This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jXiwWfz9U1p_UOkfAk9dQGeA-6I.roa File: jXiwWfz9U1p_UOkfAk9dQGeA-6I.roa (raw, json) Hash identifier: 9JpZMW11m+IeYFcZfvHpFeSV0yTgH52u7ynBlt3U9RM= Subject key identifier: 8D:78:B0:59:FC:FD:53:5A:7F:50:E9:1F:02:4F:5D:40:67:80:FB:A2 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78345D517FADE976B35759D40F9E963E Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jXiwWfz9U1p_UOkfAk9dQGeA-6I.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215664 IP address blocks: 194.36.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5d:51:7f:ad:e9:76:b3:57:59:d4:0f:9e:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d78b059fcfd535a7f50e91f024f5d406780fba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:58:b1:09:1d:db:d9:6c:48:93:7f:c8:fe:00: be:b9:a6:99:ba:8a:ec:97:8c:d7:c6:37:3a:83:5b: 84:52:a2:4b:c6:13:2c:56:b5:e9:20:84:1a:50:03: 44:42:a2:47:db:31:b4:47:2c:ec:94:15:5b:d2:2f: 98:0b:7b:ea:0b:f8:0b:0f:bf:91:69:bf:7d:e1:a0: 1d:3f:7d:3f:9e:92:11:e2:48:09:37:a3:6c:ca:ab: 83:17:46:ca:fc:49:84:6c:4c:75:73:ee:97:8c:9d: 87:57:f4:84:35:94:4e:9c:1d:9d:b3:4a:65:51:b2: ea:fc:81:ae:27:2a:08:5d:5a:9e:07:cc:4f:21:af: 0b:34:c1:10:1e:46:9c:ea:b2:a4:b6:9e:44:ae:d9: d0:40:6f:30:1d:ae:cc:6b:9f:ee:88:36:13:ed:d2: cb:16:7f:87:55:d8:d4:d8:5f:56:3e:8d:1a:24:17: 6e:b4:12:19:81:46:7b:e9:89:47:2d:9c:ff:c0:36: c7:eb:5a:8a:f3:f8:b9:93:15:13:d7:e8:c4:40:f9: 0d:f1:cd:92:ea:c1:28:18:91:a2:60:33:ae:98:d5: 1d:89:4c:3d:12:59:89:e7:51:ab:ef:9e:80:49:58: c2:ab:87:f5:00:bd:19:1d:aa:4a:62:1e:80:da:db: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:B0:59:FC:FD:53:5A:7F:50:E9:1F:02:4F:5D:40:67:80:FB:A2 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jXiwWfz9U1p_UOkfAk9dQGeA-6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:47:0a:a6:aa:7c:3c:80:89:74:8a:d5:6d:b9:63:4c:c0:8e: 56:04:ab:9b:81:18:aa:4b:8a:6e:24:9b:83:3a:9a:69:e0:0d: 2d:61:18:a5:4a:b9:8c:f9:99:c4:f2:4f:9b:ed:ec:44:e4:bb: 36:86:e1:e4:05:9b:42:89:31:ab:6f:1b:38:96:9e:7f:eb:c7: 8e:55:82:aa:a4:84:bf:41:b0:9a:b1:14:0d:67:a0:8f:1e:ec: ba:ca:d9:39:35:6a:fd:38:30:66:5b:93:30:41:f6:d6:5f:9a: e3:fe:9e:32:a6:fe:e5:c2:fe:6b:83:b0:3a:ca:3d:63:3a:f8: 8a:79:14:90:09:95:3c:cc:cb:95:ba:58:af:b0:08:e3:05:a0: e7:77:9d:55:d4:5c:a1:2c:bc:77:d2:61:92:f6:ce:4f:f4:8d: b6:87:77:f5:72:54:15:70:6e:87:0d:71:c4:ee:ab:14:a4:c7: 96:a4:15:33:da:d2:2b:04:a9:35:b1:34:61:07:f8:d3:6b:51: e0:27:7f:55:e0:d8:02:a7:0f:3a:3f:1f:cb:1a:6e:5f:e8:47: 0b:fd:c2:7b:e7:be:09:b2:49:71:e3:4d:d8:5b:bc:5c:11:2a: af:e6:1c:0a:fd:f7:d3:93:26:ab:4f:49:37:b1:14:c9:e2:97: 13:49:b3:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NF1Rf63pdrNXWdQPnpY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc4YjA1OWZjZmQ1MzVhN2Y1MGU5MWYwMjRmNWQ0MDY3ODBmYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91ixCR3b2WxIk3/I/gC+uaaZuors l4zXxjc6g1uEUqJLxhMsVrXpIIQaUANEQqJH2zG0RyzslBVb0i+YC3vqC/gLD7+R ab994aAdP30/npIR4kgJN6NsyquDF0bK/EmEbEx1c+6XjJ2HV/SENZROnB2ds0pl UbLq/IGuJyoIXVqeB8xPIa8LNMEQHkac6rKktp5ErtnQQG8wHa7Ma5/uiDYT7dLL Fn+HVdjU2F9WPo0aJBdutBIZgUZ76YlHLZz/wDbH61qK8/i5kxUT1+jEQPkN8c2S 6sEoGJGiYDOumNUdiUw9ElmJ51Gr756ASVjCq4f1AL0ZHapKYh6A2tsGsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI14sFn8/VNaf1DpHwJPXUBngPuiMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvalhpd1dmejlVMXBfVU9rZkFrOWRRR2VBLTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiQaMA0G CSqGSIb3DQEBCwUAA4IBAQBtRwqmqnw8gIl0itVtuWNMwI5WBKubgRiqS4puJJuD Oppp4A0tYRilSrmM+ZnE8k+b7exE5Ls2huHkBZtCiTGrbxs4lp5/68eOVYKqpIS/ QbCasRQNZ6CPHuy6ytk5NWr9ODBmW5MwQfbWX5rj/p4ypv7lwv5rg7A6yj1jOviK eRSQCZU8zMuVulivsAjjBaDnd51V1FyhLLx30mGS9s5P9I22h3f1clQVcG6HDXHE 7qsUpMeWpBUz2tIrBKk1sTRhB/jTa1HgJ39V4NgCpw86Px/LGm5f6EcL/cJ7574J sklx403YW7xcESqv5hwK/ffTkyarT0k3sRTJ4pcTSbMH -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:59 2026 by rpki-client