This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/JKxruJrsyQODEt0lo_2igVlEBhw.roa File: JKxruJrsyQODEt0lo_2igVlEBhw.roa (raw, json) Hash identifier: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs= Subject key identifier: 24:AC:6B:B8:9A:EC:C9:03:83:12:DD:25:A3:FD:A2:81:59:44:06:1C Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b Certificate serial: 019B78A2D9D22C2C03F1A84C1F7740A7399B Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/JKxruJrsyQODEt0lo_2igVlEBhw.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58049 IP address blocks: 45.92.128.0/22 maxlen: 22 45.92.128.0/24 maxlen: 24 45.92.129.0/24 maxlen: 24 45.92.130.0/23 maxlen: 23 2a0b:dc0::/48 maxlen: 48 2a0b:dc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d9:d2:2c:2c:03:f1:a8:4c:1f:77:40:a7:39:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ac6bb89aecc9038312dd25a3fda2815944061c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:69:f2:3f:b5:fd:3b:14:c7:9b:88:21:98: 33:6b:5c:6f:c7:58:a2:a8:2b:79:36:3b:6b:74:b5: 1b:91:f1:a4:b2:96:65:7a:86:be:b4:98:56:74:9e: 20:9d:aa:79:3a:f1:27:92:e9:ae:c1:5d:67:ef:40: b6:41:87:87:82:24:7a:db:5a:0c:99:7b:ba:cf:81: 65:17:97:b2:d3:6a:4a:50:3b:4c:1c:3a:2c:14:d1: fa:33:75:25:de:e4:c5:72:fa:00:57:d7:75:e8:cc: 7c:a8:f3:9b:b0:dc:b0:34:4c:4f:0a:e1:e3:ef:88: 68:17:16:c4:e6:a9:fd:63:56:55:59:4f:03:3f:73: 75:83:25:5a:88:f3:f6:cf:ce:7f:bd:37:4c:11:70: be:fb:8e:7e:9a:d0:be:4f:68:11:5c:4d:8f:36:2e: 56:23:53:41:8d:69:8a:aa:ca:ba:c1:36:09:c7:49: f7:7c:0d:16:91:33:7c:dc:6d:da:96:ba:3f:a2:ec: fc:72:8d:0f:00:39:89:20:9e:fc:8c:38:aa:5b:31: 91:38:16:e3:70:cb:07:02:27:64:fe:11:b8:5e:25: f5:e8:1b:9f:c7:da:c4:c5:69:fe:db:72:da:c9:f2: 45:cd:87:b1:c9:8b:63:2d:90:88:48:f5:4d:fd:89: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:6B:B8:9A:EC:C9:03:83:12:DD:25:A3:FD:A2:81:59:44:06:1C X509v3 Authority Key Identifier: keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/JKxruJrsyQODEt0lo_2igVlEBhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.128.0/22 IPv6: 2a0b:dc0::/47 Signature Algorithm: sha256WithRSAEncryption 9f:2e:42:2f:5c:a7:0e:50:e0:9b:91:3d:b6:b6:16:77:29:03: 54:aa:c8:e3:65:d6:db:28:f2:45:6b:01:8f:99:db:34:d1:39: ae:45:2d:a6:84:e5:ce:9c:aa:6b:32:eb:f8:e8:20:79:d0:70: 2d:a3:74:f8:4d:40:4b:75:5c:a4:41:f2:4c:af:b5:21:86:f9: 01:14:7a:38:ff:61:56:e1:fe:05:7d:4e:67:bb:88:29:c5:6f: a0:97:d6:bc:cd:c0:3e:09:60:86:07:a9:6b:5e:50:e6:f6:3d: d8:b6:1d:50:aa:2e:e8:68:2a:0f:90:f5:50:c9:75:07:3b:23: 42:e8:a2:18:83:b1:09:28:32:77:a8:27:36:f5:31:55:96:92: 52:7b:cc:59:8f:98:10:e0:94:0d:5c:0a:77:6c:de:8e:2e:16: 79:ef:ef:81:b5:2d:83:e2:c9:5f:81:82:43:6d:9a:0c:59:79: 38:70:48:2e:f9:80:c2:7e:ef:b9:50:d2:1a:cb:7f:41:57:50: db:76:56:07:7b:b2:75:70:27:39:09:a1:91:fa:2a:72:66:35: 86:e7:23:70:64:b1:34:e5:2f:d8:2b:aa:97:d4:9d:7f:c6:f4: fe:e4:ab:b1:9a:8f:f1:11:f5:0b:e1:b7:72:3f:9d:7d:4e:10: 0a:39:5d:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4otnSLCwD8ahMH3dApzmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1 YjZjMWIwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGFjNmJiODlhZWNjOTAzODMxMmRkMjVhM2ZkYTI4MTU5NDQwNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYZp8j+1/TsUx5uIIZgza1xvx1ii qCt5NjtrdLUbkfGkspZleoa+tJhWdJ4gnap5OvEnkumuwV1n70C2QYeHgiR621oM mXu6z4FlF5ey02pKUDtMHDosFNH6M3Ul3uTFcvoAV9d16Mx8qPObsNywNExPCuHj 74hoFxbE5qn9Y1ZVWU8DP3N1gyVaiPP2z85/vTdMEXC++45+mtC+T2gRXE2PNi5W I1NBjWmKqsq6wTYJx0n3fA0WkTN83G3alro/ouz8co0PADmJIJ78jDiqWzGROBbj cMsHAidk/hG4XiX16Bufx9rExWn+23LayfJFzYexyYtjLZCISPVN/YkLGwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCSsa7ia7MkDgxLdJaP9ooFZRAYcMB8GA1UdIwQY MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt NjBiMmM5ODIxMDc4LzEvSkt4cnVKcnN5UU9ERXQwbG9fMmlnVmxFQmh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4 LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVyAMA8E AgACMAkDBwEqCw3AAAAwDQYJKoZIhvcNAQELBQADggEBAJ8uQi9cpw5Q4JuRPba2 FncpA1SqyONl1tso8kVrAY+Z2zTROa5FLaaE5c6cqmsy6/joIHnQcC2jdPhNQEt1 XKRB8kyvtSGG+QEUejj/YVbh/gV9Tme7iCnFb6CX1rzNwD4JYIYHqWteUOb2Pdi2 HVCqLuhoKg+Q9VDJdQc7I0LoohiDsQkoMneoJzb1MVWWklJ7zFmPmBDglA1cCnds 3o4uFnnv74G1LYPiyV+BgkNtmgxZeThwSC75gMJ+77lQ0hrLf0FXUNt2Vgd7snVw JzkJoZH6KnJmNYbnI3BksTTlL9grqpfUnX/G9P7kq7Gaj/ER9Qvht3I/nX1OEAo5 Xdc= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:54 2026 by rpki-client