This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa File: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (raw, json) Hash identifier: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI= Subject key identifier: 24:66:2B:C6:39:DF:5F:B6:60:50:68:A8:94:0F:FA:C1:C4:1D:BC:29 Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387 Certificate serial: 019B7EA73A719E195BA5840B490D416258AB Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38942 IP address blocks: 87.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3a:71:9e:19:5b:a5:84:0b:49:0d:41:62:58:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24662bc639df5fb6605068a8940ffac1c41dbc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:3b:46:5d:d7:9d:4e:2c:63:f7:ba:a9:f0: 87:93:a7:e3:a1:1e:26:e2:41:71:d2:a2:99:23:9b: f8:ba:6f:23:66:1a:09:2e:29:73:b6:ce:37:3f:ba: e6:23:8d:af:55:64:43:03:60:37:10:9a:01:62:c9: f1:08:56:c8:0f:83:38:ed:04:e8:30:11:51:c8:20: 36:82:e6:9b:97:49:0e:ad:d9:cb:7b:fc:df:dd:86: 1b:d3:30:6c:85:89:71:d1:d8:5e:68:84:0f:4b:c5: 61:e4:71:0d:2d:6e:8c:1b:a4:4e:cb:33:b5:38:bb: 40:b5:db:01:64:e9:05:38:44:82:8a:04:2a:75:b2: 90:66:f4:67:3f:a6:0d:bc:03:b7:c6:03:41:b8:fc: 47:70:1d:9e:95:76:d5:43:4e:e4:21:55:a0:a3:2a: 64:f5:ed:f0:93:21:f6:a8:ba:02:d5:1b:3a:39:0a: 2b:5b:33:fa:f7:d4:0b:c6:9a:32:47:fd:db:5e:a2: c9:56:85:27:0d:08:60:38:90:2e:f7:c2:a3:10:23: 9c:08:e3:14:2f:14:4b:c1:f0:4d:cb:ec:2a:9a:e8: a1:15:6a:c7:d9:d3:25:43:22:87:b6:2e:38:b1:87: 94:24:1a:05:bd:f8:55:75:4d:e9:3f:de:d1:09:1f: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:66:2B:C6:39:DF:5F:B6:60:50:68:A8:94:0F:FA:C1:C4:1D:BC:29 X509v3 Authority Key Identifier: keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.40.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:33:6c:2d:61:37:59:5b:f3:d8:77:2f:b7:a0:ef:9d:4b:e0: 66:da:62:c3:3b:ec:c4:5a:c2:cf:6e:7d:54:0d:bf:07:0a:b2: 4e:f5:23:5d:80:96:b4:e4:da:1c:cf:b3:e9:f2:56:6a:14:0d: ae:9f:9f:eb:66:31:4d:b5:75:f5:fd:29:4d:00:d7:3e:7d:46: 46:7a:aa:61:4e:ad:1c:b6:c4:b2:34:f9:af:48:54:a6:c4:99: 27:b8:9d:5e:ba:57:2a:69:c7:57:d1:50:88:7a:fa:ca:a3:02: 97:3c:90:93:4a:79:0b:3f:6c:fb:13:39:e2:2d:7e:88:dd:a0: 10:8e:8d:f1:cb:40:30:3c:f1:cf:0f:6c:f6:f7:f8:88:24:6f: 0e:2e:62:0e:2b:e4:76:d0:25:2a:32:b9:f7:23:36:8a:25:8e: aa:2c:1c:0f:e8:40:2b:e0:79:50:6b:bf:03:6a:28:af:86:e9: c0:90:5a:07:2a:ce:7f:24:33:d9:7f:05:2d:6a:65:40:42:18: 38:8e:6f:01:73:13:72:bc:a8:05:36:c3:b4:10:aa:c5:c8:c9: 12:fa:ff:06:22:a6:7d:7b:c8:df:61:8b:27:3d:af:6a:28:90: 77:ed:2e:70:ff:6e:09:76:fa:4a:e3:2a:75:28:22:3a:ab:4a: 02:bc:bf:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzpxnhlbpYQLSQ1BYlirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh MzUzODcwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDY2MmJjNjM5ZGY1ZmI2NjA1MDY4YTg5NDBmZmFjMWM0MWRiYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbw7Rl3XnU4sY/e6qfCHk6fjoR4m 4kFx0qKZI5v4um8jZhoJLilzts43P7rmI42vVWRDA2A3EJoBYsnxCFbID4M47QTo MBFRyCA2guabl0kOrdnLe/zf3YYb0zBshYlx0dheaIQPS8Vh5HENLW6MG6ROyzO1 OLtAtdsBZOkFOESCigQqdbKQZvRnP6YNvAO3xgNBuPxHcB2elXbVQ07kIVWgoypk 9e3wkyH2qLoC1Rs6OQorWzP699QLxpoyR/3bXqLJVoUnDQhgOJAu98KjECOcCOMU LxRLwfBNy+wqmuihFWrH2dMlQyKHti44sYeUJBoFvfhVdU3pP97RCR9JtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCRmK8Y531+2YFBoqJQP+sHEHbwpMB8GA1UdIwQY MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt ZjYyMzMwNGVkNzlhLzEvSkdZcnhqbmZYN1pnVUdpb2xBXzZ3Y1FkdkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDV+8oMA0G CSqGSIb3DQEBCwUAA4IBAQBuM2wtYTdZW/PYdy+3oO+dS+Bm2mLDO+zEWsLPbn1U Db8HCrJO9SNdgJa05Nocz7Pp8lZqFA2un5/rZjFNtXX1/SlNANc+fUZGeqphTq0c tsSyNPmvSFSmxJknuJ1eulcqacdX0VCIevrKowKXPJCTSnkLP2z7EzniLX6I3aAQ jo3xy0AwPPHPD2z29/iIJG8OLmIOK+R20CUqMrn3IzaKJY6qLBwP6EAr4HlQa78D aiivhunAkFoHKs5/JDPZfwUtamVAQhg4jm8BcxNyvKgFNsO0EKrFyMkS+v8GIqZ9 e8jfYYsnPa9qKJB37S5w/24JdvpK4yp1KCI6q0oCvL/e -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:35 2026 by rpki-client