This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/JMIJQhP4HZphvAIczGqMf-4b0GY.roa File: JMIJQhP4HZphvAIczGqMf-4b0GY.roa (raw, json) Hash identifier: bSPME27sDmqT8/QTvC3vIfM712sVJorPb7PuEfyYFok= Subject key identifier: 24:C2:09:42:13:F8:1D:9A:61:BC:02:1C:CC:6A:8C:7F:EE:1B:D0:66 Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b Certificate serial: 019B7C8042DE356EC6B0E811AC40674D350A Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/JMIJQhP4HZphvAIczGqMf-4b0GY.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197882 IP address blocks: 193.47.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:42:de:35:6e:c6:b0:e8:11:ac:40:67:4d:35:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24c2094213f81d9a61bc021ccc6a8c7fee1bd066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:c3:e2:73:5b:24:63:41:5f:ad:ed:78:ec: 83:67:6d:fe:c1:49:9e:3e:a0:b9:51:0e:94:33:1f: 13:00:69:4a:7d:d4:1c:01:22:7c:d1:2a:7a:08:9d: 6b:eb:45:73:38:97:78:10:ab:1b:bb:fd:97:05:65: f3:b2:f9:04:44:b6:3d:8b:72:61:2a:e8:18:2e:7d: b8:35:ea:fc:17:d8:46:11:9e:2e:54:60:d3:f7:09: c0:99:d4:4d:0d:4f:96:8b:65:5f:31:7a:c9:00:c2: 4c:a8:6e:39:c4:b9:7c:36:e4:83:77:68:cb:59:77: 01:85:c3:af:06:6d:1d:05:6b:f1:1e:e6:7f:5e:e1: fd:e9:08:de:e9:a3:d5:a6:ec:1a:5b:c0:1f:4f:b4: eb:8b:4c:11:e8:ff:93:a6:8f:4b:86:01:e3:f7:3c: c9:c1:e2:cd:50:07:dc:c8:19:7c:22:e9:c7:0d:47: ac:13:c7:d9:eb:a1:e0:bf:44:2e:a7:5d:5c:cf:1a: 9d:7d:0b:b1:d0:c7:1d:50:77:e4:d3:35:92:02:03: 52:bf:1c:5a:d2:d9:ea:ae:9c:47:ec:cc:1e:9a:3b: ba:c5:d9:5a:33:bc:0b:9f:0b:8e:a2:a4:82:56:33: 6b:00:a5:44:54:c1:93:f5:b5:4f:88:7f:37:8d:4f: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C2:09:42:13:F8:1D:9A:61:BC:02:1C:CC:6A:8C:7F:EE:1B:D0:66 X509v3 Authority Key Identifier: keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/JMIJQhP4HZphvAIczGqMf-4b0GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.189.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:85:62:09:3e:5a:4f:6d:36:51:19:7c:ea:d5:3a:09:1f:33: 1d:58:52:f0:3a:9e:91:2a:e6:e5:00:78:1b:b7:31:4c:fc:b8: ed:c1:80:52:c8:ad:1e:18:46:ef:09:17:45:42:1f:5b:0d:7f: 85:79:cc:15:24:75:f5:82:ea:24:69:6a:80:d9:8a:4b:b1:8d: d1:5a:d3:5f:e9:d5:71:1e:9d:32:f9:78:aa:cd:88:8b:e1:0a: 68:34:b9:11:56:80:5e:aa:14:f6:82:1c:5f:44:5c:23:e6:e6: 39:3d:cd:3a:01:59:08:c6:98:b2:62:6d:aa:10:84:49:ea:8c: 19:9d:c6:61:94:bc:99:dd:54:d0:60:9d:1b:f1:06:c2:a4:14: b9:2e:eb:44:1f:c1:1f:4d:19:4d:00:2b:c5:40:c9:4d:dc:7e: 1b:50:e4:9e:44:c0:3e:b9:83:13:5a:80:04:dd:33:dd:6c:07: 05:b8:24:04:dc:6c:36:3e:20:e7:02:76:aa:e1:fa:1b:98:4a: 8d:5f:01:b3:2c:eb:85:1b:fa:51:f7:74:71:d4:3d:93:f3:f1: 21:d7:46:5a:0e:54:06:fa:bf:a5:ae:8b:1f:3f:79:bd:6d:5c: 5f:5d:c4:88:6d:6e:31:83:b9:55:30:13:d5:91:11:54:81:8d: 25:25:b1:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gELeNW7GsOgRrEBnTTUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm MmE0OWIwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGMyMDk0MjEzZjgxZDlhNjFiYzAyMWNjYzZhOGM3ZmVlMWJkMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0/D4nNbJGNBX63teOyDZ23+wUme PqC5UQ6UMx8TAGlKfdQcASJ80Sp6CJ1r60VzOJd4EKsbu/2XBWXzsvkERLY9i3Jh KugYLn24Ner8F9hGEZ4uVGDT9wnAmdRNDU+Wi2VfMXrJAMJMqG45xLl8NuSDd2jL WXcBhcOvBm0dBWvxHuZ/XuH96Qje6aPVpuwaW8AfT7Tri0wR6P+Tpo9LhgHj9zzJ weLNUAfcyBl8IunHDUesE8fZ66Hgv0Qup11czxqdfQux0McdUHfk0zWSAgNSvxxa 0tnqrpxH7Mwemju6xdlaM7wLnwuOoqSCVjNrAKVEVMGT9bVPiH83jU9BTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTCCUIT+B2aYbwCHMxqjH/uG9BmMB8GA1UdIwQY MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt NDE1NjlhYmMzN2NjLzEvSk1JSlFoUDRIWnBodkFJY3pHcU1mLTRiMEdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+9MA0G CSqGSIb3DQEBCwUAA4IBAQCKhWIJPlpPbTZRGXzq1ToJHzMdWFLwOp6RKublAHgb tzFM/LjtwYBSyK0eGEbvCRdFQh9bDX+FecwVJHX1guokaWqA2YpLsY3RWtNf6dVx Hp0y+XiqzYiL4QpoNLkRVoBeqhT2ghxfRFwj5uY5Pc06AVkIxpiyYm2qEIRJ6owZ ncZhlLyZ3VTQYJ0b8QbCpBS5LutEH8EfTRlNACvFQMlN3H4bUOSeRMA+uYMTWoAE 3TPdbAcFuCQE3Gw2PiDnAnaq4fobmEqNXwGzLOuFG/pR93Rx1D2T8/Eh10ZaDlQG +r+lrosfP3m9bVxfXcSIbW4xg7lVMBPVkRFUgY0lJbFU -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:06 2026 by rpki-client