This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa File: JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa (raw, json) Hash identifier: bTN07ZSVj23jINcVNw98RDlf14ha9z+H0npRvmlsk8E= Subject key identifier: 24:9C:CC:49:3A:CB:C3:C3:23:F4:0F:A3:4C:98:31:B8:07:29:09:08 Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5 Certificate serial: 019B7C803EF00111CA352A2AD8BBC87973CF Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59650 IP address blocks: 92.240.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:f0:01:11:ca:35:2a:2a:d8:bb:c8:79:73:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=249ccc493acbc3c323f40fa34c9831b807290908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:35:4f:1d:5d:9b:80:47:42:15:96:ea:54: cf:64:d3:18:48:4f:0a:73:67:0e:fd:70:93:b6:6a: 68:ca:c9:6d:70:31:39:f8:75:67:f5:fc:b5:ee:7d: 91:9e:a5:0c:80:0e:3c:3a:39:43:5b:a2:e8:86:97: 2b:9c:56:aa:46:18:3f:a3:54:5c:66:ff:1f:f8:85: f6:99:72:50:99:ac:49:3d:95:ac:1d:1c:10:60:00: 6e:12:98:08:0f:46:e9:cc:dd:c4:04:62:6b:4c:f8: 07:1e:46:74:63:32:2f:cc:73:9e:33:4f:81:27:5f: 42:59:87:3d:a2:de:77:e7:b1:9f:74:5d:75:3d:a0: e6:cb:08:32:68:ed:10:ad:c6:23:b9:bd:1c:74:78: cd:39:ed:e2:15:8b:e6:ea:40:7c:37:6e:1d:65:e1: c8:90:81:7b:57:0b:90:4b:8c:de:81:d8:4e:7e:17: e9:57:c2:fd:9e:c1:a1:fc:38:b1:02:e9:49:70:48: be:ac:7f:17:cf:44:ec:48:65:dc:69:9d:1f:dc:50: 3c:f6:85:af:e1:aa:dc:66:6d:8f:b4:04:12:f6:59: 20:5c:8a:ad:ab:a0:e4:17:ab:0e:12:d2:f9:98:7c: 78:71:8a:5a:1a:7b:bb:96:71:e6:f0:09:e0:01:55: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:CC:49:3A:CB:C3:C3:23:F4:0F:A3:4C:98:31:B8:07:29:09:08 X509v3 Authority Key Identifier: keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.240.152.0/21 Signature Algorithm: sha256WithRSAEncryption 24:3b:58:dc:f0:ca:6c:87:2d:5c:c1:df:66:37:c0:81:06:74: 50:ef:7c:e4:ea:b2:ec:c7:6e:32:b5:7d:7a:eb:dd:98:56:25: c8:7f:47:72:b3:2c:c0:84:6a:d1:dd:bb:79:d4:80:ab:37:ff: 2f:61:15:ac:0b:93:0f:05:fa:f6:df:a4:69:1b:b4:4f:3d:f3: 43:36:f7:7d:d8:68:0a:4e:6c:da:f8:f8:02:89:9e:16:a0:a8: 57:c9:fc:4b:45:8e:e7:b9:ac:ea:dd:8d:dc:ae:04:d5:36:4c: f8:ee:29:81:2e:55:95:f8:73:c2:0b:10:50:04:f4:ba:29:39: a2:83:df:c4:01:05:1a:92:3c:79:cc:64:69:2d:8f:b8:d9:8e: 2a:c1:48:aa:17:17:e0:b0:24:66:02:c3:1a:f5:de:ad:e5:d6: 59:e9:52:cb:f9:3a:7c:f7:57:8d:84:26:ab:db:05:a4:32:0b: 8b:9e:de:cf:ef:74:1c:f9:48:a0:bf:84:14:38:15:83:e7:9e: ae:cd:53:d2:8d:fc:d9:1c:5d:40:17:9c:af:92:e0:7c:c9:6c: a9:67:6c:2f:5b:d6:a9:e2:e4:64:86:14:14:3b:bf:79:61:6d: ad:01:b2:91:d8:a1:8c:61:64:bc:a9:34:3c:21:90:cb:7b:66: 27:97:58:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gD7wARHKNSoq2LvIeXPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MmNiMjg4MjA5OTAwZDFhZjFhOTk4YmIwMzllYzc1N2U0 OTNkZDUwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDljY2M0OTNhY2JjM2MzMjNmNDBmYTM0Yzk4MzFiODA3MjkwOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQ1Tx1dm4BHQhWW6lTPZNMYSE8K c2cO/XCTtmpoysltcDE5+HVn9fy17n2RnqUMgA48OjlDW6LohpcrnFaqRhg/o1Rc Zv8f+IX2mXJQmaxJPZWsHRwQYABuEpgID0bpzN3EBGJrTPgHHkZ0YzIvzHOeM0+B J19CWYc9ot5357GfdF11PaDmywgyaO0QrcYjub0cdHjNOe3iFYvm6kB8N24dZeHI kIF7VwuQS4zegdhOfhfpV8L9nsGh/DixAulJcEi+rH8Xz0TsSGXcaZ0f3FA89oWv 4arcZm2PtAQS9lkgXIqtq6DkF6sOEtL5mHx4cYpaGnu7lnHm8AngAVX1NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSczEk6y8PDI/QPo0yYMbgHKQkIMB8GA1UdIwQY MBaAFEcssoggmQDRrxqZi7A57HV+ST3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYt YWE5MDJkYmFlOTI4LzEvSkp6TVNUckx3OE1qOUEtalRKZ3h1QWNwQ1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYtYWE5MDJkYmFlOTI4 LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXPCYMA0G CSqGSIb3DQEBCwUAA4IBAQAkO1jc8Mpshy1cwd9mN8CBBnRQ73zk6rLsx24ytX16 692YViXIf0dysyzAhGrR3bt51ICrN/8vYRWsC5MPBfr236RpG7RPPfNDNvd92GgK Tmza+PgCiZ4WoKhXyfxLRY7nuazq3Y3crgTVNkz47imBLlWV+HPCCxBQBPS6KTmi g9/EAQUakjx5zGRpLY+42Y4qwUiqFxfgsCRmAsMa9d6t5dZZ6VLL+Tp891eNhCar 2wWkMguLnt7P73Qc+Uigv4QUOBWD556uzVPSjfzZHF1AF5yvkuB8yWypZ2wvW9ap 4uRkhhQUO795YW2tAbKR2KGMYWS8qTQ8IZDLe2Ynl1i9 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:29 2026 by rpki-client