This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa File: JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa (raw, json) Hash identifier: yuGCrAPUyjxlYSHRZDhM2aJs4WM249W9d+i/Vuix/5Q= Subject key identifier: 24:90:6E:C6:21:FB:37:C9:5B:70:15:E0:C3:92:90:AE:DE:7E:12:F5 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B7AC8D33801715A4DF01662FD70778D00 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa Signing time: Thu 01 Jan 2026 18:19:00 +0000 ROA not before: Thu 01 Jan 2026 18:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 194.139.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d3:38:01:71:5a:4d:f0:16:62:fd:70:77:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24906ec621fb37c95b7015e0c39290aede7e12f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:b2:b6:1c:d5:b3:58:8b:4d:3d:7f:2b:79: 0e:a1:0d:70:77:db:8d:fc:4b:ea:6a:98:64:bd:0a: bd:8b:d4:4e:6e:b8:6b:db:78:38:31:8e:e8:40:7a: c9:05:d9:69:20:37:22:fe:03:86:c0:fd:fa:7b:27: ed:ad:e2:27:c9:41:67:4f:09:2a:9d:c5:d8:10:09: e0:9a:dd:29:9a:81:3d:4e:f4:ba:f3:74:d0:13:10: 0c:34:f3:0d:ab:f9:23:43:6b:b8:79:7a:0b:7c:79: cb:04:0a:ca:ef:34:cf:ea:b0:70:f4:fd:ee:71:27: 68:c4:0f:d4:4f:1e:0d:c2:1e:07:b9:8f:48:d2:01: c6:1b:65:2d:89:f8:f2:bd:0e:3e:87:7c:95:79:c1: c5:ac:cb:77:06:18:ce:1a:02:f2:29:64:f4:43:d4: 8d:f8:26:f9:a3:3a:80:5a:e5:75:30:11:81:2d:ce: 70:d7:c6:98:02:2e:84:91:ab:58:e8:09:5f:43:7c: 8c:96:01:49:f6:fd:25:5c:5e:7a:e3:e2:bb:f7:3f: d9:c6:c6:c6:6b:fa:d7:55:39:a7:43:fd:d8:a0:3a: a7:99:31:6d:22:ca:d0:1f:f4:af:e0:a3:50:34:7a: d2:bc:4b:f6:90:92:0e:5b:51:fb:1d:28:09:eb:27: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:90:6E:C6:21:FB:37:C9:5B:70:15:E0:C3:92:90:AE:DE:7E:12:F5 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.139.4.0/24 Signature Algorithm: sha256WithRSAEncryption 41:06:a8:e3:3e:bd:3c:32:8e:f2:71:93:94:1c:92:4c:5a:16: 46:b6:4c:b7:e6:11:85:15:62:67:41:9d:8e:24:0d:bd:65:aa: 85:e2:d4:7f:b7:15:60:4e:21:c8:2a:94:75:ea:e2:9e:30:70: 19:14:bd:2a:14:6a:c4:d3:a1:fd:57:ed:00:ef:18:d7:9e:88: 87:a5:93:2d:24:dd:22:7f:65:6d:b1:81:0c:70:9f:d5:7b:a9: 37:ab:88:16:e9:7d:f1:4e:b6:04:cc:1e:74:f5:9b:56:0b:13: fb:3a:2d:ca:65:e2:47:35:6c:c1:c9:7d:73:22:e3:73:e3:0c: 47:60:a0:30:27:b3:63:cd:26:c6:44:1c:20:6f:5c:ec:1c:7f: 6a:e3:d1:89:e7:0b:aa:b1:5c:bd:6d:3d:15:65:b5:e6:42:a6: 6e:05:4b:0c:14:55:cf:a3:9e:a5:48:5b:54:8a:5b:67:c6:26: 03:e4:f4:bb:e3:1d:47:49:ae:fb:32:37:0b:84:1b:e0:7f:3c: 99:22:22:8d:1f:9d:d7:a7:be:2b:ec:2e:db:bc:71:28:d1:5b: 35:f7:b7:2f:69:62:00:ad:9f:fc:0d:d1:58:8d:ff:16:9b:3c: a2:bf:6e:40:40:c6:87:59:bb:c7:34:eb:9f:45:18:bb:9a:c5: 98:c3:67:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNM4AXFaTfAWYv1wd40AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkwNmVjNjIxZmIzN2M5NWI3MDE1ZTBjMzkyOTBhZWRlN2UxMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F2ythzVs1iLTT1/K3kOoQ1wd9uN /EvqaphkvQq9i9RObrhr23g4MY7oQHrJBdlpIDci/gOGwP36eyftreInyUFnTwkq ncXYEAngmt0pmoE9TvS683TQExAMNPMNq/kjQ2u4eXoLfHnLBArK7zTP6rBw9P3u cSdoxA/UTx4Nwh4HuY9I0gHGG2UtifjyvQ4+h3yVecHFrMt3BhjOGgLyKWT0Q9SN +Cb5ozqAWuV1MBGBLc5w18aYAi6EkatY6AlfQ3yMlgFJ9v0lXF564+K79z/ZxsbG a/rXVTmnQ/3YoDqnmTFtIsrQH/Sv4KNQNHrSvEv2kJIOW1H7HSgJ6ydXgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSQbsYh+zfJW3AV4MOSkK7efhL1MB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvSkpCdXhpSDdOOGxiY0JYZ3c1S1FydDUtRXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwosEMA0G CSqGSIb3DQEBCwUAA4IBAQBBBqjjPr08Mo7ycZOUHJJMWhZGtky35hGFFWJnQZ2O JA29ZaqF4tR/txVgTiHIKpR16uKeMHAZFL0qFGrE06H9V+0A7xjXnoiHpZMtJN0i f2VtsYEMcJ/Ve6k3q4gW6X3xTrYEzB509ZtWCxP7Oi3KZeJHNWzByX1zIuNz4wxH YKAwJ7NjzSbGRBwgb1zsHH9q49GJ5wuqsVy9bT0VZbXmQqZuBUsMFFXPo56lSFtU iltnxiYD5PS74x1HSa77MjcLhBvgfzyZIiKNH53Xp74r7C7bvHEo0Vs197cvaWIA rZ/8DdFYjf8Wmzyiv25AQMaHWbvHNOufRRi7msWYw2cO -----END CERTIFICATE-----Generated at Mon Jan 26 21:35:14 2026 by rpki-client