This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JAj8WZgD_KlQskhOs_r3xlxVpbE.roa File: JAj8WZgD_KlQskhOs_r3xlxVpbE.roa (raw, json) Hash identifier: 9VdmK5EEGi5HjaYryBSb8I+i4wMmdp5THw9jUllbc4A= Subject key identifier: 24:08:FC:59:98:03:FC:A9:50:B2:48:4E:B3:FA:F7:C6:5C:55:A5:B1 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77590508085F9D528A774F55A7EE73DA Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JAj8WZgD_KlQskhOs_r3xlxVpbE.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202133 IP address blocks: 193.192.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:05:08:08:5f:9d:52:8a:77:4f:55:a7:ee:73:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2408fc599803fca950b2484eb3faf7c65c55a5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:3d:57:ed:36:81:55:6e:50:e9:f9:ab:7c: bb:1a:da:73:b1:f9:08:41:86:30:07:b7:eb:04:6a: b8:68:5a:9f:e8:4c:51:cb:e2:7c:0e:b3:fb:ed:3d: 83:59:81:94:fc:bb:6e:73:b4:4c:6e:19:6b:0d:24: c0:03:db:17:2e:45:9a:89:4b:c3:51:a9:84:2a:40: 71:8a:34:2a:c1:e7:1d:5d:c0:25:c5:13:ea:cb:fb: 8a:7f:27:e9:57:cd:b5:24:7b:7d:54:19:9f:95:78: 1d:a9:e2:73:b3:0f:fe:63:61:08:6e:8b:c2:9d:6d: b4:2d:f9:d3:99:bd:9d:0f:51:8f:ed:83:f2:7b:cf: 5a:e6:7a:17:4e:31:bb:94:34:82:6e:ef:b4:4d:eb: d5:c7:98:8f:20:ad:f4:79:c4:bd:68:7b:ac:c0:1a: 4a:9c:20:f7:78:72:c4:85:da:b5:b2:ca:db:3c:e6: 95:76:d8:5d:45:0c:5b:da:cf:49:81:e0:ce:43:aa: 4d:37:5f:a0:06:fb:9d:9e:1f:20:96:d7:6b:13:4a: 29:51:a8:16:9b:e6:ee:9c:9d:28:26:eb:46:7b:f8: 1b:60:1c:0f:4b:8d:d1:18:a4:89:ed:25:85:b1:d7: 13:bf:07:d8:4a:8b:ec:1f:d8:8e:15:fc:b5:e3:bc: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:FC:59:98:03:FC:A9:50:B2:48:4E:B3:FA:F7:C6:5C:55:A5:B1 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JAj8WZgD_KlQskhOs_r3xlxVpbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.171.0/24 Signature Algorithm: sha256WithRSAEncryption 27:68:10:41:fd:ec:35:56:79:b4:f9:fb:fc:1b:81:38:f8:4d: 6b:df:45:96:25:75:9a:b0:d0:53:80:fb:92:64:36:12:31:20: e8:ba:7a:5e:e2:a6:b4:21:7c:1d:72:4a:46:5f:de:1e:bd:8e: 92:37:50:f1:a7:a0:24:b7:a6:66:02:29:05:d5:8b:7d:a3:53: 2a:a8:8f:e2:af:8a:71:f9:a8:71:84:5c:65:2f:a2:8b:d7:1a: 92:1b:21:b7:f3:e3:7f:3f:9c:5c:c8:d0:e0:83:55:6d:8e:f8: 83:e4:de:26:de:7b:4b:7f:73:b0:8f:b1:f6:d9:74:40:e3:6c: a7:29:a6:6f:76:27:4d:a7:61:a4:e2:90:66:79:de:fb:8e:ba: 94:dc:6a:42:4f:71:2b:60:ba:b0:b8:c6:a0:c5:5f:50:44:06: 98:ff:62:57:22:3c:1a:2d:30:9f:d6:06:30:0a:60:f5:8e:4f: ee:90:02:7a:1e:ea:28:cf:3b:2a:44:7c:35:39:1e:07:e9:ad: ab:58:aa:6b:8b:d6:fd:b0:a5:16:48:15:ee:4a:6c:68:52:79: 3d:6a:cf:cf:2a:28:da:ca:a1:1b:31:ce:bb:6b:1d:dd:81:f3: 31:0b:cd:b0:ee:48:c7:97:f0:d7:8e:fb:3d:a3:e1:12:f6:f8: c5:76:e3:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQUICF+dUop3T1Wn7nPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDA4ZmM1OTk4MDNmY2E5NTBiMjQ4NGViM2ZhZjdjNjVjNTVhNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ49V+02gVVuUOn5q3y7GtpzsfkI QYYwB7frBGq4aFqf6ExRy+J8DrP77T2DWYGU/Ltuc7RMbhlrDSTAA9sXLkWaiUvD UamEKkBxijQqwecdXcAlxRPqy/uKfyfpV821JHt9VBmflXgdqeJzsw/+Y2EIbovC nW20LfnTmb2dD1GP7YPye89a5noXTjG7lDSCbu+0TevVx5iPIK30ecS9aHuswBpK nCD3eHLEhdq1ssrbPOaVdthdRQxb2s9JgeDOQ6pNN1+gBvudnh8gltdrE0opUagW m+bunJ0oJutGe/gbYBwPS43RGKSJ7SWFsdcTvwfYSovsH9iOFfy147w0zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQI/FmYA/ypULJITrP698ZcVaWxMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvSkFqOFdaZ0RfS2xRc2toT3NfcjN4bHhWcGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcCrMA0G CSqGSIb3DQEBCwUAA4IBAQAnaBBB/ew1Vnm0+fv8G4E4+E1r30WWJXWasNBTgPuS ZDYSMSDounpe4qa0IXwdckpGX94evY6SN1Dxp6Akt6ZmAikF1Yt9o1MqqI/ir4px +ahxhFxlL6KL1xqSGyG38+N/P5xcyNDgg1VtjviD5N4m3ntLf3Owj7H22XRA42yn KaZvdidNp2Gk4pBmed77jrqU3GpCT3ErYLqwuMagxV9QRAaY/2JXIjwaLTCf1gYw CmD1jk/ukAJ6HuoozzsqRHw1OR4H6a2rWKpri9b9sKUWSBXuSmxoUnk9as/PKija yqEbMc67ax3dgfMxC82w7kjHl/DXjvs9o+ES9vjFduNL -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:44 2026 by rpki-client