This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/JcLTA0-qn4cquSouPyluInvPpYs.roa File: JcLTA0-qn4cquSouPyluInvPpYs.roa (raw, json) Hash identifier: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs= Subject key identifier: 25:C2:D3:03:4F:AA:9F:87:2A:B9:2A:2E:3F:29:6E:22:7B:CF:A5:8B Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019B7DCB1FF7F1EC8FDEAA98E721E44E1372 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/JcLTA0-qn4cquSouPyluInvPpYs.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.11.181.0/24 maxlen: 24 185.158.248.0/24 maxlen: 24 2a0b:7140:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1f:f7:f1:ec:8f:de:aa:98:e7:21:e4:4e:13:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c2d3034faa9f872ab92a2e3f296e227bcfa58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:19:11:30:4c:69:34:4e:21:bf:89:5f:b7: 38:3a:bc:76:de:23:f7:81:bc:42:2b:19:be:e7:50: 61:d2:6b:f3:1e:6a:11:e6:a3:5e:77:03:35:81:ac: 98:4f:d6:f9:f2:b7:40:74:b6:cc:63:d0:84:7c:f6: 52:f9:0b:d0:0c:aa:be:2b:a9:46:c0:00:33:a3:c5: ef:fa:da:8e:04:c8:2c:48:55:9c:95:2c:b5:8a:ee: 91:5a:de:bd:fa:bc:b6:85:2c:d2:fd:d3:d0:14:69: 24:c7:3e:30:60:2d:20:ab:14:a0:fc:f1:55:21:2e: 29:f3:8c:2d:47:4c:68:e6:57:9d:2e:97:7a:d3:e3: 0a:6b:82:ef:40:ca:81:9a:f0:50:b2:8c:1f:73:77: d2:99:60:1e:8a:f5:ac:71:dc:1c:40:14:7b:8b:58: 4a:f4:86:0b:de:27:49:90:d4:7a:46:58:84:d5:ea: 5e:c6:62:4f:1a:9c:19:af:24:44:92:fd:3c:ec:aa: 12:7d:d0:50:81:fb:79:c4:e9:dc:05:f1:0d:60:ee: e9:12:70:6b:f9:f0:3c:a7:64:8a:ba:99:a8:7f:65: 71:40:3c:f1:d9:cf:73:eb:12:04:fd:ac:2f:b2:72: ac:72:cd:ae:d8:02:b3:28:bb:a4:8e:f1:0d:99:ef: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:D3:03:4F:AA:9F:87:2A:B9:2A:2E:3F:29:6E:22:7B:CF:A5:8B X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/JcLTA0-qn4cquSouPyluInvPpYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.181.0/24 185.158.248.0/24 IPv6: 2a0b:7140:7::/48 Signature Algorithm: sha256WithRSAEncryption 11:62:8a:62:78:bd:89:bc:10:a1:c0:e1:db:50:87:d3:38:17: bd:9f:8b:fd:13:c8:15:e8:1f:e0:8b:14:1a:a6:04:6d:c5:cd: b5:7b:d8:9d:73:74:2e:cb:f6:3e:1e:a3:4f:a6:9d:98:cb:c0: 74:74:d6:7a:52:4e:84:e2:55:73:87:c7:1c:6f:ad:8e:23:a5: bb:c4:a4:ee:e8:50:13:5a:aa:f5:4e:08:d4:99:23:ed:53:19: c9:9f:48:5c:b9:36:e9:51:67:9d:29:59:b5:65:bd:ff:7a:d3: 87:4d:3e:3e:19:75:7a:18:54:11:63:55:d6:c5:11:e7:9a:af: 7f:16:94:31:de:b2:e4:76:9d:34:44:d9:eb:07:06:b3:99:54: 06:59:a3:dd:60:3f:67:a7:4e:ff:c4:9b:d2:ef:c3:bb:f4:54: 51:ad:7c:48:c6:0e:e8:19:00:b9:29:6a:10:05:c5:15:75:92: 34:74:6f:80:9d:05:f0:00:16:18:89:b0:52:5e:bf:6f:3a:e5: f8:5a:d1:d0:46:83:72:d8:01:ee:c4:bd:58:e6:e8:8a:f2:56: bd:b8:90:23:c2:d4:c8:3f:90:75:d4:82:b8:d8:45:68:8e:47: ab:79:de:1e:96:21:ac:66:f2:6b:a4:10:b1:48:30:34:f7:de: 68:ea:e3:bc -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9yx/38eyP3qqY5yHkThNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWMyZDMwMzRmYWE5Zjg3MmFiOTJhMmUzZjI5NmUyMjdiY2ZhNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmoZETBMaTROIb+JX7c4Orx23iP3 gbxCKxm+51Bh0mvzHmoR5qNedwM1gayYT9b58rdAdLbMY9CEfPZS+QvQDKq+K6lG wAAzo8Xv+tqOBMgsSFWclSy1iu6RWt69+ry2hSzS/dPQFGkkxz4wYC0gqxSg/PFV IS4p84wtR0xo5ledLpd60+MKa4LvQMqBmvBQsowfc3fSmWAeivWscdwcQBR7i1hK 9IYL3idJkNR6RliE1epexmJPGpwZryREkv087KoSfdBQgft5xOncBfENYO7pEnBr +fA8p2SKupmof2VxQDzx2c9z6xIE/awvsnKscs2u2AKzKLukjvENme/OawIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFCXC0wNPqp+HKrkqLj8pbiJ7z6WLMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvSmNMVEEwLXFuNGNxdVNvdVB5bHVJbnZQcFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALQu1AwQA uZ74MA8EAgACMAkDBwAqC3FAAAcwDQYJKoZIhvcNAQELBQADggEBABFiimJ4vYm8 EKHA4dtQh9M4F72fi/0TyBXoH+CLFBqmBG3FzbV72J1zdC7L9j4eo0+mnZjLwHR0 1npSToTiVXOHxxxvrY4jpbvEpO7oUBNaqvVOCNSZI+1TGcmfSFy5NulRZ50pWbVl vf9604dNPj4ZdXoYVBFjVdbFEeear38WlDHesuR2nTRE2esHBrOZVAZZo91gP2en Tv/Em9Lvw7v0VFGtfEjGDugZALkpahAFxRV1kjR0b4CdBfAAFhiJsFJev2865fha 0dBGg3LYAe7EvVjm6IryVr24kCPC1Mg/kHXUgrjYRWiOR6t53h6WIaxm8mukELFI MDT33mjq47w= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:35 2026 by rpki-client