This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/juQpA0Dx9CvCO8SdROPUgNn0R2k.roa File: juQpA0Dx9CvCO8SdROPUgNn0R2k.roa (raw, json) Hash identifier: eKvRL0aCTiGvMc9NYGY0zri6fq0p3BVgf8PAa3a2awY= Subject key identifier: 8E:E4:29:03:40:F1:F4:2B:C2:3B:C4:9D:44:E3:D4:80:D9:F4:47:69 Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019B9A6F26A44E0EF50AFDFC0944125E7854 Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/juQpA0Dx9CvCO8SdROPUgNn0R2k.roa Signing time: Wed 07 Jan 2026 21:48:54 +0000 ROA not before: Wed 07 Jan 2026 21:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39576 IP address blocks: 195.191.164.0/24 maxlen: 24 2a10:4a40:4ddc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:6f:26:a4:4e:0e:f5:0a:fd:fc:09:44:12:5e:78:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Jan 7 21:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ee4290340f1f42bc23bc49d44e3d480d9f44769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:7a:cc:85:7d:e7:38:f8:86:40:e0:2b:48: 3e:5a:a4:3d:b2:52:0d:46:90:65:40:07:16:ae:41: 9e:97:a3:ce:a9:92:1e:75:05:30:2a:18:a1:d0:62: 80:02:22:90:77:43:89:f6:77:7e:c1:98:5d:e3:cd: 39:a0:44:50:28:cd:fc:55:94:00:f2:d9:3f:96:90: a2:ad:ff:0f:b4:d2:ad:f4:51:fe:02:3a:fa:91:00: bc:76:f4:bc:a7:6c:b8:5b:0d:15:ee:38:18:e6:97: e0:3d:b8:99:a3:50:ac:af:eb:b5:e5:34:fc:45:4b: 00:51:b7:d3:b5:c2:29:74:04:61:62:93:54:53:c9: b1:40:60:d9:86:95:de:d6:d8:aa:5d:8c:5a:3b:c7: de:f9:57:f1:c1:01:55:df:98:f3:71:40:92:97:1f: 8d:24:73:48:60:aa:59:94:d3:9e:0e:54:6e:08:83: c2:db:44:6b:2e:56:6f:61:29:65:b1:bb:d5:63:c9: a7:19:b8:ba:cb:e4:1e:03:15:3c:09:6b:3a:3d:32: 66:a2:41:8f:3e:3b:ef:c0:45:95:d6:2b:e6:6e:97: 6b:39:10:e6:b0:94:4e:fe:3c:3d:68:18:e0:9c:3c: dc:7f:d9:85:73:5a:68:ea:f4:fa:45:ef:e5:91:7d: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E4:29:03:40:F1:F4:2B:C2:3B:C4:9D:44:E3:D4:80:D9:F4:47:69 X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/juQpA0Dx9CvCO8SdROPUgNn0R2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.164.0/24 IPv6: 2a10:4a40:4ddc::/48 Signature Algorithm: sha256WithRSAEncryption 42:fe:bc:ea:e2:33:1d:ca:1f:d0:49:ae:57:5b:47:5a:81:46: a5:8c:06:ae:85:cb:bf:a0:e9:b6:5e:6d:eb:1c:78:ef:89:fd: 58:78:47:48:61:d9:08:a6:42:a7:bf:fd:88:8e:bf:e8:6a:a3: 3e:2b:d6:d3:b0:97:8e:09:9a:df:26:3c:65:b4:91:15:a0:e7: be:98:90:46:3d:ff:39:3c:66:71:d6:71:8a:bf:8e:48:a7:8d: 44:9e:36:c0:62:49:d1:15:2c:71:be:16:d6:f2:37:3c:cc:20: 50:66:2c:b7:05:64:13:e9:83:49:ce:aa:33:fc:b1:e1:3c:22: 4a:2c:3f:d7:45:e5:63:7d:18:47:87:35:32:bd:c7:20:d1:32: af:24:30:43:87:b7:d5:13:4d:26:ec:97:77:90:7e:de:1a:8f: 19:36:f4:9d:fc:b6:39:7e:e7:7f:ad:f2:21:76:18:9e:02:65: c0:94:42:62:96:9d:07:5e:6b:12:84:9a:61:81:b4:4f:1d:95: 34:d6:41:60:83:3c:73:7c:bc:40:a7:9d:9b:2b:84:9d:7e:bb: 2f:94:bd:35:f6:15:ab:07:a8:35:4e:82:83:9a:b8:b3:8b:65: c3:f2:cb:7e:75:60:73:5f:f2:44:6c:a0:c2:bd:b2:66:b0:c2: 9c:26:4b:d5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZuabyakTg71Cv38CUQSXnhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjYwMTA3MjE0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWU0MjkwMzQwZjFmNDJiYzIzYmM0OWQ0NGUzZDQ4MGQ5ZjQ0NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XR6zIV95zj4hkDgK0g+WqQ9slIN RpBlQAcWrkGel6POqZIedQUwKhih0GKAAiKQd0OJ9nd+wZhd4805oERQKM38VZQA 8tk/lpCirf8PtNKt9FH+Ajr6kQC8dvS8p2y4Ww0V7jgY5pfgPbiZo1Csr+u15TT8 RUsAUbfTtcIpdARhYpNUU8mxQGDZhpXe1tiqXYxaO8fe+VfxwQFV35jzcUCSlx+N JHNIYKpZlNOeDlRuCIPC20RrLlZvYSllsbvVY8mnGbi6y+QeAxU8CWs6PTJmokGP PjvvwEWV1ivmbpdrORDmsJRO/jw9aBjgnDzcf9mFc1po6vT6Re/lkX0LFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI7kKQNA8fQrwjvEnUTj1IDZ9EdpMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvanVRcEEwRHg5Q3ZDTzhTZFJPUFVnTm4wUjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw7+kMA8E AgACMAkDBwAqEEpATdwwDQYJKoZIhvcNAQELBQADggEBAEL+vOriMx3KH9BJrldb R1qBRqWMBq6Fy7+g6bZebesceO+J/Vh4R0hh2QimQqe//YiOv+hqoz4r1tOwl44J mt8mPGW0kRWg576YkEY9/zk8ZnHWcYq/jkinjUSeNsBiSdEVLHG+FtbyNzzMIFBm LLcFZBPpg0nOqjP8seE8IkosP9dF5WN9GEeHNTK9xyDRMq8kMEOHt9UTTSbsl3eQ ft4ajxk29J38tjl+53+t8iF2GJ4CZcCUQmKWnQdeaxKEmmGBtE8dlTTWQWCDPHN8 vECnnZsrhJ1+uy+UvTX2FasHqDVOgoOauLOLZcPyy351YHNf8kRsoMK9smawwpwm S9U= -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:47 2026 by rpki-client