This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa File: JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa (raw, json) Hash identifier: 5zOgMk+c4Mrl83ntlb1BWuWLQ9qzH0Aci4OcYi1Ml7w= Subject key identifier: 24:96:3E:66:3C:AC:FC:E8:54:4D:48:4F:F9:C4:6E:22:56:94:20:95 Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71 Certificate serial: 019A7EE43B6D3D733AA2476C0A4E9D38E9A6 Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa Signing time: Thu 13 Nov 2025 20:24:37 +0000 ROA not before: Thu 13 Nov 2025 20:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.152.114.0/23 maxlen: 23 2a03:70c1:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:e4:3b:6d:3d:73:3a:a2:47:6c:0a:4e:9d:38:e9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71 Validity Not Before: Nov 13 20:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24963e663cacfce8544d484ff9c46e2256942095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:24:a0:39:84:bb:0c:66:79:97:3e:83:56: 57:67:d9:51:75:f0:2b:b4:c5:04:e4:09:e7:99:07: 2a:04:4a:3e:b1:68:35:09:02:e8:54:37:43:55:c2: 76:90:f1:73:49:b3:46:b9:97:a8:2a:dd:e3:a6:89: 6d:f8:69:d5:13:93:a8:65:61:45:65:37:77:35:98: f4:5e:0c:1f:ed:01:e3:c6:76:6c:0f:b3:53:d1:8b: f7:15:14:16:7b:a5:10:9b:36:10:f1:00:20:49:7d: 43:d5:aa:65:92:5b:bf:ed:9c:c5:60:43:a0:c3:30: 15:0e:30:a9:2f:ea:d4:f5:48:ad:82:92:6b:6d:72: f2:e3:a2:e8:50:d6:4f:02:39:aa:64:ae:89:28:0a: b3:e6:93:c7:78:8f:5d:b0:18:08:aa:53:69:6e:30: 2a:c9:b4:55:b8:99:9a:e2:62:0d:73:67:9d:5e:3a: f0:f6:35:50:cc:97:81:1e:84:75:08:97:a1:8d:1a: 32:98:04:c7:9a:ed:9e:59:79:bb:69:11:fa:6e:9e: 5e:d6:ba:58:8b:1c:8c:1a:dd:92:22:81:37:7f:70: 21:f0:12:0d:e9:03:a6:cf:5c:54:2d:84:a1:88:34: 20:33:28:fe:d4:b2:b3:3e:80:52:e7:70:13:2c:53: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:3E:66:3C:AC:FC:E8:54:4D:48:4F:F9:C4:6E:22:56:94:20:95 X509v3 Authority Key Identifier: keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.114.0/23 IPv6: 2a03:70c1:ffff::/48 Signature Algorithm: sha256WithRSAEncryption a9:78:e3:f9:2c:e8:e3:ce:d7:6d:38:94:01:ea:f1:e4:a9:b1: ad:a7:b1:ce:d4:11:d0:ef:a7:b0:66:49:55:97:1e:d2:d8:3a: 0a:0d:9b:a6:03:66:98:50:d4:fa:08:84:d5:1e:03:1a:1e:2d: e5:a2:94:e9:4f:77:f4:94:03:13:6f:ac:33:c3:31:7f:c8:d8: f7:d8:a9:d3:5d:18:25:6b:ca:10:9d:f7:c7:06:b0:b0:9a:74: f0:c0:dc:96:0a:b4:94:50:2f:cc:38:50:ee:81:6d:f1:39:17: 14:0c:57:12:6d:db:ab:06:e8:ab:bb:d9:90:a4:26:3e:45:5a: 1a:9e:f4:43:f6:cd:93:7d:0f:53:e2:8e:cd:40:f0:a2:24:6d: a4:bf:55:40:06:c0:87:81:6e:06:2e:d2:66:ec:ae:8c:8e:2f: 47:fd:01:2d:bc:90:ac:eb:57:03:f2:38:95:31:55:35:c4:1f: c5:a7:1a:42:e1:17:77:61:5f:80:fe:a6:6f:8b:f0:44:f8:86: f7:03:51:7b:1e:2e:c2:a7:c9:68:58:57:57:a7:5a:89:1f:e5: 34:09:38:bc:2d:68:32:f6:bf:3b:d0:78:62:4b:6f:64:f1:04: 56:c8:48:6e:ca:f7:02:c8:bd:28:57:8a:ba:82:56:00:5b:7b: da:40:34:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZp+5DttPXM6okdsCk6dOOmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5 ZmJmNzEwHhcNMjUxMTEzMjAyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDk2M2U2NjNjYWNmY2U4NTQ0ZDQ4NGZmOWM0NmUyMjU2OTQyMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJgkoDmEuwxmeZc+g1ZXZ9lRdfAr tMUE5AnnmQcqBEo+sWg1CQLoVDdDVcJ2kPFzSbNGuZeoKt3jpolt+GnVE5OoZWFF ZTd3NZj0Xgwf7QHjxnZsD7NT0Yv3FRQWe6UQmzYQ8QAgSX1D1aplklu/7ZzFYEOg wzAVDjCpL+rU9UitgpJrbXLy46LoUNZPAjmqZK6JKAqz5pPHeI9dsBgIqlNpbjAq ybRVuJma4mINc2edXjrw9jVQzJeBHoR1CJehjRoymATHmu2eWXm7aRH6bp5e1rpY ixyMGt2SIoE3f3Ah8BIN6QOmz1xULYShiDQgMyj+1LKzPoBS53ATLFOsyQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCSWPmY8rPzoVE1IT/nEbiJWlCCVMB8GA1UdIwQY MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt OTAxM2NhOTk2YjE2LzEvSkpZLVpqeXNfT2hVVFVoUC1jUnVJbGFVSUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2 LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLZhyMA8E AgACMAkDBwAqA3DB//8wDQYJKoZIhvcNAQELBQADggEBAKl44/ks6OPO1204lAHq 8eSpsa2nsc7UEdDvp7BmSVWXHtLYOgoNm6YDZphQ1PoIhNUeAxoeLeWilOlPd/SU AxNvrDPDMX/I2PfYqdNdGCVryhCd98cGsLCadPDA3JYKtJRQL8w4UO6BbfE5FxQM VxJt26sG6Ku72ZCkJj5FWhqe9EP2zZN9D1Pijs1A8KIkbaS/VUAGwIeBbgYu0mbs royOL0f9AS28kKzrVwPyOJUxVTXEH8WnGkLhF3dhX4D+pm+L8ET4hvcDUXseLsKn yWhYV1enWokf5TQJOLwtaDL2vzvQeGJLb2TxBFbISG7K9wLIvShXirqCVgBbe9pA NPM= -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:42 2025 by rpki-client