This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/10JCy1pMlThUvrowqZBae-zy-xY.roa File: 10JCy1pMlThUvrowqZBae-zy-xY.roa (raw, json) Hash identifier: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs= Subject key identifier: D7:42:42:CB:5A:4C:95:38:54:BE:BA:30:A9:90:5A:7B:EC:F2:FB:16 Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68 Certificate serial: 019B7CEE688ABC05E7433352B03CE566F337 Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/10JCy1pMlThUvrowqZBae-zy-xY.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61308 IP address blocks: 192.144.48.0/24 maxlen: 24 192.144.50.0/24 maxlen: 24 192.144.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:8a:bc:05:e7:43:33:52:b0:3c:e5:66:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74242cb5a4c953854beba30a9905a7becf2fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:75:40:b5:cd:ea:71:67:ad:26:d9:f5:5a: 69:be:96:44:d1:8d:da:f4:aa:21:16:66:18:57:39: e3:4e:c3:6a:d3:e5:31:98:f0:7f:5f:24:c3:76:4a: f9:34:8c:70:bf:1c:56:34:6a:a1:33:d1:7b:5a:8a: 62:13:1b:c8:f8:59:cc:bd:5f:54:01:78:5f:ff:87: 26:af:6d:4c:b2:ce:49:ef:7a:ae:f3:f8:60:44:6a: 6c:bc:10:7a:10:0c:c7:e6:36:9b:ef:f5:86:6b:84: 45:ae:57:ed:da:22:78:fa:f7:24:82:16:62:a8:92: a3:06:75:eb:14:89:47:f9:c4:ee:22:13:8c:f9:71: e1:d6:39:cc:32:a2:c0:68:23:cd:55:f6:f4:73:91: d7:b8:01:5c:c9:7e:c3:a8:f3:47:fd:d6:bd:80:ea: 12:ed:b4:11:6c:1a:ae:ee:8c:d9:4c:c8:b0:af:77: aa:0d:f2:e7:ba:e4:27:d7:af:99:c6:a4:f0:b4:a3: 95:f9:41:c1:c3:56:8f:24:70:bc:1c:4d:a0:6c:d9: e3:81:4c:68:ab:54:ee:c1:d8:d5:be:2a:e2:6e:8b: 47:a2:37:55:8e:cb:7c:bc:4a:fa:8a:ea:70:18:7f: 11:1f:58:cc:10:7a:1d:f7:ac:8c:ef:97:69:1b:8a: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:42:CB:5A:4C:95:38:54:BE:BA:30:A9:90:5A:7B:EC:F2:FB:16 X509v3 Authority Key Identifier: keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/10JCy1pMlThUvrowqZBae-zy-xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.144.48.0/24 192.144.50.0/23 Signature Algorithm: sha256WithRSAEncryption 79:9d:c4:de:10:f9:0b:64:5f:23:50:ca:8a:1c:f4:4b:26:36: 1c:e4:e3:fc:36:93:c4:3a:4e:5d:9f:74:c5:aa:43:f5:a8:5a: 71:ce:6a:fe:9e:2e:c6:2c:7e:1e:38:fd:f1:d0:5a:a8:3d:93: af:22:67:6b:46:48:eb:fc:d4:4f:0c:f3:1a:97:88:9f:37:fe: 93:12:16:2d:10:73:17:4e:ac:10:18:01:7e:02:82:b9:61:b6: 6f:b1:91:db:e1:b7:f7:be:1d:bb:9d:bd:31:45:62:2b:a7:e7: 2c:5e:46:44:f0:9f:cd:2d:b8:6c:00:59:c7:a6:31:dc:78:9c: d5:a3:4e:e8:6b:08:df:fa:60:e2:0a:82:5d:21:0a:39:3d:e5: ca:85:6c:58:d5:5e:b5:81:71:6a:b5:44:8a:8d:ee:8f:cd:b1: 65:fb:c3:e0:43:6c:d5:84:68:15:4c:34:1d:99:b5:d3:d2:4f: 46:b6:15:4d:c3:ab:01:90:54:51:79:e0:93:dc:ec:b6:f4:6b: 1f:3f:a6:e7:24:f6:ee:e5:28:08:8d:06:ac:eb:d4:09:c3:e9: 6a:59:ad:1b:86:27:74:22:a4:25:db:3c:83:cc:f2:7a:b9:0a: b5:d2:1b:a6:25:cb:e0:5a:81:e4:53:a6:80:83:91:26:7f:01: ca:80:03:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87miKvAXnQzNSsDzlZvM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTIzOTFlMGFkMmU2NDRjZmUyZGFkNzYyMTExZDc1N2Y1 ODVmNjgwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQyNDJjYjVhNGM5NTM4NTRiZWJhMzBhOTkwNWE3YmVjZjJmYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLl1QLXN6nFnrSbZ9VppvpZE0Y3a 9KohFmYYVznjTsNq0+UxmPB/XyTDdkr5NIxwvxxWNGqhM9F7WopiExvI+FnMvV9U AXhf/4cmr21Mss5J73qu8/hgRGpsvBB6EAzH5jab7/WGa4RFrlft2iJ4+vckghZi qJKjBnXrFIlH+cTuIhOM+XHh1jnMMqLAaCPNVfb0c5HXuAFcyX7DqPNH/da9gOoS 7bQRbBqu7ozZTMiwr3eqDfLnuuQn16+ZxqTwtKOV+UHBw1aPJHC8HE2gbNnjgUxo q1TuwdjVviribotHojdVjst8vEr6iupwGH8RH1jMEHod96yM75dpG4oHNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdCQstaTJU4VL66MKmQWnvs8vsWMB8GA1UdIwQY MBaAFBdSOR4K0uZEz+La12IRHXV/WF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzkt MzlkYTY2MDJjNDMwLzEvMTBKQ3kxcE1sVGhVdnJvd3FaQmFlLXp5LXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzktMzlkYTY2MDJjNDMw LzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwJAwAwQB wJAyMA0GCSqGSIb3DQEBCwUAA4IBAQB5ncTeEPkLZF8jUMqKHPRLJjYc5OP8NpPE Ok5dn3TFqkP1qFpxzmr+ni7GLH4eOP3x0FqoPZOvImdrRkjr/NRPDPMal4ifN/6T EhYtEHMXTqwQGAF+AoK5YbZvsZHb4bf3vh27nb0xRWIrp+csXkZE8J/NLbhsAFnH pjHceJzVo07oawjf+mDiCoJdIQo5PeXKhWxY1V61gXFqtUSKje6PzbFl+8PgQ2zV hGgVTDQdmbXT0k9GthVNw6sBkFRReeCT3Oy29GsfP6bnJPbu5SgIjQas69QJw+lq Wa0bhid0IqQl2zyDzPJ6uQq10humJcvgWoHkU6aAg5EmfwHKgAM3 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:49 2026 by rpki-client