This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcX_CPQyckugihyWynNOKSc_uRY.roa File: JcX_CPQyckugihyWynNOKSc_uRY.roa (raw, json) Hash identifier: ybc5PNtXfuq4Za/8XN5POijmN6rrpzRkFMoy/EX1J9o= Subject key identifier: 25:C5:FF:08:F4:32:72:4B:A0:8A:1C:96:CA:73:4E:29:27:3F:B9:16 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344CD3C1BA02323B0B05FA6C664965 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcX_CPQyckugihyWynNOKSc_uRY.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20943 IP address blocks: 194.68.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:d3:c1:ba:02:32:3b:0b:05:fa:6c:66:49:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c5ff08f432724ba08a1c96ca734e29273fb916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:53:1d:a1:65:5a:6d:4d:5b:53:af:c3:bb: c8:2f:68:ea:3f:5f:e4:0d:c3:8f:a3:e3:29:7b:48: de:0c:1c:88:60:6c:14:64:19:3e:86:02:57:6a:e4: 28:f0:6b:76:aa:3a:89:fd:f3:82:cc:d6:8f:a9:fc: c4:c9:c0:1e:c4:2b:7e:ff:0e:fb:55:77:90:dc:a1: 73:63:53:d9:1c:5e:76:7e:1d:55:c2:b9:4c:06:6c: bc:a8:27:c6:8f:a4:37:af:55:0e:b4:47:ce:8a:85: b1:4e:05:8e:43:82:07:71:2c:4d:1f:49:88:ab:59: 30:0c:a1:66:04:57:0e:20:46:2d:d7:cf:39:d5:48: 71:05:60:be:a0:9b:6e:84:2a:f0:14:ed:69:92:0e: da:5a:4a:4d:e7:b6:7e:37:fb:f8:85:58:dd:d3:ff: 5a:59:98:71:90:46:4c:82:7b:3f:57:87:1f:6d:7d: 8f:fd:3b:9e:13:b0:86:ba:fa:d5:02:1a:1d:6d:0c: e4:29:fc:82:ef:d9:71:6e:a1:72:cd:67:eb:ff:4a: 05:e6:1f:95:8b:d1:4a:73:77:6f:a8:71:05:89:b6: 25:3f:33:e2:c7:ba:5e:77:f2:30:de:46:85:8a:3c: be:eb:13:26:8c:aa:2b:64:16:df:24:ad:d7:16:df: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:FF:08:F4:32:72:4B:A0:8A:1C:96:CA:73:4E:29:27:3F:B9:16 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcX_CPQyckugihyWynNOKSc_uRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.134.0/24 Signature Algorithm: sha256WithRSAEncryption 53:d3:1f:50:63:ce:aa:ef:97:a4:7d:ea:6a:8a:10:b8:f1:33: 8b:c5:e5:30:87:2c:26:e9:06:d7:59:aa:e4:26:ae:91:d6:14: b5:67:9b:b3:ca:5a:1a:b6:76:7f:1c:a3:17:09:65:81:b6:33: 58:53:ad:8a:f0:fb:56:71:0f:bd:f1:5b:be:53:f1:2e:f3:ff: e5:f2:8a:a3:f5:2a:1b:85:16:9d:17:55:a0:0c:ff:85:a6:8b: a0:12:56:17:15:48:28:0d:ba:b8:15:1f:e3:8f:25:51:e9:a5: 20:90:5e:3c:4d:7a:52:c4:c0:1b:ca:04:bc:1b:b4:81:6e:0e: 5a:c9:09:cb:70:67:2d:6c:61:85:c4:3c:36:9d:9c:b9:13:39: 83:42:4f:78:17:42:37:f8:67:91:85:23:da:1c:c3:51:60:78: 3c:db:2c:cd:c6:6d:72:a2:75:5c:33:de:4f:00:34:a8:ed:e8: 29:e2:fc:18:21:0f:72:40:48:72:13:16:33:46:79:0d:40:91: 1c:7a:b0:5f:ee:e4:70:92:1c:a4:e5:40:57:c6:f7:e7:46:c0: 33:6e:80:3e:87:3c:de:8a:bd:38:58:71:3f:02:cc:cc:c0:85: e1:e5:a1:b6:1b:6f:c7:b7:a7:f3:de:f3:df:dc:2b:1a:a0:97: 87:8f:c9:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEzTwboCMjsLBfpsZkllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM1ZmYwOGY0MzI3MjRiYTA4YTFjOTZjYTczNGUyOTI3M2ZiOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM1THaFlWm1NW1Ovw7vIL2jqP1/k DcOPo+Mpe0jeDByIYGwUZBk+hgJXauQo8Gt2qjqJ/fOCzNaPqfzEycAexCt+/w77 VXeQ3KFzY1PZHF52fh1VwrlMBmy8qCfGj6Q3r1UOtEfOioWxTgWOQ4IHcSxNH0mI q1kwDKFmBFcOIEYt18851UhxBWC+oJtuhCrwFO1pkg7aWkpN57Z+N/v4hVjd0/9a WZhxkEZMgns/V4cfbX2P/TueE7CGuvrVAhodbQzkKfyC79lxbqFyzWfr/0oF5h+V i9FKc3dvqHEFibYlPzPix7ped/Iw3kaFijy+6xMmjKorZBbfJK3XFt+hDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXF/wj0MnJLoIoclspzTiknP7kWMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvSmNYX0NQUXlja3VnaWh5V3luTk9LU2NfdVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkSGMA0G CSqGSIb3DQEBCwUAA4IBAQBT0x9QY86q75ekfepqihC48TOLxeUwhywm6QbXWark Jq6R1hS1Z5uzyloatnZ/HKMXCWWBtjNYU62K8PtWcQ+98Vu+U/Eu8//l8oqj9Sob hRadF1WgDP+FpougElYXFUgoDbq4FR/jjyVR6aUgkF48TXpSxMAbygS8G7SBbg5a yQnLcGctbGGFxDw2nZy5EzmDQk94F0I3+GeRhSPaHMNRYHg82yzNxm1yonVcM95P ADSo7egp4vwYIQ9yQEhyExYzRnkNQJEcerBf7uRwkhyk5UBXxvfnRsAzboA+hzze ir04WHE/AszMwIXh5aG2G2/Ht6fz3vPf3CsaoJeHj8nk -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:03 2026 by rpki-client