This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/jmmW5Ukk3xcsTrR8qxuWpwPdxq8.roa File: jmmW5Ukk3xcsTrR8qxuWpwPdxq8.roa (raw, json) Hash identifier: xSWjSOPp8ZSSKlPw1K4xujDBjWwAjKSPxFoPnQzmTaU= Subject key identifier: 8E:69:96:E5:49:24:DF:17:2C:4E:B4:7C:AB:1B:96:A7:03:DD:C6:AF Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B26B64A14942AED97BC6786F696095627 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/jmmW5Ukk3xcsTrR8qxuWpwPdxq8.roa Signing time: Tue 16 Dec 2025 10:30:39 +0000 ROA not before: Tue 16 Dec 2025 10:30:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 680 IP address blocks: 141.5.0.0/16 maxlen: 24 192.68.254.0/24 maxlen: 24 2a02:d480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:b6:4a:14:94:2a:ed:97:bc:67:86:f6:96:09:56:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Dec 16 10:30:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e6996e54924df172c4eb47cab1b96a703ddc6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:a9:ec:bf:f6:e4:9c:79:a9:32:2d:69:69: e2:4a:9a:1d:76:d6:3c:cd:cb:d9:60:95:89:b8:2c: a3:79:99:23:f8:68:3f:90:c1:cc:dd:f2:3d:a3:51: 49:5e:18:15:8b:e2:71:ed:b7:bf:12:80:37:33:e6: d5:71:96:6a:8e:a1:e7:c4:90:db:23:75:4c:85:a8: a4:3b:c5:bf:07:03:0e:8e:3e:85:f8:63:10:c8:36: d5:08:6d:f4:ee:4d:c2:99:7d:b0:5b:d2:f4:5d:df: 52:ed:f9:40:c9:85:4d:6a:23:59:62:0c:8c:a8:f0: 8a:7c:6a:09:0f:c8:8e:23:42:5c:c6:f7:c9:4c:cb: 6e:58:e4:f1:23:39:3b:ee:fa:c7:41:6a:e4:42:d5: 20:6d:78:68:79:73:80:9e:f8:1c:2a:5b:41:6e:f8: 32:8e:c8:2d:12:e3:b3:37:d1:bc:0c:a0:dc:b9:29: 1f:4d:35:d4:df:b5:27:99:6c:b9:32:03:45:0d:ed: c3:64:76:2c:6e:c1:0c:c3:c5:7e:b7:73:31:64:47: 36:95:53:cc:32:03:18:3f:19:b4:e7:88:a5:c2:53: 6f:e8:c5:e5:bb:96:f1:16:df:0e:21:da:46:f1:0c: 53:1c:94:0c:01:f1:11:19:4f:12:23:08:85:7d:75: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:96:E5:49:24:DF:17:2C:4E:B4:7C:AB:1B:96:A7:03:DD:C6:AF X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/jmmW5Ukk3xcsTrR8qxuWpwPdxq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.5.0.0/16 192.68.254.0/24 IPv6: 2a02:d480::/32 Signature Algorithm: sha256WithRSAEncryption 37:08:26:a1:45:2f:31:06:1c:b3:a2:10:e3:35:6e:69:e4:0b: 99:52:fb:dd:17:c7:70:fb:6d:50:4f:0f:08:2f:78:de:e6:ff: 2a:22:be:72:08:b9:44:d5:92:80:35:47:c0:45:38:af:d7:a2: 38:49:c0:15:77:80:40:05:f3:4f:13:ac:f8:0e:27:92:67:35: ba:a5:4c:c6:f8:dd:aa:f3:af:07:28:05:58:22:b4:a2:55:86: fa:d5:f9:4d:69:35:fc:5f:61:d2:6d:59:06:4b:ec:dd:06:9d: b7:96:9e:90:77:e5:d2:4d:5d:96:04:81:51:14:1a:8d:8d:c4: c8:9d:bc:22:52:4e:58:de:a7:f1:bb:3f:0c:d1:de:c9:b9:95: 96:db:3c:cd:f9:c3:b0:10:e9:b6:62:bf:0c:05:05:e4:96:1b: 41:a3:da:37:06:a3:e7:d2:69:14:cf:e9:50:c6:7b:9e:ba:2c: 68:42:bf:ec:b2:af:fc:44:b8:40:30:8f:8c:7b:79:45:74:54: 14:ff:34:cb:be:c7:f8:21:73:05:e8:b0:51:e1:fb:cd:f4:23: 16:72:81:46:6c:fc:4b:49:03:84:ae:85:af:ce:18:b8:ee:d1: 68:4f:f0:22:0c:ce:fc:fe:8e:05:c4:4d:1a:72:45:35:4e:87: e5:73:be:6c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZsmtkoUlCrtl7xnhvaWCVYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjUxMjE2MTAzMDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTY5OTZlNTQ5MjRkZjE3MmM0ZWI0N2NhYjFiOTZhNzAzZGRjNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntap7L/25Jx5qTItaWniSpoddtY8 zcvZYJWJuCyjeZkj+Gg/kMHM3fI9o1FJXhgVi+Jx7be/EoA3M+bVcZZqjqHnxJDb I3VMhaikO8W/BwMOjj6F+GMQyDbVCG307k3CmX2wW9L0Xd9S7flAyYVNaiNZYgyM qPCKfGoJD8iOI0JcxvfJTMtuWOTxIzk77vrHQWrkQtUgbXhoeXOAnvgcKltBbvgy jsgtEuOzN9G8DKDcuSkfTTXU37UnmWy5MgNFDe3DZHYsbsEMw8V+t3MxZEc2lVPM MgMYPxm054ilwlNv6MXlu5bxFt8OIdpG8QxTHJQMAfERGU8SIwiFfXWuYwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFI5pluVJJN8XLE60fKsblqcD3cavMB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvam1tVzVVa2szeGNzVHJSOHF4dVdwd1BkeHE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAjQUDBADA RP4wDQQCAAIwBwMFACoC1IAwDQYJKoZIhvcNAQELBQADggEBADcIJqFFLzEGHLOi EOM1bmnkC5lS+90Xx3D7bVBPDwgveN7m/yoivnIIuUTVkoA1R8BFOK/XojhJwBV3 gEAF808TrPgOJ5JnNbqlTMb43arzrwcoBVgitKJVhvrV+U1pNfxfYdJtWQZL7N0G nbeWnpB35dJNXZYEgVEUGo2NxMidvCJSTljep/G7PwzR3sm5lZbbPM35w7AQ6bZi vwwFBeSWG0Gj2jcGo+fSaRTP6VDGe566LGhCv+yyr/xEuEAwj4x7eUV0VBT/NMu+ x/ghcwXosFHh+830IxZygUZs/EtJA4Suha/OGLju0WhP8CIMzvz+jgXETRpyRTVO h+Vzvmw= -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:19 2025 by rpki-client