This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/J3P2ScDRq3f4KKlGP_mAY51M1_c.roa File: J3P2ScDRq3f4KKlGP_mAY51M1_c.roa (raw, json) Hash identifier: W5jPrF0qqkPJpHpX3woDY2gshtve5dFyc1+G6+uag6o= Subject key identifier: 27:73:F6:49:C0:D1:AB:77:F8:28:A9:46:3F:F9:80:63:9D:4C:D7:F7 Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Certificate serial: 019AEEC4064A0EC31EDD1928A885B1776095 Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/J3P2ScDRq3f4KKlGP_mAY51M1_c.roa Signing time: Fri 05 Dec 2025 13:46:55 +0000 ROA not before: Fri 05 Dec 2025 13:46:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50119 IP address blocks: 176.126.124.0/24 maxlen: 24 2a12:380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:c4:06:4a:0e:c3:1e:dd:19:28:a8:85:b1:77:60:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Validity Not Before: Dec 5 13:46:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2773f649c0d1ab77f828a9463ff980639d4cd7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:96:58:bb:e5:38:13:3b:95:bc:4e:3f:1a: e1:4d:5e:17:5d:86:d0:43:c8:2d:4c:0d:02:08:95: 6e:6b:58:b2:70:ce:46:0b:41:2b:c4:79:72:b8:d9: 07:1d:ee:f7:7f:6f:9b:03:1b:43:1e:a7:d0:af:7b: 2b:12:b1:55:3b:c7:0d:86:10:6b:4e:a9:bc:e7:f8: 9e:b3:4f:33:32:34:0c:80:ee:7a:0b:61:3c:71:ff: 35:07:16:34:f1:63:96:64:a2:38:7f:25:19:75:27: eb:28:8e:05:9c:9e:39:82:a5:18:00:55:d4:78:c4: 0b:2c:76:35:8b:27:f7:88:fb:89:0e:3e:c6:88:b2: e7:a9:eb:56:9b:a7:33:2d:48:32:93:89:00:58:4c: 5f:0a:8b:da:77:5c:2c:29:d4:19:b3:47:81:fb:e9: a6:1d:93:bc:18:fb:54:75:65:68:60:5d:3b:70:21: 18:7d:07:79:02:1c:8a:68:bd:cf:40:e0:cf:66:d4: f5:95:74:4b:7e:20:08:3b:fc:45:51:2f:6e:6f:2c: 9c:ba:fd:a8:41:8a:0e:a7:d8:e8:8f:1d:1e:fc:de: 14:cb:5d:35:46:7a:16:b9:79:bb:14:88:2f:d3:fb: 86:3f:2d:a3:73:b8:93:e6:3e:94:a2:3a:2c:1f:cc: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:73:F6:49:C0:D1:AB:77:F8:28:A9:46:3F:F9:80:63:9D:4C:D7:F7 X509v3 Authority Key Identifier: keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/J3P2ScDRq3f4KKlGP_mAY51M1_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.124.0/24 IPv6: 2a12:380::/29 Signature Algorithm: sha256WithRSAEncryption bb:69:93:f2:3f:90:f8:46:22:a0:9f:81:ee:c6:c2:b0:91:53: cc:f1:ad:58:56:f7:e3:90:5b:e8:13:72:32:64:fb:72:f2:78: 8e:fa:b8:de:bd:63:f8:df:d2:3c:df:d8:a1:03:af:da:d6:a8: d1:55:8a:c9:6c:20:fc:59:bc:c9:b3:62:d1:67:80:85:3f:e0: 53:f3:ac:29:7d:58:ab:26:69:18:c0:d8:cb:75:da:13:91:20: 12:8a:5b:f9:60:68:b0:fd:16:59:f5:63:32:b8:84:2c:ae:13: 4c:92:75:e1:fc:bc:61:1e:fd:5a:b7:dd:78:d0:ac:47:56:ac: 46:8d:de:48:c6:e4:33:b6:24:39:e9:2a:28:98:b0:00:06:8b: b5:97:1e:eb:cd:81:64:4d:93:d0:9d:ac:70:1e:f2:6e:25:95: f3:be:7e:61:42:7d:bc:59:70:6c:ae:cc:08:cf:ce:57:02:a8: 6f:19:5d:48:5e:56:85:af:9a:b9:86:15:8f:c0:ae:95:8a:9c: d6:9f:f9:9b:ab:42:e7:00:2c:90:7f:05:3e:a8:1c:0c:51:1b: 31:8d:f6:67:25:7e:da:aa:97:d9:bc:ae:f6:47:7e:03:a9:13: 54:ec:cd:13:9b:c5:1c:24:af:18:b7:19:42:79:1e:de:39:f2: cb:e7:44:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZruxAZKDsMe3RkoqIWxd2CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDYzMThkYThkMjM1NzljNGY3MzhiNmU4ZTU1Y2M1ZmYy N2U1YjEwHhcNMjUxMjA1MTM0NjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzczZjY0OWMwZDFhYjc3ZjgyOGE5NDYzZmY5ODA2MzlkNGNkN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpOWWLvlOBM7lbxOPxrhTV4XXYbQ Q8gtTA0CCJVua1iycM5GC0ErxHlyuNkHHe73f2+bAxtDHqfQr3srErFVO8cNhhBr Tqm85/ies08zMjQMgO56C2E8cf81BxY08WOWZKI4fyUZdSfrKI4FnJ45gqUYAFXU eMQLLHY1iyf3iPuJDj7GiLLnqetWm6czLUgyk4kAWExfCovad1wsKdQZs0eB++mm HZO8GPtUdWVoYF07cCEYfQd5AhyKaL3PQODPZtT1lXRLfiAIO/xFUS9ubyycuv2o QYoOp9jojx0e/N4Uy101RnoWuXm7FIgv0/uGPy2jc7iT5j6UojosH8yz/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCdz9knA0at3+CipRj/5gGOdTNf3MB8GA1UdIwQY MBaAFHTWMY2o0jV5xPc4tujlXMX/J+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEt MDgzYWExOGE3NjI5LzEvSjNQMlNjRFJxM2Y0S0tsR1BfbUFZNTFNMV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEtMDgzYWExOGE3NjI5 LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAsH58MA0E AgACMAcDBQMqEgOAMA0GCSqGSIb3DQEBCwUAA4IBAQC7aZPyP5D4RiKgn4HuxsKw kVPM8a1YVvfjkFvoE3IyZPty8niO+rjevWP439I839ihA6/a1qjRVYrJbCD8WbzJ s2LRZ4CFP+BT86wpfVirJmkYwNjLddoTkSASilv5YGiw/RZZ9WMyuIQsrhNMknXh /LxhHv1at9140KxHVqxGjd5IxuQztiQ56SoomLAABou1lx7rzYFkTZPQnaxwHvJu JZXzvn5hQn28WXBsrswIz85XAqhvGV1IXlaFr5q5hhWPwK6VipzWn/mbq0LnACyQ fwU+qBwMURsxjfZnJX7aqpfZvK72R34DqRNU7M0Tm8UcJK8YtxlCeR7eOfLL50RZ -----END CERTIFICATE-----Generated at Sun Dec 7 10:51:53 2025 by rpki-client