This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JCYdzJTMcHHvvNsrGsRbncy3QwM.roa File: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (raw, json) Hash identifier: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g= Subject key identifier: 24:26:1D:CC:94:CC:70:71:EF:BC:DB:2B:1A:C4:5B:9D:CC:B7:43:03 Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B7C8070DF0DF516A6BA7BBAEFF3C7C4F3 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JCYdzJTMcHHvvNsrGsRbncy3QwM.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141968 IP address blocks: 109.105.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:70:df:0d:f5:16:a6:ba:7b:ba:ef:f3:c7:c4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24261dcc94cc7071efbcdb2b1ac45b9dccb74303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a7:95:00:22:09:3f:fc:8a:e1:81:d5:20:2d: 4e:bb:78:16:f0:58:98:0a:52:83:39:e8:fe:62:7d: 2b:44:9d:21:3f:73:ed:1f:d3:3e:e6:25:a2:bf:68: f3:00:ac:da:de:8a:6f:c0:65:f3:cc:67:81:b1:0b: d6:74:81:8d:e6:f7:15:6f:c3:a5:94:18:01:d4:38: b9:ab:1e:24:78:67:3f:fb:39:dc:44:ad:35:cb:b5: 7a:fb:d7:0d:28:42:e0:3d:01:4e:7b:4b:3b:01:2a: df:2d:f5:50:cb:95:87:73:03:8f:62:9a:62:68:23: 65:68:b4:9b:ab:59:89:0f:7e:61:b9:ce:85:06:45: 98:42:7f:80:49:b2:93:26:fc:c6:76:9c:bb:6f:2b: 81:fd:54:71:27:14:f9:f9:c1:76:b8:19:e2:68:77: f1:b5:97:c6:7f:f4:5f:9e:fc:bf:26:1f:6b:b2:59: b0:50:85:90:8e:d2:b9:13:3b:c5:2c:02:7a:54:3c: cd:bb:cd:81:e5:e8:e9:fa:bd:57:4f:73:d7:0d:a8: a7:98:73:27:3e:88:10:e1:e4:d1:cb:61:e6:ef:4c: 6e:26:86:69:26:cc:5f:31:af:3e:10:5f:09:8c:aa: 24:5e:c3:13:e0:60:71:37:c5:76:76:2a:7c:b4:e9: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:1D:CC:94:CC:70:71:EF:BC:DB:2B:1A:C4:5B:9D:CC:B7:43:03 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/JCYdzJTMcHHvvNsrGsRbncy3QwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.194.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8b:3b:88:74:49:fa:52:dc:8b:91:72:78:a7:46:88:34:f0: 6d:ea:76:eb:4d:57:20:56:d2:5e:5a:d6:c8:8b:98:b8:d2:28: 85:8b:d8:8c:fb:98:9f:8f:0b:7c:84:56:0f:27:8d:ab:a5:7b: 52:5a:1b:78:4c:85:29:91:88:9e:97:55:55:89:e8:09:d7:2b: 2d:61:8c:89:67:0c:08:09:31:42:78:aa:a6:4d:43:77:19:43: d3:89:46:fb:62:8e:cb:88:41:35:e8:e5:54:7d:6e:39:71:3f: 5e:a5:e7:bf:ee:2b:68:c2:dc:75:8c:17:e9:74:13:5a:ab:e9: b5:6f:f4:9f:33:c8:54:70:0b:4f:3f:7f:cd:69:57:e4:a8:ee: f5:4e:0b:27:fb:c9:11:47:57:0d:a1:b2:b7:7a:4b:54:62:44: ae:6a:75:6c:91:02:80:89:d1:37:d7:44:5b:71:30:e7:67:a9: a6:9d:93:07:5f:de:36:70:a5:b4:40:d9:f3:b6:3a:59:cb:4c: e6:ae:e4:d7:77:ba:0c:a9:b8:07:65:d5:a8:c3:eb:2d:36:a0: bd:5f:cb:e4:13:f8:42:e1:23:12:46:95:80:0f:b5:44:2f:8c: bb:f6:cc:5c:36:1f:64:6e:0f:13:91:50:a1:90:c3:f4:23:52: ae:da:6d:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHDfDfUWprp7uu/zx8TzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDI2MWRjYzk0Y2M3MDcxZWZiY2RiMmIxYWM0NWI5ZGNjYjc0MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96eVACIJP/yK4YHVIC1Ou3gW8FiY ClKDOej+Yn0rRJ0hP3PtH9M+5iWiv2jzAKza3opvwGXzzGeBsQvWdIGN5vcVb8Ol lBgB1Di5qx4keGc/+zncRK01y7V6+9cNKELgPQFOe0s7ASrfLfVQy5WHcwOPYppi aCNlaLSbq1mJD35huc6FBkWYQn+ASbKTJvzGdpy7byuB/VRxJxT5+cF2uBniaHfx tZfGf/Rfnvy/Jh9rslmwUIWQjtK5EzvFLAJ6VDzNu82B5ejp+r1XT3PXDainmHMn PogQ4eTRy2Hm70xuJoZpJsxfMa8+EF8JjKokXsMT4GBxN8V2dip8tOkGcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQmHcyUzHBx77zbKxrEW53Mt0MDMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvSkNZZHpKVE1jSEh2dk5zckdzUmJuY3kzUXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnCMA0G CSqGSIb3DQEBCwUAA4IBAQBOizuIdEn6UtyLkXJ4p0aINPBt6nbrTVcgVtJeWtbI i5i40iiFi9iM+5ifjwt8hFYPJ42rpXtSWht4TIUpkYiel1VViegJ1ystYYyJZwwI CTFCeKqmTUN3GUPTiUb7Yo7LiEE16OVUfW45cT9epee/7itowtx1jBfpdBNaq+m1 b/SfM8hUcAtPP3/NaVfkqO71Tgsn+8kRR1cNobK3ektUYkSuanVskQKAidE310Rb cTDnZ6mmnZMHX942cKW0QNnztjpZy0zmruTXd7oMqbgHZdWow+stNqC9X8vkE/hC 4SMSRpWAD7VEL4y79sxcNh9kbg8TkVChkMP0I1Ku2m20 -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:03 2026 by rpki-client