This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/JAq5IJt_YzdoY2C_mteXzLVmKq8.roa File: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (raw, json) Hash identifier: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ= Subject key identifier: 24:0A:B9:20:9B:7F:63:37:68:63:60:BF:9A:D7:97:CC:B5:66:2A:AF Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62 Certificate serial: 019B7C80C2B057CBE4FCA29648781DCCBFD5 Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/JAq5IJt_YzdoY2C_mteXzLVmKq8.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44050 IP address blocks: 91.196.252.0/22 maxlen: 22 91.196.255.0/24 maxlen: 24 176.116.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c2:b0:57:cb:e4:fc:a2:96:48:78:1d:cc:bf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=240ab9209b7f6337686360bf9ad797ccb5662aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:84:81:bc:3d:93:0f:6b:12:79:8d:50:3c: d9:e3:ba:a3:ed:ac:3f:3c:a7:f8:c9:8f:f4:21:a0: f0:37:c6:ae:16:31:3e:ed:6d:51:37:00:ca:d1:dc: 90:bd:37:2e:b1:01:f3:1e:d0:47:45:70:42:d3:f6: b7:6c:e9:e5:82:81:2f:e9:94:76:cf:9c:33:20:c1: 9b:b6:af:c4:be:aa:3a:c4:48:fe:3c:c6:b6:ca:d1: 4e:18:46:37:de:67:17:83:1c:58:b0:34:c1:00:ee: b8:87:f1:54:06:f4:aa:4a:0a:1b:d6:3e:75:e2:93: b1:47:eb:70:f7:9c:49:88:2f:ed:7b:98:14:cb:e4: 16:98:63:16:91:4d:0f:76:cb:7b:e4:4f:38:9e:4e: df:c6:fa:b8:97:78:ef:25:f1:b2:55:4b:3b:df:f7: 7a:dd:d6:20:ab:17:e3:25:ee:6f:28:e2:e3:d2:2c: a5:06:b6:18:05:8a:94:04:62:c1:45:5c:dc:9c:1e: d6:64:8d:18:4f:e9:15:1f:55:8f:13:2b:12:0f:18: 32:8b:06:a5:a3:dc:fb:c1:cf:84:8a:f9:04:89:3d: a4:1c:da:7d:b9:d0:72:3a:1b:d6:84:fc:9f:87:d8: 29:68:3c:28:c9:ec:15:70:50:ca:9d:16:86:a7:9c: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0A:B9:20:9B:7F:63:37:68:63:60:BF:9A:D7:97:CC:B5:66:2A:AF X509v3 Authority Key Identifier: keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/JAq5IJt_YzdoY2C_mteXzLVmKq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.252.0/22 176.116.240.0/20 Signature Algorithm: sha256WithRSAEncryption c5:9a:9b:a7:11:61:af:c6:5e:bc:aa:d1:a7:b6:68:9c:73:8b: b1:6f:0c:ef:2c:bf:04:de:84:5a:94:b5:01:f2:3d:5c:c5:68: 49:da:4b:2b:62:bb:34:71:d6:ef:f2:7b:9b:c0:d6:0f:fd:28: e5:17:36:dc:fa:d4:40:09:4d:fb:2d:16:8f:5a:ec:17:55:eb: c3:3a:4e:3b:60:a4:e6:cd:43:71:23:2e:36:91:3b:2c:7f:a1: 39:48:aa:1b:64:69:30:53:74:f3:f5:c9:f0:d7:ce:e4:1a:ba: 57:c9:86:51:ac:2f:28:75:b5:e2:2b:46:44:2f:db:1a:64:e0: a1:b8:10:69:fe:a4:3e:1a:9a:7e:9e:96:fe:87:23:b4:fb:a8: 33:88:6e:78:3e:69:f6:b3:a0:86:9f:05:75:97:f9:b1:e9:db: b1:1a:32:75:01:3a:c7:87:20:fe:87:2b:fd:be:bc:d2:e0:af: b0:d2:1c:cc:ee:e2:53:66:0e:29:95:b0:23:63:a7:f5:f7:c2: 99:1d:67:00:eb:fe:af:53:67:76:3e:29:29:6b:0f:ea:33:a2: 7c:e3:c9:5d:65:b7:f9:d0:ac:2c:f9:9d:39:8c:a4:a2:67:7c: ca:ac:bd:de:48:4b:a4:b7:56:73:de:45:12:ce:95:37:ed:a9: 09:1c:75:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gMKwV8vk/KKWSHgdzL/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NWQ0ZTYzMTdjNjJhMWE2OWRhYzMxZjRmMTQzZTNiYzI4 MGJhNjIwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDBhYjkyMDliN2Y2MzM3Njg2MzYwYmY5YWQ3OTdjY2I1NjYyYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVyEgbw9kw9rEnmNUDzZ47qj7aw/ PKf4yY/0IaDwN8auFjE+7W1RNwDK0dyQvTcusQHzHtBHRXBC0/a3bOnlgoEv6ZR2 z5wzIMGbtq/Evqo6xEj+PMa2ytFOGEY33mcXgxxYsDTBAO64h/FUBvSqSgob1j51 4pOxR+tw95xJiC/te5gUy+QWmGMWkU0Pdst75E84nk7fxvq4l3jvJfGyVUs73/d6 3dYgqxfjJe5vKOLj0iylBrYYBYqUBGLBRVzcnB7WZI0YT+kVH1WPEysSDxgyiwal o9z7wc+EivkEiT2kHNp9udByOhvWhPyfh9gpaDwoyewVcFDKnRaGp5w8uQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQKuSCbf2M3aGNgv5rXl8y1ZiqvMB8GA1UdIwQY MBaAFLVdTmMXxioaadrDH08UPjvCgLpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAt NTM0ZDc4ODk4ZDZiLzEvSkFxNUlKdF9ZemRvWTJDX210ZVh6TFZtS3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NTRmMzYtYWM1YS00MjkyLTgxNDAtNTM0ZDc4ODk4ZDZi LzEvdFYxT1l4ZkdLaHBwMnNNZlR4US1POEtBdW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8T8AwQE sHTwMA0GCSqGSIb3DQEBCwUAA4IBAQDFmpunEWGvxl68qtGntmicc4uxbwzvLL8E 3oRalLUB8j1cxWhJ2ksrYrs0cdbv8nubwNYP/SjlFzbc+tRACU37LRaPWuwXVevD Ok47YKTmzUNxIy42kTssf6E5SKobZGkwU3Tz9cnw187kGrpXyYZRrC8odbXiK0ZE L9saZOChuBBp/qQ+Gpp+npb+hyO0+6gziG54Pmn2s6CGnwV1l/mx6duxGjJ1ATrH hyD+hyv9vrzS4K+w0hzM7uJTZg4plbAjY6f198KZHWcA6/6vU2d2Pikpaw/qM6J8 48ldZbf50Kws+Z05jKSiZ3zKrL3eSEukt1Zz3kUSzpU37akJHHWu -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:11 2026 by rpki-client