This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/JH_uJjM4YEPIo1o7h_DCak_pJWw.roa File: JH_uJjM4YEPIo1o7h_DCak_pJWw.roa (raw, json) Hash identifier: hczsEbFQanUBp2Rewcvx/ScQWwwhz9uBunaFmi89C/k= Subject key identifier: 24:7F:EE:26:33:38:60:43:C8:A3:5A:3B:87:F0:C2:6A:4F:E9:25:6C Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Certificate serial: 019AD5626C7B42E28B3F8FEEA70F095C0640 Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/JH_uJjM4YEPIo1o7h_DCak_pJWw.roa Signing time: Sun 30 Nov 2025 15:29:48 +0000 ROA not before: Sun 30 Nov 2025 15:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206980 IP address blocks: 193.32.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:62:6c:7b:42:e2:8b:3f:8f:ee:a7:0f:09:5c:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Validity Not Before: Nov 30 15:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=247fee2633386043c8a35a3b87f0c26a4fe9256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:85:82:b3:bf:15:ff:aa:a5:61:9b:6d:84: 9c:45:0f:a7:e6:36:52:9a:2d:0c:fc:35:84:69:8c: ac:73:a3:7f:31:97:1f:1c:2d:f6:b3:92:c6:af:ef: f5:15:7f:26:de:66:9f:59:b3:4c:c1:48:18:54:6b: 23:5f:f2:c2:55:62:9a:e4:02:32:95:e9:dd:ca:49: 1c:62:1f:6a:9f:7f:22:61:9e:5e:62:dc:ca:8a:93: e6:3b:d6:02:98:70:5f:5b:c7:e8:92:a7:4f:48:5a: 9e:06:e5:91:09:bb:d4:8a:b3:f0:bc:2e:5d:f5:a2: eb:bf:2d:d3:d4:72:a3:70:de:33:29:ea:56:79:4c: 35:a3:61:9c:97:44:82:72:cb:d1:5b:e4:aa:96:92: 65:0a:eb:ab:f0:aa:d9:4c:b4:83:ef:bc:1b:9f:a1: 56:67:95:a5:35:1f:19:64:cf:d0:16:82:43:65:bb: d8:48:46:54:5e:ac:1b:04:4c:8f:5d:ff:08:ed:37: 51:b7:fc:79:6b:cd:5c:fb:96:0f:86:c4:c4:47:3c: 30:fc:44:1c:4c:34:c9:47:68:12:00:40:0f:85:4b: a4:c9:23:d0:1f:5c:df:8f:51:82:4f:5a:72:59:8b: 75:4c:c5:98:f1:b4:a5:35:19:a2:65:6a:37:b3:c1: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7F:EE:26:33:38:60:43:C8:A3:5A:3B:87:F0:C2:6A:4F:E9:25:6C X509v3 Authority Key Identifier: keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/JH_uJjM4YEPIo1o7h_DCak_pJWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.114.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:23:92:9c:a2:13:11:f7:8c:76:f3:b9:b5:d3:0a:e2:7e:63: b3:1f:9d:98:56:3a:58:58:3f:d4:36:df:ba:f9:b3:1c:17:4a: 58:d5:1a:cb:cc:d5:68:e7:bc:5e:fb:4f:3e:39:63:42:80:5c: 68:b4:65:88:91:ea:0e:e4:98:4d:8a:65:50:9f:dc:26:9c:4e: 6b:65:a9:ed:cc:d9:d1:60:f9:b4:a1:ed:2c:03:24:7a:7c:52: f8:f1:67:5d:81:f8:6f:e4:f4:1a:92:2b:75:f1:9d:1f:82:c2: 04:e3:41:66:6c:fe:5a:07:48:e7:25:be:cf:e6:e2:d4:f9:13: 00:d6:e2:a4:71:4c:a4:fb:5c:77:29:71:ae:f2:00:18:71:cf: 0a:f8:1c:61:4b:19:f7:6b:cf:0d:b5:39:45:e7:33:6c:d5:6c: 03:d7:47:fc:c7:76:52:12:84:b5:93:99:5a:3c:27:0c:00:b5: 1f:00:70:e5:9e:73:ca:0a:a8:f4:a8:57:a5:df:39:38:36:56: 69:31:e6:0f:9f:70:d0:c1:54:f6:16:5b:c5:98:07:cd:ac:02: 34:46:d2:17:c6:0a:9b:5f:ad:cd:b3:92:18:29:c7:54:5f:f0: 5f:7d:5d:76:d6:84:c4:3f:97:a0:dd:ec:38:86:79:15:e4:0a: db:66:9f:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrVYmx7QuKLP4/upw8JXAZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTAxOWE1YzE5NmJiZDFjYzE3ZDFhOGQzNmM0ZDY1N2Yz ODE2YTAwHhcNMjUxMTMwMTUyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDdmZWUyNjMzMzg2MDQzYzhhMzVhM2I4N2YwYzI2YTRmZTkyNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd2FgrO/Ff+qpWGbbYScRQ+n5jZS mi0M/DWEaYysc6N/MZcfHC32s5LGr+/1FX8m3mafWbNMwUgYVGsjX/LCVWKa5AIy lendykkcYh9qn38iYZ5eYtzKipPmO9YCmHBfW8fokqdPSFqeBuWRCbvUirPwvC5d 9aLrvy3T1HKjcN4zKepWeUw1o2Gcl0SCcsvRW+SqlpJlCuur8KrZTLSD77wbn6FW Z5WlNR8ZZM/QFoJDZbvYSEZUXqwbBEyPXf8I7TdRt/x5a81c+5YPhsTERzww/EQc TDTJR2gSAEAPhUukySPQH1zfj1GCT1pyWYt1TMWY8bSlNRmiZWo3s8FdpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCR/7iYzOGBDyKNaO4fwwmpP6SVsMB8GA1UdIwQY MBaAFP+gGaXBlrvRzBfRqNNsTWV/OBagMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzct OWU1NmY5NzVkN2U2LzEvSkhfdUpqTTRZRVBJbzFvN2hfRENha19wSld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzctOWU1NmY5NzVkN2U2 LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSByMA0G CSqGSIb3DQEBCwUAA4IBAQBaI5KcohMR94x287m10wrifmOzH52YVjpYWD/UNt+6 +bMcF0pY1RrLzNVo57xe+08+OWNCgFxotGWIkeoO5JhNimVQn9wmnE5rZantzNnR YPm0oe0sAyR6fFL48Wddgfhv5PQakit18Z0fgsIE40FmbP5aB0jnJb7P5uLU+RMA 1uKkcUyk+1x3KXGu8gAYcc8K+BxhSxn3a88NtTlF5zNs1WwD10f8x3ZSEoS1k5la PCcMALUfAHDlnnPKCqj0qFel3zk4NlZpMeYPn3DQwVT2FlvFmAfNrAI0RtIXxgqb X63Ns5IYKcdUX/BffV121oTEP5eg3ew4hnkV5ArbZp9C -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:05 2025 by rpki-client