This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jve9MGu60v4VbbbnUChsTScUQ_w.roa File: Jve9MGu60v4VbbbnUChsTScUQ_w.roa (raw, json) Hash identifier: xkQYHSH1hZcGJq/zzQMQr/Jgi92Fe3AQh/CzRA6FIE4= Subject key identifier: 26:F7:BD:30:6B:BA:D2:FE:15:6D:B6:E7:50:28:6C:4D:27:14:43:FC Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019BE9B460D991DE0296368A531DD00201B9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jve9MGu60v4VbbbnUChsTScUQ_w.roa Signing time: Fri 23 Jan 2026 07:14:31 +0000 ROA not before: Fri 23 Jan 2026 07:14:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202995 IP address blocks: 146.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:b4:60:d9:91:de:02:96:36:8a:53:1d:d0:02:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 23 07:14:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26f7bd306bbad2fe156db6e750286c4d271443fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:85:46:2d:c8:eb:08:08:2e:e4:ea:94:95: b1:4b:de:ea:99:44:2a:32:25:2a:f6:1c:eb:be:10: b2:a1:0d:fe:4c:2a:5e:90:18:48:ca:41:21:db:98: 44:c2:72:da:41:bb:4c:84:ce:2b:ef:60:d9:03:4c: 16:0a:0d:5d:f6:43:a6:8f:03:a2:8b:d5:ed:f4:15: 7d:92:bf:74:8e:6d:5e:1d:47:24:0d:95:49:e0:ff: 63:2c:af:c3:7a:b9:e0:80:31:64:98:d8:ec:1b:2b: 73:0f:3e:65:25:03:da:81:54:71:e7:4d:39:b7:35: e5:e8:a3:f5:26:9c:3c:c8:2a:5a:80:c1:87:b1:0b: a3:73:91:a6:04:e0:57:45:8b:ff:f3:ea:84:1e:dc: bc:ac:ad:05:9e:99:0f:fb:03:df:6e:ab:2b:c0:bb: a1:7d:6a:b8:91:c8:f7:0a:fd:15:01:af:7a:a3:d0: b6:99:5b:64:19:9b:64:94:03:08:01:70:82:59:27: 2e:9d:a9:45:d6:b7:a9:48:17:6c:98:c1:1f:de:71: 51:e0:43:18:4e:ea:1f:e2:c8:eb:c3:ca:ef:19:72: 38:fa:ac:7c:db:8b:c8:6a:4c:98:44:0f:4e:34:74: d4:a7:e3:10:aa:54:5c:5f:29:da:bb:6f:7a:dc:c5: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:BD:30:6B:BA:D2:FE:15:6D:B6:E7:50:28:6C:4D:27:14:43:FC X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jve9MGu60v4VbbbnUChsTScUQ_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.21.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ac:c3:69:44:0f:37:fb:d2:34:3f:ef:57:58:41:a8:ea:2f: 45:cc:b1:6c:fc:91:c4:0d:18:78:e1:52:76:97:08:d3:d2:dc: 9a:13:19:11:6c:c2:5b:ef:ca:ca:de:a2:58:4c:b0:80:f0:74: 24:81:2f:0f:d0:fa:bc:68:f1:b2:0a:8f:f4:e3:02:47:e8:4b: b6:de:e3:16:85:e4:7f:0e:95:80:c8:8e:b4:22:79:9c:33:51: 6d:2e:26:4f:0e:76:b2:90:4f:d7:c5:d2:ca:e1:c9:4e:24:8d: 3c:b6:c3:79:93:0b:28:d1:19:07:bf:36:ad:3d:12:e4:1c:34: 83:68:c8:f1:37:c9:61:1a:0f:9c:9b:f9:13:48:af:35:39:ee: 83:f4:08:ff:d8:68:64:e2:eb:ab:1e:78:4b:a3:c8:3f:de:d6: e0:06:2b:05:7e:0d:e9:2e:48:31:c8:c7:24:09:4f:ee:fd:5e: 13:1c:3f:f3:aa:5d:c5:f6:f1:8c:48:4d:21:55:a3:e6:96:b5: 02:5f:c4:34:21:48:35:82:2f:5b:a6:19:5e:f0:a1:38:9c:d8: 0e:a5:10:9e:37:81:61:98:1b:26:f6:12:4f:e9:a4:b8:40:3f: bd:16:b7:48:ef:57:91:28:a2:2b:3c:b8:2e:35:63:7c:f2:76: 26:0c:4e:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvptGDZkd4CljaKUx3QAgG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTIzMDcxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmY3YmQzMDZiYmFkMmZlMTU2ZGI2ZTc1MDI4NmM0ZDI3MTQ0M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsKFRi3I6wgILuTqlJWxS97qmUQq MiUq9hzrvhCyoQ3+TCpekBhIykEh25hEwnLaQbtMhM4r72DZA0wWCg1d9kOmjwOi i9Xt9BV9kr90jm1eHUckDZVJ4P9jLK/DernggDFkmNjsGytzDz5lJQPagVRx5005 tzXl6KP1Jpw8yCpagMGHsQujc5GmBOBXRYv/8+qEHty8rK0FnpkP+wPfbqsrwLuh fWq4kcj3Cv0VAa96o9C2mVtkGZtklAMIAXCCWScunalF1repSBdsmMEf3nFR4EMY Tuof4sjrw8rvGXI4+qx824vIakyYRA9ONHTUp+MQqlRcXynau2963MXm8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCb3vTBrutL+FW2251AobE0nFEP8MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvSnZlOU1HdTYwdjRWYmJiblVDaHNUU2NVUV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkngVMA0G CSqGSIb3DQEBCwUAA4IBAQCTrMNpRA83+9I0P+9XWEGo6i9FzLFs/JHEDRh44VJ2 lwjT0tyaExkRbMJb78rK3qJYTLCA8HQkgS8P0Pq8aPGyCo/04wJH6Eu23uMWheR/ DpWAyI60InmcM1FtLiZPDnaykE/XxdLK4clOJI08tsN5kwso0RkHvzatPRLkHDSD aMjxN8lhGg+cm/kTSK81Oe6D9Aj/2Ghk4uurHnhLo8g/3tbgBisFfg3pLkgxyMck CU/u/V4THD/zql3F9vGMSE0hVaPmlrUCX8Q0IUg1gi9bphle8KE4nNgOpRCeN4Fh mBsm9hJP6aS4QD+9FrdI71eRKKIrPLguNWN88nYmDE4f -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:18 2026 by rpki-client