This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jFB-BTUXJFx329IJYiGXl69nsJA.roa File: jFB-BTUXJFx329IJYiGXl69nsJA.roa (raw, json) Hash identifier: mQOFML8qEnEUWY09YIIiA7gGF74l3a/OMe9PiAGsQSc= Subject key identifier: 8C:50:7E:05:35:17:24:5C:77:DB:D2:09:62:21:97:97:AF:67:B0:90 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E63819FB417800FC5631D55B48305 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jFB-BTUXJFx329IJYiGXl69nsJA.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 89.21.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:63:81:9f:b4:17:80:0f:c5:63:1d:55:b4:83:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c507e053517245c77dbd20962219797af67b090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:59:25:7c:02:41:40:4c:7f:bc:7f:90:f8: ee:b6:8c:3e:80:c8:30:29:35:e4:4c:a3:9d:b9:4c: a9:14:2b:81:ea:74:1c:24:e5:5c:ec:e2:5c:c4:0d: a2:ac:3e:4e:b6:34:0f:c3:09:e6:00:dc:6b:60:e9: ad:1e:a1:38:06:2a:b5:b3:f0:1b:d0:2d:0e:1e:82: 20:2f:ff:80:44:9f:9e:72:c2:29:bb:ab:04:34:95: 18:2d:04:23:b6:c1:af:9c:06:66:86:10:cf:15:87: ce:86:18:bb:c3:7b:da:1f:00:62:26:07:82:ec:d9: 7a:12:9d:7b:52:f5:85:0c:b3:b1:26:da:ee:d0:d1: 75:2f:85:ee:b6:9d:3f:e1:b8:a4:c1:49:2d:ce:c3: 99:f5:07:aa:c9:8e:27:eb:8f:2d:9e:da:98:6b:64: 7f:8c:f0:91:2d:1b:9e:6f:95:98:17:b6:8d:98:75: 94:3e:5e:aa:15:20:c5:cf:89:83:ca:a0:2c:f9:84: 01:61:ad:69:4a:65:6c:f5:27:77:47:0d:48:d5:0b: 5a:41:1d:cc:cb:06:95:12:06:79:3a:fe:37:3f:83: 01:07:f2:32:69:0f:82:8d:e2:c8:36:c6:7b:58:60: d1:5b:b2:3f:77:0c:db:4f:03:63:4d:97:79:2a:2e: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:50:7E:05:35:17:24:5C:77:DB:D2:09:62:21:97:97:AF:67:B0:90 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jFB-BTUXJFx329IJYiGXl69nsJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.87.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:78:dd:dc:ec:d1:aa:44:f0:5b:bd:a5:92:00:76:7e:85:ed: 1e:58:92:f4:87:7c:3e:60:ef:68:2a:c4:71:fc:4f:66:4e:b7: 75:99:84:40:74:a1:e3:a5:49:a7:07:03:94:ea:69:65:54:a2: 2e:2c:36:41:61:90:ba:e6:f6:04:a5:69:68:be:6b:c2:a6:e7: 80:6e:88:6d:54:05:74:04:74:63:31:5e:8d:f1:56:c9:90:f2: 25:0f:73:7a:42:2d:ef:62:cf:43:f6:f2:da:d6:c3:56:79:b1: c0:1b:98:c3:15:15:97:45:27:c1:11:fb:be:c7:0a:c9:b3:e7: 82:85:c2:0d:d4:11:7b:9b:42:ca:43:4c:f5:72:f7:d7:c0:77: 8e:a1:38:8c:fe:fa:bb:6a:0b:fb:25:6a:b2:78:93:48:18:10: a0:0b:d4:7e:73:cd:e8:05:e6:b6:25:a9:6d:eb:77:dd:c7:61: 4f:6b:42:09:95:e5:d4:fd:2e:84:4f:42:8c:de:c0:b2:dd:09: 69:5a:42:ab:bc:36:24:52:48:a1:34:89:db:96:3f:39:55:55: 96:8d:e6:52:82:da:e7:53:07:d8:a3:93:b8:95:39:1a:40:ed: 51:fc:ff:d4:53:72:8d:74:51:6d:e9:bf:e6:68:84:53:c4:34: be:eb:08:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmOBn7QXgA/FYx1VtIMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzUwN2UwNTM1MTcyNDVjNzdkYmQyMDk2MjIxOTc5N2FmNjdiMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BhZJXwCQUBMf7x/kPjutow+gMgw KTXkTKOduUypFCuB6nQcJOVc7OJcxA2irD5OtjQPwwnmANxrYOmtHqE4Biq1s/Ab 0C0OHoIgL/+ARJ+ecsIpu6sENJUYLQQjtsGvnAZmhhDPFYfOhhi7w3vaHwBiJgeC 7Nl6Ep17UvWFDLOxJtru0NF1L4Xutp0/4bikwUktzsOZ9QeqyY4n648tntqYa2R/ jPCRLRueb5WYF7aNmHWUPl6qFSDFz4mDyqAs+YQBYa1pSmVs9Sd3Rw1I1QtaQR3M ywaVEgZ5Ov43P4MBB/IyaQ+CjeLINsZ7WGDRW7I/dwzbTwNjTZd5Ki4f5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxQfgU1FyRcd9vSCWIhl5evZ7CQMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvakZCLUJUVVhKRngzMjlJSllpR1hsNjluc0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVXMA0G CSqGSIb3DQEBCwUAA4IBAQAqeN3c7NGqRPBbvaWSAHZ+he0eWJL0h3w+YO9oKsRx /E9mTrd1mYRAdKHjpUmnBwOU6mllVKIuLDZBYZC65vYEpWlovmvCpueAbohtVAV0 BHRjMV6N8VbJkPIlD3N6Qi3vYs9D9vLa1sNWebHAG5jDFRWXRSfBEfu+xwrJs+eC hcIN1BF7m0LKQ0z1cvfXwHeOoTiM/vq7agv7JWqyeJNIGBCgC9R+c83oBea2Jalt 63fdx2FPa0IJleXU/S6ET0KM3sCy3QlpWkKrvDYkUkihNInblj85VVWWjeZSgtrn UwfYo5O4lTkaQO1R/P/UU3KNdFFt6b/maIRTxDS+6wil -----END CERTIFICATE-----Generated at Sun Jan 18 04:28:57 2026 by rpki-client