This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JPlORFdyQjK5aFqdYBUgU8a8jqQ.roa File: JPlORFdyQjK5aFqdYBUgU8a8jqQ.roa (raw, json) Hash identifier: 5M3Fd8mHf55C+A9fLVLLNBtGpUXDuXqOUPlfyzlDYnU= Subject key identifier: 24:F9:4E:44:57:72:42:32:B9:68:5A:9D:60:15:20:53:C6:BC:8E:A4 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B9D07D3E961888D166D931A721A21FB5F Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JPlORFdyQjK5aFqdYBUgU8a8jqQ.roa Signing time: Thu 08 Jan 2026 09:54:54 +0000 ROA not before: Thu 08 Jan 2026 09:54:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 89.23.80.0/24 maxlen: 24 89.23.87.0/24 maxlen: 24 89.23.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:07:d3:e9:61:88:8d:16:6d:93:1a:72:1a:21:fb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 8 09:54:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f94e4457724232b9685a9d60152053c6bc8ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:3e:17:86:1c:2a:72:ad:40:bc:36:a1:4d: 9d:d3:d3:8a:b6:bf:b0:d4:0e:fc:4f:0d:02:9b:f2: d6:13:e2:a8:72:38:d4:06:33:c1:23:09:6c:b5:4c: 6c:92:00:d5:66:c8:ef:de:9e:ac:b3:21:d2:f8:58: e9:bc:fa:e6:f1:a3:68:9c:19:3a:df:25:5e:83:14: 0c:29:c6:e9:c1:f6:f6:5a:c4:3a:b4:63:e9:bc:40: 1d:87:45:27:87:ec:15:67:3a:a0:e2:65:fa:1d:be: e0:aa:64:e3:d8:45:1f:d1:4e:99:e5:25:1e:1f:8e: 33:78:8e:de:e4:d3:c1:3d:e8:c7:e1:2d:cc:50:26: 3d:b4:78:c7:dd:09:ad:01:31:cd:eb:40:95:65:c9: ac:96:aa:5a:92:61:46:1e:cc:f6:7b:05:3e:2e:9b: 68:88:65:46:17:5b:fb:30:e5:3f:fa:83:ef:22:b5: 6d:d9:47:6e:eb:44:f6:9a:cd:32:e4:ea:20:1d:f4: 01:4d:30:54:24:d9:70:30:4b:9c:7b:a2:3d:31:0e: 7b:0d:68:ae:3f:74:d8:5e:f3:c6:32:e9:a6:6c:c4: df:a5:ba:04:85:a4:3d:c5:81:9e:2d:93:af:73:ee: ba:08:bf:ac:9b:b0:df:e4:20:33:3f:36:84:a0:5f: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:4E:44:57:72:42:32:B9:68:5A:9D:60:15:20:53:C6:BC:8E:A4 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JPlORFdyQjK5aFqdYBUgU8a8jqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.80.0/24 89.23.87.0/24 89.23.92.0/24 Signature Algorithm: sha256WithRSAEncryption 01:3f:6c:6b:a3:78:89:84:5f:18:c7:ae:88:ce:74:f5:63:a9: db:01:e5:2b:95:d4:83:72:3d:62:f9:ec:cb:b0:f3:99:7a:ce: 82:1a:06:e0:61:a5:1d:57:68:78:66:a1:91:b5:54:58:c6:9d: 3c:d3:b1:78:df:46:be:4b:6e:a5:e2:24:0a:82:38:32:59:ce: a3:13:d7:98:00:12:2a:c1:7b:c5:50:83:b3:84:27:68:38:ab: 41:7a:6d:d1:37:21:6b:0d:00:27:3e:d8:5d:3e:99:24:b4:7a: ba:87:2d:a2:f5:33:5b:d3:df:72:f5:e7:46:97:fd:cc:03:0d: 71:8d:a3:5d:8d:7a:66:e8:ee:c1:24:bc:75:cb:6d:a8:76:08: 02:e9:17:c3:0d:25:65:cb:f0:3a:e6:ef:c4:3c:ac:e7:b3:ef: d8:d9:13:91:a4:43:8e:53:bd:af:37:fd:c2:a9:65:fa:f8:8d: 47:54:91:ca:9f:07:d1:de:54:80:53:8a:0f:00:35:de:04:4a: 86:79:4d:1e:8b:3d:ce:dd:be:52:a2:4a:39:3c:30:c8:16:c3: f4:4e:7e:88:61:70:89:6b:fe:98:fc:44:87:dc:8c:07:3a:8b: 66:e6:95:0d:bc:0e:42:96:c3:7b:8d:a9:1f:8c:a7:1c:da:64: 61:13:da:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZudB9PpYYiNFm2TGnIaIftfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTA4MDk1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGY5NGU0NDU3NzI0MjMyYjk2ODVhOWQ2MDE1MjA1M2M2YmM4ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gc+F4YcKnKtQLw2oU2d09OKtr+w 1A78Tw0Cm/LWE+KocjjUBjPBIwlstUxskgDVZsjv3p6ssyHS+FjpvPrm8aNonBk6 3yVegxQMKcbpwfb2WsQ6tGPpvEAdh0Unh+wVZzqg4mX6Hb7gqmTj2EUf0U6Z5SUe H44zeI7e5NPBPejH4S3MUCY9tHjH3QmtATHN60CVZcmslqpakmFGHsz2ewU+Lpto iGVGF1v7MOU/+oPvIrVt2Udu60T2ms0y5OogHfQBTTBUJNlwMEuce6I9MQ57DWiu P3TYXvPGMummbMTfpboEhaQ9xYGeLZOvc+66CL+sm7Df5CAzPzaEoF//dwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCT5TkRXckIyuWhanWAVIFPGvI6kMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvSlBsT1JGZHlRaks1YUZxZFlCVWdVOGE4anFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRdQAwQA WRdXAwQAWRdcMA0GCSqGSIb3DQEBCwUAA4IBAQABP2xro3iJhF8Yx66IznT1Y6nb AeUrldSDcj1i+ezLsPOZes6CGgbgYaUdV2h4ZqGRtVRYxp0807F430a+S26l4iQK gjgyWc6jE9eYABIqwXvFUIOzhCdoOKtBem3RNyFrDQAnPthdPpkktHq6hy2i9TNb 099y9edGl/3MAw1xjaNdjXpm6O7BJLx1y22odggC6RfDDSVly/A65u/EPKzns+/Y 2RORpEOOU72vN/3CqWX6+I1HVJHKnwfR3lSAU4oPADXeBEqGeU0eiz3O3b5Soko5 PDDIFsP0Tn6IYXCJa/6Y/ESH3IwHOotm5pUNvA5ClsN7jakfjKcc2mRhE9rX -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:34 2026 by rpki-client