This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rc_J4XOHhixLylCcfyExPkYQnWs.roa File: rc_J4XOHhixLylCcfyExPkYQnWs.roa (raw, json) Hash identifier: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA= Subject key identifier: AD:CF:C9:E1:73:87:86:2C:4B:CA:50:9C:7F:21:31:3E:46:10:9D:6B Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Certificate serial: 019B7E3840623A4020780B392A61DEA801BA Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rc_J4XOHhixLylCcfyExPkYQnWs.roa Signing time: Fri 02 Jan 2026 10:19:34 +0000 ROA not before: Fri 02 Jan 2026 10:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35615 IP address blocks: 194.39.36.0/22 maxlen: 22 194.39.36.0/23 maxlen: 23 194.39.36.0/24 maxlen: 24 194.39.37.0/24 maxlen: 24 194.39.38.0/23 maxlen: 23 194.39.38.0/24 maxlen: 24 194.39.39.0/24 maxlen: 24 2a0d:84c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:40:62:3a:40:20:78:0b:39:2a:61:de:a8:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adcfc9e17387862c4bca509c7f21313e46109d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:89:42:86:6b:db:3c:59:71:49:84:db:16: 19:45:ef:2f:da:8f:b7:29:80:e4:1c:26:8e:7d:d1: e7:fd:0d:f6:9f:57:c0:6a:d0:74:17:2f:af:28:94: 22:3f:08:0d:12:b2:57:da:55:e9:5f:f9:95:34:db: 26:c8:4a:f3:83:62:d4:b9:97:ed:1d:2a:60:b1:b8: 3d:a3:90:ff:0a:fc:0d:89:41:7f:b9:49:80:a8:45: 83:ad:a9:8c:af:77:f9:95:ca:ef:2c:f0:34:34:3e: 3c:e0:05:3b:aa:61:ce:4b:f4:3b:68:56:54:cb:e7: 8b:6f:24:60:a6:9b:23:e3:17:e3:dc:f6:ab:22:aa: e3:c7:8f:23:41:b3:87:8d:56:69:7c:b8:b4:02:d3: d7:2b:55:ac:a3:44:47:28:20:9a:e4:4d:9b:ef:e1: 68:99:84:86:5f:41:78:c2:d7:68:57:e1:1c:69:84: 8a:3a:93:c3:5d:a0:69:ff:55:88:88:f7:70:e5:a9: 1c:37:56:2f:87:77:3a:98:97:6f:06:85:49:eb:89: e2:6f:6c:86:00:4e:19:df:f8:44:a2:52:58:a8:71: 82:17:96:50:3e:e7:86:26:c9:40:e6:51:5d:d6:f1: 86:3b:1c:8d:79:15:73:e8:1b:93:8c:80:18:00:b2: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:C9:E1:73:87:86:2C:4B:CA:50:9C:7F:21:31:3E:46:10:9D:6B X509v3 Authority Key Identifier: keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/rc_J4XOHhixLylCcfyExPkYQnWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.36.0/22 IPv6: 2a0d:84c0::/29 Signature Algorithm: sha256WithRSAEncryption aa:85:74:3c:5b:73:19:c3:51:f9:b2:f6:68:7e:95:60:f2:7b: 0a:54:56:ff:4c:39:97:7f:05:84:a7:dd:85:ad:3e:ba:fa:de: e2:f6:c0:58:dd:f7:dc:63:f7:aa:73:60:fe:35:0d:04:a8:11: 3b:2b:a9:48:83:1f:12:7e:e1:54:05:72:b3:e6:0a:d1:0b:8b: e8:1e:0e:ac:fb:b8:b6:ea:c4:4b:33:b8:6b:af:d1:90:56:4d: 1a:33:d2:78:71:31:4c:fd:19:09:15:f9:47:7d:ff:78:30:5a: b3:16:dc:b5:c8:46:77:4f:cc:3e:12:a8:32:30:e3:1b:12:ff: 24:43:c6:07:a1:16:e2:f2:62:f3:28:84:79:a3:f6:d7:85:4a: 8b:e1:64:6b:61:af:d4:c5:e9:61:8d:9d:3e:ed:2a:bf:b6:5a: c9:58:5f:7b:1b:d7:bd:b5:2d:e4:d7:5a:5b:74:c4:9f:c0:af: 5e:26:53:5b:4a:2a:8c:cf:cc:4c:f3:6d:56:cd:f4:57:a4:38: 9f:be:b0:3e:57:35:df:0f:cd:12:e8:25:c6:4f:6b:91:f1:45: 12:57:50:2e:c3:39:59:08:be:90:3e:f2:1b:06:fb:34:c0:d8: 08:ed:a5:a3:75:36:56:1d:3d:cc:7c:46:20:f1:3d:24:00:4a: b7:3d:2d:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OEBiOkAgeAs5KmHeqAG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTdlZTViZWE5NWI2ZmNhOTJkN2M4MDA1YjI1MzFkMGQ1 MTA0NjgwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNmYzllMTczODc4NjJjNGJjYTUwOWM3ZjIxMzEzZTQ2MTA5ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQGJQoZr2zxZcUmE2xYZRe8v2o+3 KYDkHCaOfdHn/Q32n1fAatB0Fy+vKJQiPwgNErJX2lXpX/mVNNsmyErzg2LUuZft HSpgsbg9o5D/CvwNiUF/uUmAqEWDramMr3f5lcrvLPA0ND484AU7qmHOS/Q7aFZU y+eLbyRgppsj4xfj3ParIqrjx48jQbOHjVZpfLi0AtPXK1Wso0RHKCCa5E2b7+Fo mYSGX0F4wtdoV+EcaYSKOpPDXaBp/1WIiPdw5akcN1Yvh3c6mJdvBoVJ64nib2yG AE4Z3/hEolJYqHGCF5ZQPueGJslA5lFd1vGGOxyNeRVz6BuTjIAYALKHgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK3PyeFzh4YsS8pQnH8hMT5GEJ1rMB8GA1UdIwQY MBaAFCaX7lvqlbb8qS18gAWyUx0NUQRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt ODdmMTI5ZGMwZmYyLzEvcmNfSjRYT0hoaXhMeWxDY2Z5RXhQa1lRbldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy LzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwickMA0E AgACMAcDBQMqDYTAMA0GCSqGSIb3DQEBCwUAA4IBAQCqhXQ8W3MZw1H5svZofpVg 8nsKVFb/TDmXfwWEp92FrT66+t7i9sBY3ffcY/eqc2D+NQ0EqBE7K6lIgx8SfuFU BXKz5grRC4voHg6s+7i26sRLM7hrr9GQVk0aM9J4cTFM/RkJFflHff94MFqzFty1 yEZ3T8w+EqgyMOMbEv8kQ8YHoRbi8mLzKIR5o/bXhUqL4WRrYa/UxelhjZ0+7Sq/ tlrJWF97G9e9tS3k11pbdMSfwK9eJlNbSiqMz8xM821WzfRXpDifvrA+VzXfD80S 6CXGT2uR8UUSV1AuwzlZCL6QPvIbBvs0wNgI7aWjdTZWHT3MfEYg8T0kAEq3PS3A -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:43 2026 by rpki-client