This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa File: j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa (raw, json) Hash identifier: 1EQgGCqazRRAiTlQ7Ite/fQRLC5x0EAah5dgfCndlK4= Subject key identifier: 8F:A5:3C:51:E4:01:58:0F:DA:2D:F3:ED:EE:93:45:25:89:F8:42:B4 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D114FFF98818DC234C784B55398C7 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211985 IP address blocks: 157.25.143.0/24 maxlen: 24 157.25.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:11:4f:ff:98:81:8d:c2:34:c7:84:b5:53:98:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fa53c51e401580fda2df3edee93452589f842b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:19:4e:af:d4:1e:62:df:80:c8:a6:07:b3: 19:21:ee:a1:00:be:30:40:31:b2:02:33:13:1e:8f: 08:5e:08:a8:e8:28:19:85:4e:84:12:f4:3b:fe:d0: 3d:4f:1d:05:41:f7:dd:c2:65:21:38:76:9f:1f:51: 00:9e:65:ff:e9:77:9e:79:b8:19:b7:d3:e0:60:e3: 40:ef:28:2a:be:c3:cb:e6:e9:87:66:21:84:6a:2e: 14:a2:d4:91:26:63:97:67:57:53:bb:f3:5c:01:2f: b4:95:8d:b6:d6:2c:a7:0d:9a:dd:fb:ba:2c:9a:68: 65:6e:db:91:c5:53:c3:6d:8c:33:d2:74:d7:fe:a1: 18:a5:62:83:3a:db:53:e9:ca:ac:33:18:2c:7f:09: 06:a8:06:0e:94:8e:77:3e:99:4d:cf:d6:06:0a:b7: 86:54:62:0d:a3:37:83:3b:f9:f8:cb:c6:cf:5a:f5: 78:03:ae:c4:4c:78:24:d2:81:45:22:90:f2:6b:af: 88:89:11:a9:a0:64:79:95:a8:9a:cc:c9:ff:de:73: 0a:e8:4c:37:95:27:95:2a:5c:7a:b6:0a:59:af:5f: 9a:5c:e3:aa:7e:50:a8:57:48:e5:ff:00:be:4b:7e: 83:be:06:7f:b9:07:67:8e:4e:d9:7e:ad:98:a3:c5: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:3C:51:E4:01:58:0F:DA:2D:F3:ED:EE:93:45:25:89:F8:42:B4 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.143.0/24 157.25.172.0/24 Signature Algorithm: sha256WithRSAEncryption 21:25:00:93:cf:43:9a:ea:cb:0d:1c:40:03:fb:75:83:88:29: cf:6b:1a:04:fc:b2:2a:54:5a:ab:50:3e:11:a7:e2:9b:aa:0c: 12:e6:64:cf:5c:3e:bc:c2:be:ad:e6:a7:48:32:cd:bc:1e:4a: 13:b9:bc:c0:64:31:92:1f:75:d3:99:c6:94:30:6a:8c:3d:ee: 86:54:6e:11:ed:1a:87:cb:16:31:f3:03:be:e8:da:30:51:d6: 84:d6:da:9b:30:24:6a:04:05:9e:b0:15:d1:e8:c1:b3:07:61: 18:20:5e:a4:3e:64:31:f2:63:9d:38:02:97:84:86:db:19:0d: f2:0a:2e:ca:a1:46:b9:d9:04:bf:83:37:ce:ae:99:fd:83:69: 8e:68:6c:4a:83:e2:40:b2:48:59:ab:0b:6a:9d:b9:f5:aa:2a: a5:51:03:b9:41:28:f5:77:49:79:00:e5:ec:ee:ab:6d:e4:93: 5f:35:77:c5:a1:22:8b:0c:77:4b:2e:40:6e:03:28:b8:04:b2: 11:cd:80:1c:e8:f4:cb:c6:a3:64:d7:e1:8b:af:51:58:54:82: 8c:0d:86:7d:61:31:1e:da:8e:77:f6:8a:b9:02:59:b8:82:67: 40:8b:a3:16:97:f5:ef:bc:46:cd:73:74:09:74:2f:91:b3:c1: 95:47:5d:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XRFP/5iBjcI0x4S1U5jHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmE1M2M1MWU0MDE1ODBmZGEyZGYzZWRlZTkzNDUyNTg5Zjg0MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppYZTq/UHmLfgMimB7MZIe6hAL4w QDGyAjMTHo8IXgio6CgZhU6EEvQ7/tA9Tx0FQffdwmUhOHafH1EAnmX/6XeeebgZ t9PgYONA7ygqvsPL5umHZiGEai4UotSRJmOXZ1dTu/NcAS+0lY221iynDZrd+7os mmhlbtuRxVPDbYwz0nTX/qEYpWKDOttT6cqsMxgsfwkGqAYOlI53PplNz9YGCreG VGINozeDO/n4y8bPWvV4A67ETHgk0oFFIpDya6+IiRGpoGR5laiazMn/3nMK6Ew3 lSeVKlx6tgpZr1+aXOOqflCoV0jl/wC+S36DvgZ/uQdnjk7Zfq2Yo8Vt0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+lPFHkAVgP2i3z7e6TRSWJ+EK0MB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvajZVOFVlUUJXQV9hTGZQdDdwTkZKWW40UXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnRmPAwQA nRmsMA0GCSqGSIb3DQEBCwUAA4IBAQAhJQCTz0Oa6ssNHEAD+3WDiCnPaxoE/LIq VFqrUD4Rp+KbqgwS5mTPXD68wr6t5qdIMs28HkoTubzAZDGSH3XTmcaUMGqMPe6G VG4R7RqHyxYx8wO+6NowUdaE1tqbMCRqBAWesBXR6MGzB2EYIF6kPmQx8mOdOAKX hIbbGQ3yCi7KoUa52QS/gzfOrpn9g2mOaGxKg+JAskhZqwtqnbn1qiqlUQO5QSj1 d0l5AOXs7qtt5JNfNXfFoSKLDHdLLkBuAyi4BLIRzYAc6PTLxqNk1+GLr1FYVIKM DYZ9YTEe2o539oq5Alm4gmdAi6MWl/XvvEbNc3QJdC+Rs8GVR130 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:59 2026 by rpki-client