This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/jbXUJfINng86uuFHGIonaii07iA.roa File: jbXUJfINng86uuFHGIonaii07iA.roa (raw, json) Hash identifier: inVJTqZ52PR/zdeeUJs0QRlw/oqpegiUfyt4vzod+Ao= Subject key identifier: 8D:B5:D4:25:F2:0D:9E:0F:3A:BA:E1:47:18:8A:27:6A:28:B4:EE:20 Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Certificate serial: 019B7C131DF4F64B8885A402BEA4A7B7E26F Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/jbXUJfINng86uuFHGIonaii07iA.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59780 IP address blocks: 45.135.188.0/22 maxlen: 22 185.71.120.0/22 maxlen: 24 185.177.84.0/22 maxlen: 24 2a05:3240::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1d:f4:f6:4b:88:85:a4:02:be:a4:a7:b7:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db5d425f20d9e0f3abae147188a276a28b4ee20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:ec:0a:aa:07:7c:b2:9a:3c:fe:8f:3d:0d: 4a:f1:f9:91:09:d3:68:ce:ca:6f:84:ce:36:75:19: b5:f9:2b:04:5b:ed:3f:ea:2e:2c:a5:33:2d:ef:cb: 7d:3e:0f:1c:c0:bd:84:3b:13:b1:c4:0f:43:e8:50: ad:2a:99:c0:3e:fa:b5:59:55:28:90:6f:1e:52:be: 9a:82:4c:dd:1f:d9:ac:41:1c:18:51:6a:a1:5d:f8: ce:8b:be:69:95:b2:88:69:6e:05:f4:4c:f6:b8:21: 11:1d:7d:d9:df:54:aa:de:4d:ca:f8:6e:a5:a8:e7: 7e:d1:0d:9e:26:a7:eb:c0:2a:17:5e:99:82:40:54: 5c:79:41:62:15:16:fc:e3:fb:f5:7d:ac:be:ba:6a: cf:da:25:1a:f4:d8:a3:7c:86:0c:fc:94:d3:0e:04: 48:7d:cd:c0:97:df:2a:94:50:10:fa:85:50:58:2a: d2:81:4e:71:e0:23:54:89:b7:22:18:61:e8:b8:80: c8:e9:f5:8c:9b:a3:f1:b1:a4:a9:95:98:79:7c:9c: f8:d3:d7:4e:cd:20:41:32:5b:2a:7a:63:04:81:ba: 91:e8:49:c8:b7:a4:90:44:63:65:51:a9:42:24:ca: 8f:db:85:6d:03:19:2c:d8:88:d8:37:62:84:d9:73: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B5:D4:25:F2:0D:9E:0F:3A:BA:E1:47:18:8A:27:6A:28:B4:EE:20 X509v3 Authority Key Identifier: keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/jbXUJfINng86uuFHGIonaii07iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.188.0/22 185.71.120.0/22 185.177.84.0/22 IPv6: 2a05:3240::/29 Signature Algorithm: sha256WithRSAEncryption 14:47:e3:88:ae:3c:4b:35:51:ea:8c:03:d1:ee:44:0f:12:75: 0f:47:38:bc:8a:7f:4b:eb:9a:ec:8c:9d:b8:cc:af:44:55:9a: e3:f9:a8:13:db:16:f2:c2:1c:d7:c8:5d:52:87:c5:f6:49:49: 92:5f:cd:66:cc:cd:7a:ed:fd:54:d9:0d:c6:6e:3e:47:8a:a4: 8e:f5:11:0a:f0:23:d0:16:c5:99:1a:db:6c:4f:c7:b1:bd:00: 71:67:d4:00:99:44:30:a8:e1:17:bb:58:42:0f:91:4e:b3:38: 1d:ed:18:59:a5:69:07:07:d5:cb:c9:76:60:19:f0:47:8a:98: e6:f7:42:e5:a6:d6:00:39:ee:8e:37:e3:17:f5:0f:5e:6d:72: ca:c2:27:1b:ea:6e:33:82:88:ac:42:b5:f1:48:19:33:6a:2b: f2:8e:ec:a2:7c:28:63:cd:42:b3:96:39:f1:d4:24:b8:7b:89: 3d:7b:b5:c6:c8:6f:7f:e8:d0:ca:38:4e:c1:a2:a6:fc:44:41: 17:55:1b:e8:69:0c:1b:0c:e6:12:3a:79:c4:4d:28:de:53:98: bc:af:0c:90:16:28:af:e7:d3:24:bf:51:b8:e4:f3:64:12:01: 99:40:0f:ae:6d:44:7f:a6:1e:a9:5f:a6:5c:fc:3d:84:81:06: 80:c2:b6:0e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8Ex309kuIhaQCvqSnt+JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk NTBmZDMwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGI1ZDQyNWYyMGQ5ZTBmM2FiYWUxNDcxODhhMjc2YTI4YjRlZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCjsCqoHfLKaPP6PPQ1K8fmRCdNo zspvhM42dRm1+SsEW+0/6i4spTMt78t9Pg8cwL2EOxOxxA9D6FCtKpnAPvq1WVUo kG8eUr6agkzdH9msQRwYUWqhXfjOi75plbKIaW4F9Ez2uCERHX3Z31Sq3k3K+G6l qOd+0Q2eJqfrwCoXXpmCQFRceUFiFRb84/v1fay+umrP2iUa9NijfIYM/JTTDgRI fc3Al98qlFAQ+oVQWCrSgU5x4CNUibciGGHouIDI6fWMm6PxsaSplZh5fJz409dO zSBBMlsqemMEgbqR6EnIt6SQRGNlUalCJMqP24VtAxks2IjYN2KE2XMD5wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFI211CXyDZ4POrrhRxiKJ2ootO4gMB8GA1UdIwQY MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt NWNmNDNkMzU5MDhlLzEvamJYVUpmSU5uZzg2dXVGSEdJb25haWkwN2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYe8AwQC uUd4AwQCubFUMA0EAgACMAcDBQMqBTJAMA0GCSqGSIb3DQEBCwUAA4IBAQAUR+OI rjxLNVHqjAPR7kQPEnUPRzi8in9L65rsjJ24zK9EVZrj+agT2xbywhzXyF1Sh8X2 SUmSX81mzM167f1U2Q3Gbj5HiqSO9REK8CPQFsWZGttsT8exvQBxZ9QAmUQwqOEX u1hCD5FOszgd7RhZpWkHB9XLyXZgGfBHipjm90LlptYAOe6ON+MX9Q9ebXLKwicb 6m4zgoisQrXxSBkzaivyjuyifChjzUKzljnx1CS4e4k9e7XGyG9/6NDKOE7Boqb8 REEXVRvoaQwbDOYSOnnETSjeU5i8rwyQFiiv59Mkv1G45PNkEgGZQA+ubUR/ph6p X6Zc/D2EgQaAwrYO -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:06 2026 by rpki-client