This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-_jBUSStDk0aYu-i4JokILu9APM.roa File: 1-_jBUSStDk0aYu-i4JokILu9APM.roa (raw, json) Hash identifier: UuEvnaI4Wiq48FAkmIgqxkJwA/mmYf56/7SqJr2VIG4= Subject key identifier: FB:F8:C1:51:24:AD:0E:4D:1A:62:EF:A2:E0:9A:24:20:BB:BD:00:F3 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C74AC4D2C047FC687C35F23725223A Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-_jBUSStDk0aYu-i4JokILu9APM.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204272 IP address blocks: 194.190.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:c4:d2:c0:47:fc:68:7c:35:f2:37:25:22:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf8c15124ad0e4d1a62efa2e09a2420bbbd00f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:4c:68:a5:ac:45:89:8c:35:c6:f5:57:e6: 84:14:28:a0:57:7f:b0:62:10:aa:01:e7:d3:0e:30: c4:54:06:66:05:3a:0d:8f:ac:66:77:b3:78:91:0b: 2f:eb:9f:e5:28:45:ab:c7:47:89:d1:d4:86:d3:54: 48:b0:ee:44:97:e0:05:3a:eb:cc:83:21:9c:a8:c4: 20:ce:a2:a1:c0:59:f8:ee:21:b8:56:1a:c8:15:95: cd:cc:72:90:c5:e4:53:49:0b:6d:46:2a:81:09:a5: be:78:9d:80:4a:22:9b:26:f9:24:37:00:6f:37:38: 53:8c:96:cb:3e:cc:49:9d:cc:90:74:80:de:6d:52: 0c:35:94:47:e4:79:b5:3a:fe:61:9e:7d:ef:3f:06: 69:17:d3:77:7d:b6:bd:26:41:b5:36:8a:1b:94:e8: 7c:57:bf:4f:23:e0:03:07:db:70:a1:5a:fc:54:a5: 68:61:78:dc:79:c2:ce:21:b5:62:c5:f5:ef:35:15: 4e:9a:c8:64:99:91:cc:8c:e8:f6:c6:e5:40:e3:92: 68:08:58:62:a5:71:c9:24:2f:7d:11:3a:81:e9:7f: ea:1d:29:ed:43:14:31:e8:2b:e2:7a:49:2a:7d:3d: 08:cf:c4:2b:46:a1:e2:dc:26:38:af:2e:7a:f5:e0: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:C1:51:24:AD:0E:4D:1A:62:EF:A2:E0:9A:24:20:BB:BD:00:F3 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-_jBUSStDk0aYu-i4JokILu9APM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.196.0/22 Signature Algorithm: sha256WithRSAEncryption 99:90:3b:e3:2f:a9:ae:cd:47:02:fa:0e:2b:a1:b5:8b:90:a0: 68:b9:96:70:b1:c9:82:a5:fe:ed:8c:48:68:22:be:4a:9d:8c: aa:f5:af:aa:0a:a2:a6:45:28:17:ec:b6:38:37:81:e9:f3:1d: e7:82:24:30:ef:a1:93:13:b5:30:5c:70:a3:23:61:68:d6:a6: 24:77:89:18:e1:ef:98:60:18:5e:88:83:70:1a:dd:a4:23:11: 2a:54:a4:2a:d1:dd:76:a0:15:fd:a1:b3:98:8e:55:3f:fc:7e: cf:ed:4f:9c:e7:85:a0:6c:76:31:0d:0e:2e:41:85:ee:07:19: e1:f1:f5:c1:87:09:f0:74:27:da:84:4a:1f:fc:20:7f:d9:d4: d4:42:3b:41:a1:a5:81:b1:83:ed:6a:af:da:31:cf:ca:4a:2f: 28:d9:9b:02:74:3e:6c:36:c6:53:58:5d:8e:96:8a:82:47:5b: 24:9d:48:b3:b3:bf:3e:97:b1:b5:fd:b3:2b:42:15:a3:49:7e: 97:fd:40:6f:a8:c0:0a:44:9a:49:b5:dd:09:a2:3a:dd:75:0b: f3:3a:f9:e1:29:d0:0e:6c:c7:c3:51:70:56:64:3e:d7:a0:f6: 2a:50:76:7a:aa:85:68:88:44:fe:f7:56:5f:3a:bb:07:07:27: a7:9a:ff:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x0rE0sBH/Gh8NfI3JSI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY4YzE1MTI0YWQwZTRkMWE2MmVmYTJlMDlhMjQyMGJiYmQwMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqRMaKWsRYmMNcb1V+aEFCigV3+w YhCqAefTDjDEVAZmBToNj6xmd7N4kQsv65/lKEWrx0eJ0dSG01RIsO5El+AFOuvM gyGcqMQgzqKhwFn47iG4VhrIFZXNzHKQxeRTSQttRiqBCaW+eJ2ASiKbJvkkNwBv NzhTjJbLPsxJncyQdIDebVIMNZRH5Hm1Ov5hnn3vPwZpF9N3fba9JkG1NooblOh8 V79PI+ADB9twoVr8VKVoYXjcecLOIbVixfXvNRVOmshkmZHMjOj2xuVA45JoCFhi pXHJJC99ETqB6X/qHSntQxQx6CviekkqfT0Iz8QrRqHi3CY4ry569eAAWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv4wVEkrQ5NGmLvouCaJCC7vQDzMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvMS1fakJVU1N0RGswYVl1LWk0Sm9rSUx1OUFQTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4 ZS8xL0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsK+xDAN BgkqhkiG9w0BAQsFAAOCAQEAmZA74y+prs1HAvoOK6G1i5CgaLmWcLHJgqX+7YxI aCK+Sp2MqvWvqgqipkUoF+y2ODeB6fMd54IkMO+hkxO1MFxwoyNhaNamJHeJGOHv mGAYXoiDcBrdpCMRKlSkKtHddqAV/aGzmI5VP/x+z+1PnOeFoGx2MQ0OLkGF7gcZ 4fH1wYcJ8HQn2oRKH/wgf9nU1EI7QaGlgbGD7Wqv2jHPykovKNmbAnQ+bDbGU1hd jpaKgkdbJJ1Is7O/Ppextf2zK0IVo0l+l/1Ab6jACkSaSbXdCaI63XUL8zr54SnQ DmzHw1FwVmQ+16D2KlB2eqqFaIhE/vdWXzq7Bwcnp5r/lg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:32 2026 by rpki-client