This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa File: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (raw, json) Hash identifier: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0= Subject key identifier: 8D:B4:BC:45:24:A4:D6:A3:EE:04:C1:D7:8B:3D:0D:16:51:B9:81:A5 Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Certificate serial: 019B7D5C5F36373D9F4DF2361CAC2F70BE7D Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1715 IP address blocks: 141.115.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5f:36:37:3d:9f:4d:f2:36:1c:ac:2f:70:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db4bc4524a4d6a3ee04c1d78b3d0d1651b981a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:f8:59:50:97:6c:a1:dd:4f:7a:07:92:14: b7:9a:a7:62:a8:18:8d:6c:7f:b1:4c:68:b8:aa:bd: ab:e9:ec:e7:de:85:5e:45:3b:e4:3b:03:2c:b9:63: a3:b7:2c:79:b0:f9:e8:a3:0a:85:91:6c:17:97:7e: 68:dd:fc:ff:19:63:72:0f:71:4d:63:a3:08:cd:88: e1:5d:99:91:1b:2a:55:53:f3:b4:6d:3f:63:da:66: 26:83:2b:39:6f:98:ac:d4:37:86:cb:bf:af:59:75: 54:f4:de:6d:fd:18:a8:1c:f1:e7:ad:e1:cf:6f:a1: 61:78:28:e3:1c:da:ce:f6:c2:e5:23:d1:0a:77:3d: 99:7a:7e:ac:3a:3c:03:42:68:55:5f:4d:8c:b3:d5: a6:bd:a6:6b:26:fb:d7:ca:67:16:da:57:dd:a3:21: b8:5c:dc:4b:6b:f0:4f:eb:8e:d5:17:5d:27:8e:79: 7a:12:03:92:fa:45:1b:8f:a4:54:41:ac:81:61:9c: 79:4e:41:ea:23:21:9b:46:d2:78:9a:8f:30:68:58: c1:a7:4c:4c:11:fd:f5:11:9b:b3:df:42:bb:84:b3: 5d:0d:3f:d6:c9:cb:e6:64:98:04:14:91:9a:e5:a4: 0c:3e:51:0b:76:18:d2:29:81:0e:a4:db:85:ad:ac: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:BC:45:24:A4:D6:A3:EE:04:C1:D7:8B:3D:0D:16:51:B9:81:A5 X509v3 Authority Key Identifier: keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.115.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:12:05:f9:1d:29:50:f1:d7:07:72:39:ae:7d:ea:06:f3:db: 49:f2:19:8e:f2:28:00:6f:e6:0f:44:1a:a0:8c:29:17:9c:58: 94:f2:16:ad:9c:69:c1:f9:9e:ea:4f:f3:6d:e2:85:63:ed:20: 6a:b4:e3:78:3f:ef:2d:d7:48:9a:b1:89:f8:d8:f0:b0:39:d3: 38:dd:98:ee:7e:da:a2:13:db:f9:80:de:2c:3c:3d:03:f6:c6: e8:81:bd:cc:f4:0e:c0:7f:e4:71:6d:32:b8:1b:37:e6:c0:a6: 45:e4:20:65:ac:5c:24:40:95:f5:3e:93:a5:27:f8:88:fa:4a: 18:0c:58:f8:a4:4f:ab:ad:dc:60:1b:c1:16:05:8a:c6:07:3f: 4b:20:00:a9:c2:94:b5:9b:29:4d:88:95:43:35:32:88:63:55: f5:4e:67:16:65:de:f6:a3:42:64:a6:1b:b4:77:2c:90:10:86: 88:fa:f9:70:24:d9:c1:e0:75:83:b4:da:f0:39:4b:68:97:2b: 64:e6:ff:b6:08:53:ea:fa:ad:bf:07:db:56:91:ba:cd:80:a6: 13:03:7d:c2:f6:93:9f:ea:d4:7e:70:06:e8:3b:fe:68:ba:02: 33:98:ed:44:83:a1:28:8f:0b:e2:a3:0b:d5:28:92:7b:f7:d4: c5:5b:a9:ac -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XF82Nz2fTfI2HKwvcL59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl OTZjMzUwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI0YmM0NTI0YTRkNmEzZWUwNGMxZDc4YjNkMGQxNjUxYjk4MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBL4WVCXbKHdT3oHkhS3mqdiqBiN bH+xTGi4qr2r6ezn3oVeRTvkOwMsuWOjtyx5sPnoowqFkWwXl35o3fz/GWNyD3FN Y6MIzYjhXZmRGypVU/O0bT9j2mYmgys5b5is1DeGy7+vWXVU9N5t/RioHPHnreHP b6FheCjjHNrO9sLlI9EKdz2Zen6sOjwDQmhVX02Ms9WmvaZrJvvXymcW2lfdoyG4 XNxLa/BP647VF10njnl6EgOS+kUbj6RUQayBYZx5TkHqIyGbRtJ4mo8waFjBp0xM Ef31EZuz30K7hLNdDT/WycvmZJgEFJGa5aQMPlELdhjSKYEOpNuFrazt4wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFI20vEUkpNaj7gTB14s9DRZRuYGlMB8GA1UdIwQY MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct ZDhhMGI0MWY0NmU4LzEvamJTOFJTU2sxcVB1Qk1IWGl6ME5GbEc1Z2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4 LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjXMwDQYJ KoZIhvcNAQELBQADggEBAHcSBfkdKVDx1wdyOa596gbz20nyGY7yKABv5g9EGqCM KRecWJTyFq2cacH5nupP823ihWPtIGq043g/7y3XSJqxifjY8LA50zjdmO5+2qIT 2/mA3iw8PQP2xuiBvcz0DsB/5HFtMrgbN+bApkXkIGWsXCRAlfU+k6Un+Ij6ShgM WPikT6ut3GAbwRYFisYHP0sgAKnClLWbKU2IlUM1MohjVfVOZxZl3vajQmSmG7R3 LJAQhoj6+XAk2cHgdYO02vA5S2iXK2Tm/7YIU+r6rb8H21aRus2AphMDfcL2k5/q 1H5wBug7/mi6AjOY7USDoSiPC+KjC9Uoknv31MVbqaw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:01 2026 by rpki-client