This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/JmukJcLMTVnoHK721SIDdRGwjZc.roa File: JmukJcLMTVnoHK721SIDdRGwjZc.roa (raw, json) Hash identifier: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88= Subject key identifier: 26:6B:A4:25:C2:CC:4D:59:E8:1C:AE:F6:D5:22:03:75:11:B0:8D:97 Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Certificate serial: 019B7AC87774ED91F2F74073911924E7E6C1 Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/JmukJcLMTVnoHK721SIDdRGwjZc.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20967 IP address blocks: 91.209.205.0/24 maxlen: 24 193.39.78.0/24 maxlen: 24 193.108.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:77:74:ed:91:f2:f7:40:73:91:19:24:e7:e6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266ba425c2cc4d59e81caef6d522037511b08d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:14:8f:a7:d3:b4:e0:88:7b:bd:c5:8d:8e: 26:51:20:b2:84:66:92:86:cc:ed:ab:fe:ab:df:23: b8:26:cc:c8:02:68:8b:23:cc:d2:81:b5:f4:56:42: d4:fd:5f:b8:09:f3:1f:25:1c:58:a7:ac:f1:f4:47: bf:ea:14:74:9b:63:76:3b:29:1c:a9:ea:86:e9:1e: 5c:b7:4c:e8:ad:15:f5:80:84:27:e5:08:64:ee:b2: 87:c4:ff:d8:94:51:5b:5b:3f:94:49:15:e2:81:9f: bc:ec:d6:94:84:84:b4:ba:60:83:c5:7d:23:33:cc: 5c:a7:21:e3:c2:0e:52:ec:21:ec:93:0a:79:d2:9a: 75:6a:5c:40:bc:e1:ed:61:fa:b7:74:e9:c9:e9:f1: b4:2b:9c:1c:59:c3:27:a2:4a:65:10:37:74:44:bd: 77:91:0f:f0:d2:b3:36:2d:15:8f:fb:dc:bd:f9:46: 95:19:fa:65:3e:b8:82:00:7c:83:89:25:96:b0:eb: c8:c4:55:75:86:ae:a0:25:e5:93:1d:09:b5:cc:23: ed:77:fe:9d:a6:a2:07:ad:e9:9a:30:e8:08:47:fd: 3a:f9:90:63:fe:41:ce:3f:2e:6f:fe:2d:95:a6:1a: d2:f1:1f:2b:a7:0d:03:44:be:53:78:3f:f1:d7:0e: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6B:A4:25:C2:CC:4D:59:E8:1C:AE:F6:D5:22:03:75:11:B0:8D:97 X509v3 Authority Key Identifier: keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/JmukJcLMTVnoHK721SIDdRGwjZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.205.0/24 193.39.78.0/24 193.108.213.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5e:4a:4f:88:00:a4:3f:7f:37:f2:a7:54:4a:4d:38:6f:24: 0d:db:f9:22:53:35:c3:05:0e:64:93:7f:0f:04:aa:7d:e5:4a: dc:90:d1:91:68:1e:35:e7:29:57:50:26:43:cb:30:dc:31:35: 0c:0a:e6:8b:a9:6c:9d:d1:fa:86:6b:f1:44:4c:23:be:2c:7b: c2:da:65:19:b5:1a:e7:cc:51:e8:07:5e:69:eb:92:bc:52:ca: f3:91:f6:06:a7:4c:2d:1f:2e:7a:54:bc:98:51:2f:d2:a1:42: cf:f8:a6:cf:d2:df:2b:68:ed:27:5e:da:b7:85:d0:f9:ba:d2: 43:7b:f5:57:90:bd:4b:f4:22:ed:31:1a:60:cd:db:25:7e:9f: 50:cc:17:35:f5:c4:e2:16:57:e5:c8:2d:70:67:c6:c0:ef:5c: 1c:ce:02:9a:ec:65:62:07:f7:7b:aa:68:f7:64:c2:72:ce:34: 75:0c:f2:e9:6c:57:ea:82:45:75:0a:33:b8:96:20:34:6d:3a: 7f:c0:a4:4e:a6:3b:b8:18:4f:59:37:96:0c:18:ca:b7:ec:d6: 80:3b:4c:5f:06:b8:1e:29:de:99:8a:d1:5b:b1:7d:27:b7:75: 8a:1f:4e:45:cc:07:49:d5:34:f4:ef:9d:9c:2b:16:45:81:06: 79:db:9d:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yHd07ZHy90BzkRkk5+bBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk ZjUxODIwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZiYTQyNWMyY2M0ZDU5ZTgxY2FlZjZkNTIyMDM3NTExYjA4ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GAUj6fTtOCIe73FjY4mUSCyhGaS hsztq/6r3yO4JszIAmiLI8zSgbX0VkLU/V+4CfMfJRxYp6zx9Ee/6hR0m2N2Oykc qeqG6R5ct0zorRX1gIQn5Qhk7rKHxP/YlFFbWz+USRXigZ+87NaUhIS0umCDxX0j M8xcpyHjwg5S7CHskwp50pp1alxAvOHtYfq3dOnJ6fG0K5wcWcMnokplEDd0RL13 kQ/w0rM2LRWP+9y9+UaVGfplPriCAHyDiSWWsOvIxFV1hq6gJeWTHQm1zCPtd/6d pqIHremaMOgIR/06+ZBj/kHOPy5v/i2VphrS8R8rpw0DRL5TeD/x1w4yGQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCZrpCXCzE1Z6Byu9tUiA3URsI2XMB8GA1UdIwQY MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt YTI1MjU1MzI5ZGMwLzEvSm11a0pjTE1UVm5vSEs3MjFTSURkUkd3alpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9HNAwQA wSdOAwQAwWzVMA0GCSqGSIb3DQEBCwUAA4IBAQB2XkpPiACkP3838qdUSk04byQN 2/kiUzXDBQ5kk38PBKp95UrckNGRaB415ylXUCZDyzDcMTUMCuaLqWyd0fqGa/FE TCO+LHvC2mUZtRrnzFHoB15p65K8UsrzkfYGp0wtHy56VLyYUS/SoULP+KbP0t8r aO0nXtq3hdD5utJDe/VXkL1L9CLtMRpgzdslfp9QzBc19cTiFlflyC1wZ8bA71wc zgKa7GViB/d7qmj3ZMJyzjR1DPLpbFfqgkV1CjO4liA0bTp/wKROpju4GE9ZN5YM GMq37NaAO0xfBrgeKd6ZitFbsX0nt3WKH05FzAdJ1TT0752cKxZFgQZ5251W -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:34 2026 by rpki-client