This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/jvm0Jb2t-rhkSp6peUmj4YlckCw.roa File: jvm0Jb2t-rhkSp6peUmj4YlckCw.roa (raw, json) Hash identifier: HiAafUtSRh0L7KEZV70WFw7qC8V7XryLQINqzFQNUHA= Subject key identifier: 8E:F9:B4:25:BD:AD:FA:B8:64:4A:9E:A9:79:49:A3:E1:89:5C:90:2C Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3 Certificate serial: 019B7EA6E806C0BE7D71A9BAC1E35CAD0DCA Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/jvm0Jb2t-rhkSp6peUmj4YlckCw.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199205 IP address blocks: 5.254.184.0/21 maxlen: 21 185.119.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e8:06:c0:be:7d:71:a9:ba:c1:e3:5c:ad:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b536466d036852e2f7376ade138046143b994cc3 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ef9b425bdadfab8644a9ea97949a3e1895c902c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:89:11:a0:83:ca:df:7f:ee:f5:e2:23:4a: f9:ad:55:d0:61:1c:2d:9a:49:fe:22:65:03:d2:5b: dc:2c:58:1c:b4:bd:4f:5a:8c:48:53:75:e7:cd:d1: f3:65:94:b2:7f:a2:9a:45:99:c9:c0:46:99:77:7b: b5:5d:53:27:23:08:2b:88:bb:79:3d:cc:5c:ec:9f: 41:28:03:7e:1b:ae:1d:78:e4:d3:97:00:2c:7c:15: 36:22:7f:9d:12:65:b8:4f:ce:2f:9b:cc:5d:59:6b: 85:2c:31:eb:09:f8:00:fc:6a:d6:e7:35:3c:fc:1a: 44:dd:1c:49:81:cd:08:c0:29:1f:15:d0:1c:a2:a4: f2:b5:b6:bf:24:f1:58:3f:67:8b:f8:82:6c:b1:79: e0:25:6c:a8:cc:1f:9c:4e:9c:c4:31:1d:0c:3b:f0: e8:8a:a6:52:ea:94:17:90:c8:77:3e:6c:36:fb:ae: 90:21:a6:19:01:54:18:3f:82:87:46:8f:c4:7c:10: df:73:0b:3d:75:62:e4:3d:02:4d:16:3b:59:16:27: 9f:a3:be:c9:41:7c:10:b7:47:aa:5b:a4:74:0b:88: 5a:a0:50:ea:92:a7:56:21:ba:d2:d4:1d:42:5d:3b: 9a:61:2a:d3:6c:36:b6:97:fa:45:87:ef:98:64:0b: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F9:B4:25:BD:AD:FA:B8:64:4A:9E:A9:79:49:A3:E1:89:5C:90:2C X509v3 Authority Key Identifier: keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/jvm0Jb2t-rhkSp6peUmj4YlckCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.184.0/21 185.119.160.0/22 Signature Algorithm: sha256WithRSAEncryption 60:b1:49:ec:74:35:ae:eb:ff:0a:25:a4:63:e9:07:9b:07:00: f5:1e:6f:c1:9a:b1:92:0a:c7:72:7e:1c:72:f8:cf:9e:5e:f7: 74:5f:0e:2a:d4:73:05:e8:fe:23:a6:b0:f9:b3:59:ef:66:d2: 0c:85:3c:50:f0:55:fd:fc:b1:e0:a5:10:29:27:30:ca:ac:d1: f1:9a:f7:53:e1:09:55:b3:f8:1b:bc:c7:6f:1c:83:94:b0:29: b2:9d:3e:e0:4f:e9:09:3e:70:4d:94:24:a1:5a:4d:b0:15:f5: a3:1e:45:c1:a9:35:82:6a:43:d8:fb:40:93:8a:b3:6b:20:d8: 95:d6:25:7a:4c:85:9c:da:f8:91:d8:d5:99:43:b4:50:fe:88: bd:c2:c7:e1:63:d5:87:8a:22:bc:3b:04:5c:48:60:38:24:ef: bc:74:ab:a7:42:a7:fc:65:e7:5b:a0:8a:c3:82:d4:91:46:cb: 30:e7:31:9e:3a:2b:1b:02:82:57:8c:49:c0:de:f5:0a:b6:a0: a9:2d:25:99:26:50:22:69:ee:ed:b7:09:94:29:3e:f3:33:cb: 71:4d:70:a9:c9:5d:c4:95:e5:81:94:e1:15:30:1f:df:82:17: f1:96:a9:fb:4d:b1:de:8d:e1:cb:60:32:47:9a:9b:84:ba:e0: d6:d2:e4:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pugGwL59cam6weNcrQ3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzY0NjZkMDM2ODUyZTJmNzM3NmFkZTEzODA0NjE0M2I5 OTRjYzMwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWY5YjQyNWJkYWRmYWI4NjQ0YTllYTk3OTQ5YTNlMTg5NWM5MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9uJEaCDyt9/7vXiI0r5rVXQYRwt mkn+ImUD0lvcLFgctL1PWoxIU3XnzdHzZZSyf6KaRZnJwEaZd3u1XVMnIwgriLt5 Pcxc7J9BKAN+G64deOTTlwAsfBU2In+dEmW4T84vm8xdWWuFLDHrCfgA/GrW5zU8 /BpE3RxJgc0IwCkfFdAcoqTytba/JPFYP2eL+IJssXngJWyozB+cTpzEMR0MO/Do iqZS6pQXkMh3Pmw2+66QIaYZAVQYP4KHRo/EfBDfcws9dWLkPQJNFjtZFiefo77J QXwQt0eqW6R0C4haoFDqkqdWIbrS1B1CXTuaYSrTbDa2l/pFh++YZAsD2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI75tCW9rfq4ZEqeqXlJo+GJXJAsMB8GA1UdIwQY MBaAFLU2Rm0DaFLi9zdq3hOARhQ7mUzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgt YjEwMmZlMzI4M2EzLzEvanZtMEpiMnQtcmhrU3A2cGVVbWo0WWxja0N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgtYjEwMmZlMzI4M2Ez LzEvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBf64AwQC uXegMA0GCSqGSIb3DQEBCwUAA4IBAQBgsUnsdDWu6/8KJaRj6QebBwD1Hm/BmrGS Csdyfhxy+M+eXvd0Xw4q1HMF6P4jprD5s1nvZtIMhTxQ8FX9/LHgpRApJzDKrNHx mvdT4QlVs/gbvMdvHIOUsCmynT7gT+kJPnBNlCShWk2wFfWjHkXBqTWCakPY+0CT irNrINiV1iV6TIWc2viR2NWZQ7RQ/oi9wsfhY9WHiiK8OwRcSGA4JO+8dKunQqf8 ZedboIrDgtSRRssw5zGeOisbAoJXjEnA3vUKtqCpLSWZJlAiae7ttwmUKT7zM8tx TXCpyV3EleWBlOEVMB/fghfxlqn7TbHejeHLYDJHmpuEuuDW0uTu -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:19 2026 by rpki-client