This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JtnFvVL5luwjJsUrKE_PkZqBzv0.roa File: JtnFvVL5luwjJsUrKE_PkZqBzv0.roa (raw, json) Hash identifier: bNLA85FkwBGVG4amTnLndpNSGrwg8SVdNJn4yP+K6lQ= Subject key identifier: 26:D9:C5:BD:52:F9:96:EC:23:26:C5:2B:28:4F:CF:91:9A:81:CE:FD Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Certificate serial: 019B77C69AFE0453AFEF3061A07FA0C50745 Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JtnFvVL5luwjJsUrKE_PkZqBzv0.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206943 IP address blocks: 31.42.128.0/20 maxlen: 20 31.42.146.0/23 maxlen: 23 31.42.148.0/22 maxlen: 22 31.42.152.0/24 maxlen: 24 31.42.154.0/23 maxlen: 23 178.159.64.0/20 maxlen: 20 178.218.128.0/22 maxlen: 22 178.218.132.0/22 maxlen: 22 178.218.136.0/21 maxlen: 21 185.171.28.0/23 maxlen: 23 185.171.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:fe:04:53:af:ef:30:61:a0:7f:a0:c5:07:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26d9c5bd52f996ec2326c52b284fcf919a81cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:57:8d:2d:5b:94:ba:29:b0:4d:6a:c0:57: b3:8a:46:97:fc:cb:de:2e:f5:b9:b6:b3:e2:76:17: 29:db:2b:e4:8e:e5:53:d6:c1:73:be:51:3f:18:d3: 12:e1:84:03:a2:72:fd:d3:fc:e9:34:2a:bb:fb:3c: 81:5f:38:f6:27:40:d9:39:36:e3:b6:ef:03:4a:68: 23:26:90:90:72:a1:ea:99:36:fd:45:01:e9:36:15: 4b:bd:fd:6c:08:c6:3e:5c:7c:42:9b:e8:63:56:b2: 0a:76:f4:a7:75:c3:2a:22:b0:6e:3f:eb:1f:18:8f: 83:73:9b:b1:c1:99:31:7b:6d:5a:87:21:c6:6e:54: ff:a7:49:a9:93:2e:59:8b:dd:4c:df:63:b6:9c:89: 48:06:7c:77:06:de:b4:0f:9f:ec:fd:bd:99:fb:30: e0:49:4d:1d:e3:98:f8:d4:9c:f4:86:df:ce:fb:37: 0b:1a:f5:aa:76:02:e9:c6:22:03:df:df:7e:b9:64: ae:74:a7:89:bb:05:d4:2c:00:ca:2c:8b:7a:59:80: 7a:75:78:92:0e:9e:f7:65:03:f5:ba:bd:3d:0f:44: d0:c0:ec:54:38:f1:f7:54:de:4b:72:d7:8a:02:a2: 25:ab:ce:7d:62:63:74:ac:dc:2a:2f:95:b8:4a:df: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:C5:BD:52:F9:96:EC:23:26:C5:2B:28:4F:CF:91:9A:81:CE:FD X509v3 Authority Key Identifier: keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JtnFvVL5luwjJsUrKE_PkZqBzv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.128.0/20 31.42.146.0-31.42.152.255 31.42.154.0/23 178.159.64.0/20 178.218.128.0/20 185.171.28.0/22 Signature Algorithm: sha256WithRSAEncryption d3:71:dd:e5:1f:84:14:c9:fb:4c:19:66:bb:20:29:d6:0d:ca: 58:29:9c:73:7d:3c:30:27:46:c1:76:82:52:34:ef:f0:97:fb: 84:6e:d6:7d:3a:06:f7:13:38:c9:d1:a9:69:c3:b7:4b:d9:0e: bf:f4:a4:81:f4:79:98:65:da:70:ba:a8:bb:cb:2f:f0:5c:17: ea:92:0a:41:66:04:73:e3:06:1a:c2:6e:fb:96:ba:58:ef:07: 32:e8:2f:c4:f0:09:9b:d9:8b:58:49:9f:70:7d:ae:3b:2e:51: ed:2c:8a:92:a0:d3:14:4c:cd:9c:40:ff:dd:8e:34:17:1d:06: c5:d5:74:65:40:75:d5:73:d6:4b:72:58:5c:9d:85:b8:4a:4d: e1:61:4d:13:58:62:05:2e:ba:b1:99:dc:c8:85:de:43:40:e5: f1:c2:f5:c0:e7:e1:ac:a7:f4:64:5a:51:37:3f:b0:70:70:5b: e1:04:e7:27:62:46:a1:52:44:f8:d1:43:e7:87:4b:56:65:4d: e2:b4:7a:51:67:30:04:bb:88:f5:8e:f0:10:a6:36:11:52:04: ad:8f:9b:5c:43:ba:1d:3e:aa:90:f5:34:66:87:bd:ed:7d:6a: 64:f2:1a:05:37:98:c0:c2:64:4b:3a:9a:85:5e:d6:19:0f:84: 62:a6:f8:56 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt3xpr+BFOv7zBhoH+gxQdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj MGZmOGMwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQ5YzViZDUyZjk5NmVjMjMyNmM1MmIyODRmY2Y5MTlhODFjZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQZXjS1blLopsE1qwFezikaX/Mve LvW5trPidhcp2yvkjuVT1sFzvlE/GNMS4YQDonL90/zpNCq7+zyBXzj2J0DZOTbj tu8DSmgjJpCQcqHqmTb9RQHpNhVLvf1sCMY+XHxCm+hjVrIKdvSndcMqIrBuP+sf GI+Dc5uxwZkxe21ahyHGblT/p0mpky5Zi91M32O2nIlIBnx3Bt60D5/s/b2Z+zDg SU0d45j41Jz0ht/O+zcLGvWqdgLpxiID399+uWSudKeJuwXULADKLIt6WYB6dXiS Dp73ZQP1ur09D0TQwOxUOPH3VN5LcteKAqIlq859YmN0rNwqL5W4St9HgwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCbZxb1S+ZbsIybFKyhPz5Gagc79MB8GA1UdIwQY MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt MjE3Y2Y5Mzg0NWJjLzEvSnRuRnZWTDVsdXdqSnNVcktFX1BrWnFCenYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQEHyqAMAwD BAEfKpIDBAAfKpgDBAEfKpoDBASyn0ADBASy2oADBAK5qxwwDQYJKoZIhvcNAQEL BQADggEBANNx3eUfhBTJ+0wZZrsgKdYNylgpnHN9PDAnRsF2glI07/CX+4Ru1n06 BvcTOMnRqWnDt0vZDr/0pIH0eZhl2nC6qLvLL/BcF+qSCkFmBHPjBhrCbvuWuljv BzLoL8TwCZvZi1hJn3B9rjsuUe0sipKg0xRMzZxA/92ONBcdBsXVdGVAddVz1kty WFydhbhKTeFhTRNYYgUuurGZ3MiF3kNA5fHC9cDn4ayn9GRaUTc/sHBwW+EE5ydi RqFSRPjRQ+eHS1ZlTeK0elFnMAS7iPWO8BCmNhFSBK2Pm1xDuh0+qpD1NGaHve19 amTyGgU3mMDCZEs6moVe1hkPhGKm+FY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:07 2026 by rpki-client