This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/JCTQgcUELCWna8Z80DBMEn0zGk0.roa File: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (raw, json) Hash identifier: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs= Subject key identifier: 24:24:D0:81:C5:04:2C:25:A7:6B:C6:7C:D0:30:4C:12:7D:33:1A:4D Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Certificate serial: 019B7AC8EAC229E5C7E207E1AC7CAFD4F9CB Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/JCTQgcUELCWna8Z80DBMEn0zGk0.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20847 IP address blocks: 141.138.168.0/22 maxlen: 24 195.211.72.0/22 maxlen: 24 2a03:3c00::/33 maxlen: 33 2a03:3c00:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ea:c2:29:e5:c7:e2:07:e1:ac:7c:af:d4:f9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2424d081c5042c25a76bc67cd0304c127d331a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:d8:56:e5:c1:ce:6b:76:3d:d4:4b:0a:fe: 49:92:1a:44:88:b3:3d:cb:04:67:e5:69:90:9e:f2: f0:1d:be:eb:02:93:38:d0:4c:7f:04:64:ff:7e:f9: a5:44:aa:0f:31:b2:ae:53:42:43:52:78:9d:76:95: b7:87:50:ff:1c:fa:ba:80:da:4e:ba:7b:07:a1:7f: 81:3a:24:47:3b:07:2a:38:b9:8b:f3:6b:23:45:a2: 37:10:60:0d:e9:0b:09:d3:dc:2e:49:1c:fe:94:13: 9d:45:0d:f1:c0:c1:0f:c7:fc:32:e3:4a:52:d5:84: d9:fe:0e:e4:4f:73:a4:f8:98:94:61:d0:6c:a5:05: 64:b3:91:08:6b:56:52:2b:8e:27:39:38:da:af:b5: 6c:e5:28:50:2a:54:3a:f4:71:94:16:0c:b6:b5:66: e4:b7:b5:d0:ac:70:c4:61:fc:bb:3e:80:35:13:3d: 86:d9:de:ef:6d:94:3e:d0:a3:e0:3d:27:fc:67:32: 6f:bb:04:6f:53:74:18:f6:51:59:64:c1:a0:79:b3: 9b:76:07:78:cb:1e:e3:4e:23:18:a4:e4:e3:8a:d9: 01:93:e2:da:5b:ca:87:cd:b8:a2:0b:e4:bb:45:79: 3a:1f:79:a1:2d:67:ec:30:68:66:3d:78:43:02:4d: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:24:D0:81:C5:04:2C:25:A7:6B:C6:7C:D0:30:4C:12:7D:33:1A:4D X509v3 Authority Key Identifier: keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/JCTQgcUELCWna8Z80DBMEn0zGk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.168.0/22 195.211.72.0/22 IPv6: 2a03:3c00::-2a03:3c00:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:ed:4e:08:58:52:e0:cb:4f:bc:f1:35:9f:d9:0f:12:68:cb: 99:c3:78:35:5d:68:5a:30:38:f2:c7:b1:a4:17:4f:94:76:11: 26:8e:29:fe:ae:a6:c6:aa:b4:4c:53:32:66:21:3a:df:87:82: 6a:34:3f:aa:da:07:86:6d:ba:53:6a:f4:c1:25:6b:7b:f0:1a: 47:a0:49:9b:92:d4:7d:49:45:45:f1:29:b0:06:d2:b3:81:b6: 5b:a9:e8:2e:7d:eb:72:1b:86:5a:07:b3:24:1b:49:25:5b:b0: 4a:41:bb:cb:93:83:a5:d3:54:6e:2c:60:56:6d:f6:3d:0d:e3: 79:f1:97:83:4e:b5:5d:ce:e6:d7:43:dd:d0:81:f9:fd:40:c7: 46:a4:d6:02:67:19:66:43:42:b7:d2:fa:2e:c5:a9:57:aa:a7: 21:47:40:30:f8:1e:cf:cf:d5:39:ff:58:45:e1:db:d5:13:bd: 43:02:ae:50:85:a4:7d:70:04:da:ca:e1:92:7f:6f:1e:5f:d4: 08:4a:36:15:c6:d6:9c:1e:77:c1:6c:96:a2:7d:fc:8e:44:ce: f4:ac:7a:33:7b:fe:70:16:a1:29:b2:c0:20:36:f1:5f:c6:c3: 1d:9c:50:00:ef:79:a0:47:0e:1e:b4:0e:99:99:82:4c:33:23: dd:e8:df:e7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yOrCKeXH4gfhrHyv1PnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi MGQ3NmMwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDI0ZDA4MWM1MDQyYzI1YTc2YmM2N2NkMDMwNGMxMjdkMzMxYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvrYVuXBzmt2PdRLCv5JkhpEiLM9 ywRn5WmQnvLwHb7rApM40Ex/BGT/fvmlRKoPMbKuU0JDUniddpW3h1D/HPq6gNpO unsHoX+BOiRHOwcqOLmL82sjRaI3EGAN6QsJ09wuSRz+lBOdRQ3xwMEPx/wy40pS 1YTZ/g7kT3Ok+JiUYdBspQVks5EIa1ZSK44nOTjar7Vs5ShQKlQ69HGUFgy2tWbk t7XQrHDEYfy7PoA1Ez2G2d7vbZQ+0KPgPSf8ZzJvuwRvU3QY9lFZZMGgebObdgd4 yx7jTiMYpOTjitkBk+LaW8qHzbiiC+S7RXk6H3mhLWfsMGhmPXhDAk1YbwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCQk0IHFBCwlp2vGfNAwTBJ9MxpNMB8GA1UdIwQY MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt MWUxZGU5MWE5ODdjLzEvSkNUUWdjVUVMQ1duYThaODBEQk1FbjB6R2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCjYqoAwQC w9NIMBYEAgACMBAwDgMEAioDPAMGBioDPACAMA0GCSqGSIb3DQEBCwUAA4IBAQAA 7U4IWFLgy0+88TWf2Q8SaMuZw3g1XWhaMDjyx7GkF0+UdhEmjin+rqbGqrRMUzJm ITrfh4JqND+q2geGbbpTavTBJWt78BpHoEmbktR9SUVF8SmwBtKzgbZbqegufety G4ZaB7MkG0klW7BKQbvLk4Ol01RuLGBWbfY9DeN58ZeDTrVdzubXQ93Qgfn9QMdG pNYCZxlmQ0K30vouxalXqqchR0Aw+B7Pz9U5/1hF4dvVE71DAq5QhaR9cATayuGS f28eX9QISjYVxtacHnfBbJaiffyORM70rHoze/5wFqEpssAgNvFfxsMdnFAA73mg Rw4etA6ZmYJMMyPd6N/n -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:48 2026 by rpki-client