This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JutDRiQZPtkgRNn4DbKRtcU159k.roa File: JutDRiQZPtkgRNn4DbKRtcU159k.roa (raw, json) Hash identifier: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk= Subject key identifier: 26:EB:43:46:24:19:3E:D9:20:44:D9:F8:0D:B2:91:B5:C5:35:E7:D9 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B7A5AB434F4C0CB4D71BBC41ACAE585A6 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JutDRiQZPtkgRNn4DbKRtcU159k.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34859 IP address blocks: 94.137.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:34:f4:c0:cb:4d:71:bb:c4:1a:ca:e5:85:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26eb434624193ed92044d9f80db291b5c535e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:b8:28:31:34:23:df:0f:67:ec:31:f7:88: ad:61:ca:46:60:cc:c3:38:bd:29:10:54:9d:ca:fe: 9b:42:4f:60:62:dc:a0:e3:42:8d:2b:25:8e:bc:34: e8:15:bb:06:a6:0a:f9:ab:82:4e:d4:10:b2:9b:6f: 78:db:a5:48:4f:cc:d9:f9:91:d8:a4:26:3e:8d:37: 41:69:db:bb:d8:e7:70:fb:fc:d3:39:eb:df:ff:73: b2:2b:06:75:2f:d5:bc:0b:b6:fe:c1:a1:70:4e:7f: 39:37:30:10:1f:1d:e5:28:d8:65:30:6e:66:6f:03: cb:1c:16:b0:36:1d:03:72:c8:a3:8a:95:40:f9:ad: 64:30:a8:12:23:7a:e3:74:a8:49:36:f2:2f:9a:6e: ef:8c:7f:9c:58:24:9a:b7:02:74:4e:1d:a3:a9:cc: 5c:20:99:13:1e:8c:bc:dc:fb:96:81:53:a1:04:22: 66:3b:3c:1a:57:d1:e9:2f:d3:a8:36:a1:4c:14:98: f5:96:74:73:09:ea:02:6c:30:e7:5a:9e:00:fa:7d: f9:43:06:59:59:7e:74:3e:dd:ba:23:49:00:da:a5: 5d:f5:19:38:32:36:c5:9a:8b:1b:4b:06:ca:d5:50: 09:f5:8b:7d:7e:6c:bb:90:17:dc:75:27:0a:b7:85: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:43:46:24:19:3E:D9:20:44:D9:F8:0D:B2:91:B5:C5:35:E7:D9 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JutDRiQZPtkgRNn4DbKRtcU159k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.137.93.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f6:96:84:b9:0b:ac:9c:01:ee:41:cf:e6:7f:8d:60:6d:f1: a2:f4:0e:df:7c:ce:33:27:65:6f:f2:f2:5a:a9:54:6e:3d:30: 89:7a:12:27:bd:01:f2:f6:02:61:c5:de:ff:fb:43:ff:15:9d: d2:fe:42:96:61:5d:85:b7:8c:cf:49:ff:51:27:68:f9:31:11: 51:7b:ca:06:04:23:90:e1:af:c5:2d:83:cf:0b:8d:b3:2d:91: c0:1f:69:a6:bc:62:fb:07:c9:50:e6:b3:e4:4b:86:00:bc:9f: bb:3f:d4:79:19:84:2d:55:42:97:61:9b:64:16:9b:ee:30:0a: dc:2e:ef:fa:08:0e:0c:4d:2f:9d:86:d9:9f:3f:26:fd:a5:42: 96:40:d3:72:de:75:c2:38:6e:cd:68:41:a8:15:3b:04:94:67: 73:7f:bc:51:9f:10:3c:68:5f:b0:e3:90:36:f8:78:4b:1f:7b: cb:57:3b:7f:b1:20:60:4a:a0:c9:c3:54:05:64:d0:42:d2:58: a5:c2:9a:a6:42:f8:e1:d2:1a:09:b1:d2:1d:1a:d0:b7:10:ee: ad:1d:fa:b7:0e:27:0c:a5:74:24:b6:a2:07:f1:da:3c:11:d0: e8:c8:50:f8:1d:02:42:da:06:ed:2d:71:0e:f8:f6:c8:0f:cd: 2b:c0:a3:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrQ09MDLTXG7xBrK5YWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmViNDM0NjI0MTkzZWQ5MjA0NGQ5ZjgwZGIyOTFiNWM1MzVlN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0+4KDE0I98PZ+wx94itYcpGYMzD OL0pEFSdyv6bQk9gYtyg40KNKyWOvDToFbsGpgr5q4JO1BCym29426VIT8zZ+ZHY pCY+jTdBadu72Odw+/zTOevf/3OyKwZ1L9W8C7b+waFwTn85NzAQHx3lKNhlMG5m bwPLHBawNh0DcsijipVA+a1kMKgSI3rjdKhJNvIvmm7vjH+cWCSatwJ0Th2jqcxc IJkTHoy83PuWgVOhBCJmOzwaV9HpL9OoNqFMFJj1lnRzCeoCbDDnWp4A+n35QwZZ WX50Pt26I0kA2qVd9Rk4MjbFmosbSwbK1VAJ9Yt9fmy7kBfcdScKt4XvWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCbrQ0YkGT7ZIETZ+A2ykbXFNefZMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvSnV0RFJpUVpQdGtnUk5uNERiS1J0Y1UxNTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoldMA0G CSqGSIb3DQEBCwUAA4IBAQBm9paEuQusnAHuQc/mf41gbfGi9A7ffM4zJ2Vv8vJa qVRuPTCJehInvQHy9gJhxd7/+0P/FZ3S/kKWYV2Ft4zPSf9RJ2j5MRFRe8oGBCOQ 4a/FLYPPC42zLZHAH2mmvGL7B8lQ5rPkS4YAvJ+7P9R5GYQtVUKXYZtkFpvuMArc Lu/6CA4MTS+dhtmfPyb9pUKWQNNy3nXCOG7NaEGoFTsElGdzf7xRnxA8aF+w45A2 +HhLH3vLVzt/sSBgSqDJw1QFZNBC0lilwpqmQvjh0hoJsdIdGtC3EO6tHfq3DicM pXQktqIH8do8EdDoyFD4HQJC2gbtLXEO+PbID80rwKMP -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:08 2026 by rpki-client