This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JFQGAOGdlBoIozV3Kg-vDWtfVao.roa File: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (raw, json) Hash identifier: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M= Subject key identifier: 24:54:06:00:E1:9D:94:1A:08:A3:35:77:2A:0F:AF:0D:6B:5F:55:AA Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7302F9CB6DFDC6F8F8B5DE5D203AE Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JFQGAOGdlBoIozV3Kg-vDWtfVao.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208226 IP address blocks: 45.140.164.0/24 maxlen: 24 45.140.165.0/24 maxlen: 24 185.248.33.0/24 maxlen: 24 2a0e:4007:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:30:2f:9c:b6:df:dc:6f:8f:8b:5d:e5:d2:03:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24540600e19d941a08a335772a0faf0d6b5f55aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:16:d5:d5:24:a7:97:91:af:50:86:37:e2: da:f1:c7:e5:e8:ce:50:82:97:67:39:a4:dd:a9:ba: a0:37:27:2b:47:35:68:66:a1:06:2f:46:dd:39:c2: 4f:f8:36:fb:28:90:af:c8:3b:47:59:f5:06:0b:43: 09:cb:a6:3a:f5:a5:b6:13:f9:fa:36:42:04:cb:73: 60:cb:c9:c6:3a:31:65:fa:45:f7:35:2a:4a:09:8d: b0:a7:1d:d6:df:f2:eb:bc:8f:66:6a:7f:08:64:d5: 98:3c:92:9a:c7:a6:a9:6b:04:28:f3:51:4a:56:19: a2:de:d7:62:74:f2:54:d1:c2:fa:53:56:da:e6:c1: 34:ea:ab:03:45:d1:cd:61:fd:f2:b3:bf:cf:e3:87: 1c:79:f6:ef:9f:0a:8e:23:97:fd:13:13:9a:ca:69: ca:26:70:75:d5:25:01:b9:8e:79:a3:e7:b3:40:b3: ee:4b:21:ae:e8:ce:27:30:9b:ab:a9:2b:53:83:cc: 9b:25:ad:43:5d:92:4d:e8:ce:86:17:4a:39:46:fa: 25:e8:45:1e:d9:08:5c:ae:0a:35:6b:c7:76:6d:30: 86:87:93:50:03:81:82:57:bd:68:0f:1a:42:b0:79: ae:40:00:b9:00:bc:fc:a8:cf:62:91:85:fa:ad:77: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:54:06:00:E1:9D:94:1A:08:A3:35:77:2A:0F:AF:0D:6B:5F:55:AA X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JFQGAOGdlBoIozV3Kg-vDWtfVao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.164.0/23 185.248.33.0/24 IPv6: 2a0e:4007:fffe::/48 Signature Algorithm: sha256WithRSAEncryption b1:45:cb:00:17:30:0e:b7:91:30:50:e9:8c:eb:9a:1a:df:0c: 07:8e:cd:52:9d:65:d3:57:f7:ae:5f:9e:00:e6:48:9c:4f:b8: d9:c0:44:bf:8b:f3:73:dc:ee:7f:52:67:55:34:76:bd:70:62: 59:53:93:2b:53:37:56:f2:49:d4:10:43:97:b8:6f:55:fd:ce: 72:dd:e6:89:ab:01:05:93:36:e7:e6:64:6f:14:98:cb:26:b6: 1d:59:22:03:75:9f:2e:c8:dd:43:c7:79:73:6c:44:7c:71:89: d2:02:f3:ce:7f:67:d9:67:8c:aa:f4:6f:05:7c:fa:fe:34:33: 75:5c:a5:21:3c:eb:eb:d6:33:a7:3b:fe:5a:6a:80:f8:c5:52: e4:76:fe:ed:04:d1:6d:91:e2:a5:1a:c4:41:82:a6:e9:48:e1: 00:d3:30:9c:02:d0:cf:18:c3:1d:a4:19:d4:22:ba:4a:fb:9e: 82:48:07:c5:a8:70:f3:3f:ff:0b:9a:33:29:3e:ca:25:64:3c: cd:7a:81:1a:20:f0:88:3a:50:2b:6d:23:a0:eb:92:c2:82:b6: df:6a:70:00:85:46:63:7a:1b:d2:d2:95:06:ef:bd:44:68:cf: ca:a9:5a:51:48:19:9b:3b:9f:41:90:74:ac:36:48:20:f4:cd: ab:de:90:4d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt3xzAvnLbf3G+Pi13l0gOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU0MDYwMGUxOWQ5NDFhMDhhMzM1NzcyYTBmYWYwZDZiNWY1NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28oW1dUkp5eRr1CGN+La8cfl6M5Q gpdnOaTdqbqgNycrRzVoZqEGL0bdOcJP+Db7KJCvyDtHWfUGC0MJy6Y69aW2E/n6 NkIEy3Ngy8nGOjFl+kX3NSpKCY2wpx3W3/LrvI9man8IZNWYPJKax6apawQo81FK Vhmi3tdidPJU0cL6U1ba5sE06qsDRdHNYf3ys7/P44ccefbvnwqOI5f9ExOaymnK JnB11SUBuY55o+ezQLPuSyGu6M4nMJurqStTg8ybJa1DXZJN6M6GF0o5Rvol6EUe 2Qhcrgo1a8d2bTCGh5NQA4GCV71oDxpCsHmuQAC5ALz8qM9ikYX6rXe8kwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFCRUBgDhnZQaCKM1dyoPrw1rX1WqMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvSkZRR0FPR2RsQm9Jb3pWM0tnLXZEV3RmVmFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLYykAwQA ufghMA8EAgACMAkDBwAqDkAH//4wDQYJKoZIhvcNAQELBQADggEBALFFywAXMA63 kTBQ6YzrmhrfDAeOzVKdZdNX965fngDmSJxPuNnARL+L83Pc7n9SZ1U0dr1wYllT kytTN1bySdQQQ5e4b1X9znLd5omrAQWTNufmZG8UmMsmth1ZIgN1ny7I3UPHeXNs RHxxidIC885/Z9lnjKr0bwV8+v40M3VcpSE86+vWM6c7/lpqgPjFUuR2/u0E0W2R 4qUaxEGCpulI4QDTMJwC0M8Ywx2kGdQiukr7noJIB8WocPM//wuaMyk+yiVkPM16 gRog8Ig6UCttI6DrksKCtt9qcACFRmN6G9LSlQbvvURoz8qpWlFIGZs7n0GQdKw2 SCD0zavekE0= -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:33 2026 by rpki-client