This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/JowNFbKi_vYoTRs26ptdtrIOuaM.roa File: JowNFbKi_vYoTRs26ptdtrIOuaM.roa (raw, json) Hash identifier: TJWkhhs28sV5YlSQhf17WgqKXSfgnNIE8e2Aaqdz+vY= Subject key identifier: 26:8C:0D:15:B2:A2:FE:F6:28:4D:1B:36:EA:9B:5D:B6:B2:0E:B9:A3 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2C725A15B6081B31128ED52CFF04 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/JowNFbKi_vYoTRs26ptdtrIOuaM.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35728 IP address blocks: 85.140.44.0/22 maxlen: 22 85.140.44.0/24 maxlen: 24 85.140.45.0/24 maxlen: 24 85.140.46.0/24 maxlen: 24 85.140.47.0/24 maxlen: 24 85.234.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2c:72:5a:15:b6:08:1b:31:12:8e:d5:2c:ff:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268c0d15b2a2fef6284d1b36ea9b5db6b20eb9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:88:3b:e3:57:82:38:c2:05:e3:4a:47:c5: 33:17:92:98:05:99:06:b5:a5:18:57:a4:26:05:f8: ea:fc:cd:e0:a1:e3:ce:84:bb:c8:83:21:55:7d:4b: cc:2d:58:ae:de:31:87:bb:e2:cd:7e:3c:66:bd:32: bb:5e:7b:c7:a5:9b:b7:56:35:aa:d0:9c:fd:ad:de: ff:59:ea:df:54:e6:af:2c:b7:03:f0:cf:6f:b5:2c: d0:3d:db:2b:93:52:09:db:66:0a:bc:95:7a:7f:b5: b0:2c:b4:38:7e:10:ea:c5:f6:0b:3b:d4:2f:8f:9f: 70:98:77:8e:e9:19:a0:30:b3:6d:d1:01:be:22:7f: 7c:de:be:4b:16:6f:3e:b7:34:79:da:8d:bc:fa:49: 74:1d:c3:f8:ad:84:d8:1b:c3:b7:df:03:95:bc:19: bb:76:33:c4:6f:da:a2:55:81:a6:3e:6d:31:aa:a6: a3:5b:d0:1f:87:ff:83:dd:3a:d7:f7:9b:b7:bf:91: a1:e6:09:58:b6:7c:df:49:fe:00:b6:90:53:6f:43: 49:80:6e:aa:1e:7d:91:f3:18:c4:cd:01:2d:53:44: c7:d7:b4:ff:22:ac:2c:75:9f:28:a8:06:4e:09:82: 7b:a6:52:19:5f:09:73:0a:9b:f3:25:83:64:79:5d: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8C:0D:15:B2:A2:FE:F6:28:4D:1B:36:EA:9B:5D:B6:B2:0E:B9:A3 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/JowNFbKi_vYoTRs26ptdtrIOuaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.44.0/22 85.234.32.0/19 Signature Algorithm: sha256WithRSAEncryption 35:32:ff:63:59:95:e8:c6:22:4c:23:14:35:d4:43:bc:38:ea: 52:41:13:70:85:0c:51:b5:db:1e:84:56:27:d0:49:b3:75:7e: be:4d:7d:59:20:ba:79:85:05:d1:e5:b9:f6:7d:83:3a:59:03: ae:80:24:8e:9b:32:61:59:5f:4f:fc:a4:bb:ff:38:e6:76:17: ea:24:e6:94:52:9b:ef:d7:6c:b5:60:ea:d9:b2:2f:36:ad:91: c7:70:52:26:2b:67:1d:6d:22:58:cb:ab:67:9a:67:bd:cc:55: 5d:77:f2:2d:11:57:ec:90:44:09:a6:b9:26:77:ff:9e:aa:5d: f6:2e:bd:80:2c:05:59:9f:39:64:42:30:79:d0:4d:2a:e6:bc: 36:b2:0e:5e:19:e2:0b:65:4d:23:d9:ff:c3:e8:e2:99:b9:72: b0:63:fa:e4:d6:45:ce:2b:59:12:28:64:87:73:0e:22:31:32: e9:80:91:26:77:f2:94:cc:93:93:42:38:3f:6e:41:92:6d:03: bc:4c:c3:2f:da:42:06:d9:ee:86:09:12:73:d7:5b:67:94:b8: 53:c5:52:ad:17:b3:c2:06:0c:9c:63:09:03:13:ae:05:82:fd: e7:21:c0:37:d2:8a:fc:ef:a5:b1:09:d2:05:6a:f3:53:9a:24: 21:7b:b2:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yixyWhW2CBsxEo7VLP8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjhjMGQxNWIyYTJmZWY2Mjg0ZDFiMzZlYTliNWRiNmIyMGViOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMOIO+NXgjjCBeNKR8UzF5KYBZkG taUYV6QmBfjq/M3goePOhLvIgyFVfUvMLViu3jGHu+LNfjxmvTK7XnvHpZu3VjWq 0Jz9rd7/WerfVOavLLcD8M9vtSzQPdsrk1IJ22YKvJV6f7WwLLQ4fhDqxfYLO9Qv j59wmHeO6RmgMLNt0QG+In983r5LFm8+tzR52o28+kl0HcP4rYTYG8O33wOVvBm7 djPEb9qiVYGmPm0xqqajW9Afh/+D3TrX95u3v5Gh5glYtnzfSf4AtpBTb0NJgG6q Hn2R8xjEzQEtU0TH17T/IqwsdZ8oqAZOCYJ7plIZXwlzCpvzJYNkeV0oEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCaMDRWyov72KE0bNuqbXbayDrmjMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvSm93TkZiS2lfdllvVFJzMjZwdGR0cklPdWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVYwsAwQF VeogMA0GCSqGSIb3DQEBCwUAA4IBAQA1Mv9jWZXoxiJMIxQ11EO8OOpSQRNwhQxR tdsehFYn0EmzdX6+TX1ZILp5hQXR5bn2fYM6WQOugCSOmzJhWV9P/KS7/zjmdhfq JOaUUpvv12y1YOrZsi82rZHHcFImK2cdbSJYy6tnmme9zFVdd/ItEVfskEQJprkm d/+eql32Lr2ALAVZnzlkQjB50E0q5rw2sg5eGeILZU0j2f/D6OKZuXKwY/rk1kXO K1kSKGSHcw4iMTLpgJEmd/KUzJOTQjg/bkGSbQO8TMMv2kIG2e6GCRJz11tnlLhT xVKtF7PCBgycYwkDE64Fgv3nIcA30or876WxCdIFavNTmiQhe7Lk -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:32 2026 by rpki-client