This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa File: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (raw, json) Hash identifier: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I= Subject key identifier: 26:9C:F6:FE:98:E6:A0:77:68:F9:19:82:47:58:52:19:5A:35:10:73 Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Certificate serial: 019B783551A935F74F17157647AF1981C8FE Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46616 IP address blocks: 45.149.120.0/22 maxlen: 22 45.149.120.0/24 maxlen: 24 45.149.121.0/24 maxlen: 24 45.149.122.0/23 maxlen: 23 45.149.122.0/24 maxlen: 24 45.149.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:a9:35:f7:4f:17:15:76:47:af:19:81:c8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=269cf6fe98e6a07768f91982475852195a351073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:b8:45:4e:de:fc:fb:4b:71:67:15:32:38: 39:e5:0b:82:85:7c:12:a5:cf:7b:81:44:e1:5f:bd: 7d:22:2e:0c:46:47:39:21:a0:64:03:46:c5:2b:81: d4:da:3a:78:d5:1b:83:46:69:ce:2d:0a:30:ac:8d: d4:d6:f9:99:e8:a6:6d:4b:f8:66:2a:63:ab:db:94: 10:a5:e6:47:21:9e:4f:07:d7:29:bb:5b:42:b5:b2: ff:34:e4:11:e4:16:a4:58:80:7e:76:29:86:65:3d: ee:5d:36:0e:a6:07:5b:dc:b8:ef:60:0b:57:97:4c: 24:b5:4d:69:83:12:f1:2f:a3:29:f5:dc:6d:57:94: 15:4b:08:30:4f:62:63:cc:b8:92:85:5f:02:51:f7: 23:f4:ea:91:01:6d:bb:81:8c:b6:b4:38:74:bb:c9: d5:13:53:4b:2a:36:f8:8f:5b:69:b2:32:c5:dc:5d: 64:a7:31:84:ed:4c:c9:32:a5:02:0c:e4:5c:cb:62: 43:67:ff:16:94:72:05:cc:01:c9:db:f5:7e:a5:56: 36:e5:26:35:f4:c1:39:40:a7:f2:06:80:4f:54:f6: ea:b3:10:c2:01:89:08:f4:de:6d:16:c0:da:8a:11: 81:4b:3a:3c:bb:37:0d:e6:a1:2c:86:be:4b:7a:c1: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:F6:FE:98:E6:A0:77:68:F9:19:82:47:58:52:19:5A:35:10:73 X509v3 Authority Key Identifier: keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.120.0/22 Signature Algorithm: sha256WithRSAEncryption af:5d:02:c2:79:46:5d:f5:8f:83:00:dc:a6:6c:23:e5:5b:2a: 10:fb:29:10:43:4f:ad:d7:48:d4:88:91:39:91:50:29:54:30: b5:78:be:91:5a:67:d8:26:87:e2:aa:de:eb:59:f2:43:f0:dc: f5:90:6f:7e:50:69:88:29:5d:e0:88:23:e3:8f:55:bd:b8:d8: 90:d6:eb:43:23:54:1e:1c:c2:49:b6:86:1e:15:99:72:9f:37: f3:98:0e:81:f8:42:02:3d:9e:c5:7d:08:2a:a4:2e:8a:2a:6c: 5b:14:d0:e7:81:bc:7b:93:bf:97:d1:0a:9f:cb:10:00:16:07: a2:c2:83:55:14:45:b4:c5:9f:57:33:87:33:43:9b:e2:b1:93: 3f:8f:4d:77:62:dc:cd:8a:35:a6:83:c8:ba:71:81:e0:80:8b: e7:f3:b2:07:06:22:34:17:7a:d7:56:41:e8:f3:7e:bc:4f:9b: be:ae:9c:46:62:4a:eb:a3:4f:8c:2f:79:d2:7b:da:d3:4c:10: 25:54:23:47:55:e3:33:1a:4f:4c:7c:bf:92:24:d3:29:14:c6: 4d:0c:11:fb:4b:ee:6d:9d:23:9e:76:91:f1:b5:a2:8c:5c:8c: d3:a3:dc:de:f0:84:55:d3:01:05:ee:0b:fd:a8:ce:60:5b:09: 5a:99:56:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVGpNfdPFxV2R68Zgcj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGE5OTRlNDJlNjBkYTRmNGE1NDc1YjE1ZjVlMjc1MTZj N2NmMTQwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjljZjZmZTk4ZTZhMDc3NjhmOTE5ODI0NzU4NTIxOTVhMzUxMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8i4RU7e/PtLcWcVMjg55QuChXwS pc97gUThX719Ii4MRkc5IaBkA0bFK4HU2jp41RuDRmnOLQowrI3U1vmZ6KZtS/hm KmOr25QQpeZHIZ5PB9cpu1tCtbL/NOQR5BakWIB+dimGZT3uXTYOpgdb3LjvYAtX l0wktU1pgxLxL6Mp9dxtV5QVSwgwT2JjzLiShV8CUfcj9OqRAW27gYy2tDh0u8nV E1NLKjb4j1tpsjLF3F1kpzGE7UzJMqUCDORcy2JDZ/8WlHIFzAHJ2/V+pVY25SY1 9ME5QKfyBoBPVPbqsxDCAYkI9N5tFsDaihGBSzo8uzcN5qEshr5LesHmWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCac9v6Y5qB3aPkZgkdYUhlaNRBzMB8GA1UdIwQY MBaAFLaKmU5C5g2k9KVHWxX14nUWx88UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUt YmQzYmViY2RkZWIzLzEvSnB6Ml9wam1vSGRvLVJtQ1IxaFNHVm8xRUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUtYmQzYmViY2RkZWIz LzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZV4MA0G CSqGSIb3DQEBCwUAA4IBAQCvXQLCeUZd9Y+DANymbCPlWyoQ+ykQQ0+t10jUiJE5 kVApVDC1eL6RWmfYJofiqt7rWfJD8Nz1kG9+UGmIKV3giCPjj1W9uNiQ1utDI1Qe HMJJtoYeFZlynzfzmA6B+EICPZ7FfQgqpC6KKmxbFNDngbx7k7+X0QqfyxAAFgei woNVFEW0xZ9XM4czQ5visZM/j013YtzNijWmg8i6cYHggIvn87IHBiI0F3rXVkHo 8368T5u+rpxGYkrro0+ML3nSe9rTTBAlVCNHVeMzGk9MfL+SJNMpFMZNDBH7S+5t nSOedpHxtaKMXIzTo9ze8IRV0wEF7gv9qM5gWwlamVZn -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:09 2026 by rpki-client