This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJ8fSMYvI5zjhw0KPlZfsCG8MS4.roa File: JJ8fSMYvI5zjhw0KPlZfsCG8MS4.roa (raw, json) Hash identifier: sK4HoiyT7Pf8rJ+F+ANrenhBKvuD+FTw6zyawiWVa3I= Subject key identifier: 24:9F:1F:48:C6:2F:23:9C:E3:87:0D:0A:3E:56:5F:B0:21:BC:31:2E Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8013274A9D92D4E8BF23CF36ACE9C2 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJ8fSMYvI5zjhw0KPlZfsCG8MS4.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 45.131.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:27:4a:9d:92:d4:e8:bf:23:cf:36:ac:e9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=249f1f48c62f239ce3870d0a3e565fb021bc312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:b9:2a:f1:21:35:d8:a0:1d:5b:0a:c7:a7: 7d:63:2b:03:11:1f:c4:84:d6:23:f0:63:b9:79:6c: 50:ee:fa:e7:6c:d1:d1:e8:2f:84:3e:93:c6:b6:79: fc:1d:23:37:1b:26:4c:c6:26:41:7e:6c:dd:29:db: 5b:fc:2b:85:39:62:e8:00:09:c6:9c:6d:f6:f9:6b: bd:b4:ba:40:04:93:c5:4a:9a:75:5d:96:cc:99:e1: b3:52:cc:9d:a0:bd:3e:31:c3:cd:ca:db:03:25:88: 8e:17:94:ea:16:ec:07:bb:1b:2f:af:fc:ad:88:42: 63:5d:ad:51:b6:99:80:f3:a7:b0:1c:ef:47:87:43: 12:6f:a2:6f:21:2d:24:a9:70:a6:f5:2b:c9:5e:93: fc:36:ad:c8:5c:3b:16:68:b6:53:8e:43:e4:74:ba: b9:3e:2b:7d:33:41:bb:6e:50:20:10:c4:55:54:e6: 9a:78:31:6f:80:44:dc:63:be:59:1c:de:13:5a:28: 8e:b7:ca:f9:a5:69:05:d0:d7:f4:8f:99:1a:6b:f4: d7:75:27:ba:09:24:19:fc:fe:ef:d9:cb:3f:8e:61: 03:6f:9c:f3:4d:eb:ca:c9:2c:17:a8:56:f2:5b:18: fb:06:7e:81:f0:2d:37:eb:1e:4a:d3:5f:5f:5e:5c: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9F:1F:48:C6:2F:23:9C:E3:87:0D:0A:3E:56:5F:B0:21:BC:31:2E X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJ8fSMYvI5zjhw0KPlZfsCG8MS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ff:1b:17:95:4d:79:46:47:17:7a:0a:9e:af:f2:39:b1:f6: 18:aa:14:63:c8:d8:84:a0:56:f8:3b:ee:73:02:6e:6b:b8:bd: 8f:b7:f6:dc:8b:cf:bc:04:78:9f:7d:62:31:50:fe:cc:89:e4: a6:6d:4a:ce:5d:44:fd:27:d9:4a:22:86:22:e3:20:da:6c:a0: 79:ae:d5:aa:72:5a:f4:72:84:03:80:93:99:06:37:c3:1b:2d: 27:24:eb:c4:a2:d7:51:ec:90:ae:49:cc:2f:0f:c8:7d:50:82: 4a:d3:cf:e1:d3:49:dd:f8:58:e6:39:b8:91:9b:c7:05:42:3b: d0:db:62:60:31:2d:b6:32:67:65:67:f3:33:f2:40:72:35:68: b4:95:4a:0c:c7:cd:66:e7:a5:81:c9:1b:47:a4:ad:91:fa:2a: 1e:52:ba:97:f6:d5:47:9a:05:18:9d:c2:ea:d0:83:2d:89:d7: a4:11:a3:9b:e6:95:a5:b1:5e:b7:a6:77:45:32:21:bd:b8:f1: 31:aa:7a:ee:b9:88:c1:8e:59:5f:c2:90:aa:0a:f7:b1:b7:5e: a9:d8:fe:24:6d:21:c3:27:71:1f:05:cb:2f:9e:42:5c:52:f6: 3c:41:04:fa:d8:00:07:b8:25:7b:fb:33:4d:a7:95:10:ce:69: e9:c9:de:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBMnSp2S1Oi/I882rOnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDlmMWY0OGM2MmYyMzljZTM4NzBkMGEzZTU2NWZiMDIxYmMzMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnue5KvEhNdigHVsKx6d9YysDER/E hNYj8GO5eWxQ7vrnbNHR6C+EPpPGtnn8HSM3GyZMxiZBfmzdKdtb/CuFOWLoAAnG nG32+Wu9tLpABJPFSpp1XZbMmeGzUsydoL0+McPNytsDJYiOF5TqFuwHuxsvr/yt iEJjXa1RtpmA86ewHO9Hh0MSb6JvIS0kqXCm9SvJXpP8Nq3IXDsWaLZTjkPkdLq5 Pit9M0G7blAgEMRVVOaaeDFvgETcY75ZHN4TWiiOt8r5pWkF0Nf0j5kaa/TXdSe6 CSQZ/P7v2cs/jmEDb5zzTevKySwXqFbyWxj7Bn6B8C036x5K019fXlwFMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSfH0jGLyOc44cNCj5WX7AhvDEuMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvSko4ZlNNWXZJNXpqaHcwS1BsWmZzQ0c4TVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYNuMA0G CSqGSIb3DQEBCwUAA4IBAQBP/xsXlU15RkcXegqer/I5sfYYqhRjyNiEoFb4O+5z Am5ruL2Pt/bci8+8BHiffWIxUP7MieSmbUrOXUT9J9lKIoYi4yDabKB5rtWqclr0 coQDgJOZBjfDGy0nJOvEotdR7JCuScwvD8h9UIJK08/h00nd+FjmObiRm8cFQjvQ 22JgMS22MmdlZ/Mz8kByNWi0lUoMx81m56WByRtHpK2R+ioeUrqX9tVHmgUYncLq 0IMtidekEaOb5pWlsV63pndFMiG9uPExqnruuYjBjllfwpCqCvext16p2P4kbSHD J3EfBcsvnkJcUvY8QQT62AAHuCV7+zNNp5UQzmnpyd7w -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client