This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/jgOsHUWcbSDiI_fNSViiorGknbI.roa File: jgOsHUWcbSDiI_fNSViiorGknbI.roa (raw, json) Hash identifier: ExxFYpwqdFjHSrJxztsKKOJte37WACbeefcX87tcqNs= Subject key identifier: 8E:03:AC:1D:45:9C:6D:20:E2:23:F7:CD:49:58:A2:A2:B1:A4:9D:B2 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019B7DCA092405B9533C50346D3764E7B602 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/jgOsHUWcbSDiI_fNSViiorGknbI.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47913 IP address blocks: 5.252.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:09:24:05:b9:53:3c:50:34:6d:37:64:e7:b6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e03ac1d459c6d20e223f7cd4958a2a2b1a49db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:2c:a6:82:5d:0c:8c:22:33:18:0d:99:d8: b8:4b:8d:cb:aa:e0:23:3f:f8:23:c1:dc:90:f0:47: 73:2a:d9:d9:b3:12:90:97:f8:b9:27:2b:79:f4:7a: c6:1f:43:87:7d:df:5b:b2:f6:d1:80:dc:c4:69:fa: 9a:65:30:6b:b3:50:3f:93:12:3f:58:b7:2f:c9:54: 1b:5d:fd:4d:f2:d8:f2:64:76:75:7b:38:8f:b1:bc: 09:68:b5:7e:f4:28:4a:bb:70:56:15:c2:1a:31:ce: a2:1b:56:0e:9f:bb:00:c0:f6:d8:de:24:ab:e3:cc: 78:aa:13:c7:a5:b4:7e:da:a9:c4:a9:c4:17:1b:41: 97:e2:38:8e:1d:be:46:ef:55:d2:1e:d3:34:fe:f8: df:ec:29:93:e7:76:2c:1f:a6:ff:eb:55:cd:41:e8: 48:30:b6:69:7b:6a:c5:ff:0e:fd:86:4d:fc:ee:ed: 63:b4:1a:ab:ca:2e:a7:9b:58:bd:d5:63:1d:1a:43: e6:11:dc:dd:b6:a6:d8:01:cc:78:9c:44:5a:aa:19: 92:1c:c8:71:8f:7f:8d:e4:0b:36:92:e9:30:36:2b: 89:5a:62:e3:54:85:7f:f6:0c:e1:de:4d:5e:37:aa: 21:e4:e1:82:1d:ec:c8:ec:92:31:6a:91:8b:4f:9d: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:03:AC:1D:45:9C:6D:20:E2:23:F7:CD:49:58:A2:A2:B1:A4:9D:B2 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/jgOsHUWcbSDiI_fNSViiorGknbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.28.0/22 Signature Algorithm: sha256WithRSAEncryption 72:d0:c4:5a:56:f2:7a:37:71:a2:8b:fa:97:75:12:7a:07:33: 83:60:e3:11:81:7d:bf:10:b4:39:93:57:3c:b8:72:dc:ba:c9: 65:6b:12:a8:f0:b1:0c:d0:de:ed:46:45:fd:ca:b0:99:b1:0a: 9d:6d:46:58:37:bf:11:ac:59:93:0e:4a:18:5a:5f:f7:20:62: 51:25:d2:41:48:28:45:67:ee:9c:b8:e9:23:34:e6:9d:b5:64: e3:c8:3c:d7:ed:7e:0e:2a:65:9a:6a:30:75:df:fb:2d:db:cc: 4a:48:65:d0:09:ac:23:70:7d:98:f2:ae:c7:ff:5f:f2:2f:cf: ba:7e:ba:5e:62:ef:52:2b:b6:de:fc:ff:3b:cd:90:b5:62:f8: a8:d8:2a:5b:c9:39:c5:7b:7a:29:10:5f:1c:96:f1:53:0f:dc: c0:ad:c6:ea:66:69:e9:6a:97:d0:6c:8a:e4:e9:57:72:50:84: f1:28:8a:af:d5:53:dc:9a:06:42:27:ad:64:6a:bd:db:cd:fa: f2:71:4b:30:19:01:1e:d8:bf:ae:17:70:2a:03:be:9f:36:3e: 07:0b:9c:40:fa:9e:71:32:ee:a0:75:9f:e4:b5:51:ab:d6:46: 13:45:dc:dc:77:70:4d:2f:2d:1a:7f:79:c0:d2:25:27:f6:ce: a7:f5:88:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygkkBblTPFA0bTdk57YCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTAzYWMxZDQ1OWM2ZDIwZTIyM2Y3Y2Q0OTU4YTJhMmIxYTQ5ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsspoJdDIwiMxgNmdi4S43LquAj P/gjwdyQ8EdzKtnZsxKQl/i5Jyt59HrGH0OHfd9bsvbRgNzEafqaZTBrs1A/kxI/ WLcvyVQbXf1N8tjyZHZ1eziPsbwJaLV+9ChKu3BWFcIaMc6iG1YOn7sAwPbY3iSr 48x4qhPHpbR+2qnEqcQXG0GX4jiOHb5G71XSHtM0/vjf7CmT53YsH6b/61XNQehI MLZpe2rF/w79hk387u1jtBqryi6nm1i91WMdGkPmEdzdtqbYAcx4nERaqhmSHMhx j3+N5As2kukwNiuJWmLjVIV/9gzh3k1eN6oh5OGCHezI7JIxapGLT52IPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4DrB1FnG0g4iP3zUlYoqKxpJ2yMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvamdPc0hVV2NiU0RpSV9mTlNWaWlvckdrbmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfwcMA0G CSqGSIb3DQEBCwUAA4IBAQBy0MRaVvJ6N3Gii/qXdRJ6BzODYOMRgX2/ELQ5k1c8 uHLcusllaxKo8LEM0N7tRkX9yrCZsQqdbUZYN78RrFmTDkoYWl/3IGJRJdJBSChF Z+6cuOkjNOadtWTjyDzX7X4OKmWaajB13/st28xKSGXQCawjcH2Y8q7H/1/yL8+6 frpeYu9SK7be/P87zZC1Yvio2CpbyTnFe3opEF8clvFTD9zArcbqZmnpapfQbIrk 6VdyUITxKIqv1VPcmgZCJ61kar3bzfrycUswGQEe2L+uF3AqA76fNj4HC5xA+p5x Mu6gdZ/ktVGr1kYTRdzcd3BNLy0af3nA0iUn9s6n9YiZ -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:10 2026 by rpki-client