This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa File: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (raw, json) Hash identifier: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4= Subject key identifier: 24:90:82:5D:5B:8A:18:96:FD:B9:EE:32:C8:5D:5F:0A:D5:0F:2B:D1 Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Certificate serial: 019B7834D1F68A28D60F801984B0E49935B6 Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 91.206.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:f6:8a:28:d6:0f:80:19:84:b0:e4:99:35:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2490825d5b8a1896fdb9ee32c85d5f0ad50f2bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:34:3c:47:f2:25:5a:a0:10:b5:0a:9e:2c: 89:22:ae:de:1a:9f:67:36:ae:dd:74:a1:c0:2b:e3: 6e:d1:94:60:69:29:66:9b:65:c9:8a:e8:78:40:6b: cc:b9:28:f6:5e:f7:19:1b:87:a0:bf:26:20:2f:04: 17:7c:32:68:cf:c4:ed:ae:0d:cf:c5:1a:ab:74:a9: 0c:a1:78:02:a6:e5:a8:5c:a4:38:af:3a:76:41:e4: 0a:f3:d5:6a:b0:fb:f7:ee:a0:75:dd:27:b1:48:ca: 52:d7:06:41:5e:15:20:be:54:fd:3f:4c:11:99:f2: c3:74:9e:0c:10:05:a0:8f:86:c3:66:66:44:66:8f: 46:c4:4c:0c:b0:5e:82:ef:65:4f:e5:6b:0b:eb:3d: 83:6d:92:b4:e9:f1:d6:e2:93:f8:b3:ec:e5:35:82: 3f:ed:22:f5:2c:3e:15:f4:87:b3:ff:f4:87:43:f3: 0c:02:9d:76:1d:f0:80:f4:90:cb:d6:41:48:bb:a0: cc:ee:2d:05:99:99:7f:89:8b:71:09:cc:26:29:7c: a8:0e:0c:d1:16:f9:9e:82:08:2b:88:cd:cb:09:34: 90:71:32:7d:aa:fb:0e:d9:bb:1d:4c:42:6d:de:54: 79:80:4a:44:ae:f8:0b:89:db:70:b4:95:6a:e1:5f: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:90:82:5D:5B:8A:18:96:FD:B9:EE:32:C8:5D:5F:0A:D5:0F:2B:D1 X509v3 Authority Key Identifier: keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.171.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:f7:dd:a7:bc:a5:49:e3:21:e5:56:e7:39:db:73:aa:57:a5: 0a:e1:61:1e:81:9a:2f:5a:4c:49:8c:cf:e2:aa:e1:4e:e1:78: 18:25:b0:71:39:d5:80:83:65:f5:89:4a:cf:93:ae:de:e6:03: 32:49:0b:f1:6a:6b:a7:02:51:e0:cb:c6:45:71:f1:1b:97:86: d3:2b:e0:d4:fc:ab:09:a7:3e:6b:1c:df:1b:85:8a:6c:89:39: a7:45:a6:b1:ab:18:fa:86:99:8c:71:41:6e:b6:e2:de:dd:be: 3b:f6:63:7c:c0:7d:86:de:9b:e4:1b:ee:b1:62:b0:bc:10:dd: 57:03:b2:ef:9b:d4:f1:00:ad:d4:bd:3c:3a:29:55:af:4b:6a: 2b:67:4e:3a:f3:7a:00:7b:bd:4d:3d:f1:3b:4c:71:c0:54:50: 45:03:89:33:59:02:bb:21:da:3f:67:5f:b3:12:f0:d6:ff:c1: e0:be:96:5e:dc:83:71:d3:27:98:78:59:33:fd:71:a6:0a:0a: 15:2f:33:fa:31:50:59:a9:27:46:cb:1f:62:ce:a1:d2:e5:fe: 7e:5f:33:3e:4c:bb:38:c8:a1:00:5d:33:14:0d:01:39:a6:bc: d2:79:07:a6:28:37:1a:34:57:30:0a:f3:a1:04:4d:d8:88:49: 51:c5:fd:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNH2iijWD4AZhLDkmTW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh YmVkNTUwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkwODI1ZDViOGExODk2ZmRiOWVlMzJjODVkNWYwYWQ1MGYyYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1E0PEfyJVqgELUKniyJIq7eGp9n Nq7ddKHAK+Nu0ZRgaSlmm2XJiuh4QGvMuSj2XvcZG4egvyYgLwQXfDJoz8Ttrg3P xRqrdKkMoXgCpuWoXKQ4rzp2QeQK89VqsPv37qB13SexSMpS1wZBXhUgvlT9P0wR mfLDdJ4MEAWgj4bDZmZEZo9GxEwMsF6C72VP5WsL6z2DbZK06fHW4pP4s+zlNYI/ 7SL1LD4V9Iez//SHQ/MMAp12HfCA9JDL1kFIu6DM7i0FmZl/iYtxCcwmKXyoDgzR FvmegggriM3LCTSQcTJ9qvsO2bsdTEJt3lR5gEpErvgLidtwtJVq4V8FgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSQgl1bihiW/bnuMshdXwrVDyvRMB8GA1UdIwQY MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt ZjRjMTY2YzgzZjg4LzEvSkpDQ1hWdUtHSmI5dWU0eXlGMWZDdFVQSzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4 LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW86rMA0G CSqGSIb3DQEBCwUAA4IBAQBf992nvKVJ4yHlVuc523OqV6UK4WEegZovWkxJjM/i quFO4XgYJbBxOdWAg2X1iUrPk67e5gMySQvxamunAlHgy8ZFcfEbl4bTK+DU/KsJ pz5rHN8bhYpsiTmnRaaxqxj6hpmMcUFutuLe3b479mN8wH2G3pvkG+6xYrC8EN1X A7Lvm9TxAK3UvTw6KVWvS2orZ04683oAe71NPfE7THHAVFBFA4kzWQK7Ido/Z1+z EvDW/8HgvpZe3INx0yeYeFkz/XGmCgoVLzP6MVBZqSdGyx9izqHS5f5+XzM+TLs4 yKEAXTMUDQE5przSeQemKDcaNFcwCvOhBE3YiElRxf0g -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:27 2026 by rpki-client