This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa File: JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa (raw, json) Hash identifier: ncOs8+yJ75qvDSJg0W6CwoVuPbowDw3Ob5yRHAaZTeg= Subject key identifier: 24:FD:D9:AA:A3:D5:8C:85:0F:AB:E7:B5:C3:9C:D3:C2:D9:39:97:E7 Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455 Certificate serial: 019B78344CEFD35A19F3F543A90B609FA34D Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49666 IP address blocks: 185.81.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:ef:d3:5a:19:f3:f5:43:a9:0b:60:9f:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24fdd9aaa3d58c850fabe7b5c39cd3c2d93997e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:31:1d:d6:ab:66:99:82:b5:4b:1e:39:20: 6b:c3:fc:04:43:a7:ee:c7:c4:54:82:6f:cf:38:01: ec:c1:02:99:e9:36:6f:4d:45:f0:8a:6c:43:a7:79: a2:27:8e:d9:b7:cd:02:61:af:63:e1:68:d2:d2:34: d2:d0:48:05:9f:90:2b:8e:b3:ff:e7:2e:63:2a:fc: 41:db:f5:8c:d0:58:15:d0:74:df:ca:9a:ff:a3:cd: ac:6e:21:6c:95:b9:d1:f3:b3:d4:d0:8b:f8:93:e2: 20:f8:20:b4:f4:6a:5e:8e:46:97:aa:f3:74:d7:89: 39:fb:bc:00:45:32:5f:6f:2d:a9:9f:81:be:cd:93: 54:ef:fb:ed:dc:3d:5e:9d:6f:58:3f:7a:22:50:90: 52:ce:b6:38:8a:46:63:85:ae:73:fa:f6:99:87:2f: d9:c7:19:b9:b9:39:af:f8:c9:bc:c1:9c:15:a3:ae: 45:ba:a9:c4:50:29:5b:20:0e:c5:56:7c:0c:fa:68: 23:d6:96:64:ff:47:58:72:4d:bc:33:57:87:4e:36: 2c:ee:cf:13:aa:00:ff:89:7b:c0:0e:1e:fc:36:ea: 4c:29:ae:5d:f9:70:e3:70:74:5c:ff:79:65:8a:53: 0d:a7:dc:ea:ed:ef:b5:86:67:6e:79:e4:de:52:f8: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:D9:AA:A3:D5:8C:85:0F:AB:E7:B5:C3:9C:D3:C2:D9:39:97:E7 X509v3 Authority Key Identifier: keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/JP3ZqqPVjIUPq-e1w5zTwtk5l-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.98.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:8b:f9:62:ad:8b:9d:ba:c0:56:41:39:c1:1e:3a:3d:41:45: 24:1e:5f:36:5b:14:a4:a1:ed:df:eb:ba:47:d8:d1:d2:ff:4e: f3:07:7f:c8:62:e3:bc:27:8c:d7:aa:87:fe:5c:0b:13:10:1f: c4:a7:83:5e:8b:dd:d4:0b:ed:f4:8b:2d:6e:14:6c:7b:a0:b2: a1:1c:fe:c1:93:e7:12:fa:78:c6:84:ee:f6:f3:be:a6:cc:8b: 36:0a:a6:ec:57:ee:5f:96:a4:ad:86:09:b1:3a:65:6c:af:fb: 68:82:c3:a0:19:d3:1a:d7:20:70:ab:dc:ab:50:d2:24:ab:07: 67:52:19:8f:1a:4b:d4:d2:f0:57:2f:9a:a2:04:d8:cf:e9:c3: dd:59:19:07:f8:12:61:9a:cf:19:ea:a8:60:a1:d9:3b:54:4d: c2:c9:de:fd:96:69:f7:dd:4b:58:cb:98:85:33:90:35:a9:76: 28:ca:97:72:f0:d6:97:01:fb:77:96:96:74:82:9d:48:75:bb: b1:2b:90:7c:66:e6:f8:a0:59:ca:34:77:ee:1b:4d:55:d6:f5: 0c:32:31:e0:3c:94:69:84:4d:df:2f:05:82:a9:ca:ff:f0:cb: b8:57:9b:4a:fd:2d:39:5d:f1:8f:0b:b5:90:a7:ea:95:8c:21: d9:e7:5f:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEzv01oZ8/VDqQtgn6NNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw MjQ0NTUwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGZkZDlhYWEzZDU4Yzg1MGZhYmU3YjVjMzljZDNjMmQ5Mzk5N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kMxHdarZpmCtUseOSBrw/wEQ6fu x8RUgm/POAHswQKZ6TZvTUXwimxDp3miJ47Zt80CYa9j4WjS0jTS0EgFn5ArjrP/ 5y5jKvxB2/WM0FgV0HTfypr/o82sbiFslbnR87PU0Iv4k+Ig+CC09GpejkaXqvN0 14k5+7wARTJfby2pn4G+zZNU7/vt3D1enW9YP3oiUJBSzrY4ikZjha5z+vaZhy/Z xxm5uTmv+Mm8wZwVo65FuqnEUClbIA7FVnwM+mgj1pZk/0dYck28M1eHTjYs7s8T qgD/iXvADh78NupMKa5d+XDjcHRc/3llilMNp9zq7e+1hmdueeTeUvjdTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCT92aqj1YyFD6vntcOc08LZOZfnMB8GA1UdIwQY MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt NDcyYjBkMDcyZTgzLzEvSlAzWnFxUFZqSVVQcS1lMXc1elR3dGs1bC1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFiMA0G CSqGSIb3DQEBCwUAA4IBAQBNi/lirYudusBWQTnBHjo9QUUkHl82WxSkoe3f67pH 2NHS/07zB3/IYuO8J4zXqof+XAsTEB/Ep4Nei93UC+30iy1uFGx7oLKhHP7Bk+cS +njGhO72876mzIs2CqbsV+5flqSthgmxOmVsr/togsOgGdMa1yBwq9yrUNIkqwdn UhmPGkvU0vBXL5qiBNjP6cPdWRkH+BJhms8Z6qhgodk7VE3Cyd79lmn33UtYy5iF M5A1qXYoypdy8NaXAft3lpZ0gp1IdbuxK5B8Zub4oFnKNHfuG01V1vUMMjHgPJRp hE3fLwWCqcr/8Mu4V5tK/S05XfGPC7WQp+qVjCHZ518q -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:58 2026 by rpki-client