This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/JzRoxhNcR2kzwArFwmc0pS-ExCs.roa File: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (raw, json) Hash identifier: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8= Subject key identifier: 27:34:68:C6:13:5C:47:69:33:C0:0A:C5:C2:67:34:A5:2F:84:C4:2B Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019B7DCB0EDD0B2BD60122F88D23A7BC89C5 Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/JzRoxhNcR2kzwArFwmc0pS-ExCs.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 91.224.186.0/24 maxlen: 24 153.98.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0e:dd:0b:2b:d6:01:22:f8:8d:23:a7:bc:89:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=273468c6135c476933c00ac5c26734a52f84c42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:70:9a:bf:15:1a:86:de:f2:e0:4c:d0:d1: 9f:68:89:69:40:6b:79:86:0c:fb:8b:32:31:4d:2b: ea:f4:cf:ca:3f:43:58:d5:07:19:35:76:fe:4e:97: 9a:c1:6f:bf:5c:54:05:ce:3c:73:e7:ab:84:67:6e: df:05:99:d2:4a:18:16:96:08:bd:92:04:12:4b:a0: 9e:df:80:af:da:4a:48:61:51:7f:0d:55:76:b8:ba: ba:e6:2c:d7:1d:33:cf:67:88:44:ec:de:91:58:83: 95:cc:57:26:85:ec:a4:54:5b:87:93:21:62:e7:2f: d3:a3:51:77:e3:9c:b1:46:bf:84:b9:c3:be:97:8d: d3:9d:fc:06:d1:cc:25:67:e6:94:68:14:a4:58:5c: 6d:e2:83:a3:11:60:a8:7b:3a:5c:f7:9d:66:15:41: 48:93:d4:57:92:04:5e:0d:ee:c1:da:bb:e5:19:b7: 68:25:0b:75:dd:4f:2a:9d:ba:19:cc:94:9e:e9:27: ad:6c:f1:8c:e4:72:58:c9:bd:0e:ba:cd:26:0f:8b: 83:85:9c:30:d1:d3:7b:54:75:1b:f0:a6:d0:fd:19: ac:5a:0c:5e:9e:88:c1:80:af:0d:49:3d:62:06:30: 73:90:02:b3:ff:b9:53:04:3e:b5:63:47:e9:cf:7b: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:34:68:C6:13:5C:47:69:33:C0:0A:C5:C2:67:34:A5:2F:84:C4:2B X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/JzRoxhNcR2kzwArFwmc0pS-ExCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.186.0/24 153.98.30.0/24 Signature Algorithm: sha256WithRSAEncryption ca:29:e4:37:47:f2:10:eb:61:4f:a6:50:b6:d2:a4:66:61:c5: 2e:f5:cd:a7:48:9a:28:57:0c:43:dc:78:33:6b:8c:f6:a0:49: a5:c7:c4:1f:23:ab:6b:52:cf:df:af:fc:55:c5:bc:f7:d5:64: 60:d7:4a:47:9f:5a:9e:dd:ba:29:6d:7a:3e:81:28:63:52:76: de:05:52:8e:35:fa:e1:f6:9c:ee:05:cb:ae:62:84:0d:bb:96: de:4b:c2:ad:14:a7:9b:7b:91:03:eb:71:9e:b5:ed:a3:df:9b: 7a:8a:8a:5d:18:52:81:41:35:f9:68:e7:dd:e4:71:e0:76:03: 3a:c7:2a:4b:0d:40:79:8c:ba:e5:d3:34:03:88:68:76:27:57: 0d:45:59:fa:ff:44:c6:36:7c:f0:cd:77:cc:3a:34:09:b5:f4: bc:64:c3:26:42:38:19:b6:dc:93:6d:ba:c0:a2:07:d7:64:e1: a2:af:81:4d:58:8d:4f:89:0d:73:99:17:d6:9f:46:98:ae:26: b4:0d:49:b7:a2:75:05:cb:cc:d7:9d:b4:2a:a6:ab:4e:aa:13: d8:0c:3b:8c:db:6e:aa:f5:b8:e5:b4:20:25:ac:0e:71:96:36: 94:24:f8:f8:89:76:2b:13:4f:8c:6c:1b:45:ef:70:01:7b:34: a5:68:f7:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yw7dCyvWASL4jSOnvInFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM0NjhjNjEzNWM0NzY5MzNjMDBhYzVjMjY3MzRhNTJmODRjNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrhwmr8VGobe8uBM0NGfaIlpQGt5 hgz7izIxTSvq9M/KP0NY1QcZNXb+TpeawW+/XFQFzjxz56uEZ27fBZnSShgWlgi9 kgQSS6Ce34Cv2kpIYVF/DVV2uLq65izXHTPPZ4hE7N6RWIOVzFcmheykVFuHkyFi 5y/To1F345yxRr+EucO+l43TnfwG0cwlZ+aUaBSkWFxt4oOjEWCoezpc951mFUFI k9RXkgReDe7B2rvlGbdoJQt13U8qnboZzJSe6SetbPGM5HJYyb0Ous0mD4uDhZww 0dN7VHUb8KbQ/RmsWgxenojBgK8NST1iBjBzkAKz/7lTBD61Y0fpz3uQhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCc0aMYTXEdpM8AKxcJnNKUvhMQrMB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvSnpSb3hoTmNSMmt6d0FyRndtYzBwUy1FeENzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+C6AwQA mWIeMA0GCSqGSIb3DQEBCwUAA4IBAQDKKeQ3R/IQ62FPplC20qRmYcUu9c2nSJoo VwxD3Hgza4z2oEmlx8QfI6trUs/fr/xVxbz31WRg10pHn1qe3bopbXo+gShjUnbe BVKONfrh9pzuBcuuYoQNu5beS8KtFKebe5ED63Gete2j35t6iopdGFKBQTX5aOfd 5HHgdgM6xypLDUB5jLrl0zQDiGh2J1cNRVn6/0TGNnzwzXfMOjQJtfS8ZMMmQjgZ ttyTbbrAogfXZOGir4FNWI1PiQ1zmRfWn0aYria0DUm3onUFy8zXnbQqpqtOqhPY DDuM226q9bjltCAlrA5xljaUJPj4iXYrE0+MbBtF73ABezSlaPdZ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client