This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/spxPuR8xyj72SKO00nWmxiu9tv8.roa File: spxPuR8xyj72SKO00nWmxiu9tv8.roa (raw, json) Hash identifier: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA= Subject key identifier: B2:9C:4F:B9:1F:31:CA:3E:F6:48:A3:B4:D2:75:A6:C6:2B:BD:B6:FF Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B78351CD29D6E441C6DAB817C1E8CAF6F Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/spxPuR8xyj72SKO00nWmxiu9tv8.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214969 IP address blocks: 45.94.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1c:d2:9d:6e:44:1c:6d:ab:81:7c:1e:8c:af:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29c4fb91f31ca3ef648a3b4d275a6c62bbdb6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:5d:40:12:ac:2f:cf:f7:c3:fb:ae:4d:6c: b2:08:12:ac:ad:cb:12:62:bd:c6:59:96:4f:d5:99: 3d:2c:80:42:a4:cf:29:17:e5:1a:c9:7e:5e:15:2a: f3:d8:b9:63:4e:5f:2c:a0:56:36:37:b2:bf:90:8b: a7:4e:6c:99:67:5a:78:e1:2b:41:19:c9:da:ee:8a: c7:01:8b:fc:92:a1:62:5e:44:27:4a:e9:ce:ac:ac: 3d:39:67:0c:ee:c0:5a:a4:18:c0:d5:de:67:07:04: 2a:c9:5a:73:9e:1b:32:1d:1c:18:f6:4a:48:c4:5e: 40:f7:77:98:d1:ed:ae:a8:4b:02:f8:1c:01:0a:94: bd:a6:e1:09:4e:81:a9:ac:7b:82:e8:d3:39:b4:b3: b0:f9:e2:ba:f6:9b:fa:a1:1e:f8:9e:84:0d:17:b7: e9:88:42:e8:c2:8c:ab:54:d1:be:af:5c:06:72:7d: a0:fb:92:ba:57:1a:45:a4:ed:8b:bf:9f:ff:68:9f: 95:48:24:5e:db:a0:ee:10:04:d3:fe:42:ec:d3:d0: 3a:32:8f:fb:64:47:93:1b:43:54:f0:d9:e3:06:b2: 91:16:b2:e1:8c:05:2c:3f:eb:3c:4f:cd:30:13:d4: 42:cf:46:4e:0d:84:10:07:70:7a:7c:1a:b7:e5:77: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9C:4F:B9:1F:31:CA:3E:F6:48:A3:B4:D2:75:A6:C6:2B:BD:B6:FF X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/spxPuR8xyj72SKO00nWmxiu9tv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.54.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:64:ae:2b:89:b1:c3:1e:b7:74:68:96:5c:e8:db:15:71:8f: a3:3c:f5:a8:c1:66:6a:b2:73:7b:ec:2c:c3:7e:b5:b0:c3:df: 4b:6c:48:3d:f4:2c:2a:d8:7d:83:60:26:3b:88:a9:ba:e2:68: 4c:92:f8:5e:c3:df:78:8e:9e:32:17:ed:c3:e1:15:99:7d:86: ee:2a:5f:15:62:cf:ea:ac:7d:ae:6c:d9:8e:16:75:4e:0a:ea: c2:96:96:2c:09:7f:e4:31:0b:d1:34:bd:05:fa:3a:8e:dd:fd: 02:70:5a:24:d1:f7:6a:c0:93:30:af:60:eb:5a:d4:f1:fb:67: 98:19:71:0e:f4:03:4b:db:b8:8e:ad:b4:27:29:e2:c4:cf:a4: fa:fd:6c:96:85:98:c5:ed:03:b9:1a:a1:91:ae:9e:40:59:22: 86:fd:32:4c:03:cb:c2:2b:4c:31:31:41:08:31:f5:4a:18:1d: 87:57:7f:ac:03:f0:9a:ba:8d:b1:53:2b:87:2b:ef:3f:57:89: e3:e6:32:8b:ce:81:9e:78:2a:97:8b:78:c2:5b:7d:c0:b9:d9: 27:ef:43:33:06:5a:d5:8e:b1:6d:e5:bb:ca:b3:d3:57:3a:7a: 1b:5a:ab:a1:6d:9f:77:e4:8b:92:69:cd:f7:ee:85:66:13:3e: 83:eb:0e:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRzSnW5EHG2rgXwejK9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjljNGZiOTFmMzFjYTNlZjY0OGEzYjRkMjc1YTZjNjJiYmRiNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm5dQBKsL8/3w/uuTWyyCBKsrcsS Yr3GWZZP1Zk9LIBCpM8pF+UayX5eFSrz2LljTl8soFY2N7K/kIunTmyZZ1p44StB Gcna7orHAYv8kqFiXkQnSunOrKw9OWcM7sBapBjA1d5nBwQqyVpznhsyHRwY9kpI xF5A93eY0e2uqEsC+BwBCpS9puEJToGprHuC6NM5tLOw+eK69pv6oR74noQNF7fp iELowoyrVNG+r1wGcn2g+5K6VxpFpO2Lv5//aJ+VSCRe26DuEATT/kLs09A6Mo/7 ZEeTG0NU8NnjBrKRFrLhjAUsP+s8T80wE9RCz0ZODYQQB3B6fBq35XfbiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKcT7kfMco+9kijtNJ1psYrvbb/MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvc3B4UHVSOHh5ajcyU0tPMDBuV214aXU5dHY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV42MA0G CSqGSIb3DQEBCwUAA4IBAQA+ZK4ribHDHrd0aJZc6NsVcY+jPPWowWZqsnN77CzD frWww99LbEg99Cwq2H2DYCY7iKm64mhMkvhew994jp4yF+3D4RWZfYbuKl8VYs/q rH2ubNmOFnVOCurClpYsCX/kMQvRNL0F+jqO3f0CcFok0fdqwJMwr2DrWtTx+2eY GXEO9ANL27iOrbQnKeLEz6T6/WyWhZjF7QO5GqGRrp5AWSKG/TJMA8vCK0wxMUEI MfVKGB2HV3+sA/Cauo2xUyuHK+8/V4nj5jKLzoGeeCqXi3jCW33Audkn70MzBlrV jrFt5bvKs9NXOnobWquhbZ935IuSac337oVmEz6D6w6A -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:40 2026 by rpki-client