This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/JTcKp_-HzhWS07Rh-pfbwQal9BE.roa File: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (raw, json) Hash identifier: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g= Subject key identifier: 25:37:0A:A7:FF:87:CE:15:92:D3:B4:61:FA:97:DB:C1:06:A5:F4:11 Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6A93367B95C3AAAE5C6272AD8D9CB Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/JTcKp_-HzhWS07Rh-pfbwQal9BE.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13639 IP address blocks: 156.114.20.0/24 maxlen: 24 156.114.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a9:33:67:b9:5c:3a:aa:e5:c6:27:2a:d8:d9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25370aa7ff87ce1592d3b461fa97dbc106a5f411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:5f:b8:b1:0a:aa:f6:4d:f9:1b:c4:cc:b0: c0:6e:30:9c:e1:ef:c7:a3:f1:7d:ca:d9:04:62:95: a6:5a:5f:95:40:57:63:00:37:5e:e2:c7:fe:80:57: 5e:0f:e0:cc:21:82:41:5e:5e:af:0e:27:c2:53:7b: 6a:3f:9a:ec:7b:cc:f2:52:ce:64:bc:99:2d:35:72: 78:cf:ac:78:3d:46:2c:93:71:a4:82:07:c5:a3:e7: 36:4e:e4:a6:e2:69:01:76:a4:ba:09:ff:fd:77:80: 98:23:6a:dd:0e:17:ae:0a:d0:d1:2c:c7:2b:fe:28: e7:75:43:2d:2f:0e:5e:ec:43:c6:db:69:3c:e5:41: 3e:06:a6:32:09:e1:f2:f1:86:12:3d:0f:f0:e9:db: 56:c5:dd:79:47:9a:d0:90:9f:97:e8:ca:d8:e3:97: 56:bf:16:56:14:3c:c4:98:a0:ea:60:2b:93:e0:51: bd:7d:33:8e:aa:a8:b8:d6:7c:ed:ca:1d:5f:fb:6a: 1e:3c:e8:bb:f6:95:bb:e2:4c:f8:4c:c8:05:17:f4: 30:bf:c3:1e:34:12:e1:43:b7:3b:23:74:80:72:e6: 3a:af:4d:d0:21:5d:cf:58:30:b5:d1:9c:cf:05:14: 4a:31:86:3b:57:ca:1f:ef:7d:e9:7a:c1:c2:66:23: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:37:0A:A7:FF:87:CE:15:92:D3:B4:61:FA:97:DB:C1:06:A5:F4:11 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/JTcKp_-HzhWS07Rh-pfbwQal9BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.114.20.0/23 Signature Algorithm: sha256WithRSAEncryption 17:85:7f:4d:c9:15:b3:fc:ef:8b:ed:5e:5e:f2:14:b4:bf:6f: e1:92:a4:91:77:02:c9:62:36:d0:8d:fa:51:94:23:56:33:5e: 45:4b:db:3d:33:a7:01:6c:ac:ba:db:ba:85:dd:68:64:c6:54: 41:58:e1:8a:4a:9f:26:4f:6d:05:d2:e6:88:2e:0f:75:b7:de: 13:86:ad:09:2e:fc:52:a4:7d:26:73:bd:05:ee:5a:27:6f:08: 57:e5:35:ed:65:2d:0e:ac:39:a7:64:80:39:08:1c:4a:bc:b6: 72:55:e3:cd:28:f1:a8:1a:2f:95:79:31:35:80:5d:8a:a6:60: c0:f6:81:cc:be:c5:d4:ef:f3:17:3c:a5:a9:ab:e1:6c:70:49: 52:6e:40:75:f0:12:48:a5:91:55:d3:dc:79:a5:25:8f:44:07: b9:64:59:42:58:65:6a:14:e8:b2:20:77:cc:26:b3:1a:4f:ec: 11:b1:3b:d6:6b:fa:38:34:84:7d:15:a9:32:78:f8:70:20:1e: 2f:fb:82:a4:44:6a:14:29:a8:d9:61:91:0d:f2:4b:f4:3c:93: 82:f8:32:10:96:c6:cc:ec:49:15:38:9b:e3:8a:82:a8:37:cd: 6d:fc:fe:2d:2b:be:b1:ff:93:65:2b:66:b3:15:2c:ce:f1:00: 06:b6:9b:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqkzZ7lcOqrlxicq2NnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTM3MGFhN2ZmODdjZTE1OTJkM2I0NjFmYTk3ZGJjMTA2YTVmNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxNfuLEKqvZN+RvEzLDAbjCc4e/H o/F9ytkEYpWmWl+VQFdjADde4sf+gFdeD+DMIYJBXl6vDifCU3tqP5rse8zyUs5k vJktNXJ4z6x4PUYsk3GkggfFo+c2TuSm4mkBdqS6Cf/9d4CYI2rdDheuCtDRLMcr /ijndUMtLw5e7EPG22k85UE+BqYyCeHy8YYSPQ/w6dtWxd15R5rQkJ+X6MrY45dW vxZWFDzEmKDqYCuT4FG9fTOOqqi41nztyh1f+2oePOi79pW74kz4TMgFF/Qwv8Me NBLhQ7c7I3SAcuY6r03QIV3PWDC10ZzPBRRKMYY7V8of733pesHCZiMY9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCU3Cqf/h84VktO0YfqX28EGpfQRMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvSlRjS3BfLUh6aFdTMDdSaC1wZmJ3UWFsOUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnHIUMA0G CSqGSIb3DQEBCwUAA4IBAQAXhX9NyRWz/O+L7V5e8hS0v2/hkqSRdwLJYjbQjfpR lCNWM15FS9s9M6cBbKy627qF3WhkxlRBWOGKSp8mT20F0uaILg91t94Thq0JLvxS pH0mc70F7lonbwhX5TXtZS0OrDmnZIA5CBxKvLZyVePNKPGoGi+VeTE1gF2KpmDA 9oHMvsXU7/MXPKWpq+FscElSbkB18BJIpZFV09x5pSWPRAe5ZFlCWGVqFOiyIHfM JrMaT+wRsTvWa/o4NIR9FakyePhwIB4v+4KkRGoUKajZYZEN8kv0PJOC+DIQlsbM 7EkVOJvjioKoN81t/P4tK76x/5NlK2azFSzO8QAGtpvJ -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:45 2026 by rpki-client