This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa File: Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa (raw, json) Hash identifier: qyHwPaggVI5vageO/6J79WpR7CRcu7iGJcwNnzLQCvo= Subject key identifier: 26:7B:B8:50:B1:96:89:86:32:7F:4C:D8:D6:30:16:12:45:56:1C:3D Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Certificate serial: 019B221488D33ACA347B3359DD8248850B59 Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa Signing time: Mon 15 Dec 2025 12:55:29 +0000 ROA not before: Mon 15 Dec 2025 12:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49747 IP address blocks: 146.19.1.0/24 maxlen: 24 146.19.238.0/24 maxlen: 24 188.64.141.0/24 maxlen: 24 193.56.182.0/24 maxlen: 24 193.200.206.0/24 maxlen: 24 2001:67c:c6c::/48 maxlen: 48 2a14:5f40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:14:88:d3:3a:ca:34:7b:33:59:dd:82:48:85:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Validity Not Before: Dec 15 12:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=267bb850b1968986327f4cd8d630161245561c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:5e:9c:c5:88:0e:f5:83:f7:04:2a:e4:90: e5:6a:98:8d:59:82:88:31:18:97:96:02:e9:be:66: dc:bd:97:8f:50:fe:7d:4a:b9:e7:18:77:ab:b6:8b: 65:5f:6c:d7:e6:fe:5a:87:ab:ef:88:80:fa:44:ef: 5a:6e:44:70:e0:79:43:fa:54:34:d4:60:eb:3c:4d: d2:c7:74:38:62:4a:8a:f3:0d:c3:04:6c:be:a0:bc: 1f:b6:30:4a:29:1c:2a:80:77:c2:0c:de:b3:e5:08: f9:c3:4b:b2:cb:3b:7a:3d:77:ed:06:ef:51:1f:e4: 96:b0:75:70:cd:6b:b8:d2:12:44:ae:ce:bc:29:e6: 17:2d:37:81:3e:1a:97:bf:80:cb:6d:ef:ec:a7:dd: 86:1c:7a:f9:f4:cc:d9:1a:0c:26:4c:31:86:97:6b: 87:8d:0f:79:0e:3e:f7:76:a8:1b:24:08:4c:57:c8: 66:c3:3f:d4:6b:1c:9b:26:9b:2e:aa:3b:2a:c0:52: a5:1f:c5:19:52:34:58:9c:ad:29:bd:1d:15:10:cb: f4:85:d8:46:86:33:4f:cc:52:4e:f6:95:51:5b:f9: 57:76:8f:38:f5:11:c6:6e:ba:59:43:fd:af:8c:91: 91:0d:2f:7f:3d:bf:20:f2:5c:c9:84:91:9d:b5:7f: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7B:B8:50:B1:96:89:86:32:7F:4C:D8:D6:30:16:12:45:56:1C:3D X509v3 Authority Key Identifier: keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.1.0/24 146.19.238.0/24 188.64.141.0/24 193.56.182.0/24 193.200.206.0/24 IPv6: 2001:67c:c6c::/48 2a14:5f40:1::/48 Signature Algorithm: sha256WithRSAEncryption 04:a8:23:f3:8f:58:e3:3a:47:33:3f:5a:48:a5:9d:b6:8a:05: d1:1a:f1:b0:96:29:4e:ba:f5:05:9c:7f:30:4e:d7:c1:59:79: 53:cf:3e:61:e8:69:47:28:97:66:88:9b:6b:11:23:4f:36:db: e3:63:d3:dd:73:73:89:f7:ae:9b:37:e9:2b:5c:c1:68:f2:98: 72:7d:8c:29:ab:1d:1a:46:2b:4b:22:89:15:84:2b:b6:7e:92: 70:67:eb:00:01:0b:0a:00:b1:55:54:c9:17:4e:c5:03:fa:2a: 83:a7:41:94:60:24:3f:8a:cf:3d:5a:d4:47:fb:2b:dd:a6:43: 36:79:7a:3d:64:05:99:9f:e2:7d:de:7c:11:11:7c:4b:ab:19: 4b:94:85:c6:23:75:f9:ef:fc:2d:6c:cc:8e:c7:bf:e9:dc:35: 28:35:b0:5f:2a:29:62:c7:58:d7:91:ba:98:f1:8b:e7:fd:04: c1:ac:46:54:d2:8a:e9:1a:be:7c:13:c9:0e:ef:c4:a4:55:dc: 4f:61:e6:04:58:6a:32:f6:2d:b9:84:4d:9a:50:c9:60:06:d4: a5:a9:45:7e:96:d5:6d:d8:96:f3:ab:fb:5e:25:cb:02:3c:1d: ef:27:5e:cf:8b:a9:41:93:7b:ab:a6:bc:d5:9b:29:43:8b:ef: 35:d2:9b:12 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZsiFIjTOso0ezNZ3YJIhQtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0 MGRiZDUwHhcNMjUxMjE1MTI1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjdiYjg1MGIxOTY4OTg2MzI3ZjRjZDhkNjMwMTYxMjQ1NTYxYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjxenMWIDvWD9wQq5JDlapiNWYKI MRiXlgLpvmbcvZePUP59SrnnGHertotlX2zX5v5ah6vviID6RO9abkRw4HlD+lQ0 1GDrPE3Sx3Q4YkqK8w3DBGy+oLwftjBKKRwqgHfCDN6z5Qj5w0uyyzt6PXftBu9R H+SWsHVwzWu40hJErs68KeYXLTeBPhqXv4DLbe/sp92GHHr59MzZGgwmTDGGl2uH jQ95Dj73dqgbJAhMV8hmwz/UaxybJpsuqjsqwFKlH8UZUjRYnK0pvR0VEMv0hdhG hjNPzFJO9pVRW/lXdo849RHGbrpZQ/2vjJGRDS9/Pb8g8lzJhJGdtX8iVQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFCZ7uFCxlomGMn9M2NYwFhJFVhw9MB8GA1UdIwQY MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt ZjM4Yzc0OWI2ZTM5LzEvSm51NFVMR1dpWVl5ZjB6WTFqQVdFa1ZXSEQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5 LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQAkhMBAwQA khPuAwQAvECNAwQAwTi2AwQAwcjOMBgEAgACMBIDBwAgAQZ8DGwDBwAqFF9AAAEw DQYJKoZIhvcNAQELBQADggEBAASoI/OPWOM6RzM/WkilnbaKBdEa8bCWKU669QWc fzBO18FZeVPPPmHoaUcol2aIm2sRI0822+Nj091zc4n3rps36StcwWjymHJ9jCmr HRpGK0siiRWEK7Z+knBn6wABCwoAsVVUyRdOxQP6KoOnQZRgJD+Kzz1a1Ef7K92m QzZ5ej1kBZmf4n3efBERfEurGUuUhcYjdfnv/C1szI7Hv+ncNSg1sF8qKWLHWNeR upjxi+f9BMGsRlTSiukavnwTyQ7vxKRV3E9h5gRYajL2LbmETZpQyWAG1KWpRX6W 1W3YlvOr+14lywI8He8nXs+LqUGTe6umvNWbKUOL7zXSmxI= -----END CERTIFICATE-----Generated at Tue Dec 16 11:25:13 2025 by rpki-client