This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa File: jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa (raw, json) Hash identifier: WoM8kxljrEpcgZDenB5VgkA5gdJ6KKuNHBZdyQe0YiY= Subject key identifier: 8F:32:90:63:EA:9C:3C:78:57:56:90:0C:AC:A3:7A:8C:BB:9A:52:EC Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6BA934CFE2B5528745EF0A3BF0F8 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42441 IP address blocks: 109.122.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6b:a9:34:cf:e2:b5:52:87:45:ef:0a:3b:f0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f329063ea9c3c785756900caca37a8cbb9a52ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:ed:a7:7e:3e:09:33:66:e1:ac:ca:2b:ae: b6:9b:76:94:7b:23:37:32:ef:a2:82:c6:40:54:bc: 0c:c9:06:94:94:e6:8b:54:0a:50:81:a1:a5:7a:d3: fe:54:7a:2d:7d:cd:8e:de:ea:64:3a:d6:a0:ee:6c: c0:60:2f:ed:d6:d4:44:17:f1:7e:21:21:ba:a4:f4: c4:49:fc:b6:2c:16:3e:35:0f:00:39:da:32:19:54: ea:71:e5:c0:ad:6a:4e:a4:07:e6:67:b6:d3:77:48: 32:81:18:55:ba:99:d1:c5:31:d0:df:42:9d:e0:65: e3:63:4f:f3:ee:c3:60:44:13:0a:89:e0:b2:17:53: 88:17:ef:d3:87:04:7c:ea:c2:4e:0d:74:db:b8:6e: c1:9e:6c:01:94:eb:76:a4:95:24:2f:89:3d:df:31: 5a:22:c7:b8:27:09:75:ca:05:13:8d:9d:67:c5:ed: 44:30:49:35:48:f4:03:46:28:08:78:be:c7:fa:12: b1:f3:d3:1f:be:e6:6d:58:4e:44:e2:7f:0c:ee:59: 73:58:1e:bb:89:23:25:c3:c0:87:23:f2:e8:fb:69: 49:6d:1c:9a:b4:48:3d:b2:02:b6:0c:09:48:23:fd: 7e:d7:8d:46:99:3b:30:46:be:13:20:c9:3c:45:87: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:90:63:EA:9C:3C:78:57:56:90:0C:AC:A3:7A:8C:BB:9A:52:EC X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:c6:a7:49:81:11:5e:5b:45:b3:89:c8:c5:2b:2a:25:fa:63: f3:a0:e2:77:3e:fd:c0:c6:9e:38:df:3b:83:c2:f8:cf:9e:ea: 06:30:c0:4e:57:13:b9:cd:69:4f:c4:78:94:31:3e:1c:f2:7b: d6:25:d7:b1:3e:58:ab:dc:7e:bc:ec:de:e2:ec:32:72:af:30: b2:8a:3f:dd:e3:26:f7:41:24:17:c6:a5:d2:3d:53:12:74:e3: 78:c5:9b:b5:10:33:72:ef:d1:a6:0f:57:5e:8c:73:67:0f:2c: 25:35:95:34:ab:f5:28:04:85:58:3f:69:f8:f7:a8:a6:ff:61: 98:80:68:7b:ae:d7:b1:49:e7:25:0f:e9:94:b6:03:5d:fc:17: 0f:ca:99:1e:65:28:b1:c9:5a:22:4f:22:d0:cd:96:e5:1e:8f: 58:e0:51:b7:f7:83:75:57:b5:ad:2d:35:3e:05:f4:fa:af:28: 0d:a6:3b:d4:d3:fd:68:5e:6d:39:36:5d:11:56:f2:c0:4e:64: 92:41:1c:f7:d0:df:45:53:74:aa:4c:f2:92:51:ce:22:33:d3: b6:82:98:33:e0:d8:63:17:ae:e0:29:42:d4:f3:df:f6:8a:9f: 91:dd:ac:68:bc:2b:be:05:de:de:55:c4:64:d2:a0:1f:4b:b4: 5d:85:0a:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmupNM/itVKHRe8KO/D4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjMyOTA2M2VhOWMzYzc4NTc1NjkwMGNhY2EzN2E4Y2JiOWE1MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fntp34+CTNm4azKK662m3aUeyM3 Mu+igsZAVLwMyQaUlOaLVApQgaGletP+VHotfc2O3upkOtag7mzAYC/t1tREF/F+ ISG6pPTESfy2LBY+NQ8AOdoyGVTqceXArWpOpAfmZ7bTd0gygRhVupnRxTHQ30Kd 4GXjY0/z7sNgRBMKieCyF1OIF+/ThwR86sJODXTbuG7BnmwBlOt2pJUkL4k93zFa Ise4Jwl1ygUTjZ1nxe1EMEk1SPQDRigIeL7H+hKx89MfvuZtWE5E4n8M7llzWB67 iSMlw8CHI/Lo+2lJbRyatEg9sgK2DAlII/1+141GmTswRr4TIMk8RYdQqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8ykGPqnDx4V1aQDKyjeoy7mlLsMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvanpLUVktcWNQSGhYVnBBTXJLTjZqTHVhVXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXopMA0G CSqGSIb3DQEBCwUAA4IBAQAtxqdJgRFeW0WzicjFKyol+mPzoOJ3Pv3Axp443zuD wvjPnuoGMMBOVxO5zWlPxHiUMT4c8nvWJdexPlir3H687N7i7DJyrzCyij/d4yb3 QSQXxqXSPVMSdON4xZu1EDNy79GmD1dejHNnDywlNZU0q/UoBIVYP2n496im/2GY gGh7rtexSeclD+mUtgNd/BcPypkeZSixyVoiTyLQzZblHo9Y4FG394N1V7WtLTU+ BfT6rygNpjvU0/1oXm05Nl0RVvLATmSSQRz30N9FU3SqTPKSUc4iM9O2gpgz4Nhj F67gKULU89/2ip+R3axovCu+Bd7eVcRk0qAfS7RdhQpx -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:16 2026 by rpki-client