This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JODr69-NdaIhqMsgmSCOuYn53H8.roa File: JODr69-NdaIhqMsgmSCOuYn53H8.roa (raw, json) Hash identifier: +iLXG8g1PiijENvmf0d+SHQHwxyXOPIbtKP03tOoopk= Subject key identifier: 24:E0:EB:EB:DF:8D:75:A2:21:A8:CB:20:99:20:8E:B9:89:F9:DC:7F Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E335A614CFFCAE0A2E8682BCB1A9 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JODr69-NdaIhqMsgmSCOuYn53H8.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9049 IP address blocks: 5.3.85.0/24 maxlen: 24 188.234.152.0/21 maxlen: 24 2a02:2698:a100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e3:35:a6:14:cf:fc:ae:0a:2e:86:82:bc:b1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24e0ebebdf8d75a221a8cb2099208eb989f9dc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:16:54:ed:cc:a5:7e:10:d8:60:09:cc:bd: 97:80:82:cb:9e:f1:20:93:d1:a6:b7:0b:51:ed:2b: 48:31:a5:dd:6a:81:37:10:08:61:c3:fe:6c:45:27: 3f:45:f4:25:4d:88:cf:7b:29:b2:95:85:4a:84:08: ff:5d:1b:b6:f3:cc:9b:94:26:57:10:fc:f4:68:d0: 70:5e:6d:6e:ab:a5:fd:cf:cd:58:fc:7a:b0:ad:14: 39:2b:d5:44:9b:b7:af:23:e3:ab:fa:ec:c1:91:6a: a2:e9:f3:8c:7d:fa:fd:22:d3:01:65:56:a1:42:f5: b1:0b:93:c7:0e:a2:4b:dc:2a:6e:09:3a:47:7f:d5: 9d:42:3b:40:61:67:bb:bb:b6:f7:e6:0f:4a:4b:7e: c8:e7:90:e4:b0:c0:13:01:62:73:88:2b:01:ad:21: 2c:9d:43:ec:f5:01:1f:fb:69:19:d8:71:e2:fb:e0: a6:e3:49:23:e9:67:ee:64:11:3c:d5:de:98:9e:b3: 79:29:5c:4a:74:f0:e7:10:99:17:26:78:8b:f4:cb: 90:a7:31:e9:ca:7f:7b:85:a8:41:ed:74:9a:e1:8e: ff:6d:1b:b9:cc:6c:88:f4:5f:10:67:0e:b5:6d:a4: 0d:7f:20:35:65:c9:1b:98:e9:0b:e6:62:83:db:c7: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:EB:EB:DF:8D:75:A2:21:A8:CB:20:99:20:8E:B9:89:F9:DC:7F X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/JODr69-NdaIhqMsgmSCOuYn53H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.3.85.0/24 188.234.152.0/21 IPv6: 2a02:2698:a100::/40 Signature Algorithm: sha256WithRSAEncryption 14:6e:9a:de:13:56:14:e7:02:c7:8b:24:05:ff:47:16:84:8b: 88:b1:3c:44:ed:f8:b6:17:58:22:64:9a:30:e4:e2:d0:55:62: 89:6d:97:9b:17:d6:30:98:50:82:87:aa:44:18:5e:c2:7a:94: 0e:34:ea:99:22:bb:a8:de:be:0b:1e:bb:26:99:95:55:c0:bf: 47:1b:c7:e9:7d:56:91:2a:74:3d:e0:a7:ff:75:bf:e8:3e:41: 91:ae:b4:e4:5e:a3:f0:aa:97:82:7e:cf:74:1d:07:3a:c4:41: 1c:79:ee:54:d7:6a:03:72:53:b8:7a:ae:38:a2:0e:9f:cb:1b: 05:2d:c4:10:5f:72:0c:45:2b:29:21:14:94:66:f7:f5:89:09: 32:ff:fa:e9:11:fa:0b:0d:2d:eb:75:d9:f3:c5:d3:27:d8:e0: b8:f5:ad:ae:cd:41:d9:75:82:85:39:8a:87:74:35:07:8d:8f: db:b0:61:68:89:46:f7:b3:40:bb:80:eb:2b:82:eb:a2:80:b5: 36:40:9b:3d:bb:42:ee:a9:90:d1:1c:e8:d3:19:dd:24:5f:83: 3c:6c:9c:0a:ca:b5:01:d9:2a:23:88:8c:97:42:d4:fa:25:c7: 53:7c:5f:66:20:77:99:5c:5d:e5:aa:96:d9:07:a7:fb:29:48: a0:23:5c:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/E+M1phTP/K4KLoaCvLGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGUwZWJlYmRmOGQ3NWEyMjFhOGNiMjA5OTIwOGViOTg5ZjlkYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0EWVO3MpX4Q2GAJzL2XgILLnvEg k9GmtwtR7StIMaXdaoE3EAhhw/5sRSc/RfQlTYjPeymylYVKhAj/XRu288yblCZX EPz0aNBwXm1uq6X9z81Y/HqwrRQ5K9VEm7evI+Or+uzBkWqi6fOMffr9ItMBZVah QvWxC5PHDqJL3CpuCTpHf9WdQjtAYWe7u7b35g9KS37I55DksMATAWJziCsBrSEs nUPs9QEf+2kZ2HHi++Cm40kj6WfuZBE81d6YnrN5KVxKdPDnEJkXJniL9MuQpzHp yn97hahB7XSa4Y7/bRu5zGyI9F8QZw61baQNfyA1ZckbmOkL5mKD28cfPQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCTg6+vfjXWiIajLIJkgjrmJ+dx/MB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvSk9EcjY5LU5kYUlocU1zZ21TQ091WW41M0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQABQNVAwQD vOqYMA4EAgACMAgDBgAqAiaYoTANBgkqhkiG9w0BAQsFAAOCAQEAFG6a3hNWFOcC x4skBf9HFoSLiLE8RO34thdYImSaMOTi0FViiW2XmxfWMJhQgoeqRBhewnqUDjTq mSK7qN6+Cx67JpmVVcC/RxvH6X1WkSp0PeCn/3W/6D5Bka605F6j8KqXgn7PdB0H OsRBHHnuVNdqA3JTuHquOKIOn8sbBS3EEF9yDEUrKSEUlGb39YkJMv/66RH6Cw0t 63XZ88XTJ9jguPWtrs1B2XWChTmKh3Q1B42P27BhaIlG97NAu4DrK4LrooC1NkCb PbtC7qmQ0Rzo0xndJF+DPGycCsq1AdkqI4iMl0LU+iXHU3xfZiB3mVxd5aqW2Qen +ylIoCNc7w== -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:53 2026 by rpki-client