This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/jKv6ERIQttCpvoILmqEhuMIUCBU.roa File: jKv6ERIQttCpvoILmqEhuMIUCBU.roa (raw, json) Hash identifier: +ApSat9OPhyaIkri75fm7X1omMYQDzXidRYPTlzmNEE= Subject key identifier: 8C:AB:FA:11:12:10:B6:D0:A9:BE:82:0B:9A:A1:21:B8:C2:14:08:15 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383D7861BDE9E03041BB023F6D54AB Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/jKv6ERIQttCpvoILmqEhuMIUCBU.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 130.255.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3d:78:61:bd:e9:e0:30:41:bb:02:3f:6d:54:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cabfa111210b6d0a9be820b9aa121b8c2140815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:9b:0a:66:49:06:f7:8c:c4:91:d8:f6:63: 1f:14:5f:c2:0f:66:72:2a:33:14:3f:35:85:1d:d1: 47:e1:2b:a9:1c:03:43:c3:d9:a8:25:6c:e0:51:be: c3:e3:4c:ff:14:f5:d6:a2:45:cc:e5:f4:c0:b2:f1: ea:b4:7b:92:18:67:64:58:bd:17:9a:dd:3f:fd:90: 43:eb:8f:56:ba:85:80:06:cb:36:0c:f1:2c:fc:4c: e7:d8:21:33:1e:8b:af:f0:41:32:9e:2b:42:04:bc: 92:9d:a2:63:c0:2b:f2:42:47:9b:3b:52:a7:35:b1: 8d:31:2a:36:be:8a:40:52:fa:72:a1:43:c1:ae:b7: 72:dc:c1:e8:2a:25:d6:c4:13:35:87:30:0d:ca:88: b2:1e:c4:01:72:76:60:dd:97:f0:10:c2:4c:55:67: ff:6e:34:98:39:9e:e8:96:58:d7:65:a2:7a:d5:87: b6:ec:0c:2f:a7:3f:09:5d:df:31:4e:35:0a:3a:4d: 12:58:7b:55:72:93:fd:02:26:0d:44:ec:ab:15:50: 6f:6e:3f:8b:25:40:ca:1b:41:24:cb:dc:fa:f6:12: dd:df:cc:fc:48:44:56:a7:dc:c2:9e:e2:ce:6a:e9: 55:e6:b6:e8:54:9b:ce:c0:fc:c0:d9:b8:3e:32:72: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AB:FA:11:12:10:B6:D0:A9:BE:82:0B:9A:A1:21:B8:C2:14:08:15 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/jKv6ERIQttCpvoILmqEhuMIUCBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.168.0/24 Signature Algorithm: sha256WithRSAEncryption 37:21:b1:ea:f0:d8:ce:87:62:bc:b9:44:05:5f:a5:9f:1a:83: c9:74:3b:c0:e2:9e:56:09:66:a5:a0:1a:e0:43:c4:94:26:43: e1:df:2b:c7:a7:d9:b8:93:c5:c2:d9:db:87:01:18:17:d2:54: bb:0f:38:2e:7e:d7:01:70:ec:3a:84:4c:85:e9:63:a3:d9:7d: 54:92:ea:40:e4:45:e6:4b:f0:73:db:8a:34:79:3e:01:6b:e9: 6c:c7:5e:5c:4d:c9:b4:23:4d:b4:a7:4e:d5:e1:22:cf:e7:0a: 1e:98:89:38:9d:23:12:0b:aa:94:2f:f2:4b:24:72:7a:5e:ad: a7:f0:cf:28:87:82:25:59:b1:fc:bc:82:b0:1f:68:9b:fb:52: 93:3d:11:31:d2:e2:8e:e3:49:9c:dd:42:8e:43:1f:65:a4:cf: 51:a4:32:55:7f:a5:49:74:5a:41:a8:88:c9:d5:96:1e:d8:18: a9:89:e9:1e:15:57:7c:cd:2c:70:84:6a:73:ed:c2:d5:1c:7a: df:03:6f:4f:5e:ad:ee:b9:f1:14:3a:3c:84:11:88:55:13:7c: 9d:48:20:e3:ec:60:5e:17:85:7d:ac:ed:d5:df:f8:ad:77:24: 6e:ac:b0:2c:2b:a8:99:f9:82:5e:f9:00:39:e6:65:b9:ee:74: 36:d8:86:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OD14Yb3p4DBBuwI/bVSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2FiZmExMTEyMTBiNmQwYTliZTgyMGI5YWExMjFiOGMyMTQwODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyibCmZJBveMxJHY9mMfFF/CD2Zy KjMUPzWFHdFH4SupHANDw9moJWzgUb7D40z/FPXWokXM5fTAsvHqtHuSGGdkWL0X mt0//ZBD649WuoWABss2DPEs/Ezn2CEzHouv8EEynitCBLySnaJjwCvyQkebO1Kn NbGNMSo2vopAUvpyoUPBrrdy3MHoKiXWxBM1hzANyoiyHsQBcnZg3ZfwEMJMVWf/ bjSYOZ7olljXZaJ61Ye27Awvpz8JXd8xTjUKOk0SWHtVcpP9AiYNROyrFVBvbj+L JUDKG0Eky9z69hLd38z8SERWp9zCnuLOaulV5rboVJvOwPzA2bg+MnLgCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyr+hESELbQqb6CC5qhIbjCFAgVMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvakt2NkVSSVF0dENwdm9JTG1xRWh1TUlVQ0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv+oMA0G CSqGSIb3DQEBCwUAA4IBAQA3IbHq8NjOh2K8uUQFX6WfGoPJdDvA4p5WCWaloBrg Q8SUJkPh3yvHp9m4k8XC2duHARgX0lS7DzguftcBcOw6hEyF6WOj2X1UkupA5EXm S/Bz24o0eT4Ba+lsx15cTcm0I020p07V4SLP5woemIk4nSMSC6qUL/JLJHJ6Xq2n 8M8oh4IlWbH8vIKwH2ib+1KTPREx0uKO40mc3UKOQx9lpM9RpDJVf6VJdFpBqIjJ 1ZYe2BipiekeFVd8zSxwhGpz7cLVHHrfA29PXq3uufEUOjyEEYhVE3ydSCDj7GBe F4V9rO3V3/itdyRurLAsK6iZ+YJe+QA55mW57nQ22IYz -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:39 2026 by rpki-client