This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JATOTq0R-oKgdss1rkrVCOjwxDA.roa File: JATOTq0R-oKgdss1rkrVCOjwxDA.roa (raw, json) Hash identifier: gjSc/HGp17Q2D551gqkC24OmJjFEXlrpMA39/e5UVqo= Subject key identifier: 24:04:CE:4E:AD:11:FA:82:A0:76:CB:35:AE:4A:D5:08:E8:F0:C4:30 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B4B476BDC8A81386448C32BFFCABDF271 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JATOTq0R-oKgdss1rkrVCOjwxDA.roa Signing time: Tue 23 Dec 2025 12:55:30 +0000 ROA not before: Tue 23 Dec 2025 12:55:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133153 IP address blocks: 193.254.244.0/24 maxlen: 24 193.254.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:47:6b:dc:8a:81:38:64:48:c3:2b:ff:ca:bd:f2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 23 12:55:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2404ce4ead11fa82a076cb35ae4ad508e8f0c430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:06:50:da:81:fa:97:ac:ed:56:0e:3c:bb: 87:ce:7a:d7:f2:b3:bb:e8:fa:0f:14:9f:3a:25:d1: aa:98:3c:c9:3a:d1:4d:16:78:1c:0c:a6:b6:ee:f1: 40:73:07:27:12:df:64:d8:df:42:40:b3:fa:4c:71: 2a:f5:8d:2c:0d:5a:f3:51:0c:04:b0:5e:71:fe:8f: 8a:c9:91:b5:c0:9f:5a:6c:c7:a8:64:8a:58:84:34: a9:56:07:00:1d:7a:fc:18:1d:a5:ed:70:52:78:0f: 63:e8:31:4d:c2:c7:57:73:e7:bd:fc:71:4c:ed:12: 2b:9d:c9:de:13:9b:b6:3e:4d:b1:27:34:32:bb:a3: c2:38:3e:0c:d9:f9:f9:72:bb:a4:58:15:fb:c6:3a: cd:3e:96:1b:7e:99:e2:63:bd:bf:7f:b2:23:de:66: 29:99:75:60:17:b4:a8:7d:dd:e4:ca:8b:09:53:ed: ad:01:05:a8:18:e6:4b:88:84:d7:7e:8a:6b:03:50: cb:75:3a:f3:61:ef:14:0e:32:ee:51:0a:a1:29:08: 99:62:f1:6b:17:d7:bf:a1:89:58:eb:36:a2:76:0c: 7a:79:0d:f3:b6:8f:d4:d8:91:1d:d2:f7:8c:51:34: 6c:b1:f9:28:8d:7e:6f:c9:ac:3c:db:12:72:b8:a0: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:CE:4E:AD:11:FA:82:A0:76:CB:35:AE:4A:D5:08:E8:F0:C4:30 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JATOTq0R-oKgdss1rkrVCOjwxDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.254.244.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ad:ea:a2:a6:07:28:8f:d5:d6:51:af:35:dc:a7:dd:ff:15: b3:a9:04:6e:37:76:c7:54:b2:10:3a:f6:c4:ee:79:72:1e:d2: a1:d1:65:3b:cc:ba:5c:02:b2:cb:6e:78:30:17:28:59:f0:c7: 42:1a:18:bb:5a:5f:b5:b7:26:7e:68:15:07:ab:04:e7:ca:74: 32:55:9b:4f:50:c8:55:ef:85:e7:13:bb:53:7f:e0:ca:52:79: 1d:5a:d7:87:16:54:f9:b6:c7:d7:05:1c:9f:fe:28:84:f3:80: 86:8b:80:33:91:8e:b5:2c:d6:3f:75:a0:6e:24:2d:6a:87:af: af:36:6c:31:4b:cf:df:d6:ae:52:4f:64:72:5d:20:d7:ec:0f: 21:2c:6e:55:15:6c:2a:5b:9b:d0:c8:70:f4:fe:a3:29:b1:b2: 12:f2:54:6d:5c:ce:c9:ec:35:8b:ad:4f:52:b8:d0:66:4c:7d: b0:82:f3:c7:20:a8:13:b7:9f:c2:e2:d7:5c:26:35:72:07:1b: bb:d3:90:66:07:01:35:06:56:4a:ad:cb:7f:63:06:73:29:cd: b3:6f:82:ef:e9:0a:c9:79:8e:6a:a6:91:23:34:91:7e:b9:9b: 48:0f:3c:ce:64:0f:a5:43:68:a8:b9:5c:45:8f:80:49:28:89: 14:4b:37:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtLR2vcioE4ZEjDK//KvfJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjIzMTI1NTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDA0Y2U0ZWFkMTFmYTgyYTA3NmNiMzVhZTRhZDUwOGU4ZjBjNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TQGUNqB+pes7VYOPLuHznrX8rO7 6PoPFJ86JdGqmDzJOtFNFngcDKa27vFAcwcnEt9k2N9CQLP6THEq9Y0sDVrzUQwE sF5x/o+KyZG1wJ9abMeoZIpYhDSpVgcAHXr8GB2l7XBSeA9j6DFNwsdXc+e9/HFM 7RIrncneE5u2Pk2xJzQyu6PCOD4M2fn5crukWBX7xjrNPpYbfpniY72/f7Ij3mYp mXVgF7Sofd3kyosJU+2tAQWoGOZLiITXfoprA1DLdTrzYe8UDjLuUQqhKQiZYvFr F9e/oYlY6zaidgx6eQ3zto/U2JEd0veMUTRssfkojX5vyaw82xJyuKDwDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQEzk6tEfqCoHbLNa5K1Qjo8MQwMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSkFUT1RxMFItb0tnZHNzMXJrclZDT2p3eERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwf70MA0G CSqGSIb3DQEBCwUAA4IBAQB9reqipgcoj9XWUa813Kfd/xWzqQRuN3bHVLIQOvbE 7nlyHtKh0WU7zLpcArLLbngwFyhZ8MdCGhi7Wl+1tyZ+aBUHqwTnynQyVZtPUMhV 74XnE7tTf+DKUnkdWteHFlT5tsfXBRyf/iiE84CGi4AzkY61LNY/daBuJC1qh6+v NmwxS8/f1q5ST2RyXSDX7A8hLG5VFWwqW5vQyHD0/qMpsbIS8lRtXM7J7DWLrU9S uNBmTH2wgvPHIKgTt5/C4tdcJjVyBxu705BmBwE1BlZKrct/YwZzKc2zb4Lv6QrJ eY5qppEjNJF+uZtIDzzOZA+lQ2iouVxFj4BJKIkUSzcY -----END CERTIFICATE-----Generated at Sun Dec 28 09:44:46 2025 by rpki-client