This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JtUqUEIEdpnBAK7DdY1mydDM_n8.roa File: JtUqUEIEdpnBAK7DdY1mydDM_n8.roa (raw, json) Hash identifier: G69x+DmoWckiQvzOSXXL9EVDmRr9pVIvNAjY+tOwhoo= Subject key identifier: 26:D5:2A:50:42:04:76:99:C1:00:AE:C3:75:8D:66:C9:D0:CC:FE:7F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC75A069FCA5D3DAFE72CA09D25FF6 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JtUqUEIEdpnBAK7DdY1mydDM_n8.roa Signing time: Thu 01 Jan 2026 14:18:18 +0000 ROA not before: Thu 01 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 150.241.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:75:a0:69:fc:a5:d3:da:fe:72:ca:09:d2:5f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26d52a5042047699c100aec3758d66c9d0ccfe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:03:fe:6d:f8:94:29:af:e9:4b:94:27:0a: 2f:ca:cc:45:d0:dc:18:a2:e4:7f:69:09:50:c0:a3: 33:15:b3:43:92:7c:98:bf:d2:94:8b:9c:5a:fb:f2: db:a6:2c:24:33:7a:36:45:d2:0d:b3:a1:ef:07:e6: 3f:94:9a:bf:bb:63:d5:d0:48:34:86:e9:36:43:17: 67:fd:d8:f9:5a:8a:ae:6e:de:1d:c9:59:88:06:1b: 25:00:a1:f0:e0:f4:62:09:ba:f5:68:ea:76:9e:89: 9b:a2:78:3f:6d:e8:66:37:2f:09:99:37:36:65:3b: b4:29:65:ea:25:d9:10:84:88:95:df:d2:43:d9:d8: 76:ca:bc:36:25:6e:da:35:1c:9d:5e:f6:31:dc:bc: 38:04:8f:44:ba:36:cc:ed:5d:c8:ed:58:56:1e:53: 73:47:7b:f5:46:2f:f7:45:59:8a:29:aa:03:31:bc: a6:6e:42:8a:e0:6e:9d:10:4c:9f:99:9a:da:87:c6: 83:ec:19:8f:8e:6d:e0:4c:ca:1f:3f:07:96:52:70: 7b:e2:3c:9f:23:be:dd:50:74:71:46:c1:0f:b9:17: 3d:18:7a:3e:7a:03:7c:76:95:64:85:b0:8f:5f:6e: 28:2b:ad:31:c5:96:16:16:80:1a:30:b2:65:f5:a5: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:2A:50:42:04:76:99:C1:00:AE:C3:75:8D:66:C9:D0:CC:FE:7F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JtUqUEIEdpnBAK7DdY1mydDM_n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.124.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a6:57:12:d6:2e:24:01:4c:39:1f:7e:80:4f:d2:a2:15:19: a7:12:17:c4:3e:f3:db:ea:7b:4c:30:60:ba:5c:3c:bc:53:56: 8e:b6:37:ff:4c:19:24:cf:ff:b0:ee:56:d9:85:9e:5c:d1:12: 50:8a:42:5d:17:5a:0a:c8:98:d9:28:3d:08:41:f5:fc:4c:ef: 0d:06:c5:8e:e5:22:63:ed:2c:ad:cd:00:13:27:cf:ec:f6:9e: 85:41:e7:3e:4c:65:f9:d7:5f:0a:9c:26:93:38:d7:77:b0:33: 3c:ae:86:94:fd:4f:b9:fa:67:89:be:c2:19:f2:44:3b:53:06: 46:f1:2e:94:d2:c1:e2:be:b2:d7:a0:1c:95:a4:51:af:92:13: f0:67:d4:36:9e:af:53:f5:84:59:0b:e9:47:9c:d0:a5:cf:51: 79:22:13:29:06:5f:39:99:e5:bd:1b:62:8b:fa:5a:40:da:93: f0:12:7f:9c:0c:1b:d1:76:3c:06:65:b5:96:65:51:7d:97:b8: bb:18:41:9f:c3:9d:c5:26:d7:f8:9e:49:cb:9e:6a:65:21:70: 6a:05:5f:cd:83:ee:7a:ed:9c:d6:18:8a:1e:d2:d9:e2:10:2f: 21:39:2d:b1:76:d5:c5:bb:9b:a0:f0:43:7b:9e:0b:25:ef:0a: 73:01:02:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HWgafyl09r+csoJ0l/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQ1MmE1MDQyMDQ3Njk5YzEwMGFlYzM3NThkNjZjOWQwY2NmZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDMD/m34lCmv6UuUJwovysxF0NwY ouR/aQlQwKMzFbNDknyYv9KUi5xa+/LbpiwkM3o2RdINs6HvB+Y/lJq/u2PV0Eg0 huk2Qxdn/dj5Woqubt4dyVmIBhslAKHw4PRiCbr1aOp2nombong/behmNy8JmTc2 ZTu0KWXqJdkQhIiV39JD2dh2yrw2JW7aNRydXvYx3Lw4BI9EujbM7V3I7VhWHlNz R3v1Ri/3RVmKKaoDMbymbkKK4G6dEEyfmZrah8aD7BmPjm3gTMofPweWUnB74jyf I77dUHRxRsEPuRc9GHo+egN8dpVkhbCPX24oK60xxZYWFoAaMLJl9aX/NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCbVKlBCBHaZwQCuw3WNZsnQzP5/MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSnRVcVVFSUVkcG5CQUs3RGRZMW15ZERNX244LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvF8MA0G CSqGSIb3DQEBCwUAA4IBAQA0plcS1i4kAUw5H36AT9KiFRmnEhfEPvPb6ntMMGC6 XDy8U1aOtjf/TBkkz/+w7lbZhZ5c0RJQikJdF1oKyJjZKD0IQfX8TO8NBsWO5SJj 7SytzQATJ8/s9p6FQec+TGX5118KnCaTONd3sDM8roaU/U+5+meJvsIZ8kQ7UwZG 8S6U0sHivrLXoByVpFGvkhPwZ9Q2nq9T9YRZC+lHnNClz1F5IhMpBl85meW9G2KL +lpA2pPwEn+cDBvRdjwGZbWWZVF9l7i7GEGfw53FJtf4nknLnmplIXBqBV/Ng+56 7ZzWGIoe0tniEC8hOS2xdtXFu5ug8EN7ngsl7wpzAQJR -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:05 2026 by rpki-client