This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/Jpa6fmcWWnrngaFT0OUDJvFJNfs.roa File: Jpa6fmcWWnrngaFT0OUDJvFJNfs.roa (raw, json) Hash identifier: h5s+yud2w3+2pv0SJ9q0YVNu768ah+hczZmwi91mX/Q= Subject key identifier: 26:96:BA:7E:67:16:5A:7A:E7:81:A1:53:D0:E5:03:26:F1:49:35:FB Certificate issuer: /CN=8819956ddceae022cfe123da373c6b111640368d Certificate serial: 019B7AC899591EA604D58C49E993BEF0F7C6 Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/Jpa6fmcWWnrngaFT0OUDJvFJNfs.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2600 IP address blocks: 212.109.224.0/24 maxlen: 24 212.109.225.0/24 maxlen: 24 212.109.226.0/24 maxlen: 24 212.109.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:59:1e:a6:04:d5:8c:49:e9:93:be:f0:f7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8819956ddceae022cfe123da373c6b111640368d Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2696ba7e67165a7ae781a153d0e50326f14935fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:eb:a4:e7:94:4f:d2:53:6f:76:75:e9:b2: 30:20:ba:f2:7c:68:2f:19:6e:a6:7f:4f:ff:b5:6f: 3f:59:0d:67:02:49:df:d7:8b:74:76:7e:d6:69:c1: c8:5b:43:43:c8:e9:0e:d2:ed:51:5b:99:55:cd:8d: 3f:cc:59:a7:6c:c0:f6:1e:03:00:0f:3c:aa:e8:0b: 4a:e8:20:e6:89:f3:c7:23:bc:0a:c9:15:11:e8:84: e7:20:21:61:9c:b1:b5:59:3b:b2:12:ac:ba:d2:f2: 48:0a:39:b1:ce:38:86:08:23:8e:d9:81:29:3b:c7: 0b:22:d3:a6:e3:9c:2a:e6:66:06:99:44:3d:5f:fc: d3:96:74:1e:bf:b3:a3:a4:d2:50:fe:03:b3:70:3a: 7e:82:7f:4a:35:bf:8d:55:b2:db:05:2f:81:13:94: 8f:03:65:cf:a2:aa:7a:d1:8c:47:83:e0:5c:52:75: 1f:bb:d3:7c:cf:29:6e:a2:06:21:35:0c:46:8c:fd: 87:0e:55:b5:67:4e:49:e7:a5:ad:fe:c7:02:2d:89: 28:8c:94:58:62:63:15:cf:de:0f:51:09:83:c6:16: c0:87:7b:61:69:b1:81:ee:81:ed:69:d6:47:f8:9a: de:22:d2:d8:1d:b9:26:10:4e:af:c1:f0:e1:8a:03: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:BA:7E:67:16:5A:7A:E7:81:A1:53:D0:E5:03:26:F1:49:35:FB X509v3 Authority Key Identifier: keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/Jpa6fmcWWnrngaFT0OUDJvFJNfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.109.224.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:07:d8:7d:e9:5a:67:20:a2:ee:fe:fc:7b:a3:05:d0:af:f5: 21:40:14:fb:60:d6:18:73:de:e4:2a:6a:1b:6e:f0:4f:6a:95: 27:be:fa:51:09:f3:5f:85:8d:bb:64:ea:33:38:5d:a8:d7:7d: 1c:2b:f2:68:13:f4:4e:7d:45:14:e4:1b:98:cb:b1:73:0f:3d: 13:60:2b:27:7b:c3:2e:5e:2b:da:99:aa:a1:19:ca:34:3e:f9: 4b:7e:86:1a:45:cc:45:d1:c9:b0:94:f7:15:1e:60:f9:96:39: b1:b0:2d:d5:f1:ac:90:22:4d:89:a3:f9:ea:c5:b8:cb:b3:f1: af:64:a8:a0:3f:84:8a:2b:f1:df:b4:7f:1d:40:5e:d5:6c:d3: a7:ff:3d:ae:76:eb:5c:a3:f0:13:79:28:e1:79:ac:b4:df:2a: 25:3e:2f:6a:f2:ae:05:74:0a:5f:42:eb:f2:1e:66:c6:41:4e: 8c:61:91:78:61:42:8a:3b:5b:9c:1c:a4:22:8e:6b:f1:06:41: 65:06:38:51:45:27:66:3c:41:8c:11:85:b2:5a:21:86:c4:40: 32:d8:21:8a:94:79:74:28:4a:fe:45:55:48:62:fb:46:f1:d2: 48:e9:96:69:67:e8:fa:d1:fc:7f:0d:27:22:b8:65:0e:39:d9: 5e:04:30:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJlZHqYE1YxJ6ZO+8PfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTk5NTZkZGNlYWUwMjJjZmUxMjNkYTM3M2M2YjExMTY0 MDM2OGQwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjk2YmE3ZTY3MTY1YTdhZTc4MWExNTNkMGU1MDMyNmYxNDkzNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgLrpOeUT9JTb3Z16bIwILryfGgv GW6mf0//tW8/WQ1nAknf14t0dn7WacHIW0NDyOkO0u1RW5lVzY0/zFmnbMD2HgMA Dzyq6AtK6CDmifPHI7wKyRUR6ITnICFhnLG1WTuyEqy60vJICjmxzjiGCCOO2YEp O8cLItOm45wq5mYGmUQ9X/zTlnQev7OjpNJQ/gOzcDp+gn9KNb+NVbLbBS+BE5SP A2XPoqp60YxHg+BcUnUfu9N8zyluogYhNQxGjP2HDlW1Z05J56Wt/scCLYkojJRY YmMVz94PUQmDxhbAh3thabGB7oHtadZH+JreItLYHbkmEE6vwfDhigNDEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaWun5nFlp654GhU9DlAybxSTX7MB8GA1UdIwQY MBaAFIgZlW3c6uAiz+Ej2jc8axEWQDaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJtVmJkenE0Q0xQNFNQYU56eHJFUlpBTm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85ODg3NjgtZjE3Yi00ZjU5LWJlMDkt MmRlYjE0YzI5MGVkLzEvSnBhNmZtY1dXbnJuZ2FGVDBPVURKdkZKTmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85ODg3NjgtZjE3Yi00ZjU5LWJlMDktMmRlYjE0YzI5MGVk LzEvaUJtVmJkenE0Q0xQNFNQYU56eHJFUlpBTm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1G3gMA0G CSqGSIb3DQEBCwUAA4IBAQA6B9h96VpnIKLu/vx7owXQr/UhQBT7YNYYc97kKmob bvBPapUnvvpRCfNfhY27ZOozOF2o130cK/JoE/ROfUUU5BuYy7FzDz0TYCsne8Mu XivamaqhGco0PvlLfoYaRcxF0cmwlPcVHmD5ljmxsC3V8ayQIk2Jo/nqxbjLs/Gv ZKigP4SKK/HftH8dQF7VbNOn/z2udutco/ATeSjheay03yolPi9q8q4FdApfQuvy HmbGQU6MYZF4YUKKO1ucHKQijmvxBkFlBjhRRSdmPEGMEYWyWiGGxEAy2CGKlHl0 KEr+RVVIYvtG8dJI6ZZpZ+j60fx/DSciuGUOOdleBDBC -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:26 2026 by rpki-client