This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/jn9K_pC0GX4USuWZkNDQAr2-7bI.roa File: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (raw, json) Hash identifier: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI= Subject key identifier: 8E:7F:4A:FE:90:B4:19:7E:14:4A:E5:99:90:D0:D0:02:BD:BE:ED:B2 Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7 Certificate serial: 019B7C1360B48FB4EAB48D5EECB5B5A87026 Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/jn9K_pC0GX4USuWZkNDQAr2-7bI.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1715 IP address blocks: 140.93.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:b4:8f:b4:ea:b4:8d:5e:ec:b5:b5:a8:70:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e7f4afe90b4197e144ae59990d0d002bdbeedb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:c5:ac:6d:12:66:da:26:d5:41:8a:2e:5c: ff:7f:95:bc:ab:25:ef:d7:f2:40:0c:6f:ed:4f:9d: c5:ad:c0:ad:1e:b0:cf:73:cf:df:78:2c:f4:c0:e1: 66:07:04:19:c0:a2:36:dd:3b:0b:68:5c:3d:1e:9f: 0c:47:9e:ee:fb:1c:fe:d7:48:2c:7b:d3:ec:8f:70: 44:02:3b:1f:7a:8c:bb:4d:95:87:b4:17:25:bf:28: 8a:c5:c0:c9:76:8b:e3:50:99:12:68:76:e8:49:9e: 10:97:e3:c1:34:39:3d:1a:f0:a5:3d:9f:ce:a9:25: eb:99:dd:cb:50:67:c9:65:1d:d6:c6:62:a3:a5:89: 44:88:1e:6a:e0:65:2a:1b:2d:dd:93:4b:b6:3a:de: e3:c5:d7:2a:40:24:3a:69:b4:2e:a3:28:ef:e8:8b: 69:66:a1:f0:35:6d:6e:83:b7:ad:60:cd:d1:d6:9a: 8c:60:0b:39:bc:e0:e2:b5:c5:dc:0a:72:5e:14:9a: e4:c2:93:62:59:b4:53:21:62:1e:4c:28:25:6f:1d: f2:6c:ec:41:f8:77:8c:ee:5e:00:b9:51:85:18:43: 9c:34:7a:0a:f0:27:c5:a2:f5:b5:66:ef:cf:ee:e0: 0d:ec:bc:00:c1:07:20:21:bc:ff:72:98:75:53:81: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7F:4A:FE:90:B4:19:7E:14:4A:E5:99:90:D0:D0:02:BD:BE:ED:B2 X509v3 Authority Key Identifier: keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/jn9K_pC0GX4USuWZkNDQAr2-7bI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.93.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:ea:60:04:51:39:6b:7c:96:b3:e0:9c:16:5d:f2:30:ac:2b: 4c:85:b2:6f:46:9c:18:26:29:a7:2c:d5:ad:08:3f:b2:42:d5: 83:bd:79:2d:07:d5:0b:7d:e5:de:46:2d:c3:11:85:31:9e:dc: 6b:63:4d:b6:20:9a:9b:00:a8:53:ff:c2:e5:27:cd:49:c4:a6: e4:a9:19:3c:78:b8:9c:82:fb:37:12:16:0a:e6:3c:41:11:4c: 4a:85:e0:64:21:a5:24:81:30:0a:dd:c7:05:0a:1c:ff:46:52: 8e:cd:d6:eb:8c:63:d1:a0:5a:f7:9c:b1:0f:cf:a2:7e:9f:72: d9:43:75:16:bb:78:83:22:5a:32:2c:cb:1c:8b:93:33:11:b1: 43:61:28:23:f5:b7:19:13:0c:8f:55:d7:43:01:68:3d:8e:2a: 25:de:ae:da:27:66:ba:88:22:b0:a2:e5:88:a4:e2:8e:cd:b0: 59:08:55:37:21:60:3c:c4:cb:db:38:9a:3b:90:d0:15:b5:a0: 84:ed:3a:42:b8:2b:b2:76:c3:1c:79:57:2c:b8:60:e1:7d:f1: 35:1b:22:19:cc:c9:2f:b6:e8:2a:b5:20:aa:4b:47:b5:5d:d4: 3b:8d:9f:3c:24:49:22:31:4e:5f:f4:1c:c5:c9:5a:1f:ee:ff: a4:e0:36:2b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8E2C0j7TqtI1e7LW1qHAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl ZWMyZTcwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTdmNGFmZTkwYjQxOTdlMTQ0YWU1OTk5MGQwZDAwMmJkYmVlZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6XFrG0SZtom1UGKLlz/f5W8qyXv 1/JADG/tT53FrcCtHrDPc8/feCz0wOFmBwQZwKI23TsLaFw9Hp8MR57u+xz+10gs e9Psj3BEAjsfeoy7TZWHtBclvyiKxcDJdovjUJkSaHboSZ4Ql+PBNDk9GvClPZ/O qSXrmd3LUGfJZR3WxmKjpYlEiB5q4GUqGy3dk0u2Ot7jxdcqQCQ6abQuoyjv6Itp ZqHwNW1ug7etYM3R1pqMYAs5vODitcXcCnJeFJrkwpNiWbRTIWIeTCglbx3ybOxB +HeM7l4AuVGFGEOcNHoK8CfFovW1Zu/P7uAN7LwAwQcgIbz/cph1U4HzowIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFI5/Sv6QtBl+FErlmZDQ0AK9vu2yMB8GA1UdIwQY MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt ZGJlNmM5MTBiYmE2LzEvam45S19wQzBHWDRVU3VXWmtORFFBcjItN2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2 LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjF0wDQYJ KoZIhvcNAQELBQADggEBAILqYARROWt8lrPgnBZd8jCsK0yFsm9GnBgmKacs1a0I P7JC1YO9eS0H1Qt95d5GLcMRhTGe3GtjTbYgmpsAqFP/wuUnzUnEpuSpGTx4uJyC +zcSFgrmPEERTEqF4GQhpSSBMArdxwUKHP9GUo7N1uuMY9GgWvecsQ/Pon6fctlD dRa7eIMiWjIsyxyLkzMRsUNhKCP1txkTDI9V10MBaD2OKiXertonZrqIIrCi5Yik 4o7NsFkIVTchYDzEy9s4mjuQ0BW1oITtOkK4K7J2wxx5Vyy4YOF98TUbIhnMyS+2 6Cq1IKpLR7Vd1DuNnzwkSSIxTl/0HMXJWh/u/6TgNis= -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:58 2026 by rpki-client