This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jM5XETy6HbMPiBgpmp_jnc2RKQo.roa File: jM5XETy6HbMPiBgpmp_jnc2RKQo.roa (raw, json) Hash identifier: xe+9tC5oSUg+0FmVWKdIx8uyl8eVmH5n2rzdeJX6xZI= Subject key identifier: 8C:CE:57:11:3C:BA:1D:B3:0F:88:18:29:9A:9F:E3:9D:CD:91:29:0A Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A33093DB350D36CE1A5878988BA889 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jM5XETy6HbMPiBgpmp_jnc2RKQo.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396426 IP address blocks: 176.111.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:93:db:35:0d:36:ce:1a:58:78:98:8b:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cce57113cba1db30f8818299a9fe39dcd91290a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:e5:2a:1d:f0:e8:dc:94:c0:32:1c:bd:62: e0:0b:fc:07:07:96:d3:0f:2c:de:b7:8f:04:20:ea: bd:13:49:2e:d6:88:5d:cf:cc:47:a5:99:76:b1:27: 68:d1:61:33:6b:70:81:bd:fe:ee:f0:00:5e:1b:5c: a9:c6:9a:87:ad:dd:9a:91:d8:d3:aa:c8:f4:5a:98: 35:2e:bc:51:3d:2b:1b:f2:41:74:6a:22:23:26:fb: a3:20:08:84:63:f2:ca:2d:ef:84:50:4b:4e:ba:4c: 7b:2f:76:fc:fb:10:14:b1:2a:bb:5d:da:68:19:fc: 81:04:7b:33:d7:d4:2f:de:8c:c8:2f:5a:a3:c9:03: 12:c6:cf:bd:42:8d:fe:c1:c1:6a:a0:3b:5b:4b:84: 5a:9e:a9:e7:d9:ae:b7:38:4a:8e:15:e8:e9:06:e8: d1:55:ca:e4:13:37:b6:17:36:8a:55:58:9e:c7:4d: 11:8c:51:83:a5:bd:95:48:2c:41:18:5a:81:70:dc: 69:17:a2:61:ed:1c:a8:3a:d9:9a:6f:f3:66:1d:62: 2b:fe:07:32:0c:b5:a2:b7:e7:5a:c3:92:22:00:eb: 9e:d6:ba:21:ac:33:42:10:7f:50:d8:32:1a:91:74: 07:2e:cf:b5:5e:97:dc:cd:59:b5:12:17:a5:3a:f3: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:57:11:3C:BA:1D:B3:0F:88:18:29:9A:9F:E3:9D:CD:91:29:0A X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jM5XETy6HbMPiBgpmp_jnc2RKQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.219.0/24 Signature Algorithm: sha256WithRSAEncryption a0:87:69:7b:67:32:17:0e:75:0c:60:18:93:15:f4:3a:ba:d6: ca:ec:f3:e1:c2:8b:8e:7a:c8:ec:62:41:c8:b4:d6:b5:9e:3f: 31:84:67:ed:bd:9c:bc:bf:c3:5d:df:88:91:11:a1:0c:ad:84: 3a:70:a7:4d:0b:ce:9a:6b:52:0f:ac:14:da:4a:b9:58:96:dd: 4f:03:59:88:9f:f2:8c:e8:1b:e0:bf:d1:60:5e:da:20:c8:f3: 7d:ef:1a:1e:bc:24:7a:7c:7d:8c:08:4b:41:4d:b4:8a:ba:8d: 03:d4:32:59:b5:27:6f:e0:b4:ca:54:c7:8d:bd:76:f0:07:2b: 1f:2f:c0:69:12:70:6e:ad:50:d8:97:c5:ae:5c:8d:01:23:ef: cb:55:eb:7f:9f:b6:3d:b8:e8:71:e9:8a:87:cd:9c:12:9d:cc: 52:c1:63:13:4d:e6:d2:43:3d:5a:a5:c1:2e:37:4e:3c:33:a1: ef:e9:23:d3:86:fe:18:ba:8f:9c:22:fb:6e:00:2d:76:d0:9e: 8a:83:4e:9c:40:5b:39:e3:41:80:f1:f0:56:aa:6a:39:a6:b7: f7:49:72:74:7f:e1:7c:be:12:aa:fc:7e:81:35:1c:28:d8:46: 47:19:3c:32:77:95:22:e2:6a:4c:db:fe:66:e3:f0:3d:7c:e9: fc:51:9f:f5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4ozCT2zUNNs4aWHiYi6iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2NlNTcxMTNjYmExZGIzMGY4ODE4Mjk5YTlmZTM5ZGNkOTEyOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3rlKh3w6NyUwDIcvWLgC/wHB5bT Dyzet48EIOq9E0ku1ohdz8xHpZl2sSdo0WEza3CBvf7u8ABeG1ypxpqHrd2akdjT qsj0Wpg1LrxRPSsb8kF0aiIjJvujIAiEY/LKLe+EUEtOukx7L3b8+xAUsSq7Xdpo GfyBBHsz19Qv3ozIL1qjyQMSxs+9Qo3+wcFqoDtbS4Ranqnn2a63OEqOFejpBujR VcrkEze2FzaKVViex00RjFGDpb2VSCxBGFqBcNxpF6Jh7RyoOtmab/NmHWIr/gcy DLWit+daw5IiAOue1rohrDNCEH9Q2DIakXQHLs+1XpfczVm1EhelOvNBswIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIzOVxE8uh2zD4gYKZqf453NkSkKMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL2pNNVhFVHk2SGJNUGlCZ3BtcF9qbmMyUktRby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACwb9sw DQYJKoZIhvcNAQELBQADggEBAKCHaXtnMhcOdQxgGJMV9Dq61srs8+HCi456yOxi Qci01rWePzGEZ+29nLy/w13fiJERoQythDpwp00LzpprUg+sFNpKuViW3U8DWYif 8ozoG+C/0WBe2iDI833vGh68JHp8fYwIS0FNtIq6jQPUMlm1J2/gtMpUx429dvAH Kx8vwGkScG6tUNiXxa5cjQEj78tV63+ftj246HHpiofNnBKdzFLBYxNN5tJDPVql wS43Tjwzoe/pI9OG/hi6j5wi+24ALXbQnoqDTpxAWznjQYDx8Faqajmmt/dJcnR/ 4Xy+Eqr8foE1HCjYRkcZPDJ3lSLiakzb/mbj8D186fxRn/U= -----END CERTIFICATE-----Generated at Sun Jan 25 07:21:24 2026 by rpki-client