This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/JTjLA25EXJGse4vT8BX20j1O8LY.roa File: JTjLA25EXJGse4vT8BX20j1O8LY.roa (raw, json) Hash identifier: ojiSWq26fAHeHJAB/nBHHSFly0JE9P5HmIbkwqeejf4= Subject key identifier: 25:38:CB:03:6E:44:5C:91:AC:7B:8B:D3:F0:15:F6:D2:3D:4E:F0:B6 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B7EA4819E94182845C2BD420E6A9D128D Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/JTjLA25EXJGse4vT8BX20j1O8LY.roa Signing time: Fri 02 Jan 2026 12:17:48 +0000 ROA not before: Fri 02 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49367 IP address blocks: 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 2a04:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:81:9e:94:18:28:45:c2:bd:42:0e:6a:9d:12:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 2 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2538cb036e445c91ac7b8bd3f015f6d23d4ef0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:a3:4c:5a:11:9a:30:04:5c:76:d5:c6:47: fc:37:ca:73:c7:d9:9a:59:62:8c:7a:dc:77:36:cb: f8:b5:f7:0d:f5:24:01:24:2e:ad:a0:cb:ab:ff:51: c9:22:53:68:f6:f8:cc:65:01:16:0c:ce:35:c5:49: 3e:ad:f4:cc:2d:8b:1e:ed:f6:85:aa:fc:39:f7:dc: d1:fc:20:99:ef:b8:a6:03:38:80:87:b5:0e:b5:65: b3:1b:0f:5c:83:32:3f:a2:1b:df:94:38:19:86:9e: c2:0f:48:75:a1:79:54:16:04:bc:d5:38:56:d1:ea: a2:a3:47:3b:21:28:f6:f9:f7:09:ed:ca:80:95:9d: f6:f4:08:17:fc:d2:71:8e:01:bc:b5:9a:91:ee:a5: 76:4f:13:c1:c0:50:79:70:f6:65:34:bc:5c:06:34: 30:11:dc:1b:49:25:9c:00:ae:d0:82:3e:fa:0f:c6: 48:f0:d4:d5:37:0c:b5:11:10:62:9b:d8:c0:da:a3: 68:b8:e2:4d:49:c6:07:08:c7:c0:83:41:44:4e:89: 67:22:0e:c3:38:12:fa:74:41:14:00:9b:6a:b6:3d: ab:7d:de:89:4b:44:f5:23:dc:0a:1a:53:73:70:4a: 8c:eb:9f:e5:17:ea:54:2a:f5:63:4b:00:3f:57:be: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:38:CB:03:6E:44:5C:91:AC:7B:8B:D3:F0:15:F6:D2:3D:4E:F0:B6 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/JTjLA25EXJGse4vT8BX20j1O8LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.150.0/23 94.176.108.0/24 IPv6: 2a04:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 16:89:cd:97:06:bb:a0:c4:b8:bf:4a:6c:42:bb:b7:15:fd:84: 6b:6e:73:f0:8a:c0:65:6a:70:de:bc:61:ba:05:d4:de:f3:79: 4a:b2:3f:53:b6:2c:a7:0e:86:98:d1:09:ec:67:5e:50:9b:d9: 4d:11:7c:38:c3:ca:41:1d:0a:b4:05:71:52:e4:28:cc:7b:1a: f0:20:ba:38:aa:07:04:25:e2:36:23:61:ed:ab:5c:a6:32:45: 27:76:8d:b4:4e:3e:a0:a7:06:bf:5b:9e:e7:b1:c7:69:8f:c2: 61:23:2b:58:87:64:22:7d:b1:db:65:f6:7d:27:0e:98:ea:a4: 7e:48:b3:31:fb:ec:9e:94:69:76:6a:f7:fc:32:e7:bb:36:ba: 24:41:ee:74:f8:53:5a:55:29:14:b6:6f:46:57:bf:81:af:b8: e8:48:29:63:6b:b3:d7:4c:c9:f4:a2:b3:2d:bb:49:9e:da:ec: 41:48:29:d3:af:47:f8:05:ca:b1:80:aa:9c:1c:89:7e:8d:0a: d0:a4:23:e9:27:27:b9:53:ea:55:30:f3:81:e5:be:3d:98:c5: 6a:00:0e:db:02:47:31:6d:6c:31:69:c7:36:7f:38:af:05:9f: 09:ad:fd:fb:93:9d:22:40:57:05:3c:80:0b:28:70:e4:92:f1: f3:bf:d2:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pIGelBgoRcK9Qg5qnRKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTAyMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTM4Y2IwMzZlNDQ1YzkxYWM3YjhiZDNmMDE1ZjZkMjNkNGVmMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+jTFoRmjAEXHbVxkf8N8pzx9ma WWKMetx3Nsv4tfcN9SQBJC6toMur/1HJIlNo9vjMZQEWDM41xUk+rfTMLYse7faF qvw599zR/CCZ77imAziAh7UOtWWzGw9cgzI/ohvflDgZhp7CD0h1oXlUFgS81ThW 0eqio0c7ISj2+fcJ7cqAlZ329AgX/NJxjgG8tZqR7qV2TxPBwFB5cPZlNLxcBjQw EdwbSSWcAK7Qgj76D8ZI8NTVNwy1ERBim9jA2qNouOJNScYHCMfAg0FETolnIg7D OBL6dEEUAJtqtj2rfd6JS0T1I9wKGlNzcEqM65/lF+pUKvVjSwA/V76eRwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCU4ywNuRFyRrHuL0/AV9tI9TvC2MB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvSlRqTEEyNUVYSkdzZTR2VDhCWDIwajFPOExZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBXXGWAwQA XrBsMA0EAgACMAcDBQAqBGjAMA0GCSqGSIb3DQEBCwUAA4IBAQAWic2XBrugxLi/ SmxCu7cV/YRrbnPwisBlanDevGG6BdTe83lKsj9TtiynDoaY0QnsZ15Qm9lNEXw4 w8pBHQq0BXFS5CjMexrwILo4qgcEJeI2I2Htq1ymMkUndo20Tj6gpwa/W57nscdp j8JhIytYh2QifbHbZfZ9Jw6Y6qR+SLMx++yelGl2avf8Mue7NrokQe50+FNaVSkU tm9GV7+Br7joSClja7PXTMn0orMtu0me2uxBSCnTr0f4BcqxgKqcHIl+jQrQpCPp Jye5U+pVMPOB5b49mMVqAA7bAkcxbWwxacc2fzivBZ8Jrf37k50iQFcFPIALKHDk kvHzv9JC -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:01 2026 by rpki-client