This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/JXZCrFRVlexsnr-6gFTDn3l3dME.roa File: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (raw, json) Hash identifier: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg= Subject key identifier: 25:76:42:AC:54:55:95:EC:6C:9E:BF:BA:80:54:C3:9F:79:77:74:C1 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16EF9B77BC9D88A8D5556490D3563 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/JXZCrFRVlexsnr-6gFTDn3l3dME.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213757 IP address blocks: 207.244.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6e:f9:b7:7b:c9:d8:8a:8d:55:56:49:0d:35:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=257642ac545595ec6c9ebfba8054c39f797774c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:43:47:ec:12:f7:95:62:ba:d3:f8:37:76: 8c:a3:94:9c:6e:80:f6:a8:3d:b1:57:ba:51:5a:0a: c5:26:a1:1e:dc:0b:69:29:38:bb:b8:2b:77:31:de: aa:4a:b6:57:9a:6a:e4:d0:29:44:eb:9e:a1:e0:08: 47:b3:d1:11:0e:b4:a1:cc:f0:b4:28:8b:55:32:ba: 49:d9:85:ab:85:04:59:7f:db:27:6a:01:a0:16:4d: 33:60:37:78:ca:b1:3b:02:f6:f9:22:0f:51:8a:ba: 73:7a:11:3c:a3:d6:84:48:0a:fa:af:9c:a4:21:1e: d5:02:cd:58:25:92:ea:d8:36:63:11:6a:c9:4b:5f: 8a:33:52:a7:ab:ae:62:f9:ee:39:aa:16:b5:2f:ad: d0:cf:3e:41:d7:93:f7:dc:38:b0:2b:55:ae:fc:43: e9:3c:52:3a:c1:65:b8:22:c0:5e:21:e6:4b:15:33: f0:9f:1e:e2:4d:79:9d:27:24:25:38:0a:3b:80:81: 77:79:e9:fa:dc:c5:5e:7f:d6:a6:e2:bb:d5:fd:a8: a2:83:58:e5:f8:c6:c9:d9:88:26:2c:6d:70:76:ba: 82:04:06:5b:93:f5:13:63:b7:c5:aa:37:9e:fb:b4: 37:bd:c5:ee:a6:bb:e6:9c:4f:60:4c:56:46:6f:27: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:42:AC:54:55:95:EC:6C:9E:BF:BA:80:54:C3:9F:79:77:74:C1 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/JXZCrFRVlexsnr-6gFTDn3l3dME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.210.0/23 Signature Algorithm: sha256WithRSAEncryption 19:63:eb:91:e4:0b:58:24:84:92:05:b2:a7:09:2f:22:85:18: 02:c9:49:2f:a7:d3:16:b4:6d:00:4c:58:05:23:26:0f:d7:c2: 46:95:2c:8f:49:07:a6:ac:af:7f:a8:99:a9:05:6f:36:99:4a: 8e:55:9d:10:d0:2e:6c:bf:57:60:86:e0:70:29:29:af:89:fe: 96:7a:28:f3:c9:7b:a9:6a:34:74:1c:31:ad:17:9a:f1:f9:63: 8f:fe:96:d8:68:86:4b:c8:13:03:cc:4e:4c:02:1a:0e:b3:d1: cb:8f:32:57:69:65:8c:39:6d:24:61:c8:cc:34:af:c2:45:13: 2a:0a:95:67:bd:27:83:4a:d6:64:e9:76:03:22:e9:ac:6f:46: 03:fe:b6:d4:3c:0b:42:1d:ec:9d:bc:8a:c7:1e:77:66:b7:75: 93:f6:ba:d8:c3:97:4c:4a:05:40:cd:88:87:58:84:8e:18:04: 00:de:2c:07:0f:be:87:5c:e5:95:65:fc:6b:d1:c9:08:94:8f: 4d:f0:ab:fa:d4:11:69:20:a1:97:53:04:38:81:7a:4f:74:c5: 50:4d:3a:a0:50:75:82:2c:e9:b6:48:00:81:c6:58:60:31:c4: 25:3a:9a:a6:73:c6:64:3c:4b:53:85:96:7c:c9:4b:e5:bb:92: 63:07:e8:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8W75t3vJ2IqNVVZJDTVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTc2NDJhYzU0NTU5NWVjNmM5ZWJmYmE4MDU0YzM5Zjc5Nzc3NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SFDR+wS95ViutP4N3aMo5ScboD2 qD2xV7pRWgrFJqEe3AtpKTi7uCt3Md6qSrZXmmrk0ClE656h4AhHs9ERDrShzPC0 KItVMrpJ2YWrhQRZf9snagGgFk0zYDd4yrE7Avb5Ig9RirpzehE8o9aESAr6r5yk IR7VAs1YJZLq2DZjEWrJS1+KM1Knq65i+e45qha1L63Qzz5B15P33DiwK1Wu/EPp PFI6wWW4IsBeIeZLFTPwnx7iTXmdJyQlOAo7gIF3een63MVef9am4rvV/aiig1jl +MbJ2YgmLG1wdrqCBAZbk/UTY7fFqjee+7Q3vcXuprvmnE9gTFZGbydXLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCV2QqxUVZXsbJ6/uoBUw595d3TBMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvSlhaQ3JGUlZsZXhzbnItNmdGVERuM2wzZE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/TSMA0G CSqGSIb3DQEBCwUAA4IBAQAZY+uR5AtYJISSBbKnCS8ihRgCyUkvp9MWtG0ATFgF IyYP18JGlSyPSQemrK9/qJmpBW82mUqOVZ0Q0C5sv1dghuBwKSmvif6WeijzyXup ajR0HDGtF5rx+WOP/pbYaIZLyBMDzE5MAhoOs9HLjzJXaWWMOW0kYcjMNK/CRRMq CpVnvSeDStZk6XYDIumsb0YD/rbUPAtCHeydvIrHHndmt3WT9rrYw5dMSgVAzYiH WISOGAQA3iwHD76HXOWVZfxr0ckIlI9N8Kv61BFpIKGXUwQ4gXpPdMVQTTqgUHWC LOm2SACBxlhgMcQlOpqmc8ZkPEtThZZ8yUvlu5JjB+jj -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:22 2026 by rpki-client