This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/JQPZXokmHKHAYGlmfWfXjoQ9RQg.roa File: JQPZXokmHKHAYGlmfWfXjoQ9RQg.roa (raw, json) Hash identifier: IX6TZs+uRe2cDnLfZBpZLu7TD8C8LtaXhsu4WWS2oyY= Subject key identifier: 25:03:D9:5E:89:26:1C:A1:C0:60:69:66:7D:67:D7:8E:84:3D:45:08 Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Certificate serial: 019B7F8594C3B7003BBC829B9C48DB51ED14 Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/JQPZXokmHKHAYGlmfWfXjoQ9RQg.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215320 IP address blocks: 89.47.246.0/24 maxlen: 24 2a0d:3c80::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:94:c3:b7:00:3b:bc:82:9b:9c:48:db:51:ed:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2503d95e89261ca1c06069667d67d78e843d4508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:d1:d5:71:6d:0e:88:4c:c7:de:d2:35:60: 49:e3:2f:e9:26:29:ae:d8:a1:7e:85:af:cf:6a:d8: 0a:9c:7d:58:94:4f:7f:d0:44:80:46:f7:2d:12:96: 75:a9:26:06:df:35:9e:c4:45:8c:ec:65:3d:12:09: db:79:e0:cf:34:55:58:15:60:5e:b2:d7:23:a2:ea: d1:af:de:be:55:04:25:c9:d4:65:92:0c:fe:9e:4d: ca:05:ad:73:4f:73:0d:9a:2d:a9:89:78:6e:8e:9b: 96:07:1c:94:d3:c7:7e:47:19:79:cd:a5:a3:29:6a: 9e:7e:f3:45:0f:86:72:51:61:d1:86:3a:1a:f9:a6: 5a:54:f5:c2:b6:82:97:d9:34:4f:7a:be:96:24:68: f6:55:3e:cb:a8:79:52:6d:3e:69:fe:ca:d9:b3:a5: 45:db:ea:d3:7c:c6:4b:d8:7f:80:cc:cb:6a:62:62: e4:0f:03:1a:31:c2:fc:87:41:2c:49:e0:64:f8:47: 0d:62:c7:00:04:13:81:97:08:1e:df:c4:e3:f8:06: 32:36:c5:67:bb:ee:7f:27:a4:39:9b:d2:6c:4f:38: 16:aa:c2:08:9e:5b:0e:49:bc:dc:79:cc:7b:c0:c3: 13:e0:f0:33:9a:6f:98:5e:88:cf:c2:43:e4:c5:fa: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:03:D9:5E:89:26:1C:A1:C0:60:69:66:7D:67:D7:8E:84:3D:45:08 X509v3 Authority Key Identifier: keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/JQPZXokmHKHAYGlmfWfXjoQ9RQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.246.0/24 IPv6: 2a0d:3c80::/31 Signature Algorithm: sha256WithRSAEncryption 4d:9d:fe:8a:dd:09:ca:ab:88:3e:74:a7:1f:dc:0a:bb:89:70: f4:97:ca:8b:1b:7c:2c:b7:81:c0:e5:ed:e0:ec:f3:0b:d7:ab: 26:2e:de:c6:cb:ad:74:4b:95:7e:78:f1:d4:6d:c6:a0:a6:7e: fd:c4:6f:af:e5:7d:33:e9:c7:45:c6:6c:00:d0:c9:4d:4a:91: 45:73:a3:a9:c5:c3:45:ae:b4:73:ca:2e:c1:c7:12:0c:53:d4: f3:ea:b7:e0:d4:bc:69:b0:3e:0a:44:45:0a:7c:93:88:4c:16: c0:58:02:79:3c:ff:1b:cf:ef:b6:be:35:0c:c7:c2:a5:2a:92: 5e:fe:9b:d3:77:14:06:f3:8b:aa:d2:a8:c2:61:c3:d2:9f:3d: ba:b6:ec:dc:66:ce:f4:1b:4e:5a:da:cb:47:55:09:e9:6e:3b: 45:af:55:11:82:6e:37:c8:8d:f9:ba:b2:54:d4:0b:6b:7d:f8: 14:77:98:ea:30:30:8e:68:d7:90:a3:2a:7f:ec:76:2a:f2:8d: 40:02:3a:28:7b:4b:aa:c0:67:2a:94:cd:67:84:2b:10:6f:4c: b6:41:43:ee:31:a8:2f:40:a1:6c:30:c8:56:6c:e6:d7:3c:13: c1:97:36:fc:53:33:be:2a:7f:b1:7f:f0:3e:d1:96:fc:ec:85: 7f:7b:05:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hZTDtwA7vIKbnEjbUe0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWViYWY2Zjk3ZWM5Mzc0ZGY2YzE0OTJmNTlkNWYxM2E5 ZGQwMDgwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTAzZDk1ZTg5MjYxY2ExYzA2MDY5NjY3ZDY3ZDc4ZTg0M2Q0NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidzR1XFtDohMx97SNWBJ4y/pJimu 2KF+ha/PatgKnH1YlE9/0ESARvctEpZ1qSYG3zWexEWM7GU9EgnbeeDPNFVYFWBe stcjourRr96+VQQlydRlkgz+nk3KBa1zT3MNmi2piXhujpuWBxyU08d+Rxl5zaWj KWqefvNFD4ZyUWHRhjoa+aZaVPXCtoKX2TRPer6WJGj2VT7LqHlSbT5p/srZs6VF 2+rTfMZL2H+AzMtqYmLkDwMaMcL8h0EsSeBk+EcNYscABBOBlwge38Tj+AYyNsVn u+5/J6Q5m9JsTzgWqsIInlsOSbzcecx7wMMT4PAzmm+YXojPwkPkxfp+AwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCUD2V6JJhyhwGBpZn1n146EPUUIMB8GA1UdIwQY MBaAFJ2uuvb5fsk3TfbBSS9Z1fE6ndAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDIt M2U1ZWU0YThmMzg4LzEvSlFQWlhva21IS0hBWUdsbWZXZlhqb1E5UlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDItM2U1ZWU0YThmMzg4 LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWS/2MA0E AgACMAcDBQEqDTyAMA0GCSqGSIb3DQEBCwUAA4IBAQBNnf6K3QnKq4g+dKcf3Aq7 iXD0l8qLG3wst4HA5e3g7PML16smLt7Gy610S5V+ePHUbcagpn79xG+v5X0z6cdF xmwA0MlNSpFFc6OpxcNFrrRzyi7BxxIMU9Tz6rfg1LxpsD4KREUKfJOITBbAWAJ5 PP8bz++2vjUMx8KlKpJe/pvTdxQG84uq0qjCYcPSnz26tuzcZs70G05a2stHVQnp bjtFr1URgm43yI35urJU1AtrffgUd5jqMDCOaNeQoyp/7HYq8o1AAjooe0uqwGcq lM1nhCsQb0y2QUPuMagvQKFsMMhWbObXPBPBlzb8UzO+Kn+xf/A+0Zb87IV/ewXV -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:15 2026 by rpki-client