This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JjZ_0DJAQD16NYdanPHqcV83-Qk.roa File: JjZ_0DJAQD16NYdanPHqcV83-Qk.roa (raw, json) Hash identifier: mcEe609jYkiaOpnfnyoy8KPGibsy+NIsAXdyMTRsNhY= Subject key identifier: 26:36:7F:D0:32:40:40:3D:7A:35:87:5A:9C:F1:EA:71:5F:37:F9:09 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E8E9FF9E59749D6B8D9031D3B03A Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JjZ_0DJAQD16NYdanPHqcV83-Qk.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 109.122.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e8:e9:ff:9e:59:74:9d:6b:8d:90:31:d3:b0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26367fd03240403d7a35875a9cf1ea715f37f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:08:7b:c4:1c:6e:ad:17:59:d8:4e:78:b7: f2:b4:97:c2:df:bc:6e:77:43:b0:e3:ca:da:f0:32: bf:ee:8c:81:f6:c0:da:3d:c2:45:d7:63:ce:61:61: 92:2b:be:a7:9b:15:68:81:e4:8f:13:03:96:20:4a: 9a:c0:eb:eb:67:d8:0a:3f:de:95:d1:b8:f0:39:3e: 26:ef:e1:5a:39:28:53:49:2f:05:ee:97:30:0d:62: b9:a6:21:fb:3c:09:53:de:81:98:13:19:9a:8c:11: 93:12:67:0e:19:f5:1b:6f:04:a0:8f:ce:0d:47:78: 2a:85:26:39:fa:96:86:1b:58:42:4f:6a:68:d5:81: ef:0d:5f:a6:33:10:5f:77:e4:4b:22:64:96:20:3e: 02:bb:e3:d5:14:15:db:a6:fb:31:ec:42:2c:af:cf: e1:e9:ec:1d:20:47:26:d8:59:38:3e:db:f4:b0:b5: 56:33:b6:8f:d0:c3:31:2f:c9:14:16:4c:bc:1e:00: 1b:03:de:9d:54:25:09:98:83:6d:07:02:41:59:00: 08:2d:9a:1e:a2:60:8d:a3:a6:2a:5c:de:ac:4b:ef: cb:da:90:d5:7f:c5:37:79:58:15:f1:93:5b:20:4a: 55:2f:3f:d4:7a:d3:44:f4:ac:38:6b:40:25:88:c0: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:7F:D0:32:40:40:3D:7A:35:87:5A:9C:F1:EA:71:5F:37:F9:09 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JjZ_0DJAQD16NYdanPHqcV83-Qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.12.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:a4:38:10:13:0a:12:c7:f5:eb:37:67:63:fc:c5:31:87:32: d1:f7:7d:00:53:8a:f1:c2:ae:38:17:d5:d1:8f:64:85:e7:f4: d5:18:f7:67:d4:14:38:57:a5:f8:b5:8f:22:c1:1b:4a:0d:d5: e9:36:05:b7:51:7e:a8:df:a1:95:4e:b0:da:98:08:17:21:5b: 20:33:72:af:27:cb:8d:2c:c6:da:e1:f6:80:a3:38:32:c9:5b: 8e:e7:0c:76:f7:eb:44:09:26:07:30:2e:dd:3b:41:1a:af:57: af:c7:bb:1b:5e:a1:ae:9a:a5:fe:91:87:49:95:39:6c:d8:d4: 3b:b1:a0:b7:bd:63:cc:e1:66:e7:c8:d0:1c:75:20:3b:b9:fa: 64:42:8e:12:02:78:86:cd:75:f3:12:b2:9f:5f:5e:44:61:92: a3:2b:4d:35:03:35:05:0f:ca:31:44:ba:2d:78:2a:b0:59:99: 02:3a:56:f1:02:84:eb:ee:37:5a:3b:0f:96:e4:04:9e:9b:96: 47:3a:bb:1b:7c:81:cf:29:eb:6a:49:16:60:8c:c8:26:e0:31: 65:50:2d:9f:d5:7f:9d:28:5c:bc:c9:09:77:22:fe:cf:16:16: c2:ee:31:00:86:88:b4:f2:b9:7d:c0:e2:45:84:e0:7b:e9:27: 71:e9:c9:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOjp/55ZdJ1rjZAx07A6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjM2N2ZkMDMyNDA0MDNkN2EzNTg3NWE5Y2YxZWE3MTVmMzdmOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1EIe8Qcbq0XWdhOeLfytJfC37xu d0Ow48ra8DK/7oyB9sDaPcJF12POYWGSK76nmxVogeSPEwOWIEqawOvrZ9gKP96V 0bjwOT4m7+FaOShTSS8F7pcwDWK5piH7PAlT3oGYExmajBGTEmcOGfUbbwSgj84N R3gqhSY5+paGG1hCT2po1YHvDV+mMxBfd+RLImSWID4Cu+PVFBXbpvsx7EIsr8/h 6ewdIEcm2Fk4Ptv0sLVWM7aP0MMxL8kUFky8HgAbA96dVCUJmINtBwJBWQAILZoe omCNo6YqXN6sS+/L2pDVf8U3eVgV8ZNbIEpVLz/UetNE9Kw4a0AliMCrwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCY2f9AyQEA9ejWHWpzx6nFfN/kJMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvSmpaXzBESkFRRDE2TllkYW5QSHFjVjgzLVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoMMA0G CSqGSIb3DQEBCwUAA4IBAQBcpDgQEwoSx/XrN2dj/MUxhzLR930AU4rxwq44F9XR j2SF5/TVGPdn1BQ4V6X4tY8iwRtKDdXpNgW3UX6o36GVTrDamAgXIVsgM3KvJ8uN LMba4faAozgyyVuO5wx29+tECSYHMC7dO0Ear1evx7sbXqGumqX+kYdJlTls2NQ7 saC3vWPM4WbnyNAcdSA7ufpkQo4SAniGzXXzErKfX15EYZKjK001AzUFD8oxRLot eCqwWZkCOlbxAoTr7jdaOw+W5ASem5ZHOrsbfIHPKetqSRZgjMgm4DFlUC2f1X+d KFy8yQl3Iv7PFhbC7jEAhoi08rl9wOJFhOB76Sdx6cmN -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:14 2026 by rpki-client