This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JzRMdFjj1_1ZEBI0lixGntCcQYE.roa File: JzRMdFjj1_1ZEBI0lixGntCcQYE.roa (raw, json) Hash identifier: x6TlbsMON9nPuXtkHKK0BxhFgvyK6+F1Zayma5gezSU= Subject key identifier: 27:34:4C:74:58:E3:D7:FD:59:10:12:34:96:2C:46:9E:D0:9C:41:81 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32F5088ACEC5AB5C0E77E2CC2E1C7 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JzRMdFjj1_1ZEBI0lixGntCcQYE.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204842 IP address blocks: 85.217.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2f:50:88:ac:ec:5a:b5:c0:e7:7e:2c:c2:e1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27344c7458e3d7fd59101234962c469ed09c4181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:07:6e:da:5c:d2:4c:01:2e:57:da:62:cd: b3:5e:f1:fa:3a:4e:a2:f7:68:8e:3f:de:c3:46:94: 98:d5:14:5a:e7:36:15:1b:d0:23:4b:9d:59:f6:fb: f7:9f:d4:44:39:8a:ad:b8:28:c8:e3:b1:00:67:59: 94:9b:be:40:c6:72:b5:b4:14:76:8a:27:f3:15:fc: 0e:dd:79:c8:cd:9d:31:66:56:cb:5c:19:96:a9:29: c6:d9:a4:d5:49:de:3f:51:10:8c:db:31:c2:bd:3e: 71:ab:0e:7b:bf:dd:d6:db:f3:bf:c3:70:af:6a:4a: ce:4c:01:23:7a:1f:2c:14:03:d7:61:34:47:8d:6f: 1d:ee:8b:9b:e8:33:78:69:88:50:3f:0e:d1:d0:ac: 97:92:cb:30:87:66:92:ff:c6:11:37:c6:1b:ce:f1: fd:57:49:ec:69:88:4e:8a:53:2a:cc:1a:c3:02:a5: b2:60:e4:d8:5f:4f:1b:ec:38:ed:5d:b6:df:d1:6a: 34:3f:d0:9b:b1:95:f7:67:41:38:90:48:d4:bb:2d: e5:71:da:70:90:dc:31:e9:df:d1:d5:a7:1d:eb:01: 89:bb:75:6f:96:98:11:99:1b:70:79:04:2b:96:6c: 6c:59:54:96:fb:9b:d7:de:fb:b7:aa:af:90:f8:10: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:34:4C:74:58:E3:D7:FD:59:10:12:34:96:2C:46:9E:D0:9C:41:81 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JzRMdFjj1_1ZEBI0lixGntCcQYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.128.0/24 Signature Algorithm: sha256WithRSAEncryption ae:08:54:8e:75:96:df:75:44:6b:80:b1:ec:69:d1:3e:70:ff: 68:76:a7:82:3e:34:95:5b:09:6a:df:ac:8d:d9:0e:16:b3:43: 9e:5e:49:fd:8a:b4:4a:d1:3a:74:8a:f5:dc:23:11:2c:87:7e: 71:4f:30:91:ec:35:39:c0:2f:95:e7:75:a2:86:f8:cd:a2:82: 44:f7:f7:7d:15:6f:ce:1d:a6:c7:9a:23:05:a4:19:90:21:f6: bf:fd:88:5a:b4:78:09:c9:0e:21:ae:63:e1:98:85:4b:25:34: 43:88:d1:94:4e:3f:e3:76:34:a6:32:c4:02:73:92:93:df:2f: 2c:c7:9e:cb:1f:03:8c:f2:38:0c:ea:39:ff:bd:53:1b:2e:19: 74:69:cf:5e:ae:8b:16:fb:b2:71:a7:c5:98:7e:a0:c0:c2:01: 38:6a:0e:41:20:cd:d4:d6:d5:a5:a3:98:18:0e:97:4d:0f:ba: 91:e7:15:d1:11:85:03:08:78:1c:85:9a:c9:a6:a9:9c:09:5f: eb:1e:44:fd:11:b0:6e:47:21:2d:f4:9f:a7:bb:53:33:5f:a9: f2:ce:a1:4f:86:61:14:22:80:67:18:a8:09:d0:40:1c:e6:9a: 0b:bf:8e:a1:14:7f:38:9e:b6:30:55:4f:23:d3:c6:56:14:d4: 0d:aa:dd:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy9QiKzsWrXA534swuHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM0NGM3NDU4ZTNkN2ZkNTkxMDEyMzQ5NjJjNDY5ZWQwOWM0MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4Hbtpc0kwBLlfaYs2zXvH6Ok6i 92iOP97DRpSY1RRa5zYVG9AjS51Z9vv3n9REOYqtuCjI47EAZ1mUm75AxnK1tBR2 iifzFfwO3XnIzZ0xZlbLXBmWqSnG2aTVSd4/URCM2zHCvT5xqw57v93W2/O/w3Cv akrOTAEjeh8sFAPXYTRHjW8d7oub6DN4aYhQPw7R0KyXksswh2aS/8YRN8YbzvH9 V0nsaYhOilMqzBrDAqWyYOTYX08b7DjtXbbf0Wo0P9CbsZX3Z0E4kEjUuy3lcdpw kNwx6d/R1acd6wGJu3VvlpgRmRtweQQrlmxsWVSW+5vX3vu3qq+Q+BCRMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCc0THRY49f9WRASNJYsRp7QnEGBMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSnpSTWRGamoxXzFaRUJJMGxpeEdudENjUVlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdmAMA0G CSqGSIb3DQEBCwUAA4IBAQCuCFSOdZbfdURrgLHsadE+cP9odqeCPjSVWwlq36yN 2Q4Ws0OeXkn9irRK0Tp0ivXcIxEsh35xTzCR7DU5wC+V53WihvjNooJE9/d9FW/O HabHmiMFpBmQIfa//YhatHgJyQ4hrmPhmIVLJTRDiNGUTj/jdjSmMsQCc5KT3y8s x57LHwOM8jgM6jn/vVMbLhl0ac9erosW+7Jxp8WYfqDAwgE4ag5BIM3U1tWlo5gY DpdND7qR5xXREYUDCHgchZrJpqmcCV/rHkT9EbBuRyEt9J+nu1MzX6nyzqFPhmEU IoBnGKgJ0EAc5poLv46hFH84nrYwVU8j08ZWFNQNqt0E -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:49 2026 by rpki-client