This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/JchC90yjmUCoGpTy_G9JV_hpnDA.roa File: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (raw, json) Hash identifier: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc= Subject key identifier: 25:C8:42:F7:4C:A3:99:40:A8:1A:94:F2:FC:6F:49:57:F8:69:9C:30 Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Certificate serial: 019B7F850836867676767ED34CA9B2CD6156 Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/JchC90yjmUCoGpTy_G9JV_hpnDA.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15435 IP address blocks: 193.176.104.0/21 maxlen: 24 2001:67c:460::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:08:36:86:76:76:76:7e:d3:4c:a9:b2:cd:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c842f74ca39940a81a94f2fc6f4957f8699c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:16:b6:98:ab:3d:17:cb:d3:e7:52:40:e9: 45:64:0f:62:3f:ae:41:53:fc:d7:d6:5e:ac:78:61: c6:d4:b9:47:c4:4a:84:9d:db:62:10:81:55:15:d0: 8f:06:2d:e3:35:f6:d4:35:7b:05:2f:01:a6:f1:b5: 00:c3:72:e1:ca:89:79:c8:99:72:e1:e0:aa:65:9f: 9f:7a:6f:00:aa:1b:ca:9d:23:39:d9:bf:e2:d2:86: f2:9c:17:48:32:e7:4e:21:14:e5:73:5e:1a:69:d6: 48:87:73:f5:a6:43:18:bb:b3:77:3d:35:51:35:17: 92:4c:19:0c:b3:c8:05:7f:48:1d:14:dc:09:07:67: e6:de:be:64:1f:2b:88:3a:f0:85:b5:81:54:d3:c1: 4d:78:25:68:57:c5:ec:06:39:6d:11:c9:6a:3c:7f: 6d:34:db:00:0f:58:de:e6:f9:d5:74:a3:f6:3d:95: 6a:99:3c:2a:86:e8:0d:72:0c:db:c6:d5:17:5f:4f: d4:d9:33:22:42:93:03:0f:cd:be:b9:51:5b:76:82: a0:84:79:ca:b6:af:17:cf:70:db:17:f8:a8:2a:10: 93:8a:9e:00:09:a9:7e:42:ed:4f:95:57:f1:8b:55: 7d:98:b5:69:92:9e:47:f7:10:18:11:88:a3:bd:60: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C8:42:F7:4C:A3:99:40:A8:1A:94:F2:FC:6F:49:57:F8:69:9C:30 X509v3 Authority Key Identifier: keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/JchC90yjmUCoGpTy_G9JV_hpnDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.104.0/21 IPv6: 2001:67c:460::/48 Signature Algorithm: sha256WithRSAEncryption 9a:f3:d6:d6:f0:b4:53:f8:e0:ef:45:18:67:cf:84:21:76:45: 80:79:80:6f:fa:10:66:f0:da:e9:02:c2:42:a4:5b:39:f1:57: 34:eb:de:9d:7d:bf:30:3a:b8:57:2d:47:ca:17:dd:da:1a:c1: 9b:67:44:b6:33:47:3e:23:c2:28:75:80:fa:76:1d:66:f6:49: 21:a1:99:b9:f0:0e:4a:61:94:01:4f:11:45:b8:79:c6:7c:a3: 91:7b:e7:c3:45:e2:63:f2:55:b3:95:90:79:23:4c:1d:bb:7d: bb:37:7f:d4:64:7e:3f:d4:0c:a2:c8:1f:db:9c:6e:03:89:21: 3b:08:1e:30:ab:a2:2f:26:eb:4e:04:d8:f1:2f:f0:de:5d:64: f1:8f:6d:54:fd:6d:6d:c7:1d:1f:cb:db:ed:f5:78:7f:c7:f5: d7:a6:53:71:27:37:5f:5b:9e:fc:71:72:d7:01:8a:12:81:c8: 27:b0:01:f5:07:48:6e:cd:c6:52:85:50:35:01:58:8a:36:11: 18:0c:4a:f0:f0:45:c1:e9:aa:33:6b:f9:bf:06:ea:63:8e:75: 19:42:1c:8c:21:68:52:e9:37:6f:66:ae:86:b5:6e:f4:80:e1: e0:1d:bf:eb:fe:30:f5:17:29:35:9b:17:2c:b1:ce:2a:2d:60: e0:10:68:1f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hQg2hnZ2dn7TTKmyzWFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk NGQxYzMwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM4NDJmNzRjYTM5OTQwYTgxYTk0ZjJmYzZmNDk1N2Y4Njk5YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yYWtpirPRfL0+dSQOlFZA9iP65B U/zX1l6seGHG1LlHxEqEndtiEIFVFdCPBi3jNfbUNXsFLwGm8bUAw3Lhyol5yJly 4eCqZZ+fem8AqhvKnSM52b/i0obynBdIMudOIRTlc14aadZIh3P1pkMYu7N3PTVR NReSTBkMs8gFf0gdFNwJB2fm3r5kHyuIOvCFtYFU08FNeCVoV8XsBjltEclqPH9t NNsAD1je5vnVdKP2PZVqmTwqhugNcgzbxtUXX0/U2TMiQpMDD82+uVFbdoKghHnK tq8Xz3DbF/ioKhCTip4ACal+Qu1PlVfxi1V9mLVpkp5H9xAYEYijvWBK4QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCXIQvdMo5lAqBqU8vxvSVf4aZwwMB8GA1UdIwQY MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt ZDljNWQyNjQxOWIyLzEvSmNoQzkweWptVUNvR3BUeV9HOUpWX2hwbkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwbBoMA8E AgACMAkDBwAgAQZ8BGAwDQYJKoZIhvcNAQELBQADggEBAJrz1tbwtFP44O9FGGfP hCF2RYB5gG/6EGbw2ukCwkKkWznxVzTr3p19vzA6uFctR8oX3doawZtnRLYzRz4j wih1gPp2HWb2SSGhmbnwDkphlAFPEUW4ecZ8o5F758NF4mPyVbOVkHkjTB27fbs3 f9Rkfj/UDKLIH9ucbgOJITsIHjCroi8m604E2PEv8N5dZPGPbVT9bW3HHR/L2+31 eH/H9demU3EnN19bnvxxctcBihKByCewAfUHSG7NxlKFUDUBWIo2ERgMSvDwRcHp qjNr+b8G6mOOdRlCHIwhaFLpN29mroa1bvSA4eAdv+v+MPUXKTWbFyyxziotYOAQ aB8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:40 2026 by rpki-client