This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-JDJE_0Bck3nNKNKbTM4U6OTcOk.roa File: 1-JDJE_0Bck3nNKNKbTM4U6OTcOk.roa (raw, json) Hash identifier: iK8f/egtm4A1dExQC8F2zU6QBNAG8+lsQ/gOKcDNQ4k= Subject key identifier: F8:90:C9:13:FD:01:72:4D:E7:34:A3:4A:6D:33:38:53:A3:93:70:E9 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146D003A66A6CEA720DDAC9055A07F Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-JDJE_0Bck3nNKNKbTM4U6OTcOk.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 147.45.45.0/24 maxlen: 24 193.233.112.0/23 maxlen: 23 193.233.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6d:00:3a:66:a6:ce:a7:20:dd:ac:90:55:a0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f890c913fd01724de734a34a6d333853a39370e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:8f:a6:ad:ea:cb:a6:da:24:72:77:fc:85: 16:26:06:7d:29:76:e5:61:70:ef:a1:80:9d:e9:81: 3c:d0:64:74:ec:f3:9e:f2:82:42:8b:db:dc:86:f2: 88:26:7f:c2:31:e9:01:84:90:7a:35:64:22:f8:d3: b4:b7:96:b4:a9:17:08:e4:09:21:2d:81:5e:79:56: 32:23:09:24:f5:60:ab:02:c7:e0:ea:a7:0c:dc:7a: 0f:3e:34:9c:ba:0c:f6:2b:d1:b6:26:23:77:f7:b1: 7d:8e:73:94:9e:e4:4a:a6:24:e5:1c:50:e1:4d:0f: 5a:ce:26:cc:b0:30:1f:e7:c3:b7:4a:c9:01:de:e9: 27:3b:43:64:b6:1e:b7:65:4d:ec:ce:eb:2a:87:c6: 80:96:6b:4e:0f:f1:29:f2:7b:3d:ee:40:9b:79:e7: 52:44:69:42:86:b5:0e:50:92:e8:7f:03:ed:e3:af: c5:26:15:e1:88:6e:56:e3:91:b9:61:24:16:da:fb: 35:f2:3b:77:8d:db:dc:63:27:99:a9:f4:0d:85:05: 8f:de:72:1a:7b:75:47:fc:25:8e:0c:b3:10:9b:10: 93:1f:45:f4:09:f3:77:1b:e0:fd:44:0a:cc:c1:09: 8a:d7:3f:04:46:5f:aa:10:c8:7b:7c:6a:63:8b:03: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:90:C9:13:FD:01:72:4D:E7:34:A3:4A:6D:33:38:53:A3:93:70:E9 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-JDJE_0Bck3nNKNKbTM4U6OTcOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.45.0/24 193.233.112.0/23 193.233.134.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d4:c6:53:7f:4e:64:5d:70:58:74:8a:44:7c:6d:75:a8:56: 67:c1:04:ff:68:75:bf:b5:93:e5:9e:d5:ac:3b:5e:eb:60:90: c4:3c:1e:79:c0:7e:3f:d7:fb:ff:7d:94:09:8c:98:bf:87:2a: 87:6c:7d:b3:25:63:29:8c:62:ae:6f:1d:d1:81:40:fe:2b:9f: 65:9a:3a:26:c6:0f:f4:2d:23:9b:4e:9a:fc:60:c4:a1:00:14: 57:6e:c9:45:e4:f0:67:33:da:a2:ce:e7:3f:02:80:80:03:58: 87:09:b5:f7:b4:8b:82:5c:f9:a3:c2:3e:87:ee:f3:bc:63:c3: c2:8c:8d:3c:de:6c:d8:39:c4:13:ba:75:bc:4e:76:cf:62:78: 1d:44:f3:e2:5d:09:48:c7:c5:99:2d:46:25:6a:81:07:52:98: f6:2a:52:da:07:7a:f6:96:a5:88:40:da:92:b9:8b:9b:1e:b2: cc:77:bf:f6:0a:d3:6e:81:c7:9f:af:86:05:b7:4a:53:d1:bf: 6e:5b:7b:97:57:c5:9a:0f:28:dd:c1:3a:1e:9b:59:21:5b:4a: 5f:21:7a:56:68:b7:24:0d:87:a4:65:c2:60:38:5f:bd:0e:19: d5:40:70:05:bd:2f:cd:29:52:24:f6:d2:95:42:9a:78:91:69: 99:b4:eb:85 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/FG0AOmamzqcg3ayQVaB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODkwYzkxM2ZkMDE3MjRkZTczNGEzNGE2ZDMzMzg1M2EzOTM3MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWWPpq3qy6baJHJ3/IUWJgZ9KXbl YXDvoYCd6YE80GR07POe8oJCi9vchvKIJn/CMekBhJB6NWQi+NO0t5a0qRcI5Akh LYFeeVYyIwkk9WCrAsfg6qcM3HoPPjScugz2K9G2JiN397F9jnOUnuRKpiTlHFDh TQ9azibMsDAf58O3SskB3uknO0Nkth63ZU3szusqh8aAlmtOD/Ep8ns97kCbeedS RGlChrUOUJLofwPt46/FJhXhiG5W45G5YSQW2vs18jt3jdvcYyeZqfQNhQWP3nIa e3VH/CWODLMQmxCTH0X0CfN3G+D9RArMwQmK1z8ERl+qEMh7fGpjiwOuvwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPiQyRP9AXJN5zSjSm0zOFOjk3DpMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvMS1KREpFXzBCY2szbk5LTktiVE00VTZPVGNPay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGMvYWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0 OS8xL2h0Wkl2YnFXVkdHeDZNRWJuZFEyeGhPQ2h6dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAJMtLQME AcHpcAMEAMHphjANBgkqhkiG9w0BAQsFAAOCAQEACNTGU39OZF1wWHSKRHxtdahW Z8EE/2h1v7WT5Z7VrDte62CQxDweecB+P9f7/32UCYyYv4cqh2x9syVjKYxirm8d 0YFA/iufZZo6JsYP9C0jm06a/GDEoQAUV27JReTwZzPaos7nPwKAgANYhwm197SL glz5o8I+h+7zvGPDwoyNPN5s2DnEE7p1vE52z2J4HUTz4l0JSMfFmS1GJWqBB1KY 9ipS2gd69paliEDakrmLmx6yzHe/9grTboHHn6+GBbdKU9G/blt7l1fFmg8o3cE6 HptZIVtKXyF6Vmi3JA2HpGXCYDhfvQ4Z1UBwBb0vzSlSJPbSlUKaeJFpmbTrhQ== -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:48 2026 by rpki-client