This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/JqglYn9oExlpuQ-Y68kS4ik8jRI.roa File: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (raw, json) Hash identifier: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk= Subject key identifier: 26:A8:25:62:7F:68:13:19:69:B9:0F:98:EB:C9:12:E2:29:3C:8D:12 Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Certificate serial: 019B78A29525455592BF99C12125F35566F6 Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/JqglYn9oExlpuQ-Y68kS4ik8jRI.roa Signing time: Thu 01 Jan 2026 08:17:59 +0000 ROA not before: Thu 01 Jan 2026 08:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 45.158.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:95:25:45:55:92:bf:99:c1:21:25:f3:55:66:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a825627f68131969b90f98ebc912e2293c8d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:c8:10:31:14:9b:ad:ce:67:b3:cf:a3:d4: 8d:4d:c7:c9:4d:47:fe:b3:82:d0:4f:cd:9f:14:67: 13:af:87:3e:c3:be:45:7a:4b:02:d3:bd:f6:6a:63: b2:fd:d8:b5:26:06:1b:3d:ff:d7:b3:cd:c6:3c:fc: c6:3f:3c:3f:05:da:93:59:f5:86:55:3a:3c:9f:2f: e2:24:c9:a5:40:45:f7:64:30:85:b4:dd:42:4d:b2: e0:da:98:b9:00:0c:85:3f:93:66:f3:25:c5:f7:9e: 5c:9f:40:a3:17:fb:2a:1e:f9:ca:1f:13:4a:ed:77: b6:11:e2:8e:d1:7b:93:e0:f4:79:d9:de:7b:22:05: a2:e2:9f:10:7b:59:91:18:a4:98:71:8e:52:94:7d: bf:c4:20:c1:55:c4:dc:51:7a:ff:62:89:f1:6b:ed: 22:90:52:df:6d:0a:3c:c6:b8:e9:cd:14:eb:00:40: 51:77:fe:55:90:ed:65:95:c0:4b:70:4a:f5:3e:ca: bc:c0:f5:6d:9a:86:bd:f6:3d:f6:4d:78:af:68:71: 28:bf:30:42:f1:ca:30:fe:93:2b:bb:c4:a2:3f:1b: b6:f0:fd:f7:6c:21:45:3e:5b:6d:6d:f7:67:72:8a: 56:55:9c:2f:36:62:71:6a:c0:d4:b9:4a:d8:6c:81: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:25:62:7F:68:13:19:69:B9:0F:98:EB:C9:12:E2:29:3C:8D:12 X509v3 Authority Key Identifier: keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/JqglYn9oExlpuQ-Y68kS4ik8jRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.224.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:17:bd:44:f0:1f:24:67:c1:25:ea:72:c1:92:22:04:cb:27: c1:f3:75:21:09:d9:87:4a:9e:2c:4a:f5:52:f6:ee:50:6c:8f: f4:0f:c4:2a:92:58:55:0c:e2:a9:f5:7b:96:78:db:99:dd:c6: db:4a:03:37:fa:4f:79:de:65:4a:f7:aa:a7:8d:dd:7e:80:b3: d7:ce:4f:f5:07:51:b4:c3:03:41:5d:da:68:b9:aa:8f:5f:1c: 92:44:ec:b0:45:44:1b:c1:b6:f2:b0:c2:ec:0b:85:6c:87:ac: 3a:07:f2:c7:7d:cf:e0:8a:3f:0c:27:9c:e5:27:ed:20:e1:49: 9e:60:ad:2a:24:62:26:f1:37:e1:70:0f:d7:e0:9f:99:47:51: e8:f2:a7:fa:11:cd:09:ac:c6:1d:c7:2d:8c:20:fa:12:81:04: ca:0d:7d:ce:87:53:4d:6b:52:4f:76:13:6d:d2:e2:fa:a3:12: b4:5b:7b:42:b3:f3:0a:0f:2c:a9:56:f5:52:f0:8b:e2:91:ac: 31:c4:f2:03:9a:62:d7:9a:96:5a:6d:eb:fd:68:b0:df:33:8a: 76:df:2b:c2:58:b4:c3:c8:0d:02:44:56:18:38:3c:49:bf:9a: 57:11:cc:e2:68:4e:c3:35:b6:ce:39:36:e4:4e:47:16:d2:98: 56:00:e9:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4opUlRVWSv5nBISXzVWb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx MzUwYTEwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE4MjU2MjdmNjgxMzE5NjliOTBmOThlYmM5MTJlMjI5M2M4ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G7IEDEUm63OZ7PPo9SNTcfJTUf+ s4LQT82fFGcTr4c+w75FeksC0732amOy/di1JgYbPf/Xs83GPPzGPzw/BdqTWfWG VTo8ny/iJMmlQEX3ZDCFtN1CTbLg2pi5AAyFP5Nm8yXF955cn0CjF/sqHvnKHxNK 7Xe2EeKO0XuT4PR52d57IgWi4p8Qe1mRGKSYcY5SlH2/xCDBVcTcUXr/Yonxa+0i kFLfbQo8xrjpzRTrAEBRd/5VkO1llcBLcEr1Psq8wPVtmoa99j32TXivaHEovzBC 8cow/pMru8SiPxu28P33bCFFPlttbfdncopWVZwvNmJxasDUuUrYbIHXoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaoJWJ/aBMZabkPmOvJEuIpPI0SMB8GA1UdIwQY MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt MGM2YTY3ODIwYTU4LzEvSnFnbFluOW9FeGxwdVEtWTY4a1M0aWs4alJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4 LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ7gMA0G CSqGSIb3DQEBCwUAA4IBAQCeF71E8B8kZ8El6nLBkiIEyyfB83UhCdmHSp4sSvVS 9u5QbI/0D8QqklhVDOKp9XuWeNuZ3cbbSgM3+k953mVK96qnjd1+gLPXzk/1B1G0 wwNBXdpouaqPXxySROywRUQbwbbysMLsC4Vsh6w6B/LHfc/gij8MJ5zlJ+0g4Ume YK0qJGIm8TfhcA/X4J+ZR1Ho8qf6Ec0JrMYdxy2MIPoSgQTKDX3Oh1NNa1JPdhNt 0uL6oxK0W3tCs/MKDyypVvVS8IvikawxxPIDmmLXmpZabev9aLDfM4p23yvCWLTD yA0CRFYYODxJv5pXEcziaE7DNbbOOTbkTkcW0phWAOnw -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:24 2026 by rpki-client