This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa File: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (raw, json) Hash identifier: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw= Subject key identifier: 24:0E:83:1B:8E:DA:29:CA:F6:2F:B4:A4:6B:B7:50:5B:68:73:D0:E4 Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Certificate serial: 019B7834F855D2B6F14B74CA7DA7583794AC Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203596 IP address blocks: 193.108.216.0/24 maxlen: 24 193.109.0.0/24 maxlen: 24 193.109.1.0/24 maxlen: 24 193.109.2.0/24 maxlen: 24 193.109.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f8:55:d2:b6:f1:4b:74:ca:7d:a7:58:37:94:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=240e831b8eda29caf62fb4a46bb7505b6873d0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:69:ca:01:79:0e:ed:40:11:bd:06:73:5c: 43:ab:e9:c3:f6:d7:0f:40:f6:fb:de:43:35:82:f6: a3:02:c5:4e:8f:90:fa:b4:5d:5c:a4:c5:ad:14:a6: e2:30:21:aa:15:ba:5d:ab:15:01:a8:9a:91:69:8f: 9b:3b:7b:ed:1a:b1:42:b5:1f:33:49:3a:18:76:30: 1a:40:5a:f4:22:fa:9c:32:9e:53:25:e3:6b:72:5c: c8:06:b9:fb:f6:7d:7b:7a:82:6c:77:c4:f6:7a:8c: 8f:96:cb:cd:23:4d:79:f2:4f:f1:d4:a3:54:5c:47: 7e:ab:22:d8:45:bb:6d:44:87:ed:e5:d9:99:4c:b9: 08:ba:e2:e8:0e:63:aa:f5:64:23:91:b1:f3:9c:7b: bc:0d:96:aa:0f:0d:a0:20:5e:60:87:d4:68:15:2b: 27:06:cc:76:c0:20:7c:5d:74:3a:ec:00:ca:b8:72: 27:dc:90:70:38:26:29:82:5e:d0:8d:38:af:1e:6c: 2b:45:90:2f:b5:f7:4d:68:11:a7:31:10:28:d1:5e: 34:28:96:f1:b1:c2:cd:93:9c:b3:6a:7b:08:f5:44: 45:ce:1b:a8:e4:ab:47:29:db:17:61:7a:d4:51:7b: e2:bc:02:7b:43:a8:c0:e9:6c:fe:31:fb:c5:dd:fb: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0E:83:1B:8E:DA:29:CA:F6:2F:B4:A4:6B:B7:50:5B:68:73:D0:E4 X509v3 Authority Key Identifier: keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.216.0/24 193.109.0.0/22 Signature Algorithm: sha256WithRSAEncryption 44:df:fc:87:8b:9b:82:7b:81:37:31:b1:80:7d:e9:f1:46:1c: 66:cc:3b:46:29:55:8c:00:b8:38:8e:90:10:f9:b0:02:40:24: 1e:a5:6f:93:c2:2b:1f:46:99:d4:35:30:53:fb:f0:66:1e:29: f5:4d:55:5f:d1:f4:bb:f8:46:8a:29:71:4d:ed:d8:b2:27:8c: 54:73:32:6c:be:ba:93:60:84:49:ce:57:76:b2:c4:2f:2f:5c: 69:04:fe:f7:68:9c:97:cf:37:7e:26:93:e9:91:58:63:90:de: 11:73:73:19:7c:ae:33:a7:a9:85:60:d8:dd:e1:62:a5:54:6d: 3c:0c:9f:02:c7:ee:97:a5:e1:7c:dc:f9:1b:58:98:b6:87:16: db:a2:53:4a:bb:9e:5b:d5:02:4f:83:2c:7a:82:e7:78:7e:22: 33:84:ee:89:4a:fb:6e:a9:b2:1c:68:ca:23:34:66:8b:af:ed: 39:41:84:03:30:e9:48:cd:19:33:46:0e:72:be:84:18:2b:42: 19:7d:f2:23:f8:e9:c2:22:63:7b:d8:a3:c0:08:40:09:a4:1e: 50:6c:16:82:4b:41:76:4e:d7:af:0d:f8:89:20:d7:15:d5:03: 73:4b:17:7b:ba:68:fd:e6:01:77:1f:a2:0e:9f:f0:03:c2:66: 98:ee:c9:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NPhV0rbxS3TKfadYN5SsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2 ZjcxOGYwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDBlODMxYjhlZGEyOWNhZjYyZmI0YTQ2YmI3NTA1YjY4NzNkMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR5pygF5Du1AEb0Gc1xDq+nD9tcP QPb73kM1gvajAsVOj5D6tF1cpMWtFKbiMCGqFbpdqxUBqJqRaY+bO3vtGrFCtR8z SToYdjAaQFr0IvqcMp5TJeNrclzIBrn79n17eoJsd8T2eoyPlsvNI0158k/x1KNU XEd+qyLYRbttRIft5dmZTLkIuuLoDmOq9WQjkbHznHu8DZaqDw2gIF5gh9RoFSsn Bsx2wCB8XXQ67ADKuHIn3JBwOCYpgl7QjTivHmwrRZAvtfdNaBGnMRAo0V40KJbx scLNk5yzansI9URFzhuo5KtHKdsXYXrUUXvivAJ7Q6jA6Wz+MfvF3fuxYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQOgxuO2inK9i+0pGu3UFtoc9DkMB8GA1UdIwQY MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt MTdlMzE1ODk1NGRhLzEvSkE2REc0N2FLY3IyTDdTa2E3ZFFXMmh6ME9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWzYAwQC wW0AMA0GCSqGSIb3DQEBCwUAA4IBAQBE3/yHi5uCe4E3MbGAfenxRhxmzDtGKVWM ALg4jpAQ+bACQCQepW+TwisfRpnUNTBT+/BmHin1TVVf0fS7+EaKKXFN7diyJ4xU czJsvrqTYIRJzld2ssQvL1xpBP73aJyXzzd+JpPpkVhjkN4Rc3MZfK4zp6mFYNjd 4WKlVG08DJ8Cx+6XpeF83PkbWJi2hxbbolNKu55b1QJPgyx6gud4fiIzhO6JSvtu qbIcaMojNGaLr+05QYQDMOlIzRkzRg5yvoQYK0IZffIj+OnCImN72KPACEAJpB5Q bBaCS0F2TtevDfiJINcV1QNzSxd7umj95gF3H6IOn/ADwmaY7snn -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:51 2026 by rpki-client