This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JIvaB4pPK7-vTRt_RaJiIkV9riI.roa File: JIvaB4pPK7-vTRt_RaJiIkV9riI.roa (raw, json) Hash identifier: Y5BOujLPF1quHrZ/OLTsoYWldeT+xVJ89TqX2QvhWTU= Subject key identifier: 24:8B:DA:07:8A:4F:2B:BF:AF:4D:1B:7F:45:A2:62:22:45:7D:AE:22 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C7381E5D4AEB9DE7E4F7DB8949EB29 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JIvaB4pPK7-vTRt_RaJiIkV9riI.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49063 IP address blocks: 194.226.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:38:1e:5d:4a:eb:9d:e7:e4:f7:db:89:49:eb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=248bda078a4f2bbfaf4d1b7f45a26222457dae22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:c9:33:fe:67:10:9c:8e:e1:a4:83:ed:b9: e0:42:dd:51:a2:f1:80:c3:f0:4a:a0:2a:ea:9b:a8: 0c:be:5b:98:01:87:d5:d9:6e:d4:98:8c:5f:63:dd: 37:8b:f9:3d:4c:ed:07:32:15:64:6a:57:56:b3:b7: 25:bd:7b:65:82:43:df:77:58:e8:27:fd:5d:56:56: 4e:45:88:8d:6f:6d:b0:e5:39:b1:cc:61:70:26:b8: d6:cb:46:21:6f:3f:be:83:cc:1c:52:11:2e:b2:ed: 2b:5a:4b:b5:4b:88:f5:f5:60:f7:10:05:55:7c:4e: 6f:1c:f0:37:6f:63:c3:d4:a1:cf:bb:ee:f1:72:b5: c6:26:1f:85:30:42:a5:a4:c0:6b:a9:fd:46:cf:a2: 69:dd:7a:45:c1:23:f6:f2:be:f3:91:2e:df:16:b2: 71:05:a9:7a:b6:ec:72:0e:9c:21:58:84:1f:34:41: 67:88:4f:50:e4:df:1a:d5:48:da:f9:c6:5c:52:a7: a7:c1:3b:a9:9e:af:61:e5:0b:41:e0:01:c8:0e:68: 80:aa:aa:ae:3f:f6:55:bd:19:a4:fb:01:f6:8f:86: 3e:95:b6:09:7a:3b:fb:77:ad:74:bb:1b:d0:90:91: e5:ff:71:db:85:7b:ab:6b:d1:c5:66:dc:76:b5:dc: d0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8B:DA:07:8A:4F:2B:BF:AF:4D:1B:7F:45:A2:62:22:45:7D:AE:22 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JIvaB4pPK7-vTRt_RaJiIkV9riI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.226.177.0/24 Signature Algorithm: sha256WithRSAEncryption 16:bf:1d:11:8c:77:13:df:4f:9f:4d:49:0c:39:86:6d:44:60: 8a:60:a1:c1:f0:de:e1:e1:a7:1c:5e:3d:c3:ec:1b:c1:f7:be: 31:1b:aa:87:33:07:1c:82:68:2c:f2:bc:18:fa:2b:a1:46:f7: 33:37:91:92:b0:c9:6a:24:d2:0e:75:f6:b4:a1:ac:75:b4:02: bd:ce:61:a0:1f:74:f1:e8:8f:b2:79:04:1e:cb:62:c1:94:6e: cb:63:6a:4a:86:73:1b:de:a5:4d:e4:07:c7:6c:51:6d:43:aa: 25:0c:be:90:05:e1:5d:09:c3:58:36:69:4d:8e:fc:ff:0a:7c: f3:5d:e2:0d:84:79:45:56:cb:09:e1:91:aa:c3:71:6d:f0:be: 7f:52:9c:87:77:a5:12:6a:61:28:a6:5a:dc:83:c0:b3:06:14: 3c:02:33:40:d0:5e:ca:7f:5d:8c:eb:13:52:a9:bd:dc:5a:43: 6d:df:38:28:5c:50:48:f3:b9:3e:b5:af:d6:ad:3d:14:d8:71: 49:45:52:2f:f0:f1:48:ec:cc:4c:1f:2d:ee:ee:95:19:c9:58: 5f:59:ea:84:71:50:4c:a5:d8:8d:a3:e2:83:ff:9f:5b:e1:00: 10:b8:54:c3:0d:74:0c:23:e8:b9:a8:c2:b9:9e:30:ac:9a:3e: c3:01:54:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzgeXUrrnefk99uJSespMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDhiZGEwNzhhNGYyYmJmYWY0ZDFiN2Y0NWEyNjIyMjQ1N2RhZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpzJM/5nEJyO4aSD7bngQt1RovGA w/BKoCrqm6gMvluYAYfV2W7UmIxfY903i/k9TO0HMhVkaldWs7clvXtlgkPfd1jo J/1dVlZORYiNb22w5TmxzGFwJrjWy0Yhbz++g8wcUhEusu0rWku1S4j19WD3EAVV fE5vHPA3b2PD1KHPu+7xcrXGJh+FMEKlpMBrqf1Gz6Jp3XpFwSP28r7zkS7fFrJx Bal6tuxyDpwhWIQfNEFniE9Q5N8a1Uja+cZcUqenwTupnq9h5QtB4AHIDmiAqqqu P/ZVvRmk+wH2j4Y+lbYJejv7d610uxvQkJHl/3HbhXura9HFZtx2tdzQlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSL2geKTyu/r00bf0WiYiJFfa4iMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvSkl2YUI0cFBLNy12VFJ0X1JhSmlJa1Y5cmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuKxMA0G CSqGSIb3DQEBCwUAA4IBAQAWvx0RjHcT30+fTUkMOYZtRGCKYKHB8N7h4accXj3D 7BvB974xG6qHMwccgmgs8rwY+iuhRvczN5GSsMlqJNIOdfa0oax1tAK9zmGgH3Tx 6I+yeQQey2LBlG7LY2pKhnMb3qVN5AfHbFFtQ6olDL6QBeFdCcNYNmlNjvz/Cnzz XeINhHlFVssJ4ZGqw3Ft8L5/UpyHd6USamEoplrcg8CzBhQ8AjNA0F7Kf12M6xNS qb3cWkNt3zgoXFBI87k+ta/WrT0U2HFJRVIv8PFI7MxMHy3u7pUZyVhfWeqEcVBM pdiNo+KD/59b4QAQuFTDDXQMI+i5qMK5njCsmj7DAVTj -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:27 2026 by rpki-client