This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa File: JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa (raw, json) Hash identifier: tDVb3RwyJVNSMR8JJRmNxAV5uGwYhy7h8q3pBfOZ3t8= Subject key identifier: 25:70:3C:FA:31:9B:0B:82:BF:5E:B2:4B:17:E8:CA:9B:DF:D4:AE:49 Certificate issuer: /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5 Certificate serial: 019B7E3862A127A0949942C807B9F9A61300 Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39513 IP address blocks: 193.93.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:62:a1:27:a0:94:99:42:c8:07:b9:f9:a6:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25703cfa319b0b82bf5eb24b17e8ca9bdfd4ae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7a:02:d8:28:f3:78:ad:18:9f:2d:8d:2b:04: 86:c2:8d:69:7a:03:7d:82:12:f9:9c:86:86:f0:f8: 9b:d7:58:c3:0f:ce:21:73:09:1c:c1:5a:05:c2:99: 6b:c2:04:50:ad:30:4c:28:86:85:2d:f5:6f:05:ef: 4a:f3:70:8e:d1:64:eb:cf:48:82:ff:26:aa:dc:ff: de:4e:4c:36:6f:5f:7c:2d:a7:4f:4a:c3:fe:7b:22: 59:3f:8a:6f:05:51:fd:2c:92:ab:8b:81:50:12:d1: 79:d0:17:a4:f8:80:36:57:5c:b5:0c:ae:30:77:93: 6f:e8:f0:75:50:cb:1f:b1:44:60:e1:ca:af:b0:5d: 82:b7:48:6a:89:79:0f:55:54:81:a8:b9:4d:99:e5: b4:60:f3:23:28:8e:dc:e7:10:f6:c6:39:2a:5d:78: c7:f3:19:2b:8f:23:3a:02:19:d3:74:62:e1:94:2a: f5:d1:19:04:1d:20:ef:92:d3:b3:9f:ac:8e:b5:79: 3a:52:d7:ef:51:38:d0:8b:cc:11:97:4f:3c:d2:1e: 63:70:2a:c8:1c:d5:aa:b3:08:e8:35:46:98:70:34: 3b:4c:73:d3:9b:9a:c6:b1:35:83:2d:0f:28:69:a2: 21:98:a5:84:29:bf:a3:31:9b:d2:83:04:2b:81:40: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:3C:FA:31:9B:0B:82:BF:5E:B2:4B:17:E8:CA:9B:DF:D4:AE:49 X509v3 Authority Key Identifier: keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:a0:1f:32:6d:e9:26:a4:ff:fc:89:d0:9c:8d:0a:f2:65:6b: 7d:c5:c9:66:8f:c5:05:3a:d2:f5:9e:7f:95:7e:a0:29:4b:84: 4f:85:1e:56:92:23:16:bf:de:73:66:56:a2:28:42:03:4b:61: 94:88:1d:36:5f:44:37:52:50:e4:c2:0e:75:78:76:96:1e:c5: 35:f2:4f:55:3a:fb:03:7b:25:af:d5:3a:13:35:72:76:f2:3b: 42:dd:3b:fa:4f:e8:c6:84:eb:7c:7e:d4:5e:0f:7f:53:d8:b9: ca:05:6f:20:5d:33:78:d0:cc:f4:e7:6f:04:cd:0c:ef:9c:ac: ad:b5:36:97:97:d3:3e:0c:d6:9d:65:f0:22:54:23:78:91:02: 08:47:66:e9:e9:ac:7e:d4:01:de:21:33:f0:90:61:fe:08:d0: ba:f9:ec:cc:60:0a:4e:b7:3a:66:9b:a8:52:64:0d:c1:d0:91: 4b:54:9f:9a:7d:d9:d8:cf:d2:ad:68:d0:dd:e5:c4:ca:43:b3: fc:1d:44:1c:f0:31:53:3b:c3:dd:98:91:36:4a:14:45:5d:e6: e9:e3:dd:28:46:ea:65:30:1f:33:99:aa:f6:b8:87:cb:da:30: f8:f2:b1:47:7b:b3:5d:9c:37:2e:84:ec:9a:3a:ae:61:30:73: f8:64:9e:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGKhJ6CUmULIB7n5phMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYTgxNmEzMzM4ZDMyNzQxY2Q0ZmZmOGY0OWRkYjJjYzgz OGZkYzUwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTcwM2NmYTMxOWIwYjgyYmY1ZWIyNGIxN2U4Y2E5YmRmZDRhZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6noC2CjzeK0Yny2NKwSGwo1pegN9 ghL5nIaG8Pib11jDD84hcwkcwVoFwplrwgRQrTBMKIaFLfVvBe9K83CO0WTrz0iC /yaq3P/eTkw2b198LadPSsP+eyJZP4pvBVH9LJKri4FQEtF50Bek+IA2V1y1DK4w d5Nv6PB1UMsfsURg4cqvsF2Ct0hqiXkPVVSBqLlNmeW0YPMjKI7c5xD2xjkqXXjH 8xkrjyM6AhnTdGLhlCr10RkEHSDvktOzn6yOtXk6UtfvUTjQi8wRl0880h5jcCrI HNWqswjoNUaYcDQ7THPTm5rGsTWDLQ8oaaIhmKWEKb+jMZvSgwQrgUD7uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVwPPoxmwuCv16ySxfoypvf1K5JMB8GA1UdIwQY MBaAFH+oFqMzjTJ0HNT/+PSd2yzIOP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMt ZjA3MTdlYTQ4NWM2LzEvSlhBOC1qR2JDNEtfWHJKTEYtakttOV9VcmtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMtZjA3MTdlYTQ4NWM2 LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV1MMA0G CSqGSIb3DQEBCwUAA4IBAQAuoB8ybekmpP/8idCcjQryZWt9xclmj8UFOtL1nn+V fqApS4RPhR5WkiMWv95zZlaiKEIDS2GUiB02X0Q3UlDkwg51eHaWHsU18k9VOvsD eyWv1ToTNXJ28jtC3Tv6T+jGhOt8ftReD39T2LnKBW8gXTN40Mz0528EzQzvnKyt tTaXl9M+DNadZfAiVCN4kQIIR2bp6ax+1AHeITPwkGH+CNC6+ezMYApOtzpmm6hS ZA3B0JFLVJ+afdnYz9KtaNDd5cTKQ7P8HUQc8DFTO8PdmJE2ShRFXebp490oRupl MB8zmar2uIfL2jD48rFHe7NdnDcuhOyaOq5hMHP4ZJ61 -----END CERTIFICATE-----Generated at Mon Jan 26 14:22:47 2026 by rpki-client