This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Jnw1w_L7O97u-ptQteogd_jgFsQ.roa File: Jnw1w_L7O97u-ptQteogd_jgFsQ.roa (raw, json) Hash identifier: gYLRcSAcu23jE4q8uZBt8H00mSQ2wrfmAYo9MAdyz28= Subject key identifier: 26:7C:35:C3:F2:FB:3B:DE:EE:FA:9B:50:B5:EA:20:77:F8:E0:16:C4 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B123398992B8F029C793447B445B118B0 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Jnw1w_L7O97u-ptQteogd_jgFsQ.roa Signing time: Fri 12 Dec 2025 10:55:29 +0000 ROA not before: Fri 12 Dec 2025 10:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 45.154.157.0/24 maxlen: 24 188.209.137.0/24 maxlen: 24 188.209.139.0/24 maxlen: 24 188.209.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:33:98:99:2b:8f:02:9c:79:34:47:b4:45:b1:18:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 12 10:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=267c35c3f2fb3bdeeefa9b50b5ea2077f8e016c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:b9:a9:b9:c1:ab:73:9a:65:92:cd:99:a3: bd:91:f9:04:8e:f5:07:dc:f0:58:66:75:f4:93:40: 1b:94:57:74:60:e5:96:19:bc:8a:e3:d6:9e:e2:93: fd:9a:01:93:36:6d:19:d9:e9:ef:fd:ea:22:58:56: 8f:6a:61:ef:c3:d6:4c:97:0d:ef:05:f7:a0:e4:70: 14:25:75:bd:5b:c6:e9:4c:d2:65:b6:7e:1c:b7:17: 2e:16:7c:a5:39:95:c1:f3:8c:39:42:64:d4:52:e4: 5d:d5:80:b5:ca:d3:47:dc:22:9d:ff:d6:e7:bd:fb: 15:e7:8b:cf:d8:49:c2:ca:62:60:06:76:f5:2d:a2: c9:04:41:f4:0a:f1:06:6d:0d:b5:ec:6b:73:2b:3a: be:55:28:ec:1c:af:31:46:56:87:40:d7:93:dd:47: c4:64:bf:0b:b3:36:d7:73:82:bd:e4:cf:c2:3b:39: db:ef:49:52:fe:ee:42:32:cc:20:fe:4e:d4:da:59: 0c:12:71:c9:00:9d:bd:06:1f:9e:c4:b7:81:c3:28: 49:a9:39:61:5a:39:40:ae:b7:78:a9:6a:41:11:3d: 6a:7a:7e:fb:66:d4:6d:49:99:3f:b4:eb:87:5a:44: 5b:e1:21:e1:06:b9:e7:73:43:0c:da:d3:2c:8d:ca: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7C:35:C3:F2:FB:3B:DE:EE:FA:9B:50:B5:EA:20:77:F8:E0:16:C4 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Jnw1w_L7O97u-ptQteogd_jgFsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.157.0/24 188.209.137.0/24 188.209.139.0-188.209.140.255 Signature Algorithm: sha256WithRSAEncryption 03:9e:d7:a6:33:85:77:36:80:4e:40:82:4b:5e:d5:96:9d:b7: de:4d:f7:48:fb:99:e9:7d:e9:4d:38:d0:e4:e0:58:df:10:3c: 45:77:91:10:1c:e0:ab:f6:be:42:62:52:a1:3f:8c:31:90:52: f7:65:4f:b8:4d:10:da:b9:21:44:ce:40:2b:8b:08:ae:df:08: ba:5c:22:cc:d4:8a:c1:f5:2d:6d:64:f9:41:f0:b3:48:5f:d3: 4d:28:75:fe:b5:09:66:64:db:79:6b:6a:c0:2a:ef:70:07:3a: 4f:fb:d0:2d:b0:b2:b9:b9:d9:b8:44:39:b2:d8:49:26:19:89: d2:47:a2:bd:19:62:e2:50:65:8b:05:e6:ec:6f:f0:67:68:a0: 55:fa:2b:4e:c5:92:f0:06:52:39:fd:0e:8d:13:7c:30:b4:1c: 1f:e0:d1:ea:b9:c2:c4:9d:a4:81:a4:6b:09:a8:a7:f3:df:6f: 92:81:e1:ae:ba:7e:72:0f:17:d9:9b:85:f8:6c:ca:88:23:02: 8e:c5:8a:fe:12:e1:ac:21:49:fe:c4:29:f5:5f:41:ef:1f:eb: 2b:02:b8:b5:a6:c6:4a:89:42:95:1b:32:f3:7f:94:ce:52:eb: 3f:7e:25:24:45:54:c7:ff:9a:ae:ba:2d:17:90:0f:42:74:97: ae:59:08:03 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZsSM5iZK48CnHk0R7RFsRiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjEyMTA1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjdjMzVjM2YyZmIzYmRlZWVmYTliNTBiNWVhMjA3N2Y4ZTAxNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrW5qbnBq3OaZZLNmaO9kfkEjvUH 3PBYZnX0k0AblFd0YOWWGbyK49ae4pP9mgGTNm0Z2env/eoiWFaPamHvw9ZMlw3v Bfeg5HAUJXW9W8bpTNJltn4ctxcuFnylOZXB84w5QmTUUuRd1YC1ytNH3CKd/9bn vfsV54vP2EnCymJgBnb1LaLJBEH0CvEGbQ217GtzKzq+VSjsHK8xRlaHQNeT3UfE ZL8LszbXc4K95M/COznb70lS/u5CMswg/k7U2lkMEnHJAJ29Bh+exLeBwyhJqTlh WjlArrd4qWpBET1qen77ZtRtSZk/tOuHWkRb4SHhBrnnc0MM2tMsjcp86wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCZ8NcPy+zve7vqbULXqIHf44BbEMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvSm53MXdfTDdPOTd1LXB0UXRlb2dkX2pnRnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALZqdAwQA vNGJMAwDBAC80YsDBAC80YwwDQYJKoZIhvcNAQELBQADggEBAAOe16YzhXc2gE5A gkte1Zadt95N90j7mel96U040OTgWN8QPEV3kRAc4Kv2vkJiUqE/jDGQUvdlT7hN ENq5IUTOQCuLCK7fCLpcIszUisH1LW1k+UHws0hf000odf61CWZk23lrasAq73AH Ok/70C2wsrm52bhEObLYSSYZidJHor0ZYuJQZYsF5uxv8GdooFX6K07FkvAGUjn9 Do0TfDC0HB/g0eq5wsSdpIGkawmop/Pfb5KB4a66fnIPF9mbhfhsyogjAo7Fiv4S 4awhSf7EKfVfQe8f6ysCuLWmxkqJQpUbMvN/lM5S6z9+JSRFVMf/mq66LReQD0J0 l65ZCAM= -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:02 2025 by rpki-client