This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jPw2SIrmXLFzlTbLCTPwWchwTAI.roa File: jPw2SIrmXLFzlTbLCTPwWchwTAI.roa (raw, json) Hash identifier: vRST35Yf3Vr6YnJXfFZvLf5AqXX2+uwzfJe4boTDmZg= Subject key identifier: 8C:FC:36:48:8A:E6:5C:B1:73:95:36:CB:09:33:F0:59:C8:70:4C:02 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78EDC452D2B635297BF01B6F99A17 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jPw2SIrmXLFzlTbLCTPwWchwTAI.roa Signing time: Thu 01 Jan 2026 04:18:45 +0000 ROA not before: Thu 01 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205608 IP address blocks: 195.136.4.0/22 maxlen: 22 195.136.38.0/23 maxlen: 23 195.136.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:8e:dc:45:2d:2b:63:52:97:bf:01:b6:f9:9a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cfc36488ae65cb1739536cb0933f059c8704c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:84:ff:87:96:9c:6d:55:31:98:c0:8c:7e:c8: 5f:f2:0a:29:8a:5c:c6:1f:dd:e1:65:35:45:a7:7d: 2b:6d:64:16:ed:10:a4:df:ce:05:4b:ec:87:d5:ef: ef:85:d2:22:55:e0:f2:88:17:bb:cf:ef:f9:88:f2: 99:e9:85:1b:9c:be:f3:22:fc:84:eb:11:da:e5:36: 1e:f4:ab:1c:84:d8:bd:c2:f0:b5:ec:bd:b5:16:b8: 3a:e9:27:cf:e7:a0:8d:9f:27:73:0a:13:82:69:70: 5a:e6:0c:86:1c:57:98:e7:f0:03:f8:d3:4f:14:e7: 8d:e7:d4:fb:f6:d6:f5:22:0a:38:c2:e7:62:17:09: 37:4b:10:15:42:e9:ff:15:87:94:79:68:00:d3:53: a2:8e:a4:d8:e4:df:dd:a6:c3:f0:ad:1f:21:69:78: 6c:92:72:28:a6:a5:5d:52:1e:2a:6d:cd:84:cf:45: c9:07:e3:e7:f8:db:41:c4:c4:0f:0a:34:7c:ed:fe: 3e:fc:47:ee:63:04:f5:c5:ef:24:87:0c:cd:8e:0b: e4:5b:95:51:f9:da:68:8e:4e:bd:26:2c:49:b7:7c: f4:51:23:cc:a5:28:fc:bc:f3:43:ee:46:75:11:88: 28:8b:4c:20:d3:85:e4:9a:6d:0a:35:a5:6b:2c:f5: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FC:36:48:8A:E6:5C:B1:73:95:36:CB:09:33:F0:59:C8:70:4C:02 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jPw2SIrmXLFzlTbLCTPwWchwTAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.4.0/22 195.136.38.0/23 195.136.156.0/23 Signature Algorithm: sha256WithRSAEncryption 38:e4:a4:5e:16:f7:dc:c6:be:e7:64:3e:78:da:44:b4:81:ee: f7:ea:29:26:90:39:b6:3e:ae:2f:db:3f:e3:fb:c5:3b:36:1c: 40:bf:bf:ea:2e:68:a9:83:6e:8d:b7:11:37:cb:b3:a9:12:a3: 41:11:91:e8:b9:70:15:24:c7:8e:ac:8d:14:41:08:ae:70:fe: 73:af:b3:21:c9:df:c6:cf:88:81:a3:60:96:8b:32:b4:8e:6b: 46:79:e2:b6:3f:66:ae:73:d2:10:9a:d8:b4:44:36:50:4c:32: aa:48:1d:bb:7e:23:4e:43:07:71:f0:b5:f9:b4:b6:0b:fe:ad: f2:31:55:9d:2a:95:8a:ee:39:79:ce:28:85:f4:04:1a:6d:21: 19:bb:be:2a:7f:d5:dc:5f:95:18:f7:f5:97:66:3f:33:6f:f7: 6d:70:b1:fa:0d:18:22:d6:c3:10:f6:e9:69:3f:2d:ea:a6:d1: ee:cd:d2:24:19:2b:b7:86:b6:7f:9b:89:00:36:22:b9:ba:af: 59:01:9f:69:01:c2:b2:62:12:25:5d:43:41:f3:86:6c:3b:14: e5:a2:3f:5a:e8:84:a1:1e:80:97:6d:91:72:e1:64:c1:ba:e5: cf:dc:3e:1f:09:ab:32:ac:f9:24:91:94:92:2f:3d:7e:a9:a0: 83:51:19:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x47cRS0rY1KXvwG2+ZoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2ZjMzY0ODhhZTY1Y2IxNzM5NTM2Y2IwOTMzZjA1OWM4NzA0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IT/h5acbVUxmMCMfshf8gopilzG H93hZTVFp30rbWQW7RCk384FS+yH1e/vhdIiVeDyiBe7z+/5iPKZ6YUbnL7zIvyE 6xHa5TYe9KschNi9wvC17L21Frg66SfP56CNnydzChOCaXBa5gyGHFeY5/AD+NNP FOeN59T79tb1Igo4wudiFwk3SxAVQun/FYeUeWgA01OijqTY5N/dpsPwrR8haXhs knIopqVdUh4qbc2Ez0XJB+Pn+NtBxMQPCjR87f4+/EfuYwT1xe8khwzNjgvkW5VR +dpojk69JixJt3z0USPMpSj8vPND7kZ1EYgoi0wg04Xkmm0KNaVrLPVsvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIz8NkiK5lyxc5U2ywkz8FnIcEwCMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvalB3MlNJcm1YTEZ6bFRiTENUUHdXY2h3VEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw4gEAwQB w4gmAwQBw4icMA0GCSqGSIb3DQEBCwUAA4IBAQA45KReFvfcxr7nZD542kS0ge73 6ikmkDm2Pq4v2z/j+8U7NhxAv7/qLmipg26NtxE3y7OpEqNBEZHouXAVJMeOrI0U QQiucP5zr7Mhyd/Gz4iBo2CWizK0jmtGeeK2P2auc9IQmti0RDZQTDKqSB27fiNO Qwdx8LX5tLYL/q3yMVWdKpWK7jl5ziiF9AQabSEZu74qf9XcX5UY9/WXZj8zb/dt cLH6DRgi1sMQ9ulpPy3qptHuzdIkGSu3hrZ/m4kANiK5uq9ZAZ9pAcKyYhIlXUNB 84ZsOxTloj9a6IShHoCXbZFy4WTBuuXP3D4fCasyrPkkkZSSLz1+qaCDURmb -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:18 2026 by rpki-client