This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/61JUKU1kNgNcbLsFYQX_W-2mtOg.roa File: 61JUKU1kNgNcbLsFYQX_W-2mtOg.roa (raw, json) Hash identifier: 0FOs6psz07F2+pSY3TZnHRBgFc0UZjS7WlGWBFGOa8M= Subject key identifier: EB:52:54:29:4D:64:36:03:5C:6C:BB:05:61:05:FF:5B:ED:A6:B4:E8 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B8E34BB5822E2EB200B098BB1B8E94C70 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/61JUKU1kNgNcbLsFYQX_W-2mtOg.roa Signing time: Mon 05 Jan 2026 12:49:39 +0000 ROA not before: Mon 05 Jan 2026 12:49:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 979 IP address blocks: 155.254.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:34:bb:58:22:e2:eb:20:0b:09:8b:b1:b8:e9:4c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 5 12:49:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb5254294d6436035c6cbb056105ff5beda6b4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:69:63:cc:97:3e:ed:79:6f:cc:31:51:03: 8c:1e:89:08:09:df:f5:0d:36:87:9c:07:f8:a4:17: 54:f2:57:60:99:e5:d3:89:2b:53:57:2f:85:2a:8d: 27:84:06:ab:38:05:07:8a:75:89:12:e4:68:86:e9: 88:cf:e7:f2:01:65:bf:2a:f9:68:73:15:dc:0f:3c: c9:68:a5:34:c6:5b:4e:7b:04:f4:b8:f8:a9:de:11: f1:39:16:e4:84:32:79:24:55:ba:85:8b:e4:13:51: c6:81:d8:25:82:91:d6:14:7e:a8:0e:82:d9:1d:37: 48:01:12:5c:01:8b:e3:48:d2:3c:1c:2e:b1:29:4a: 67:dd:38:3f:ef:69:35:ec:b1:83:d6:9a:d3:5f:bc: 12:15:e2:c8:2d:49:9b:d2:15:35:80:35:26:26:a9: da:d6:0b:a6:fd:a6:69:73:ac:97:e9:58:25:0e:50: 7f:33:1b:78:14:48:92:d2:1c:e8:a5:9f:ef:6f:e6: 4f:e6:28:ff:61:fd:5c:15:a8:94:e9:fb:74:3b:ac: b5:5b:4f:a1:52:3b:1b:fe:0d:1c:74:7c:98:db:1b: a3:3d:e4:57:b5:e6:95:25:57:86:2f:80:1a:6a:6b: e8:24:76:29:aa:5c:9b:7f:fe:ed:be:ec:71:ca:49: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:54:29:4D:64:36:03:5C:6C:BB:05:61:05:FF:5B:ED:A6:B4:E8 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/61JUKU1kNgNcbLsFYQX_W-2mtOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.254.100.0/22 Signature Algorithm: sha256WithRSAEncryption 27:4b:60:99:b6:34:48:ab:fd:83:97:ba:de:2c:a8:55:3e:23: 3e:c2:60:2c:38:8a:66:fe:e6:35:6b:97:a6:2a:70:16:95:1b: b1:16:fc:ed:6a:81:4c:0b:17:0d:2b:2d:35:b1:31:63:cb:be: 83:45:8d:33:30:fa:5a:f6:58:b7:06:c7:1a:0f:ff:6d:e3:10: 56:8f:09:2a:29:e5:cb:1c:50:66:f7:84:02:fb:37:6d:79:e3: da:92:26:36:16:ea:ee:73:a0:8f:30:70:fb:a3:9f:00:eb:3e: b0:88:a5:a5:4c:f5:b0:5a:49:b9:49:45:c3:f7:69:68:55:bf: 7c:50:3b:38:67:45:3c:01:bb:8f:16:aa:be:44:09:2b:d3:dc: b6:67:b3:97:1f:36:76:b3:66:dc:58:70:a1:b1:6a:ab:1f:cf: fc:20:b2:25:76:be:df:04:f6:8f:4e:63:79:1d:41:74:6c:b2: b0:71:65:ea:83:88:73:bc:f9:3f:86:cb:c8:84:18:f6:56:d5: 5e:99:1a:18:77:fd:26:ba:ac:4f:2a:7e:90:f1:f9:6c:0f:a9: e6:3d:4b:ac:a9:0c:78:4f:e0:b7:0c:eb:1b:f8:82:f8:2d:58: 36:fb:5d:26:a3:02:7b:69:e3:3b:01:27:f9:cf:f2:3c:f6:30: 7c:81:6c:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuONLtYIuLrIAsJi7G46UxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTA1MTI0OTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjUyNTQyOTRkNjQzNjAzNWM2Y2JiMDU2MTA1ZmY1YmVkYTZiNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+RpY8yXPu15b8wxUQOMHokICd/1 DTaHnAf4pBdU8ldgmeXTiStTVy+FKo0nhAarOAUHinWJEuRohumIz+fyAWW/Kvlo cxXcDzzJaKU0xltOewT0uPip3hHxORbkhDJ5JFW6hYvkE1HGgdglgpHWFH6oDoLZ HTdIARJcAYvjSNI8HC6xKUpn3Tg/72k17LGD1prTX7wSFeLILUmb0hU1gDUmJqna 1gum/aZpc6yX6VglDlB/Mxt4FEiS0hzopZ/vb+ZP5ij/Yf1cFaiU6ft0O6y1W0+h Ujsb/g0cdHyY2xujPeRXteaVJVeGL4AaamvoJHYpqlybf/7tvuxxyklJVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtSVClNZDYDXGy7BWEF/1vtprToMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvNjFKVUtVMWtOZ05jYkxzRllRWF9XLTJtdE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm/5kMA0G CSqGSIb3DQEBCwUAA4IBAQAnS2CZtjRIq/2Dl7reLKhVPiM+wmAsOIpm/uY1a5em KnAWlRuxFvztaoFMCxcNKy01sTFjy76DRY0zMPpa9li3BscaD/9t4xBWjwkqKeXL HFBm94QC+zdteePakiY2Furuc6CPMHD7o58A6z6wiKWlTPWwWkm5SUXD92loVb98 UDs4Z0U8AbuPFqq+RAkr09y2Z7OXHzZ2s2bcWHChsWqrH8/8ILIldr7fBPaPTmN5 HUF0bLKwcWXqg4hzvPk/hsvIhBj2VtVemRoYd/0muqxPKn6Q8flsD6nmPUusqQx4 T+C3DOsb+IL4LVg2+10mowJ7aeM7ASf5z/I89jB8gWzV -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:19 2026 by rpki-client