This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Jc3bkiFIpTCnI7iepJAdAbekabs.roa File: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (raw, json) Hash identifier: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI= Subject key identifier: 25:CD:DB:92:21:48:A5:30:A7:23:B8:9E:A4:90:1D:01:B7:A4:69:BB Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038 Certificate serial: 019B7BA342B12EBC0E43F5ADDDC6F71B2366 Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Jc3bkiFIpTCnI7iepJAdAbekabs.roa Signing time: Thu 01 Jan 2026 22:17:35 +0000 ROA not before: Thu 01 Jan 2026 22:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 193.30.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:42:b1:2e:bc:0e:43:f5:ad:dd:c6:f7:1b:23:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038 Validity Not Before: Jan 1 22:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25cddb922148a530a723b89ea4901d01b7a469bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3f:80:dc:2b:e9:43:1f:6f:d7:85:ee:11:a0: 03:f8:cf:e6:7e:90:41:93:e0:e6:34:86:fe:70:8e: 8d:ea:a9:6c:9c:ce:45:72:b1:93:60:d1:77:73:2b: be:cd:ec:c4:30:b2:44:0f:f3:fb:46:b3:cb:43:0a: 2e:20:b5:7c:94:9f:f5:d2:51:66:27:4d:8e:94:78: 1f:97:10:6d:c2:6f:b6:6f:32:c7:fb:36:f1:a7:de: c0:49:66:c1:9b:88:7b:68:4b:6f:8e:c7:f6:db:af: e3:5d:51:d6:29:fd:de:f0:6e:14:13:0f:07:a8:51: 17:77:e7:77:77:84:17:78:f3:e3:ce:8d:bb:bb:ea: 70:46:03:5b:79:b5:91:e8:8d:62:ff:54:49:bb:df: 9d:98:c9:31:ec:ed:9f:f3:46:6c:5b:91:d5:c7:85: 47:a5:dc:48:a1:a3:c3:90:35:c6:0e:8b:b5:f8:c9: 29:1e:ee:e3:49:b1:fc:82:64:2b:03:6a:fb:88:13: eb:f9:8d:d2:77:c7:c5:eb:78:35:cc:80:cb:8f:f2: c3:0e:ad:ff:01:c4:31:d3:e1:30:1a:56:a9:a2:d9: 7e:cc:60:6d:0d:fd:89:9d:a6:fe:49:4e:32:fa:58: da:95:a6:1d:56:9b:a7:77:4d:6e:42:ed:b5:bd:69: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:DB:92:21:48:A5:30:A7:23:B8:9E:A4:90:1D:01:B7:A4:69:BB X509v3 Authority Key Identifier: keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Jc3bkiFIpTCnI7iepJAdAbekabs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.140.0/24 Signature Algorithm: sha256WithRSAEncryption cb:ca:cd:b0:f7:8c:30:cb:b6:f3:37:8d:0c:9a:6d:20:ed:a2: a9:2f:5c:79:e2:18:90:e2:2e:b5:e2:ee:74:1a:37:e4:c7:99: 98:a9:cf:2f:cc:fe:13:c4:9b:14:9d:a4:d4:e1:46:8d:b2:b8: de:bb:a9:ae:6c:fe:50:1f:6b:fc:ad:61:06:a9:3a:d5:ea:46: 67:c8:7d:ae:ab:ce:71:a8:f1:14:5d:17:c8:c8:dd:25:c6:ce: 3b:d5:f2:6f:ce:54:58:1e:ef:6f:e1:b6:64:c1:f0:25:5c:1f: 03:29:2f:b5:27:48:b9:b9:e3:24:56:91:ec:ae:65:78:2a:fc: 9d:09:97:08:f0:b0:09:da:87:d6:d7:c9:e5:48:7f:e0:8a:ea: 81:23:c1:aa:31:d4:92:35:8a:64:7b:e6:1c:65:c0:74:af:b8: e1:36:47:41:2a:d2:22:15:ae:07:fc:61:40:54:ef:4d:eb:33: 46:12:32:1b:af:64:ba:e0:45:3c:66:dd:10:7c:35:a7:df:b2: 3b:33:18:ad:55:65:94:87:5d:d6:7b:90:82:19:3d:20:60:02: 7b:2f:6c:ee:a8:33:3c:69:a0:6b:5c:8b:bd:9d:64:c2:88:2e: f6:96:b4:c2:91:dc:49:99:83:4e:76:31:2e:3f:a5:84:07:0c: 9f:04:94:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0KxLrwOQ/Wt3cb3GyNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGU5YWM2NDUxMGZhMzkxODQ2YmIxMzlhYjUyYjgwMDFk NTgwMzgwHhcNMjYwMTAxMjIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWNkZGI5MjIxNDhhNTMwYTcyM2I4OWVhNDkwMWQwMWI3YTQ2OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D+A3CvpQx9v14XuEaAD+M/mfpBB k+DmNIb+cI6N6qlsnM5FcrGTYNF3cyu+zezEMLJED/P7RrPLQwouILV8lJ/10lFm J02OlHgflxBtwm+2bzLH+zbxp97ASWbBm4h7aEtvjsf226/jXVHWKf3e8G4UEw8H qFEXd+d3d4QXePPjzo27u+pwRgNbebWR6I1i/1RJu9+dmMkx7O2f80ZsW5HVx4VH pdxIoaPDkDXGDou1+MkpHu7jSbH8gmQrA2r7iBPr+Y3Sd8fF63g1zIDLj/LDDq3/ AcQx0+EwGlapotl+zGBtDf2Jnab+SU4y+ljalaYdVpund01uQu21vWn6BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXN25IhSKUwpyO4nqSQHQG3pGm7MB8GA1UdIwQY MBaAFCMOmsZFEPo5GEa7E5q1K4AB1YA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQt ZWE5MmQ4MGFiMTg4LzEvSmMzYmtpRklwVENuSTdpZXBKQWRBYmVrYWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQtZWE5MmQ4MGFiMTg4 LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR6MMA0G CSqGSIb3DQEBCwUAA4IBAQDLys2w94wwy7bzN40Mmm0g7aKpL1x54hiQ4i614u50 Gjfkx5mYqc8vzP4TxJsUnaTU4UaNsrjeu6mubP5QH2v8rWEGqTrV6kZnyH2uq85x qPEUXRfIyN0lxs471fJvzlRYHu9v4bZkwfAlXB8DKS+1J0i5ueMkVpHsrmV4Kvyd CZcI8LAJ2ofW18nlSH/giuqBI8GqMdSSNYpke+YcZcB0r7jhNkdBKtIiFa4H/GFA VO9N6zNGEjIbr2S64EU8Zt0QfDWn37I7MxitVWWUh13We5CCGT0gYAJ7L2zuqDM8 aaBrXIu9nWTCiC72lrTCkdxJmYNOdjEuP6WEBwyfBJSW -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:32 2026 by rpki-client