This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JQyOnqpGNBPQEPAwlMww21vi4-w.roa File: JQyOnqpGNBPQEPAwlMww21vi4-w.roa (raw, json) Hash identifier: jQkSRE1wjqlaqj1a5xqclo3SlJv480zaA7qkOH+fatU= Subject key identifier: 25:0C:8E:9E:AA:46:34:13:D0:10:F0:30:94:CC:30:DB:5B:E2:E3:EC Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38ACA1F81C524C8235CE2C2FB7B75B Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JQyOnqpGNBPQEPAwlMww21vi4-w.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23532 IP address blocks: 185.125.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ac:a1:f8:1c:52:4c:82:35:ce:2c:2f:b7:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=250c8e9eaa463413d010f03094cc30db5be2e3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:35:11:c3:cc:b6:d5:ad:3e:d1:f1:63:71: f0:57:97:a0:a3:b8:e8:1d:34:36:46:88:10:1f:6a: 36:b9:0c:cc:c4:cd:7d:49:01:0e:a0:53:17:3a:e6: a0:40:d8:cc:0f:c6:03:42:e8:6d:5b:d1:3c:29:40: 11:d0:be:ae:7e:93:39:5b:b0:63:94:94:88:b9:0f: 97:1f:8d:3a:bf:03:06:e3:9c:09:56:cc:61:08:b5: bf:75:ee:40:d9:04:73:e8:a7:8e:ef:eb:83:5b:3e: 1e:d6:cc:e8:ab:48:b8:2d:e5:ba:be:b7:4f:00:e1: f2:af:c0:d0:d1:4b:79:2f:c7:51:30:8c:37:96:6d: 8a:d2:a6:98:7c:09:ca:f8:ea:4a:d0:58:83:14:a7: d2:18:30:31:14:b7:70:c5:77:b0:52:b2:1d:19:d6: d8:0a:d0:76:13:8f:40:8a:0e:03:b7:5d:32:f3:2e: f4:ee:a7:89:a4:a0:e5:54:74:53:b8:f5:7d:be:e2: b8:59:79:3f:d5:3b:d8:13:f4:4f:27:9d:09:ce:80: 9d:9b:35:28:06:35:b4:7f:d8:67:bd:9d:78:9e:a7: 07:81:7a:38:03:2f:c6:e2:cf:1a:89:a2:7a:02:7a: 9d:91:94:5b:16:d8:2e:df:d4:b9:0a:a3:7e:fe:76: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:8E:9E:AA:46:34:13:D0:10:F0:30:94:CC:30:DB:5B:E2:E3:EC X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JQyOnqpGNBPQEPAwlMww21vi4-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.243.0/24 Signature Algorithm: sha256WithRSAEncryption 23:3e:93:db:9e:17:ec:d9:f1:2d:b0:72:cc:92:41:05:16:84: 67:75:77:0a:3e:d2:49:4b:d5:8d:92:0f:1c:01:45:34:dd:23: e8:ca:46:01:70:d5:e5:4f:a4:56:df:ef:80:10:96:1d:1b:42: 31:36:79:c9:94:89:b4:7f:e7:81:99:98:d8:c1:25:78:58:34: 34:14:d6:b4:a5:21:6e:ce:0c:50:1d:0b:58:63:e2:42:2c:f1: 74:3f:0a:3b:e0:1d:3d:4a:86:5f:3d:cc:32:c0:78:45:67:4b: 1f:5b:38:94:0b:c5:c8:a2:e7:c2:5f:52:c2:f6:2f:90:17:9c: 8c:31:5d:61:49:36:03:89:49:5f:ec:81:99:ba:1e:b2:a0:a9: 57:b7:62:4f:11:93:2b:68:b3:c1:ee:15:5e:f9:07:22:2f:5e: 35:ae:f5:6d:0a:c7:af:16:05:6c:9a:bf:6b:33:c7:b1:b7:e7: 9f:b9:0e:b7:2f:35:db:de:21:fd:84:5d:f2:f0:ce:76:90:83: 00:a8:c0:75:71:21:c7:25:02:90:5f:a4:8e:49:f1:fd:a5:43: 6f:70:19:fc:65:9c:97:1e:fa:31:af:a7:28:34:5b:0d:09:9a: 9f:18:74:4a:4d:47:6a:19:46:ae:f5:0b:aa:eb:de:d2:89:49: e5:9f:34:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKyh+BxSTII1ziwvt7dbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTBjOGU5ZWFhNDYzNDEzZDAxMGYwMzA5NGNjMzBkYjViZTJlM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW41EcPMttWtPtHxY3HwV5ego7jo HTQ2RogQH2o2uQzMxM19SQEOoFMXOuagQNjMD8YDQuhtW9E8KUAR0L6ufpM5W7Bj lJSIuQ+XH406vwMG45wJVsxhCLW/de5A2QRz6KeO7+uDWz4e1szoq0i4LeW6vrdP AOHyr8DQ0Ut5L8dRMIw3lm2K0qaYfAnK+OpK0FiDFKfSGDAxFLdwxXewUrIdGdbY CtB2E49Aig4Dt10y8y707qeJpKDlVHRTuPV9vuK4WXk/1TvYE/RPJ50JzoCdmzUo BjW0f9hnvZ14nqcHgXo4Ay/G4s8aiaJ6AnqdkZRbFtgu39S5CqN+/nYyAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUMjp6qRjQT0BDwMJTMMNtb4uPsMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvSlF5T25xcEdOQlBRRVBBd2xNd3cyMXZpNC13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX3zMA0G CSqGSIb3DQEBCwUAA4IBAQAjPpPbnhfs2fEtsHLMkkEFFoRndXcKPtJJS9WNkg8c AUU03SPoykYBcNXlT6RW3++AEJYdG0IxNnnJlIm0f+eBmZjYwSV4WDQ0FNa0pSFu zgxQHQtYY+JCLPF0Pwo74B09SoZfPcwywHhFZ0sfWziUC8XIoufCX1LC9i+QF5yM MV1hSTYDiUlf7IGZuh6yoKlXt2JPEZMraLPB7hVe+QciL141rvVtCsevFgVsmr9r M8ext+efuQ63LzXb3iH9hF3y8M52kIMAqMB1cSHHJQKQX6SOSfH9pUNvcBn8ZZyX Hvoxr6coNFsNCZqfGHRKTUdqGUau9Quq697SiUnlnzQ8 -----END CERTIFICATE-----Generated at Mon Jan 5 03:49:55 2026 by rpki-client