This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa File: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (raw, json) Hash identifier: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs= Subject key identifier: 8D:10:91:54:96:00:18:15:D8:82:BB:56:EA:22:45:23:09:7E:DD:3E Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019B79ECF0F18727682404B19798644BA095 Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.9.44.0/24 maxlen: 24 194.9.45.0/24 maxlen: 24 2001:678:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f0:f1:87:27:68:24:04:b1:97:98:64:4b:a0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d10915496001815d882bb56ea224523097edd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:ae:c1:c4:1d:78:87:4c:fc:34:6a:43:19: af:a9:b0:f9:fa:66:d8:b3:92:36:3b:fd:e6:6b:23: 7d:3a:39:3c:be:ca:0a:47:e4:ec:dd:b9:08:24:8b: 56:1e:d5:bc:f0:9a:17:22:d7:18:fc:d8:3b:d8:a9: ad:3c:d6:33:de:5a:8a:b2:7f:b5:fa:00:4c:52:cf: 53:81:f1:28:22:e3:34:32:e6:c0:e0:7d:18:78:4e: f5:42:ff:ab:63:3a:a8:40:92:e6:a7:fc:3d:5c:98: 0f:fa:9c:6c:7f:b6:47:e8:e8:71:5a:18:11:47:77: b5:18:76:9f:d4:63:e6:35:f9:01:69:60:b1:b3:a4: 29:46:e4:02:ce:2e:c5:f2:b9:79:08:6c:6c:06:dd: ed:76:9a:8c:bb:59:38:74:16:76:d7:75:fd:16:b4: cb:6d:e0:fe:48:91:12:a2:6e:f4:c2:9b:f5:54:60: 39:ae:59:4c:21:e0:c4:f8:2b:26:31:71:d4:07:15: d1:b6:90:fa:cc:01:51:24:f5:9d:24:8f:06:c2:e5: ab:7e:26:80:6f:c4:f4:9a:a9:a7:78:cb:b0:30:dc: 38:95:c3:03:d6:27:42:d0:4b:c4:dc:1a:8b:12:28: 70:6f:a8:53:78:bc:1d:97:ce:02:6a:ee:e1:0a:55: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:10:91:54:96:00:18:15:D8:82:BB:56:EA:22:45:23:09:7E:DD:3E X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.44.0/23 IPv6: 2001:678:e0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:69:26:fd:55:96:4c:66:bf:aa:a1:e8:9d:fa:71:63:e6:58: 9a:34:13:c3:16:75:d0:9c:64:f7:52:c1:a3:1f:88:70:bf:af: d2:0f:c8:ec:80:62:09:a6:72:d4:ec:89:8b:9e:5c:ca:e8:4b: f8:3a:0e:68:51:97:85:45:fb:b1:9a:1e:eb:be:d0:ec:54:d5: ea:ae:20:c6:05:da:ba:ab:0f:80:a4:05:2e:dd:48:2d:31:cf: 22:d8:cb:8b:31:62:94:7c:be:2d:7d:77:f6:a2:6a:68:bc:f3: 13:71:7c:50:a2:6f:af:dc:3b:f9:d4:5f:26:e3:85:91:e2:c7: ec:d7:c0:b7:b2:a7:c3:5e:46:f8:e2:e7:16:05:61:ac:f0:2e: ae:0e:8a:39:3f:34:27:58:6b:d6:b0:53:c3:4a:19:46:37:7a: 8b:07:90:b2:d4:e6:a2:d6:7a:c4:f1:29:f0:2b:69:62:af:a7: dd:37:8f:88:a7:2d:0d:fa:f1:b6:d7:fd:dc:25:c6:89:29:1f: 8a:56:37:4b:b1:eb:c8:63:28:ea:6b:a5:17:65:15:af:79:71: 47:08:f5:40:fc:a0:fb:9f:64:50:e9:58:bd:6c:36:86:56:6c: f8:3b:41:4a:de:f7:24:1f:83:f6:72:0f:d0:53:bb:bb:47:a9: 17:31:fe:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57PDxhydoJASxl5hkS6CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDEwOTE1NDk2MDAxODE1ZDg4MmJiNTZlYTIyNDUyMzA5N2VkZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UyuwcQdeIdM/DRqQxmvqbD5+mbY s5I2O/3mayN9Ojk8vsoKR+Ts3bkIJItWHtW88JoXItcY/Ng72KmtPNYz3lqKsn+1 +gBMUs9TgfEoIuM0MubA4H0YeE71Qv+rYzqoQJLmp/w9XJgP+pxsf7ZH6OhxWhgR R3e1GHaf1GPmNfkBaWCxs6QpRuQCzi7F8rl5CGxsBt3tdpqMu1k4dBZ213X9FrTL beD+SJESom70wpv1VGA5rllMIeDE+CsmMXHUBxXRtpD6zAFRJPWdJI8GwuWrfiaA b8T0mqmneMuwMNw4lcMD1idC0EvE3BqLEihwb6hTeLwdl84Cau7hClUizQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI0QkVSWABgV2IK7VuoiRSMJft0+MB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvalJDUlZKWUFHQlhZZ3J0VzZpSkZJd2wtM1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwgksMA8E AgACMAkDBwAgAQZ4AOAwDQYJKoZIhvcNAQELBQADggEBAA1pJv1Vlkxmv6qh6J36 cWPmWJo0E8MWddCcZPdSwaMfiHC/r9IPyOyAYgmmctTsiYueXMroS/g6DmhRl4VF +7GaHuu+0OxU1equIMYF2rqrD4CkBS7dSC0xzyLYy4sxYpR8vi19d/aiami88xNx fFCib6/cO/nUXybjhZHix+zXwLeyp8NeRvji5xYFYazwLq4Oijk/NCdYa9awU8NK GUY3eosHkLLU5qLWesTxKfAraWKvp903j4inLQ368bbX/dwlxokpH4pWN0ux68hj KOprpRdlFa95cUcI9UD8oPufZFDpWL1sNoZWbPg7QUre9yQfg/ZyD9BTu7tHqRcx /og= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:08 2026 by rpki-client