This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/jsXKldUP6xb6KQhmvufaY8HlIYU.roa File: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (raw, json) Hash identifier: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q= Subject key identifier: 8E:C5:CA:95:D5:0F:EB:16:FA:29:08:66:BE:E7:DA:63:C1:E5:21:85 Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f Certificate serial: 019B7C11A11EB21713EC5DE3A11055BE8747 Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/jsXKldUP6xb6KQhmvufaY8HlIYU.roa Signing time: Fri 02 Jan 2026 00:18:08 +0000 ROA not before: Fri 02 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210083 IP address blocks: 203.12.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a1:1e:b2:17:13:ec:5d:e3:a1:10:55:be:87:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f Validity Not Before: Jan 2 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec5ca95d50feb16fa290866bee7da63c1e52185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:34:e8:2b:6a:a1:2f:b9:92:9f:0c:c3:72: 12:1f:42:e7:49:e7:d6:e3:b4:00:a3:69:43:83:e3: 8d:48:a5:79:51:0c:80:5d:98:e1:38:e1:47:4a:8e: fd:37:df:a2:7f:3c:4d:55:df:8f:3e:8e:26:55:2a: 6f:78:5a:a6:27:8e:c9:b8:c7:04:f0:da:f0:83:b3: 56:13:90:f9:e3:47:61:f7:95:f4:da:f9:7f:18:03: 2b:4c:2b:fa:8e:a9:6b:ee:4a:30:fc:57:85:40:33: 2d:0d:14:d6:f9:ac:2d:33:70:6e:ac:0a:d7:67:02: c6:b7:0c:31:72:a8:65:eb:3d:f5:86:b9:69:a2:d5: 2b:d0:30:fb:5c:68:3e:d6:d1:e1:8b:a9:7a:e7:6c: 1c:d4:a1:64:e6:c6:21:5f:10:30:bc:60:78:7d:50: fd:ed:89:a0:1b:05:ff:c6:6e:bb:73:32:fe:41:d4: 53:95:e5:3d:e3:cc:f6:7c:6a:d5:aa:d6:38:a4:a0: 89:f4:6a:fb:b1:2f:77:c3:e0:ff:6a:39:e6:e2:51: 2f:64:4c:b9:2c:7a:24:70:7f:96:1e:c9:07:41:76: 50:e4:12:56:b7:71:7a:c3:0f:e3:86:b2:ed:19:62: 4a:47:27:60:4c:6e:f5:2d:1d:1a:47:26:da:a8:43: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:CA:95:D5:0F:EB:16:FA:29:08:66:BE:E7:DA:63:C1:E5:21:85 X509v3 Authority Key Identifier: keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/jsXKldUP6xb6KQhmvufaY8HlIYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.12.31.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5f:22:3b:e3:b5:c6:d4:ac:28:b0:96:2b:f2:94:7a:c4:3a: d1:3f:81:0f:d4:4a:b1:f9:29:15:c8:cd:64:1b:27:d2:1c:80: 7e:0b:ab:d4:6e:f0:46:c9:f6:d6:00:3b:fe:18:83:60:46:97: 1f:14:dc:ea:f6:19:8c:b8:4e:ce:f4:c3:b4:fa:c7:61:58:38: 16:6e:fd:a1:2a:b1:96:db:48:e6:d4:d1:33:a6:2a:eb:a5:c5: a7:8c:cd:b7:99:d8:6a:cb:a7:1a:c5:f1:e3:1b:b4:c1:4c:e3: d5:9f:78:65:e2:ea:3b:f9:10:d6:30:bb:2e:cc:ee:b3:7b:4f: bb:04:1c:44:d3:f8:f2:3f:f7:63:10:96:20:7e:81:b1:8b:66: 04:01:fd:47:20:46:a8:14:cb:a5:c0:42:d7:49:42:72:b9:7d: c1:a5:00:da:96:ef:84:c6:9b:49:cb:00:a7:71:88:97:2a:15: ba:dd:d6:fb:7e:a6:a5:83:7c:ec:74:5d:f2:57:0b:cf:30:2b: f4:a4:1d:62:18:a3:aa:eb:46:db:19:a6:ca:e7:fc:f2:f7:bf: b4:12:79:6b:1a:7b:83:b9:36:83:de:82:7c:7b:85:2c:1f:cb: 59:43:00:3f:a0:36:be:8e:0f:3f:f4:1c:66:7e:b9:73:7e:10: 4e:9e:36:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EaEeshcT7F3joRBVvodHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZjc2YTA2ZWFhMmEwM2M3OTkxMzQ3NTA5Yjg2MDhmNGE3 MTA3MWYwHhcNMjYwMTAyMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWM1Y2E5NWQ1MGZlYjE2ZmEyOTA4NjZiZWU3ZGE2M2MxZTUyMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMc06CtqoS+5kp8Mw3ISH0LnSefW 47QAo2lDg+ONSKV5UQyAXZjhOOFHSo79N9+ifzxNVd+PPo4mVSpveFqmJ47JuMcE 8Nrwg7NWE5D540dh95X02vl/GAMrTCv6jqlr7kow/FeFQDMtDRTW+awtM3BurArX ZwLGtwwxcqhl6z31hrlpotUr0DD7XGg+1tHhi6l652wc1KFk5sYhXxAwvGB4fVD9 7YmgGwX/xm67czL+QdRTleU948z2fGrVqtY4pKCJ9Gr7sS93w+D/ajnm4lEvZEy5 LHokcH+WHskHQXZQ5BJWt3F6ww/jhrLtGWJKRydgTG71LR0aRybaqEN5FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7FypXVD+sW+ikIZr7n2mPB5SGFMB8GA1UdIwQY MBaAFL/3agbqoqA8eZE0dQm4YI9KcQcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjIt OTQ5NjYyYjI3MWIyLzEvanNYS2xkVVA2eGI2S1FobXZ1ZmFZOEhsSVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjItOTQ5NjYyYjI3MWIy LzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAywwfMA0G CSqGSIb3DQEBCwUAA4IBAQAnXyI747XG1KwosJYr8pR6xDrRP4EP1Eqx+SkVyM1k GyfSHIB+C6vUbvBGyfbWADv+GINgRpcfFNzq9hmMuE7O9MO0+sdhWDgWbv2hKrGW 20jm1NEzpirrpcWnjM23mdhqy6caxfHjG7TBTOPVn3hl4uo7+RDWMLsuzO6ze0+7 BBxE0/jyP/djEJYgfoGxi2YEAf1HIEaoFMulwELXSUJyuX3BpQDalu+ExptJywCn cYiXKhW63db7fqalg3zsdF3yVwvPMCv0pB1iGKOq60bbGabK5/zy97+0EnlrGnuD uTaD3oJ8e4UsH8tZQwA/oDa+jg8/9BxmfrlzfhBOnjYI -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:52 2026 by rpki-client