This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/JiTEOh1beM9m1c5OH759yqvEl9I.roa File: JiTEOh1beM9m1c5OH759yqvEl9I.roa (raw, json) Hash identifier: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s= Subject key identifier: 26:24:C4:3A:1D:5B:78:CF:66:D5:CE:4E:1F:BE:7D:CA:AB:C4:97:D2 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019B7AC91B3F418354053D49110B6AD7DA53 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/JiTEOh1beM9m1c5OH759yqvEl9I.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203949 IP address blocks: 94.126.86.0/24 maxlen: 24 94.126.87.0/24 maxlen: 24 193.111.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1b:3f:41:83:54:05:3d:49:11:0b:6a:d7:da:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2624c43a1d5b78cf66d5ce4e1fbe7dcaabc497d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:49:cc:11:85:03:bd:cb:50:ee:bc:ff:5d: 99:00:aa:1f:e0:5e:44:e4:92:45:eb:ce:4d:7e:86: f5:c5:e9:04:71:db:54:23:53:15:e7:76:05:44:49: fa:a7:12:59:f2:a4:92:b3:10:b3:f6:9e:82:b1:5f: 2e:22:73:ba:2e:32:c8:c3:2a:22:fb:dd:38:a0:d0: ca:bb:70:b4:33:76:4d:33:f4:c7:9a:d8:d9:c9:00: 26:fa:93:38:fb:92:7f:16:7e:20:84:5f:36:6f:09: 8b:e5:70:fc:68:9a:16:68:1e:d4:cd:8e:3b:89:91: 39:d2:c4:04:43:0f:6b:5d:e9:4d:d4:30:55:d7:e5: fe:14:07:b9:b4:6a:83:e3:6e:32:02:e9:67:c1:43: 45:d9:a2:5f:c2:31:e3:f0:50:d8:8a:86:ee:a8:cf: 00:4f:d1:4e:b0:99:2b:be:4a:30:5f:c9:50:27:f3: 85:9b:fd:f1:19:5c:51:b8:31:6b:09:ac:0e:1f:f8: 4f:04:b6:a4:3c:6a:01:b8:c8:45:d2:92:05:06:2f: 8e:a3:7d:3b:dd:eb:88:be:ed:8f:64:e1:69:18:fd: ba:86:94:d1:1d:21:2e:4d:63:ee:dc:86:32:82:72: 1e:a9:b0:9f:03:70:f3:9c:0e:fd:53:27:e7:e0:a0: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:24:C4:3A:1D:5B:78:CF:66:D5:CE:4E:1F:BE:7D:CA:AB:C4:97:D2 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/JiTEOh1beM9m1c5OH759yqvEl9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.126.86.0/23 193.111.148.0/24 Signature Algorithm: sha256WithRSAEncryption d1:6c:df:a0:a8:60:c1:46:ec:ca:77:cf:88:20:58:9e:34:39: a7:23:47:b2:59:a6:49:1f:d1:1c:34:c6:97:6b:88:a8:a1:9a: b0:f1:65:18:4b:ea:e1:3a:14:12:cf:da:5f:4a:0e:49:c2:64: 4a:3e:be:69:4a:6f:30:55:2d:fe:41:ee:af:0c:1c:73:34:56: 4f:0b:97:d0:b7:41:d6:4c:60:71:60:df:cd:c0:12:4e:bb:ca: f7:c8:b8:05:3f:60:98:03:44:cb:7e:a4:b8:fe:7f:8c:65:a4: 88:e1:56:11:69:c9:5f:49:94:39:b2:e4:2a:b9:65:2d:03:ff: 70:93:10:6e:8c:10:de:0d:1b:80:72:a3:3f:55:c3:94:f9:e7: 9b:44:fb:4b:7f:75:ea:8c:0b:59:9e:98:00:8e:b2:c9:6b:85: 07:db:8f:1d:3f:cc:a5:84:d7:f6:11:a9:17:ab:ad:80:62:60: e2:3b:43:32:6e:6e:21:ff:4d:70:55:c3:79:65:0f:26:48:16: e5:2b:5b:92:35:89:c4:f9:2b:d7:a3:35:7a:73:26:fc:ac:11: 51:e5:db:ce:45:16:44:82:d6:ff:f3:fb:3a:43:24:91:d8:45: 23:f0:a8:7f:09:92:fb:1a:c1:89:b8:28:bd:4f:bd:76:06:fb: 75:82:92:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yRs/QYNUBT1JEQtq19pTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjI0YzQzYTFkNWI3OGNmNjZkNWNlNGUxZmJlN2RjYWFiYzQ5N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcBJzBGFA73LUO68/12ZAKof4F5E 5JJF685Nfob1xekEcdtUI1MV53YFREn6pxJZ8qSSsxCz9p6CsV8uInO6LjLIwyoi +904oNDKu3C0M3ZNM/THmtjZyQAm+pM4+5J/Fn4ghF82bwmL5XD8aJoWaB7UzY47 iZE50sQEQw9rXelN1DBV1+X+FAe5tGqD424yAulnwUNF2aJfwjHj8FDYiobuqM8A T9FOsJkrvkowX8lQJ/OFm/3xGVxRuDFrCawOH/hPBLakPGoBuMhF0pIFBi+Oo307 3euIvu2PZOFpGP26hpTRHSEuTWPu3IYygnIeqbCfA3DznA79Uyfn4KBe9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCYkxDodW3jPZtXOTh++fcqrxJfSMB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvSmlURU9oMWJlTTltMWM1T0g3NTl5cXZFbDlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXn5WAwQA wW+UMA0GCSqGSIb3DQEBCwUAA4IBAQDRbN+gqGDBRuzKd8+IIFieNDmnI0eyWaZJ H9EcNMaXa4iooZqw8WUYS+rhOhQSz9pfSg5JwmRKPr5pSm8wVS3+Qe6vDBxzNFZP C5fQt0HWTGBxYN/NwBJOu8r3yLgFP2CYA0TLfqS4/n+MZaSI4VYRaclfSZQ5suQq uWUtA/9wkxBujBDeDRuAcqM/VcOU+eebRPtLf3XqjAtZnpgAjrLJa4UH248dP8yl hNf2EakXq62AYmDiO0Mybm4h/01wVcN5ZQ8mSBblK1uSNYnE+SvXozV6cyb8rBFR 5dvORRZEgtb/8/s6QySR2EUj8Kh/CZL7GsGJuCi9T712Bvt1gpL3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:36 2026 by rpki-client