This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/jaXIMGohDtqmN9HK0RSue183PUM.roa File: jaXIMGohDtqmN9HK0RSue183PUM.roa (raw, json) Hash identifier: /dhEKzEAshSscrjSIfqANdXDpyu38QD3HTeuahz7d5g= Subject key identifier: 8D:A5:C8:30:6A:21:0E:DA:A6:37:D1:CA:D1:14:AE:7B:5F:37:3D:43 Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Certificate serial: 019B7CEE1D4D7115A411D48E8FC5DF5A5731 Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/jaXIMGohDtqmN9HK0RSue183PUM.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20906 IP address blocks: 193.108.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1d:4d:71:15:a4:11:d4:8e:8f:c5:df:5a:57:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8da5c8306a210edaa637d1cad114ae7b5f373d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:3d:10:a5:b3:b9:7f:14:2b:b8:87:cc:d9: d9:7f:52:4a:8a:67:ce:05:7c:19:ba:25:d9:be:b8: 9a:dc:2f:0a:fd:8d:3a:d7:69:16:95:35:d8:aa:25: f7:ab:f2:8d:72:77:81:39:db:75:3a:06:b9:38:f9: 83:ef:d2:43:16:78:07:be:c0:5d:6d:f8:fc:5d:f3: 82:37:62:e0:6f:21:33:16:3d:ee:f7:45:5c:29:51: 4b:44:b2:a1:bf:ca:c6:13:16:f7:e8:de:9a:40:1a: ce:fb:60:fc:db:7f:e9:19:6a:da:03:a3:9c:db:61: 12:00:cd:ca:d3:2c:74:63:9c:85:91:bd:22:3e:82: 0a:18:95:17:c6:c5:43:59:e3:3c:81:9c:44:2b:67: 2f:48:ba:27:4e:90:f1:08:97:b6:15:0d:08:b7:18: 9f:52:35:33:07:2c:ce:9b:40:69:69:ab:b7:7a:1f: 14:dd:29:47:dd:4d:fb:50:1a:e2:fe:3c:c4:da:14: 46:9b:5e:c1:8b:86:69:ef:78:d1:a6:fd:6f:14:db: 55:1b:8e:6f:6a:67:a8:9b:40:8b:86:18:f7:3f:22: 1f:2f:75:74:09:16:06:50:0d:df:20:96:a1:71:22: f8:ed:f2:9c:e3:1c:f3:84:63:55:08:36:5e:b8:f8: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:C8:30:6A:21:0E:DA:A6:37:D1:CA:D1:14:AE:7B:5F:37:3D:43 X509v3 Authority Key Identifier: keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/jaXIMGohDtqmN9HK0RSue183PUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.174.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:64:00:26:06:70:b7:7d:71:2d:bd:71:7d:3b:b1:fc:8d:95: d7:2e:cc:64:21:e5:31:f3:d5:80:69:fb:5d:e0:9a:ab:96:19: 45:2b:4f:d1:cc:94:80:5d:5c:45:ab:b2:a5:3a:e1:95:45:0e: ac:30:64:92:e9:d6:5c:9d:91:19:da:c0:b1:fd:2c:00:dd:9b: ef:c5:8f:32:73:23:29:2a:32:e1:74:41:e0:3a:bc:1f:83:6b: 6b:19:cc:4c:4e:ed:ac:2d:3b:8d:28:9d:2a:9e:9e:30:40:b7: 6c:2d:24:71:48:b5:d6:6d:c5:a1:ab:39:2a:7f:7c:d1:2a:b0: 6c:ac:95:fa:3e:ed:04:c3:5d:0a:8a:55:f0:72:72:10:bc:c4: dd:7b:b8:08:0a:92:f9:ac:ae:9f:98:f5:64:7e:40:81:48:d6: f5:cc:f8:cc:6d:5c:49:0e:b1:26:33:ef:b9:f3:a6:46:66:80: a9:0e:58:07:91:1a:e5:95:d4:27:18:c7:4a:72:16:db:87:d8: 41:f7:d9:07:9c:54:d0:b8:33:50:eb:e9:87:e1:de:69:01:19: 35:b2:27:4c:d1:f6:ea:74:c2:c9:7a:ff:60:56:71:48:64:fc: 16:75:3e:cc:4e:a3:09:69:5f:99:b7:c2:6d:d2:6e:d7:d7:4e: f8:75:37:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h1NcRWkEdSOj8XfWlcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi NDRjMjYwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGE1YzgzMDZhMjEwZWRhYTYzN2QxY2FkMTE0YWU3YjVmMzczZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulk9EKWzuX8UK7iHzNnZf1JKimfO BXwZuiXZvria3C8K/Y0612kWlTXYqiX3q/KNcneBOdt1Oga5OPmD79JDFngHvsBd bfj8XfOCN2LgbyEzFj3u90VcKVFLRLKhv8rGExb36N6aQBrO+2D823/pGWraA6Oc 22ESAM3K0yx0Y5yFkb0iPoIKGJUXxsVDWeM8gZxEK2cvSLonTpDxCJe2FQ0Itxif UjUzByzOm0Bpaau3eh8U3SlH3U37UBri/jzE2hRGm17Bi4Zp73jRpv1vFNtVG45v ameom0CLhhj3PyIfL3V0CRYGUA3fIJahcSL47fKc4xzzhGNVCDZeuPhNNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2lyDBqIQ7apjfRytEUrntfNz1DMB8GA1UdIwQY MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt OTMyOWY5MTc5ZmRhLzEvamFYSU1Hb2hEdHFtTjlISzBSU3VlMTgzUFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWyuMA0G CSqGSIb3DQEBCwUAA4IBAQAqZAAmBnC3fXEtvXF9O7H8jZXXLsxkIeUx89WAaftd 4JqrlhlFK0/RzJSAXVxFq7KlOuGVRQ6sMGSS6dZcnZEZ2sCx/SwA3ZvvxY8ycyMp KjLhdEHgOrwfg2trGcxMTu2sLTuNKJ0qnp4wQLdsLSRxSLXWbcWhqzkqf3zRKrBs rJX6Pu0Ew10KilXwcnIQvMTde7gICpL5rK6fmPVkfkCBSNb1zPjMbVxJDrEmM++5 86ZGZoCpDlgHkRrlldQnGMdKchbbh9hB99kHnFTQuDNQ6+mH4d5pARk1sidM0fbq dMLJev9gVnFIZPwWdT7MTqMJaV+Zt8Jt0m7X1074dTeB -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client