This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/JAtV8bztGX0ExPtNFrk1YsKTrBY.roa File: JAtV8bztGX0ExPtNFrk1YsKTrBY.roa (raw, json) Hash identifier: W9JObnRBv+K7U9E9rf4+QNejUyfBhpkxidGEL9jxuE4= Subject key identifier: 24:0B:55:F1:BC:ED:19:7D:04:C4:FB:4D:16:B9:35:62:C2:93:AC:16 Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Certificate serial: 019B7BA4BD9862EC69CA223F3C6E6227DDB8 Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/JAtV8bztGX0ExPtNFrk1YsKTrBY.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8517 IP address blocks: 161.9.128.0/17 maxlen: 24 161.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bd:98:62:ec:69:ca:22:3f:3c:6e:62:27:dd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=240b55f1bced197d04c4fb4d16b93562c293ac16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:7f:74:ec:26:1b:4d:50:08:1d:fd:2b:bd: be:5f:b6:62:1b:1d:bb:e3:ed:c2:c4:a0:fa:f6:b2: 3b:b9:ff:7f:56:97:e4:5f:50:d2:da:0e:0e:29:5e: bd:a5:ed:17:2d:40:7c:91:9c:16:74:42:90:1a:e0: 5a:8b:60:0f:1e:4c:a7:d3:a9:ea:4a:17:df:6e:4b: 7b:bd:8f:2e:ae:f3:cb:33:66:01:4a:7d:f0:e6:ac: 30:67:c5:9a:01:e7:57:c6:9a:a0:97:69:48:66:dc: 98:c5:76:38:86:e6:5f:ae:34:e1:13:5c:87:7f:7d: 28:d2:8f:b1:b8:00:f4:06:fe:99:08:70:19:eb:87: a1:e0:f5:79:e1:40:e6:9d:d2:b9:30:49:b2:4d:df: d5:03:e9:39:66:85:7f:a3:fb:73:24:95:af:7f:a5: fe:94:1a:59:c8:67:ee:c3:94:8c:42:c7:ab:ff:15: a2:4c:25:db:5a:f2:1d:75:44:b0:0c:e9:bc:93:ed: 9a:fe:05:d4:cc:bc:6a:75:c6:b6:92:69:5f:5e:0f: c9:4b:9d:a1:b5:a7:8d:19:bf:a3:0d:81:b6:56:00: c8:2e:39:45:e0:a4:26:69:99:7e:c6:30:0c:92:7b: 6c:e3:da:93:e5:8f:9c:8b:c9:d0:da:6c:79:b0:f9: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0B:55:F1:BC:ED:19:7D:04:C4:FB:4D:16:B9:35:62:C2:93:AC:16 X509v3 Authority Key Identifier: keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/JAtV8bztGX0ExPtNFrk1YsKTrBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.9.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7b:77:e9:e6:05:7e:96:8a:55:26:5d:91:d5:99:a3:90:20:34: 27:b6:c8:31:61:bb:9b:68:47:be:81:ca:0e:7c:13:9a:63:8e: 8a:4f:60:44:6c:70:ef:3f:3e:31:7d:46:d7:f4:6f:93:02:63: ff:77:74:24:86:05:de:73:d7:ff:4d:30:a6:82:a8:c4:06:0c: 6a:ae:e3:f0:95:d0:71:1f:b5:cc:94:d3:3c:b8:86:73:17:d5: 29:c5:bd:b7:e0:0b:62:5a:df:89:a7:b0:95:a3:c4:38:12:3f: bf:ae:19:a6:b1:66:bb:44:22:a7:0c:81:34:ed:30:43:34:de: 30:a0:61:16:de:1b:bc:8a:49:8f:f9:84:f6:53:63:4d:cb:c0: c5:73:74:e1:fe:28:0c:9a:18:b0:b0:04:dd:73:b0:45:32:c6: 87:15:f5:6d:16:5e:b5:ef:fc:d1:b5:df:8b:88:c7:d8:02:4c: fe:08:79:9f:96:05:eb:a8:c7:eb:15:bd:84:2d:80:50:6f:22: be:a2:bb:f0:f0:2d:44:cf:c8:15:b1:d3:8d:7b:60:fc:ce:49: 7c:08:0d:61:f3:e3:24:57:1c:b5:97:51:d7:25:ed:20:71:08: c8:16:d0:da:cc:65:40:7e:0c:68:f3:51:c3:c1:f4:0c:2e:75: 3b:0d:a9:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pL2YYuxpyiI/PG5iJ924MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWE3OGIyOGYwNTRmNzJmNTIyNmFlM2VjNDU0OTgwZWQy YTEwYzkwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDBiNTVmMWJjZWQxOTdkMDRjNGZiNGQxNmI5MzU2MmMyOTNhYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx1/dOwmG01QCB39K72+X7ZiGx27 4+3CxKD69rI7uf9/VpfkX1DS2g4OKV69pe0XLUB8kZwWdEKQGuBai2APHkyn06nq Shffbkt7vY8urvPLM2YBSn3w5qwwZ8WaAedXxpqgl2lIZtyYxXY4huZfrjThE1yH f30o0o+xuAD0Bv6ZCHAZ64eh4PV54UDmndK5MEmyTd/VA+k5ZoV/o/tzJJWvf6X+ lBpZyGfuw5SMQser/xWiTCXbWvIddUSwDOm8k+2a/gXUzLxqdca2kmlfXg/JS52h taeNGb+jDYG2VgDILjlF4KQmaZl+xjAMknts49qT5Y+ci8nQ2mx5sPnmVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQLVfG87Rl9BMT7TRa5NWLCk6wWMB8GA1UdIwQY MBaAFBPqeLKPBU9y9SJq4+xFSYDtKhDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUt MTA5OGQ2ZDg4ZGU4LzEvSkF0VjhienRHWDBFeFB0TkZyazFZc0tUckJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUtMTA5OGQ2ZDg4ZGU4 LzEvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHoQmAMA0G CSqGSIb3DQEBCwUAA4IBAQB7d+nmBX6WilUmXZHVmaOQIDQntsgxYbubaEe+gcoO fBOaY46KT2BEbHDvPz4xfUbX9G+TAmP/d3QkhgXec9f/TTCmgqjEBgxqruPwldBx H7XMlNM8uIZzF9Upxb234AtiWt+Jp7CVo8Q4Ej+/rhmmsWa7RCKnDIE07TBDNN4w oGEW3hu8ikmP+YT2U2NNy8DFc3Th/igMmhiwsATdc7BFMsaHFfVtFl617/zRtd+L iMfYAkz+CHmflgXrqMfrFb2ELYBQbyK+orvw8C1Ez8gVsdONe2D8zkl8CA1h8+Mk Vxy1l1HXJe0gcQjIFtDazGVAfgxo81HDwfQMLnU7DamA -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:41 2026 by rpki-client