This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/j3ibgWklhdqQcHsHK_aTLHyBJi0.roa File: j3ibgWklhdqQcHsHK_aTLHyBJi0.roa (raw, json) Hash identifier: uJEaI0Ft8Tv2OfcfSeSrNwofyUE+Kqvxq2oh2ozf3gk= Subject key identifier: 8F:78:9B:81:69:25:85:DA:90:70:7B:07:2B:F6:93:2C:7C:81:26:2D Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B79106FA32609D6BFB957D33728E051FB Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/j3ibgWklhdqQcHsHK_aTLHyBJi0.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209748 IP address blocks: 195.123.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:a3:26:09:d6:bf:b9:57:d3:37:28:e0:51:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f789b81692585da90707b072bf6932c7c81262d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:38:f3:38:ca:5d:f9:da:1f:c8:d4:6c:3f: dc:26:f8:dc:21:05:b8:2c:bc:c3:86:50:cc:e2:6a: 2d:5f:12:8a:4c:65:fa:c6:84:0d:0f:37:0e:10:c8: f3:7e:81:76:ed:1e:c0:33:91:50:7c:c6:a3:dc:73: 64:6b:84:b2:01:28:40:ee:5a:27:b5:fc:fd:4a:d0: 50:82:40:4d:45:98:76:16:a7:3d:84:68:d5:05:66: 80:00:df:3a:e5:87:5a:09:b0:dd:2b:65:22:ea:2e: f2:1c:e6:62:d2:07:4b:6e:60:9c:4f:98:fd:95:c8: 93:a0:ce:41:0e:e7:20:0b:59:aa:56:85:20:e6:e3: 37:4f:72:aa:1f:9a:20:48:a2:b2:05:89:ab:ff:2a: 8d:27:4c:eb:4a:f4:3c:c7:41:26:57:48:98:d1:8b: f2:8f:85:09:3c:73:d6:0b:54:af:a5:22:f9:a5:60: 80:b8:9c:23:2d:74:91:23:92:8b:47:92:9f:2a:a4: bf:78:41:69:70:0f:2a:3d:5b:36:a5:30:f6:06:a5: 56:8b:18:9c:85:36:f5:f9:2b:a9:f9:2a:d5:e8:c6: 42:48:f1:cc:fb:5e:6e:3a:3b:21:b0:0e:e9:27:9b: d9:ce:b6:03:fe:c9:dd:9f:45:70:c3:1b:cb:0d:e2: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:78:9B:81:69:25:85:DA:90:70:7B:07:2B:F6:93:2C:7C:81:26:2D X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/j3ibgWklhdqQcHsHK_aTLHyBJi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.122.0/24 Signature Algorithm: sha256WithRSAEncryption 82:06:21:07:48:0e:0e:9f:b1:00:71:52:e3:3f:d0:6b:30:8f: 46:fb:50:ae:62:09:b7:09:40:00:5f:37:ca:34:26:3f:ca:bc: 21:f8:37:3a:62:69:18:7e:1c:b0:55:53:cd:6a:46:e8:89:35: 90:b8:89:f6:d5:4e:40:ce:57:0e:e7:b6:3b:50:f6:47:1d:14: ca:54:d1:80:4e:67:f2:65:9e:17:8e:c9:2a:5c:45:ae:74:6c: 7c:a8:a7:3f:0c:b3:0e:69:30:8f:57:d9:2b:2f:ce:05:af:ce: 67:2c:54:1d:6f:f8:d1:77:62:ed:a3:e8:a9:8f:0b:cd:32:a3: 67:b7:8a:4b:92:d9:6d:5f:b6:0d:14:61:25:af:1d:ff:41:e4: bd:19:34:a3:e5:79:b9:a6:79:83:4e:ab:c0:3b:c0:3d:5a:2a: 12:1c:bf:51:e7:92:4e:6b:c7:3c:23:94:b3:3a:61:31:d7:d3: 9a:8a:35:fa:dd:5a:11:98:48:d0:99:09:4e:31:54:6a:2d:05: 21:eb:5b:b8:4a:d5:b6:78:29:96:7f:b0:4c:c2:c5:a3:58:dd: 4c:c6:f0:70:e8:9b:be:6d:ff:88:a6:35:9e:a8:55:69:97:5d: 01:47:a6:43:41:f2:b6:8f:15:c2:32:b4:4c:f9:40:29:2e:04: 93:72:6e:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG+jJgnWv7lX0zco4FH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjc4OWI4MTY5MjU4NWRhOTA3MDdiMDcyYmY2OTMyYzdjODEyNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WI48zjKXfnaH8jUbD/cJvjcIQW4 LLzDhlDM4motXxKKTGX6xoQNDzcOEMjzfoF27R7AM5FQfMaj3HNka4SyAShA7lon tfz9StBQgkBNRZh2Fqc9hGjVBWaAAN865YdaCbDdK2Ui6i7yHOZi0gdLbmCcT5j9 lciToM5BDucgC1mqVoUg5uM3T3KqH5ogSKKyBYmr/yqNJ0zrSvQ8x0EmV0iY0Yvy j4UJPHPWC1SvpSL5pWCAuJwjLXSRI5KLR5KfKqS/eEFpcA8qPVs2pTD2BqVWixic hTb1+Sup+SrV6MZCSPHM+15uOjshsA7pJ5vZzrYD/sndn0VwwxvLDeJNlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI94m4FpJYXakHB7Byv2kyx8gSYtMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvajNpYmdXa2xoZHFRY0hzSEtfYVRMSHlCSmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3t6MA0G CSqGSIb3DQEBCwUAA4IBAQCCBiEHSA4On7EAcVLjP9BrMI9G+1CuYgm3CUAAXzfK NCY/yrwh+Dc6YmkYfhywVVPNakboiTWQuIn21U5AzlcO57Y7UPZHHRTKVNGATmfy ZZ4XjskqXEWudGx8qKc/DLMOaTCPV9krL84Fr85nLFQdb/jRd2Lto+ipjwvNMqNn t4pLktltX7YNFGElrx3/QeS9GTSj5Xm5pnmDTqvAO8A9WioSHL9R55JOa8c8I5Sz OmEx19OaijX63VoRmEjQmQlOMVRqLQUh61u4StW2eCmWf7BMwsWjWN1MxvBw6Ju+ bf+IpjWeqFVpl10BR6ZDQfK2jxXCMrRM+UApLgSTcm5U -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:12 2026 by rpki-client