This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jlEERAv_48L6WVc6f1KxqaZzAoI.roa File: jlEERAv_48L6WVc6f1KxqaZzAoI.roa (raw, json) Hash identifier: FsatbDyq1CVw+OBN4JLNJHWzcb014Jx6rYEIG4BUj38= Subject key identifier: 8E:51:04:44:0B:FF:E3:C2:FA:59:57:3A:7F:52:B1:A9:A6:73:02:82 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E700F1710FDAB1EB87BE00E5BB9A4 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jlEERAv_48L6WVc6f1KxqaZzAoI.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137897 IP address blocks: 89.251.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:70:0f:17:10:fd:ab:1e:b8:7b:e0:0e:5b:b9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5104440bffe3c2fa59573a7f52b1a9a6730282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:3d:a1:29:47:0e:ca:c7:ba:79:d6:d7:99: 20:ce:86:bf:42:a3:8c:d9:b4:ff:0d:f7:79:84:af: 56:e6:98:d4:a6:f5:0c:31:6e:a2:bc:90:1c:ed:69: 70:06:91:ab:16:28:e7:d0:ac:f8:2a:8a:81:6b:0d: d9:00:9e:83:35:36:c5:45:03:07:c4:05:bb:e3:9d: 74:3a:f6:e0:9c:d0:3b:c4:e0:a6:ab:f6:2a:bc:2c: e4:e6:e5:69:5e:dc:83:e9:1b:18:50:ee:cc:e1:dd: c3:56:20:bc:0b:d7:ed:f2:13:e0:50:aa:60:0d:82: 23:25:1f:a4:74:2a:c6:f3:34:f4:73:2a:18:36:40: ab:89:20:f8:b1:1b:7b:de:8b:06:09:66:1d:cd:8e: e9:be:0b:34:47:03:1e:24:38:3e:6d:27:24:f9:a6: e4:e9:87:44:e3:8d:c3:9e:ca:c6:06:92:65:a0:53: f0:9d:3b:df:0c:29:ac:ad:39:5b:b4:0e:c9:31:70: 01:ff:f5:76:99:aa:fc:81:7a:6f:57:84:c2:16:97: 6c:68:1a:bd:d9:6c:8a:c3:c7:5f:cb:b2:ec:0a:dd: ea:df:86:42:90:3c:ce:1a:ea:72:cb:8f:bd:3a:29: ad:c8:55:6f:f7:40:dd:c0:3c:09:f9:fd:86:8f:34: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:51:04:44:0B:FF:E3:C2:FA:59:57:3A:7F:52:B1:A9:A6:73:02:82 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jlEERAv_48L6WVc6f1KxqaZzAoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.29.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:23:0b:9e:8b:8d:8c:db:36:a4:bb:31:69:55:29:de:e1:29: cb:8a:75:cd:31:8f:72:9e:6f:b2:eb:b4:e8:5f:31:63:b3:26: 30:28:ea:ad:43:72:16:7d:48:70:91:11:45:fc:74:f9:4e:79: 42:b1:e5:6f:40:71:3a:01:fd:9c:a2:5f:e6:69:01:c0:0d:05: 19:15:a3:8c:a9:0d:64:64:27:62:c0:bd:fa:c5:e7:3c:be:30: f2:53:2c:95:4f:84:4e:81:e0:a9:e5:f3:7d:1c:36:be:f8:20: dc:2a:fd:70:ed:d8:4f:15:c2:10:93:00:67:9d:9c:3b:73:48: 93:3d:4e:b5:c1:96:bd:5f:34:2b:e4:c1:2a:d6:d4:75:55:0a: 2e:98:5b:61:de:ab:76:34:8b:a8:73:18:e8:a6:72:0a:f1:66: 30:93:cd:48:2b:5d:58:f3:f8:dd:96:6f:13:c9:e8:89:eb:69: a2:7a:82:a9:3e:cc:43:58:8b:4f:d3:4f:c0:5e:60:99:a9:b2: 39:77:7c:d7:d4:e9:0b:61:2e:21:d3:38:82:f2:c2:2b:32:84: e2:87:83:e9:6a:b0:c6:fd:77:da:f3:44:a5:5a:6d:da:d6:8b: 4c:dc:96:94:b3:8e:ed:2c:c1:15:f2:01:e1:46:a6:12:5f:81: 9d:a0:75:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnAPFxD9qx64e+AOW7mkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTUxMDQ0NDBiZmZlM2MyZmE1OTU3M2E3ZjUyYjFhOWE2NzMwMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rU9oSlHDsrHunnW15kgzoa/QqOM 2bT/Dfd5hK9W5pjUpvUMMW6ivJAc7WlwBpGrFijn0Kz4KoqBaw3ZAJ6DNTbFRQMH xAW74510OvbgnNA7xOCmq/YqvCzk5uVpXtyD6RsYUO7M4d3DViC8C9ft8hPgUKpg DYIjJR+kdCrG8zT0cyoYNkCriSD4sRt73osGCWYdzY7pvgs0RwMeJDg+bSck+abk 6YdE443DnsrGBpJloFPwnTvfDCmsrTlbtA7JMXAB//V2mar8gXpvV4TCFpdsaBq9 2WyKw8dfy7LsCt3q34ZCkDzOGupyy4+9OimtyFVv90DdwDwJ+f2GjzTOEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5RBEQL/+PC+llXOn9SsammcwKCMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvamxFRVJBdl80OEw2V1ZjNmYxS3hxYVp6QW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsdMA0G CSqGSIb3DQEBCwUAA4IBAQB9Iwuei42M2zakuzFpVSne4SnLinXNMY9ynm+y67To XzFjsyYwKOqtQ3IWfUhwkRFF/HT5TnlCseVvQHE6Af2col/maQHADQUZFaOMqQ1k ZCdiwL36xec8vjDyUyyVT4ROgeCp5fN9HDa++CDcKv1w7dhPFcIQkwBnnZw7c0iT PU61wZa9XzQr5MEq1tR1VQoumFth3qt2NIuocxjopnIK8WYwk81IK11Y8/jdlm8T yeiJ62mieoKpPsxDWItP00/AXmCZqbI5d3zX1OkLYS4h0ziC8sIrMoTih4PparDG /Xfa80SlWm3a1otM3JaUs47tLMEV8gHhRqYSX4GdoHW/ -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client