This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jA9oA6m02Tw56Kmi8SjWHgA0rl0.roa File: jA9oA6m02Tw56Kmi8SjWHgA0rl0.roa (raw, json) Hash identifier: HWT+u7jBwJRCiYMfOPHh9Kpsugk6cKu/0nmIdgXJ+xM= Subject key identifier: 8C:0F:68:03:A9:B4:D9:3C:39:E8:A9:A2:F1:28:D6:1E:00:34:AE:5D Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C72C34FCD1D32DF58A1E9FC65D76A7 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jA9oA6m02Tw56Kmi8SjWHgA0rl0.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5547 IP address blocks: 195.208.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:34:fc:d1:d3:2d:f5:8a:1e:9f:c6:5d:76:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c0f6803a9b4d93c39e8a9a2f128d61e0034ae5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:2e:20:eb:f1:89:4f:53:c6:7a:8b:59:c1: 5a:d5:78:03:6f:91:a9:7a:45:4b:fa:2b:2a:06:fc: ab:f4:0c:1b:60:39:d0:46:b8:02:23:d6:09:d2:40: 55:74:c7:38:28:5f:68:61:72:4f:7a:ad:05:2c:c5: f3:74:de:97:44:d3:8c:ed:1a:aa:4e:ca:2e:0d:b5: 06:73:fb:b4:49:fb:a3:fe:2c:58:d7:63:67:9c:b5: c5:32:8b:6a:37:f7:15:4a:3e:18:84:d3:28:9c:f6: 1c:87:75:63:1a:20:bb:af:3b:0e:df:5f:22:4e:f8: 78:38:42:21:2d:b1:a2:63:f2:8b:bb:3d:29:e2:71: 92:23:fe:17:bf:92:c0:dc:63:89:e3:6e:01:15:91: 50:b0:ca:d2:0d:3d:b3:ee:e5:93:e0:46:f3:0b:e8: 7b:91:35:02:4d:98:58:e9:f5:cf:2c:15:3b:40:e4: 75:34:a3:c5:9c:0c:71:93:0d:4d:b6:57:64:2e:be: 55:04:4f:3e:aa:41:be:e7:dc:11:1d:9e:f6:5d:fa: 10:6e:bb:b6:26:2f:f2:9e:27:3d:a4:6c:8f:92:4c: a3:16:c5:14:59:19:b2:dc:44:b0:66:b2:b7:4d:5f: 6b:da:9e:49:76:8c:96:8a:a5:2e:20:c6:a6:26:6e: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:68:03:A9:B4:D9:3C:39:E8:A9:A2:F1:28:D6:1E:00:34:AE:5D X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/jA9oA6m02Tw56Kmi8SjWHgA0rl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.208.8.0/21 Signature Algorithm: sha256WithRSAEncryption ba:83:b3:35:c4:fc:0e:e6:58:93:33:e2:54:37:cf:be:9b:f5: f4:57:bf:22:04:0a:d3:42:28:bb:ee:6f:9e:3b:e8:08:c5:42: 81:9c:8a:d2:f8:bb:94:0c:ff:1a:54:17:f0:73:4c:ea:9a:be: 43:10:e0:13:06:4b:02:c5:f6:f6:ad:25:1e:16:f7:99:f4:ce: 44:09:c4:6e:64:55:b3:77:b5:53:92:fe:ac:8e:c3:fc:68:6c: 53:eb:91:4b:70:fb:06:09:ec:d5:21:5d:f3:85:07:e8:f1:ac: 0a:89:87:d3:3a:f5:11:b5:44:76:2c:54:91:78:42:29:7f:38: a2:d0:0f:2f:00:a7:fc:91:97:8c:aa:a1:b4:81:b9:b3:93:c6: 28:e0:74:20:4e:d1:77:a8:c9:dc:c3:cd:7e:5f:3f:e9:b2:07: b6:cf:92:a8:d0:b4:df:12:7d:a3:af:71:1b:90:ba:3d:83:c0: 93:91:b5:1a:a9:18:66:0c:bc:bc:27:87:e0:92:be:a9:34:23: 72:ed:12:d1:15:7a:e7:f9:7f:cb:cd:15:26:8c:80:79:0a:53: b8:39:00:bb:71:a4:91:d2:64:57:0f:ad:fa:29:22:41:f7:a8: 64:63:03:ed:a9:a5:1c:0f:90:af:66:46:e1:83:64:26:52:91: db:ae:c4:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyw0/NHTLfWKHp/GXXanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzBmNjgwM2E5YjRkOTNjMzllOGE5YTJmMTI4ZDYxZTAwMzRhZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgYuIOvxiU9TxnqLWcFa1XgDb5Gp ekVL+isqBvyr9AwbYDnQRrgCI9YJ0kBVdMc4KF9oYXJPeq0FLMXzdN6XRNOM7Rqq TsouDbUGc/u0Sfuj/ixY12NnnLXFMotqN/cVSj4YhNMonPYch3VjGiC7rzsO318i Tvh4OEIhLbGiY/KLuz0p4nGSI/4Xv5LA3GOJ424BFZFQsMrSDT2z7uWT4EbzC+h7 kTUCTZhY6fXPLBU7QOR1NKPFnAxxkw1NtldkLr5VBE8+qkG+59wRHZ72XfoQbru2 Ji/ynic9pGyPkkyjFsUUWRmy3ESwZrK3TV9r2p5JdoyWiqUuIMamJm5S+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwPaAOptNk8OeipovEo1h4ANK5dMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvakE5b0E2bTAyVHc1NkttaThTaldIZ0EwcmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw9AIMA0G CSqGSIb3DQEBCwUAA4IBAQC6g7M1xPwO5liTM+JUN8++m/X0V78iBArTQii77m+e O+gIxUKBnIrS+LuUDP8aVBfwc0zqmr5DEOATBksCxfb2rSUeFveZ9M5ECcRuZFWz d7VTkv6sjsP8aGxT65FLcPsGCezVIV3zhQfo8awKiYfTOvURtUR2LFSReEIpfzii 0A8vAKf8kZeMqqG0gbmzk8Yo4HQgTtF3qMncw81+Xz/psge2z5Ko0LTfEn2jr3Eb kLo9g8CTkbUaqRhmDLy8J4fgkr6pNCNy7RLRFXrn+X/LzRUmjIB5ClO4OQC7caSR 0mRXD636KSJB96hkYwPtqaUcD5CvZkbhg2QmUpHbrsQM -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:25 2026 by rpki-client