This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/JG54M9hQNDQTGG9DfTpX123rMZA.roa File: JG54M9hQNDQTGG9DfTpX123rMZA.roa (raw, json) Hash identifier: +0vKis9n9eNrXdMhQQ1uSWPpPcacFJxG7ZpcTVOdfcc= Subject key identifier: 24:6E:78:33:D8:50:34:34:13:18:6F:43:7D:3A:57:D7:6D:EB:31:90 Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85 Certificate serial: 019B7A5B4E0C87BBE6220FFFB92E3E7D0193 Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/JG54M9hQNDQTGG9DfTpX123rMZA.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21355 IP address blocks: 194.31.14.0/23 maxlen: 24 194.99.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4e:0c:87:bb:e6:22:0f:ff:b9:2e:3e:7d:01:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=246e7833d850343413186f437d3a57d76deb3190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:31:d5:95:cf:a7:ec:ec:81:84:e6:e1:49: 76:97:54:7d:c5:05:80:e2:ce:d7:c5:d1:74:2b:71: 62:fe:c8:1b:f2:be:71:41:70:17:81:84:2d:d3:c0: 3e:89:0d:28:49:98:9d:a0:15:a7:7a:a1:8c:89:09: c5:34:98:8c:66:44:b3:0a:34:e6:64:6d:55:90:26: 46:3f:ef:df:7c:3a:18:58:43:bb:c8:a8:35:20:72: 82:fa:9e:8f:20:ab:7b:c3:dc:bf:f5:e6:b3:36:7c: ef:9a:7c:6d:4a:c1:01:72:ca:b0:10:e4:22:ca:7a: a1:88:a8:16:ba:10:59:30:e4:6c:ac:dd:a7:22:32: 7a:aa:d1:9c:4c:0d:0b:bd:12:d3:ac:fd:0b:70:44: 09:83:94:51:11:72:fb:89:30:a2:9e:bf:36:8d:8a: 72:ff:08:c8:e1:33:af:06:a4:b7:4a:a1:79:13:36: b9:e7:b1:d4:0c:39:ce:74:50:82:4a:05:17:89:37: 86:81:2f:c2:dc:c4:8d:af:0f:19:26:53:5c:9d:c2: f6:5b:8a:ff:c7:a1:b6:c7:d0:ee:b1:e4:6c:9f:63: b0:04:fc:b1:07:f1:aa:3a:65:ff:92:dc:f1:64:c4: 38:c4:60:a1:f3:5b:5d:8e:85:24:79:f0:3f:ad:22: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:78:33:D8:50:34:34:13:18:6F:43:7D:3A:57:D7:6D:EB:31:90 X509v3 Authority Key Identifier: keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/JG54M9hQNDQTGG9DfTpX123rMZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.14.0/23 194.99.88.0/23 Signature Algorithm: sha256WithRSAEncryption b2:fa:fb:53:19:1b:f2:69:2e:3a:2d:1e:47:5e:4f:11:b1:d3: 70:bb:d7:89:0b:7b:3f:24:ed:a9:48:c9:94:2b:fe:23:20:b7: 9d:1a:92:48:03:a9:8a:bb:95:f8:9b:6e:20:3e:10:c8:d9:09: 01:d9:8e:ac:5f:f7:1b:4f:19:a3:8d:ab:15:5d:86:98:51:75: 9a:93:5e:24:e0:90:e0:05:a8:25:9b:a7:26:11:24:f0:27:86: f0:0b:59:1a:d6:f0:c0:b2:a1:42:7f:d3:31:30:44:21:9c:f5: d2:00:8f:1a:7e:d5:bb:4d:25:dd:fa:a5:75:d0:e7:3f:4d:f4: c2:b7:e8:43:23:4d:4f:21:52:e6:a3:c6:f2:d7:e2:b6:db:d0: 30:21:6a:61:94:ba:89:06:d8:e6:4b:1b:f1:3a:2e:03:a1:79: ac:be:67:d7:cd:6f:96:27:9f:bf:11:4e:a6:05:5b:ef:9c:d8: bf:16:55:e9:83:39:23:a1:7d:7e:01:a7:7b:be:56:f7:29:f3: 95:d2:76:03:83:cd:98:ef:66:3b:a3:c6:ef:33:5f:d2:5e:9e: d9:a6:1e:e7:46:86:4b:e9:0b:ca:9f:71:d4:59:db:87:92:be: e6:1f:e3:18:c1:65:7d:34:8f:80:ef:b3:da:e9:f3:a8:1e:07: c5:68:06:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W04Mh7vmIg//uS4+fQGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNWFhMGFmZThlNmYwYmI4NWU1Yzc1ZjJmNmMxNDEyMTgz MGVjODUwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDZlNzgzM2Q4NTAzNDM0MTMxODZmNDM3ZDNhNTdkNzZkZWIzMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt0x1ZXPp+zsgYTm4Ul2l1R9xQWA 4s7XxdF0K3Fi/sgb8r5xQXAXgYQt08A+iQ0oSZidoBWneqGMiQnFNJiMZkSzCjTm ZG1VkCZGP+/ffDoYWEO7yKg1IHKC+p6PIKt7w9y/9eazNnzvmnxtSsEBcsqwEOQi ynqhiKgWuhBZMORsrN2nIjJ6qtGcTA0LvRLTrP0LcEQJg5RREXL7iTCinr82jYpy /wjI4TOvBqS3SqF5Eza557HUDDnOdFCCSgUXiTeGgS/C3MSNrw8ZJlNcncL2W4r/ x6G2x9DuseRsn2OwBPyxB/GqOmX/ktzxZMQ4xGCh81tdjoUkefA/rSJS7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCRueDPYUDQ0ExhvQ306V9dt6zGQMB8GA1UdIwQY MBaAFH1aoK/o5vC7heXHXy9sFBIYMOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2Yt OGZmYjEyN2IzMjRlLzEvSkc1NE05aFFORFFUR0c5RGZUcFgxMjNyTVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2YtOGZmYjEyN2IzMjRl LzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwh8OAwQB wmNYMA0GCSqGSIb3DQEBCwUAA4IBAQCy+vtTGRvyaS46LR5HXk8RsdNwu9eJC3s/ JO2pSMmUK/4jILedGpJIA6mKu5X4m24gPhDI2QkB2Y6sX/cbTxmjjasVXYaYUXWa k14k4JDgBaglm6cmESTwJ4bwC1ka1vDAsqFCf9MxMEQhnPXSAI8aftW7TSXd+qV1 0Oc/TfTCt+hDI01PIVLmo8by1+K229AwIWphlLqJBtjmSxvxOi4DoXmsvmfXzW+W J5+/EU6mBVvvnNi/FlXpgzkjoX1+Aad7vlb3KfOV0nYDg82Y72Y7o8bvM1/SXp7Z ph7nRoZL6QvKn3HUWduHkr7mH+MYwWV9NI+A77Pa6fOoHgfFaAb2 -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:39 2026 by rpki-client