This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/JXyToVHzoKcPgiftey3VODfKzHA.roa File: JXyToVHzoKcPgiftey3VODfKzHA.roa (raw, json) Hash identifier: hh+ZXLITA+1er8CwLKQe1+Z8gZePfKgzblszCECG/4A= Subject key identifier: 25:7C:93:A1:51:F3:A0:A7:0F:82:27:ED:7B:2D:D5:38:37:CA:CC:70 Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4 Certificate serial: 019B7E385EDA3333EDDEDD4F0046A6277BA7 Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/JXyToVHzoKcPgiftey3VODfKzHA.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51873 IP address blocks: 5.104.88.0/21 maxlen: 21 46.22.16.0/20 maxlen: 20 185.69.40.0/22 maxlen: 22 2a02:1368::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5e:da:33:33:ed:de:dd:4f:00:46:a6:27:7b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=257c93a151f3a0a70f8227ed7b2dd53837cacc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:42:ad:72:11:00:f1:a8:16:6c:5f:d7:66: 2c:12:74:a3:d9:cf:56:a6:65:5a:82:75:59:a2:3b: 32:50:e0:91:29:06:4b:13:73:ee:88:b2:20:20:33: 89:2d:4e:fc:e0:02:98:6c:65:7f:e5:5a:4b:cb:73: 55:17:b7:57:0f:1d:08:e2:ce:c3:7c:d0:98:74:e5: 78:9a:08:89:d2:9d:6a:20:bc:8d:67:70:5a:c1:bb: 26:23:5d:63:9f:2a:b3:8a:fd:aa:86:02:cf:91:d0: 63:76:cd:2e:31:53:ab:23:ae:12:1d:96:ac:f7:d3: da:78:93:cd:ad:d6:27:93:9c:bd:91:4b:89:d3:e0: 7e:ff:83:ea:35:b5:8a:28:66:f3:b2:3e:f1:71:53: 67:6a:bd:8d:70:41:70:fb:55:62:33:d3:cf:2a:b2: 36:fa:9f:95:8c:d2:b4:1f:c0:7d:f7:30:d0:54:6b: e2:2b:aa:75:63:57:dc:9b:58:d8:a8:e0:09:19:50: a1:83:a2:c0:26:80:20:49:f6:9f:e0:c1:36:6c:ab: 76:c7:3e:35:07:d4:e6:25:82:9c:73:3d:0f:76:f8: fa:d9:9f:bc:16:eb:05:c5:c1:0f:d2:ae:ff:71:47: f2:8d:44:0c:c5:eb:b3:63:06:96:93:6e:0d:34:86: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7C:93:A1:51:F3:A0:A7:0F:82:27:ED:7B:2D:D5:38:37:CA:CC:70 X509v3 Authority Key Identifier: keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/JXyToVHzoKcPgiftey3VODfKzHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.88.0/21 46.22.16.0/20 185.69.40.0/22 IPv6: 2a02:1368::/32 Signature Algorithm: sha256WithRSAEncryption 2f:af:1d:f3:9b:eb:aa:b7:fe:58:15:f0:7c:28:a7:f8:ea:2d: 5d:3b:de:48:61:0d:84:cf:71:32:79:6f:d8:da:7f:39:ef:22: d0:85:ef:5b:94:74:6a:e1:dc:e7:50:ec:5e:da:79:01:e9:fd: 16:9f:ef:73:28:4f:28:30:38:8d:21:c1:2d:58:5a:1f:0f:ca: 3e:7b:d1:36:9a:8c:7b:ab:00:ee:75:a1:d7:49:01:ab:d1:cf: 4e:80:e0:ac:1e:5c:f1:4f:8d:65:b3:8d:29:9e:4b:d6:d7:c7: 63:e5:a2:a2:2e:20:4b:26:99:e1:94:06:57:2c:2b:d7:9f:95: 5d:62:ea:88:e1:4e:94:b0:a7:8a:91:9e:8c:f4:e7:3f:9b:74: f2:c8:ea:85:fe:fa:4f:7c:d0:03:0d:62:b3:30:3c:11:ca:e9: e5:84:08:81:87:8d:e3:8d:af:68:f5:39:d1:c4:bd:d7:34:d0: 35:7a:0f:99:ab:19:a9:d6:36:8c:02:2c:f2:9d:95:f9:66:b3: 25:25:19:87:91:10:69:a7:ee:66:a3:b2:16:51:c8:04:b4:c3: 90:c2:66:91:b0:0e:5e:c4:4a:a6:f2:eb:b2:2b:12:89:14:32: 98:95:ab:8c:8c:58:84:5a:0a:f0:5d:06:65:88:1b:fc:dd:63: c6:77:61:c3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OF7aMzPt3t1PAEamJ3unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMmFjM2U4NmFmYjE0MTRmNTViZGFlMDNmYjZmNTNkZjA4 Njc4ZTQwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTdjOTNhMTUxZjNhMGE3MGY4MjI3ZWQ3YjJkZDUzODM3Y2FjYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkdCrXIRAPGoFmxf12YsEnSj2c9W pmVagnVZojsyUOCRKQZLE3PuiLIgIDOJLU784AKYbGV/5VpLy3NVF7dXDx0I4s7D fNCYdOV4mgiJ0p1qILyNZ3BawbsmI11jnyqziv2qhgLPkdBjds0uMVOrI64SHZas 99PaeJPNrdYnk5y9kUuJ0+B+/4PqNbWKKGbzsj7xcVNnar2NcEFw+1ViM9PPKrI2 +p+VjNK0H8B99zDQVGviK6p1Y1fcm1jYqOAJGVChg6LAJoAgSfaf4ME2bKt2xz41 B9TmJYKccz0Pdvj62Z+8FusFxcEP0q7/cUfyjUQMxeuzYwaWk24NNIY+5wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCV8k6FR86CnD4In7Xst1Tg3ysxwMB8GA1UdIwQY MBaAFBAqw+hq+xQU9Vva4D+29T3whnjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTct NzQ1YTgxZTUwMmZmLzEvSlh5VG9WSHpvS2NQZ2lmdGV5M1ZPRGZLekhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTctNzQ1YTgxZTUwMmZm LzEvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBWhYAwQE LhYQAwQCuUUoMA0EAgACMAcDBQAqAhNoMA0GCSqGSIb3DQEBCwUAA4IBAQAvrx3z m+uqt/5YFfB8KKf46i1dO95IYQ2Ez3EyeW/Y2n857yLQhe9blHRq4dznUOxe2nkB 6f0Wn+9zKE8oMDiNIcEtWFofD8o+e9E2mox7qwDudaHXSQGr0c9OgOCsHlzxT41l s40pnkvW18dj5aKiLiBLJpnhlAZXLCvXn5VdYuqI4U6UsKeKkZ6M9Oc/m3TyyOqF /vpPfNADDWKzMDwRyunlhAiBh43jja9o9TnRxL3XNNA1eg+Zqxmp1jaMAizynZX5 ZrMlJRmHkRBpp+5mo7IWUcgEtMOQwmaRsA5exEqm8uuyKxKJFDKYlauMjFiEWgrw XQZliBv83WPGd2HD -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:35 2026 by rpki-client