This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa File: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (raw, json) Hash identifier: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g= Subject key identifier: 26:95:9F:9A:EE:D9:73:A3:0F:A5:4F:2E:6E:98:6D:1D:F5:5F:DA:38 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388D5A12085BB15149BC41FDF0691F Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205516 IP address blocks: 193.106.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:5a:12:08:5b:b1:51:49:bc:41:fd:f0:69:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26959f9aeed973a30fa54f2e6e986d1df55fda38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:19:77:4a:de:b2:f6:f9:c0:73:c2:12:86: 78:e1:fa:53:0e:7e:43:54:5b:a3:82:64:11:3e:ee: 62:e7:fa:c9:9f:c3:cf:ba:70:7d:26:84:d3:b1:c7: 1f:f8:51:5e:77:37:f2:55:86:66:30:dc:04:8a:51: 95:a0:8a:bb:7f:e0:c8:87:5a:fa:67:aa:39:9a:48: da:a5:64:cc:92:53:84:77:59:45:db:60:e8:3e:53: eb:e1:3a:b8:75:fa:50:69:0d:a2:b7:eb:70:46:49: 47:f0:5e:66:55:6d:8a:4d:ae:3d:be:c9:80:36:5a: 0e:8e:dd:64:eb:04:47:e1:ff:a1:31:58:20:f5:96: c4:ff:cd:93:86:86:6c:d9:ac:43:d9:95:0b:45:a0: b6:56:02:2d:a3:68:b6:45:dd:91:70:7c:a6:78:8d: 6f:5a:32:d6:86:04:41:30:fd:6e:11:56:91:d6:d9: 9b:c6:4f:c4:a1:11:48:d1:1c:69:80:50:a6:4c:95: 80:71:27:94:db:15:2a:ee:cb:06:50:08:4f:b9:1e: 15:79:05:42:1b:c1:8c:f9:0f:b5:4e:4a:a1:2e:c5: 14:20:2f:3d:0d:ac:b4:8b:ba:2a:af:6b:7e:55:06: db:5c:a9:79:43:76:df:c4:4a:ba:94:47:b0:8e:5a: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:95:9F:9A:EE:D9:73:A3:0F:A5:4F:2E:6E:98:6D:1D:F5:5F:DA:38 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:1f:87:24:90:dc:f2:a3:bf:e4:fd:43:e4:3d:0b:d7:a0:a6: 16:a8:b7:65:10:6e:48:4e:96:e9:a6:fb:37:0f:95:f1:89:dd: d7:53:ff:16:0d:a9:80:e8:43:df:86:63:cd:98:e5:37:22:e2: 54:0c:3e:6a:d0:78:18:83:cc:16:e7:d0:58:05:55:b9:e5:5d: 1c:58:28:77:9b:12:dc:2b:55:b2:6a:ce:3c:32:87:4b:10:94: c6:35:69:f7:c1:72:2f:b6:93:44:b5:f5:73:0c:cd:76:97:08: 4c:e7:db:c4:ca:50:3d:17:d3:c5:c4:11:37:03:7a:9c:77:3a: cc:37:e1:1d:7e:69:aa:55:9f:2e:24:37:00:df:67:24:d4:26: 70:5e:d9:f1:b8:1f:47:7b:f5:8e:56:2d:c5:03:84:c8:bf:eb: 2a:92:b9:28:a4:a2:d1:e4:2f:35:8b:c0:61:e4:27:b8:2f:d2: de:ad:5f:c9:b3:3b:f6:9e:ed:66:4d:16:5e:f1:30:bc:fa:f5: 82:9f:da:29:39:d5:84:c1:ae:59:8b:3b:e5:1d:c3:cd:0d:16: 79:f3:4f:db:8e:43:10:42:c8:b0:f4:6b:f6:bb:6f:95:88:f2: 46:be:02:9d:50:51:1f:44:15:37:6e:a1:2f:4f:99:c9:a2:3b: b1:e7:d7:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI1aEghbsVFJvEH98GkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjk1OWY5YWVlZDk3M2EzMGZhNTRmMmU2ZTk4NmQxZGY1NWZkYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JwZd0resvb5wHPCEoZ44fpTDn5D VFujgmQRPu5i5/rJn8PPunB9JoTTsccf+FFedzfyVYZmMNwEilGVoIq7f+DIh1r6 Z6o5mkjapWTMklOEd1lF22DoPlPr4Tq4dfpQaQ2it+twRklH8F5mVW2KTa49vsmA NloOjt1k6wRH4f+hMVgg9ZbE/82ThoZs2axD2ZULRaC2VgIto2i2Rd2RcHymeI1v WjLWhgRBMP1uEVaR1tmbxk/EoRFI0RxpgFCmTJWAcSeU2xUq7ssGUAhPuR4VeQVC G8GM+Q+1TkqhLsUUIC89Day0i7oqr2t+VQbbXKl5Q3bfxEq6lEewjlpPMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaVn5ru2XOjD6VPLm6YbR31X9o4MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvSnBXZm11N1pjNk1QcFU4dWJwaHRIZlZmMmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWpjMA0G CSqGSIb3DQEBCwUAA4IBAQCPH4ckkNzyo7/k/UPkPQvXoKYWqLdlEG5ITpbppvs3 D5Xxid3XU/8WDamA6EPfhmPNmOU3IuJUDD5q0HgYg8wW59BYBVW55V0cWCh3mxLc K1Wyas48ModLEJTGNWn3wXIvtpNEtfVzDM12lwhM59vEylA9F9PFxBE3A3qcdzrM N+EdfmmqVZ8uJDcA32ck1CZwXtnxuB9He/WOVi3FA4TIv+sqkrkopKLR5C81i8Bh 5Ce4L9LerV/Jszv2nu1mTRZe8TC8+vWCn9opOdWEwa5ZizvlHcPNDRZ580/bjkMQ Qsiw9Gv2u2+ViPJGvgKdUFEfRBU3bqEvT5nJojux59d5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:39 2026 by rpki-client