:83:56:a2:ad:08:28:20:cd:fd:9f:6d:38:74: e0:02:3f:e9:af:bc:6c:c1:30:1f:61:36:db:d7:99:75:c2:45: 8c:15:52:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tNUFmA79QbafR2fM4UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmE3NjliZWNhM2IxOTMyOTU1MTU4MTM1NTk2MzY1YzQz YzgzYjEwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI3YTA3ODc0NDcwMTAxNTJlMGU4NjM3NmFiMzBiNmQ1MzE3MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGi9YFyn/58v8uwdniQKbHsIpMRg 6xOp7OlJLeG1SGzcGiCc5pu1SO3DcAl2DFTG/sKAGukecjOJoGUtQCMAnKr0jCoi wGrO7bBDdjm/T9uKVUsz749toMS+p8gFv6XmgHnJzEF2WGIlvB7T9WSX8EAv2qaQ tNK/Y8nYW97OJfvzRJgX21QaA8GpoDyoyYrJqRON2v4lKaVnxVWBSP5X8qOOmhYu k1GOA0ph0gaY77lC/aCBm5ZeUJeQlngZ0V3/Ab+soX+WVZC5a1BaQwCT8vLC3a5t Gm4p7GlUXN9EiGbFSGjStSzfLuZAcxpXa771luCGxsanuK4hS4+FGjmb4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI23oHh0RwEBUuDoY3arMLbVMXDRMB8GA1UdIwQY MBaAFOlqdpvso7GTKVUVgTVZY2XEPIOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQt NTUxMThmOGJkNWYyLzEvamJlZ2VIUkhBUUZTNE9oamRxc3d0dFV4Y05FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQtNTUxMThmOGJkNWYy LzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwamIMA0G CSqGSIb3DQEBCwUAA4IBAQBMgInQ8SGgSCUHJml8WpI2p7/xWlr1LAY3EPS/p7z1 RZgQjCG68euuuoVVwRcubSqLSQCC1KADXdlrePU9kPiav+deh8Xy8fuk8r2iQyx7 KEqjJTKGfdTuZtyoKzl+mHOlLzYpMnC7DmfQ3FFKiE8aKzKIJfeUEv0MIMDjKhQL /0ZdE+Qt7un1NITvpya/qtXz6YJwRawXd/ytaar0UrfH9Qir9q6mr+g+WFOiMYbG 4PtrLfhmMakTY86+JMvyg07cNS12WwT79RlCO5/DN+3JOkDzBIfO1fImbjgcD4NW oq0IKCDN/Z9tOHTgAj/pr7xswTAfYTbb15l1wkWMFVKC -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client