This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jtRqapgujmcEPZeLzkKuo7kNF-Q.roa File: jtRqapgujmcEPZeLzkKuo7kNF-Q.roa (raw, json) Hash identifier: r5eejykYEEykmeeV+OtJE+rWBHcUVdboRT42D0k+EzU= Subject key identifier: 8E:D4:6A:6A:98:2E:8E:67:04:3D:97:8B:CE:42:AE:A3:B9:0D:17:E4 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C801E0CF8C7910217939B07CBB50901 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jtRqapgujmcEPZeLzkKuo7kNF-Q.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47127 IP address blocks: 212.234.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1e:0c:f8:c7:91:02:17:93:9b:07:cb:b5:09:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ed46a6a982e8e67043d978bce42aea3b90d17e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:c2:e3:7b:04:d9:49:64:8f:40:af:82:8e: cf:eb:4f:35:b0:9a:49:d4:3b:e7:79:00:e3:9c:96: 50:8b:ae:d2:3f:82:8d:28:f6:30:3f:b8:9c:4d:ef: 99:88:d1:8d:31:03:cd:c5:42:ef:49:e1:06:47:89: e8:60:a2:07:3c:8a:b3:6e:1a:cd:fe:16:7f:0c:84: 9f:53:6e:26:bf:19:ad:53:d9:76:e3:2d:28:c3:c8: a8:31:e6:3a:30:81:60:98:4c:12:78:60:2e:1e:42: ee:90:c3:37:ad:5f:89:b6:c4:e8:25:48:37:fa:e8: 51:19:df:38:2a:c0:f3:14:54:4d:83:4e:2a:e4:3b: e6:10:56:b1:86:f4:5a:94:e1:54:af:f9:36:ac:36: da:72:93:df:0a:8a:3f:ef:0a:14:26:9e:de:8f:bd: bc:cf:ec:80:4c:bb:3c:ff:54:30:0f:e1:fe:f6:fd: 93:bc:c7:53:6c:cd:16:a9:0c:b4:cf:b5:36:39:87: 31:b2:2f:60:43:84:48:88:89:90:27:b2:d0:56:be: d0:26:61:16:ab:bf:05:6f:c1:95:e0:98:e0:e3:ec: 04:9f:70:9c:fe:03:32:ef:13:11:09:be:c7:8d:75: ff:da:ae:07:9d:6e:81:83:ac:97:db:94:b3:df:1f: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:6A:6A:98:2E:8E:67:04:3D:97:8B:CE:42:AE:A3:B9:0D:17:E4 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jtRqapgujmcEPZeLzkKuo7kNF-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.234.169.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ce:c0:0e:24:46:05:2b:06:44:8d:fe:db:11:b9:e2:c2:e2: b8:55:37:63:ac:1a:f8:f7:85:26:a7:0c:10:ea:2e:ca:71:fc: 37:5c:25:c9:ab:9b:44:a0:2f:c0:2b:00:a8:ab:fb:6e:d6:10: b8:5e:b6:24:f3:60:62:14:fc:8d:55:69:4c:b5:05:7b:43:f7: b5:00:9a:60:69:72:b1:88:c8:14:c2:c2:a3:53:f3:a2:56:07: 49:b8:e4:b4:80:96:2d:5a:8b:8e:2b:e7:af:d2:9e:b9:81:cb: 06:31:3a:b9:f8:cd:46:72:ef:00:d9:09:61:87:b1:80:e4:b2: fc:47:72:31:73:02:49:98:f5:70:81:91:04:71:9f:06:b8:19: d1:fe:0b:01:9c:73:b6:dd:5b:e3:45:7a:0c:40:71:09:88:37: f3:14:89:ef:bf:9d:95:c5:dc:66:91:cd:78:39:8e:4f:dd:49: 25:bd:e1:c2:58:a0:01:2d:76:c4:9e:01:aa:37:fc:c0:f6:94: cb:26:e6:f9:b3:af:f5:63:66:fe:fc:94:a7:2c:d8:dc:f2:85: 12:13:1a:e0:87:29:1e:ea:9e:93:03:8b:6e:2c:b8:28:3c:1d: 0c:e1:b7:9e:a0:14:4a:d2:76:12:82:a7:7e:3c:e1:ce:31:08: 37:31:bb:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gB4M+MeRAheTmwfLtQkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWQ0NmE2YTk4MmU4ZTY3MDQzZDk3OGJjZTQyYWVhM2I5MGQxN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPC43sE2Ulkj0Cvgo7P6081sJpJ 1DvneQDjnJZQi67SP4KNKPYwP7icTe+ZiNGNMQPNxULvSeEGR4noYKIHPIqzbhrN /hZ/DISfU24mvxmtU9l24y0ow8ioMeY6MIFgmEwSeGAuHkLukMM3rV+JtsToJUg3 +uhRGd84KsDzFFRNg04q5DvmEFaxhvRalOFUr/k2rDbacpPfCoo/7woUJp7ej728 z+yATLs8/1QwD+H+9v2TvMdTbM0WqQy0z7U2OYcxsi9gQ4RIiImQJ7LQVr7QJmEW q78Fb8GV4Jjg4+wEn3Cc/gMy7xMRCb7HjXX/2q4HnW6Bg6yX25Sz3x/PGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7UamqYLo5nBD2Xi85CrqO5DRfkMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvanRScWFwZ3VqbWNFUFplTHprS3VvN2tORi1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OqpMA0G CSqGSIb3DQEBCwUAA4IBAQCTzsAOJEYFKwZEjf7bEbniwuK4VTdjrBr494UmpwwQ 6i7Kcfw3XCXJq5tEoC/AKwCoq/tu1hC4XrYk82BiFPyNVWlMtQV7Q/e1AJpgaXKx iMgUwsKjU/OiVgdJuOS0gJYtWouOK+ev0p65gcsGMTq5+M1Gcu8A2Qlhh7GA5LL8 R3IxcwJJmPVwgZEEcZ8GuBnR/gsBnHO23VvjRXoMQHEJiDfzFInvv52Vxdxmkc14 OY5P3UklveHCWKABLXbEngGqN/zA9pTLJub5s6/1Y2b+/JSnLNjc8oUSExrghyke 6p6TA4tuLLgoPB0M4beeoBRK0nYSgqd+POHOMQg3Mbs8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:41 2026 by rpki-client