This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/jkzgrwyw98--nO29RDei_40npCI.roa File: jkzgrwyw98--nO29RDei_40npCI.roa (raw, json) Hash identifier: I97b+vPiHDkOg/2LcKipRF81sMMtSB+/J9AJiQjbNlo= Subject key identifier: 8E:4C:E0:AF:0C:B0:F7:CF:BE:9C:ED:BD:44:37:A2:FF:8D:27:A4:22 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B77C7327644CC0C2CCB58F4ADD23F2B59 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/jkzgrwyw98--nO29RDei_40npCI.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:32:76:44:cc:0c:2c:cb:58:f4:ad:d2:3f:2b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4ce0af0cb0f7cfbe9cedbd4437a2ff8d27a422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:c0:03:1d:ef:66:13:10:a7:a5:1b:56:f8: af:c0:67:b1:70:71:ca:49:44:ee:25:e3:39:1c:14: 7a:a7:e6:88:23:1b:f4:82:33:66:25:9b:a4:88:25: d0:ca:a1:26:4b:d2:36:db:0d:58:f8:1c:1e:99:10: bb:4a:03:e9:af:50:ce:17:61:d3:22:28:a1:9c:6f: 63:93:7e:e2:ad:8e:05:bc:0a:76:71:3e:64:00:89: 42:4a:5f:cd:b7:42:d9:0a:e7:06:7f:8b:5a:49:64: 66:81:36:e6:50:02:69:73:75:d2:d7:2d:68:d6:c2: d6:87:8d:14:6f:ff:85:d0:a3:3d:db:a3:1d:26:8f: 8f:2a:7d:6f:9f:1e:c2:9d:24:4c:37:04:c2:9b:95: 8b:2b:78:7f:a0:ad:ca:ca:e9:2f:dc:15:c4:bc:20: f0:d4:da:ed:cd:28:31:29:9f:7a:54:57:36:5a:47: 79:4d:e8:1f:9b:12:e3:d3:47:42:1c:b6:3f:f4:b7: be:4b:e8:62:d9:97:33:ff:bd:63:73:e9:0a:c6:7f: 89:f8:18:19:00:c6:86:3b:06:55:1e:91:0d:25:7a: 8b:25:18:87:3f:da:40:46:2d:c4:58:26:b6:66:20: aa:fd:a0:f4:41:e2:74:ab:4d:c8:29:07:36:38:b8: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:E0:AF:0C:B0:F7:CF:BE:9C:ED:BD:44:37:A2:FF:8D:27:A4:22 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/jkzgrwyw98--nO29RDei_40npCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption a3:c3:0c:52:95:0f:e5:46:81:ee:dd:92:bf:ec:49:ed:c1:61: cf:8e:7b:86:fd:20:dd:31:ec:7d:1f:00:92:16:e2:c4:b2:24: 7c:cb:c1:51:53:49:87:65:4d:1c:99:aa:5f:36:e8:fa:c5:2d: e3:5f:ee:d9:6a:39:cd:75:e1:5e:b4:6a:77:cb:55:c7:e1:87: e6:4c:fe:86:cb:da:7e:c2:7f:0d:45:56:a6:36:eb:56:cb:51: 28:04:bc:cb:79:aa:05:5e:2a:f4:5f:21:2d:ed:74:e2:59:1e: cc:91:14:22:dd:38:7f:c9:4c:f4:ba:5d:da:06:77:f1:2e:31: 55:2e:c3:fe:36:93:0a:f1:04:69:ac:53:5e:c3:cd:aa:c5:7d: 8e:33:12:ba:cf:1c:26:e4:e8:6f:c4:dc:fc:b9:b3:d8:c2:b7: ea:db:bb:c5:34:9e:34:de:2d:d1:3b:a2:65:20:b2:52:2e:84: 43:bf:86:be:f8:c9:5d:e3:85:e5:e9:30:07:cf:56:a4:dd:af: 71:71:65:74:d6:78:4d:ec:9c:45:90:0a:b9:f0:7f:3d:25:a7: 7c:5f:94:9d:ea:9a:f1:aa:c4:48:63:73:77:f5:a8:1c:7a:c3: a9:be:f9:69:b7:3c:97:4d:80:0e:48:ff:3a:d2:86:52:55:b2: 38:d2:5f:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzJ2RMwMLMtY9K3SPytZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTRjZTBhZjBjYjBmN2NmYmU5Y2VkYmQ0NDM3YTJmZjhkMjdhNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLAAx3vZhMQp6UbVvivwGexcHHK SUTuJeM5HBR6p+aIIxv0gjNmJZukiCXQyqEmS9I22w1Y+BwemRC7SgPpr1DOF2HT IiihnG9jk37irY4FvAp2cT5kAIlCSl/Nt0LZCucGf4taSWRmgTbmUAJpc3XS1y1o 1sLWh40Ub/+F0KM926MdJo+PKn1vnx7CnSRMNwTCm5WLK3h/oK3Kyukv3BXEvCDw 1NrtzSgxKZ96VFc2Wkd5TegfmxLj00dCHLY/9Le+S+hi2Zcz/71jc+kKxn+J+BgZ AMaGOwZVHpENJXqLJRiHP9pARi3EWCa2ZiCq/aD0QeJ0q03IKQc2OLgT8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI5M4K8MsPfPvpztvUQ3ov+NJ6QiMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvamt6Z3J3eXc5OC0tbk8yOVJEZWlfNDBucENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQCjwwxSlQ/lRoHu3ZK/7Ent wWHPjnuG/SDdMex9HwCSFuLEsiR8y8FRU0mHZU0cmapfNuj6xS3jX+7ZajnNdeFe tGp3y1XH4YfmTP6Gy9p+wn8NRVamNutWy1EoBLzLeaoFXir0XyEt7XTiWR7MkRQi 3Th/yUz0ul3aBnfxLjFVLsP+NpMK8QRprFNew82qxX2OMxK6zxwm5OhvxNz8ubPY wrfq27vFNJ403i3RO6JlILJSLoRDv4a++Mld44Xl6TAHz1ak3a9xcWV01nhN7JxF kAq58H89Jad8X5Sd6prxqsRIY3N39agcesOpvvlptzyXTYAOSP860oZSVbI40l8V -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:23 2026 by rpki-client