This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/J-Al8qEAjQvOqUSJW7LJw04Fukc.roa File: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (raw, json) Hash identifier: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko= Subject key identifier: 27:E0:25:F2:A1:00:8D:0B:CE:A9:44:89:5B:B2:C9:C3:4E:05:BA:47 Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Certificate serial: 019B7AC8CCCD2AF0DAC09E5801DDF30045AD Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/J-Al8qEAjQvOqUSJW7LJw04Fukc.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.53.16.0/22 maxlen: 24 193.53.20.0/23 maxlen: 24 2a00:f620:1::/48 maxlen: 64 2a00:f620:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cc:cd:2a:f0:da:c0:9e:58:01:dd:f3:00:45:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27e025f2a1008d0bcea944895bb2c9c34e05ba47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:cc:56:35:b7:1b:f5:94:30:f6:5b:f1:79: cf:07:56:01:7b:a4:25:94:97:da:26:c7:49:3f:01: 7c:ce:ea:18:46:b2:e2:4d:2e:40:da:8a:3d:f3:2a: 51:83:9e:04:67:89:ea:03:be:9e:92:36:66:92:06: 15:4d:f8:cb:94:7a:a1:a8:23:08:0a:fb:fb:5c:e5: e3:b8:46:73:e8:c5:63:04:84:98:fc:dc:9b:4d:27: 64:0e:3e:c7:22:cb:62:0d:2f:be:73:13:03:48:4c: ac:f5:a5:32:0e:64:e8:3f:9d:d7:4e:ee:0c:04:60: d3:6e:aa:51:29:bc:b0:0e:0c:4b:f3:53:a5:9a:09: 6a:8d:44:7f:89:57:f6:97:5d:71:4a:00:60:9f:37: 93:d5:59:8e:99:b1:85:40:45:80:be:75:1d:df:34: ae:58:ea:f1:ef:b3:5f:bc:62:42:b2:50:03:78:d7: d1:43:e0:e3:bb:d2:a4:69:44:b3:1e:42:88:6b:e2: 97:93:fc:f2:92:37:9b:8d:71:a2:6c:61:5b:4a:9b: d0:1c:1e:82:b0:f8:f7:e5:95:f3:56:e6:de:fc:1d: d0:fe:de:71:1b:a5:09:da:31:fd:cb:ed:73:61:7f: f6:78:ac:84:be:5e:d5:c3:b1:d6:30:cc:a3:3e:06: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E0:25:F2:A1:00:8D:0B:CE:A9:44:89:5B:B2:C9:C3:4E:05:BA:47 X509v3 Authority Key Identifier: keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/J-Al8qEAjQvOqUSJW7LJw04Fukc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.16.0-193.53.21.255 IPv6: 2a00:f620:1::-2a00:f620:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 28:88:d1:51:84:28:06:3b:e7:e3:fa:09:56:f7:fc:aa:4c:b0: 8d:80:64:2c:e4:62:48:ac:38:b3:a4:b0:d8:3f:f8:81:7a:a4: 4b:99:ab:69:65:f9:b7:c3:f1:5f:eb:14:99:ec:9b:ca:5e:f6: ad:06:01:f0:cd:86:3d:fd:35:71:80:81:19:51:c9:ef:0b:c4: 8b:74:be:41:f7:2d:3c:06:e3:7d:5f:ca:ac:17:db:48:e0:96: 5a:91:d8:5d:8b:6d:9c:79:74:4b:34:23:14:6c:a6:39:8d:77: b3:a7:bb:7c:01:d0:79:71:de:73:7c:31:5c:57:2c:5a:a4:d4: 25:cd:1e:fa:63:8a:14:3b:f4:f8:fb:ef:d7:71:47:f9:1a:76: 74:28:5d:96:ae:92:a1:3a:9b:c8:7d:25:9b:62:6b:6f:4b:d7: 1e:7c:53:82:c0:3c:bb:7c:2f:97:d3:95:79:4c:75:0b:ef:1d: 04:b0:17:34:46:ef:81:4c:88:dc:eb:b8:63:29:f1:d9:53:ca: 35:58:54:74:81:6b:8d:9a:a0:d4:5c:5d:b9:54:24:5d:7f:4e: 59:7b:2b:55:af:a1:d3:5e:46:6f:6e:0c:bd:09:aa:ef:7d:c9: 9e:87:4f:23:2b:fa:87:a6:73:bb:87:6b:67:e8:96:b8:a2:94: 52:93:98:89 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6yMzNKvDawJ5YAd3zAEWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDhiMjVjY2VhYzM4Yzk5MzcyYmY3MmIwMGM2YzhiNjQx OGU5MjMwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2UwMjVmMmExMDA4ZDBiY2VhOTQ0ODk1YmIyYzljMzRlMDViYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtELMVjW3G/WUMPZb8XnPB1YBe6Ql lJfaJsdJPwF8zuoYRrLiTS5A2oo98ypRg54EZ4nqA76ekjZmkgYVTfjLlHqhqCMI Cvv7XOXjuEZz6MVjBISY/NybTSdkDj7HIstiDS++cxMDSEys9aUyDmToP53XTu4M BGDTbqpRKbywDgxL81OlmglqjUR/iVf2l11xSgBgnzeT1VmOmbGFQEWAvnUd3zSu WOrx77NfvGJCslADeNfRQ+Dju9KkaUSzHkKIa+KXk/zykjebjXGibGFbSpvQHB6C sPj35ZXzVube/B3Q/t5xG6UJ2jH9y+1zYX/2eKyEvl7Vw7HWMMyjPgY0VQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCfgJfKhAI0LzqlEiVuyycNOBbpHMB8GA1UdIwQY MBaAFBzYslzOrDjJk3K/crAMbItkGOkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEt MTk2MzNmMDhlZDZhLzEvSi1BbDhxRUFqUXZPcVVTSlc3TEp3MDRGdWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEtMTk2MzNmMDhlZDZh LzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBATBNRAD BAHBNRQwGgQCAAIwFDASAwcAKgD2IAABAwcAKgD2IAACMA0GCSqGSIb3DQEBCwUA A4IBAQAoiNFRhCgGO+fj+glW9/yqTLCNgGQs5GJIrDizpLDYP/iBeqRLmatpZfm3 w/Ff6xSZ7JvKXvatBgHwzYY9/TVxgIEZUcnvC8SLdL5B9y08BuN9X8qsF9tI4JZa kdhdi22ceXRLNCMUbKY5jXezp7t8AdB5cd5zfDFcVyxapNQlzR76Y4oUO/T4++/X cUf5GnZ0KF2WrpKhOpvIfSWbYmtvS9cefFOCwDy7fC+X05V5THUL7x0EsBc0Ru+B TIjc67hjKfHZU8o1WFR0gWuNmqDUXF25VCRdf05ZeytVr6HTXkZvbgy9Carvfcme h08jK/qHpnO7h2tn6Ja4opRSk5iJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client