This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/JC01ZV2vYflj0QLnCE8Cprw58U8.roa File: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (raw, json) Hash identifier: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ= Subject key identifier: 24:2D:35:65:5D:AF:61:F9:63:D1:02:E7:08:4F:02:A6:BC:39:F1:4F Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Certificate serial: 019B7A5B856789987800FE71A93FE55A5FBA Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/JC01ZV2vYflj0QLnCE8Cprw58U8.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211678 IP address blocks: 5.145.178.0/23 maxlen: 23 193.239.202.0/24 maxlen: 24 2a10:a8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:67:89:98:78:00:fe:71:a9:3f:e5:5a:5f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=242d35655daf61f963d102e7084f02a6bc39f14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:e6:47:ad:d0:94:b0:17:61:30:c7:ac:12: 62:14:80:96:15:84:16:53:c2:c0:17:5a:d0:c1:c4: ee:57:ee:99:e0:f2:f5:d5:ca:be:58:f8:76:65:59: bc:6f:5a:70:42:7b:f7:bf:75:78:fd:56:61:3c:17: bf:c4:e3:7c:18:20:2e:33:27:54:84:b4:09:7c:01: ff:e2:6f:ae:54:6f:49:5e:0f:82:1d:d4:8d:6d:74: 76:10:8e:a0:68:9d:3f:86:2c:54:fc:2c:11:0a:03: 2b:35:1f:d8:ba:ba:30:42:82:ea:d2:74:2d:8a:90: 01:df:1f:3c:26:dd:1f:dc:9f:0c:87:92:3c:a2:53: 32:75:7d:1e:45:d1:a9:13:eb:61:36:45:92:a6:22: 3b:d4:4e:10:94:95:06:6d:16:61:86:3c:7e:9a:5d: ea:69:a3:b2:ac:d9:d6:ee:f2:ca:49:7a:8c:b6:b6: 86:c5:10:89:29:5a:a2:4d:03:86:fe:74:92:58:b8: cf:ac:27:0b:c2:70:e0:90:e0:a6:09:15:66:81:53: 93:c6:b9:a3:7b:dc:81:d1:86:d0:60:69:76:5c:a5: c5:db:5d:19:df:7a:5e:23:52:92:da:c2:d1:25:df: dd:e6:fb:b4:11:a2:d2:24:34:d8:87:14:00:cc:bc: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2D:35:65:5D:AF:61:F9:63:D1:02:E7:08:4F:02:A6:BC:39:F1:4F X509v3 Authority Key Identifier: keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/JC01ZV2vYflj0QLnCE8Cprw58U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.178.0/23 193.239.202.0/24 IPv6: 2a10:a8c0::/29 Signature Algorithm: sha256WithRSAEncryption 08:be:26:22:2a:8c:78:5a:60:e0:e9:5e:a9:70:ac:5d:63:6d: fa:2b:11:21:64:7c:71:df:be:34:52:19:2f:0b:6f:fb:3c:01: ba:7d:3c:d1:29:6a:a3:46:dc:b0:30:85:79:ca:ee:d7:e6:51: d2:7a:2a:93:25:9e:dd:53:47:a3:a3:5f:37:99:d0:30:cf:9f: c1:ed:0e:4d:f6:2d:3f:48:38:1e:af:84:eb:40:4c:13:8b:a3: e0:e4:89:44:b4:de:87:92:94:9c:50:a5:b8:69:17:e5:b9:6f: fb:e5:4f:bf:9c:7b:2e:ce:c1:be:c3:86:da:74:28:36:24:99: 2f:cf:a9:4b:5f:7d:c5:92:b4:7b:9f:02:4d:4d:0b:b0:f3:6d: 2d:bb:04:4e:2a:31:78:09:fd:20:95:36:99:e2:32:bf:18:e7: 41:df:a2:bb:d8:09:77:98:51:5f:58:e4:cd:b2:f4:df:b2:43: 65:f7:5c:22:ee:74:a1:64:f1:f8:cb:ba:1e:59:0f:9e:9e:48: 26:d6:04:23:d2:c9:6d:48:20:d2:9e:4c:19:10:33:72:1d:95: 6b:43:29:17:7d:c2:53:27:46:94:f9:bd:f2:70:f4:92:67:8e: 35:08:fe:b2:04:4d:7a:56:c3:d7:25:91:f4:ef:4a:2b:da:d9: 36:a1:50:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W4VniZh4AP5xqT/lWl+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi YTZjYWQwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDJkMzU2NTVkYWY2MWY5NjNkMTAyZTcwODRmMDJhNmJjMzlmMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokDmR63QlLAXYTDHrBJiFICWFYQW U8LAF1rQwcTuV+6Z4PL11cq+WPh2ZVm8b1pwQnv3v3V4/VZhPBe/xON8GCAuMydU hLQJfAH/4m+uVG9JXg+CHdSNbXR2EI6gaJ0/hixU/CwRCgMrNR/YurowQoLq0nQt ipAB3x88Jt0f3J8Mh5I8olMydX0eRdGpE+thNkWSpiI71E4QlJUGbRZhhjx+ml3q aaOyrNnW7vLKSXqMtraGxRCJKVqiTQOG/nSSWLjPrCcLwnDgkOCmCRVmgVOTxrmj e9yB0YbQYGl2XKXF210Z33peI1KS2sLRJd/d5vu0EaLSJDTYhxQAzLyByQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCQtNWVdr2H5Y9EC5whPAqa8OfFPMB8GA1UdIwQY MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt YzhjOTkxY2Q4OWQ1LzEvSkMwMVpWMnZZZmxqMFFMbkNFOENwcnc1OFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1 LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBBZGyAwQA we/KMA0EAgACMAcDBQMqEKjAMA0GCSqGSIb3DQEBCwUAA4IBAQAIviYiKox4WmDg 6V6pcKxdY236KxEhZHxx3740UhkvC2/7PAG6fTzRKWqjRtywMIV5yu7X5lHSeiqT JZ7dU0ejo183mdAwz5/B7Q5N9i0/SDger4TrQEwTi6Pg5IlEtN6HkpScUKW4aRfl uW/75U+/nHsuzsG+w4badCg2JJkvz6lLX33FkrR7nwJNTQuw820tuwROKjF4Cf0g lTaZ4jK/GOdB36K72Al3mFFfWOTNsvTfskNl91wi7nShZPH4y7oeWQ+enkgm1gQj 0sltSCDSnkwZEDNyHZVrQykXfcJTJ0aU+b3ycPSSZ441CP6yBE16VsPXJZH070or 2tk2oVCv -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:09 2026 by rpki-client