This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JmzkFV8qKGo54gZYkQxK29G1YJM.roa File: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (raw, json) Hash identifier: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI= Subject key identifier: 26:6C:E4:15:5F:2A:28:6A:39:E2:06:58:91:0C:4A:DB:D1:B5:60:93 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8AB89C6045C492E74FC781DBBE731 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JmzkFV8qKGo54gZYkQxK29G1YJM.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206446 IP address blocks: 213.137.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ab:89:c6:04:5c:49:2e:74:fc:78:1d:bb:e7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266ce4155f2a286a39e20658910c4adbd1b56093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:42:c0:98:13:99:e9:a6:b9:8b:21:8b:23: fb:63:b5:2b:f5:13:91:25:28:53:cc:1b:a3:0b:6a: 01:90:43:6d:ff:48:44:8d:0b:ec:f2:a4:a3:69:cd: d6:60:d6:7f:c3:93:f4:09:68:6b:d8:f2:7a:e5:f8: 28:d9:de:77:6b:ea:fd:65:b3:b0:a4:e7:b4:ed:7b: 33:fc:17:db:96:37:01:d2:12:ef:45:92:62:ad:13: ab:29:a4:b6:7c:1f:d5:58:ec:44:5d:bb:5f:8f:7f: 1e:6d:9b:06:4d:31:9a:db:48:9c:ec:f9:5d:fa:8f: fe:7a:a0:1a:4f:53:5a:40:41:3c:0d:e6:18:df:75: 48:0e:99:1b:79:da:d0:bb:8e:52:94:05:7d:36:37: 65:cb:41:ec:9f:07:0a:cc:dd:63:d0:4f:43:1f:2d: a0:c0:a7:18:07:19:4a:ff:28:2c:82:9e:f5:be:7f: 73:05:a9:8c:e3:d8:25:ed:27:75:ac:0c:09:1b:d9: c8:d1:76:ed:e1:65:6a:c5:de:e0:48:08:cb:39:8a: f9:e7:da:b5:0d:77:44:44:83:b4:21:a0:97:0b:7a: 29:ae:ac:b8:e8:2d:72:a3:8a:1a:b5:16:87:c6:7d: b5:4f:e8:2b:6a:dc:06:0c:6a:13:98:1f:68:ad:c1: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:E4:15:5F:2A:28:6A:39:E2:06:58:91:0C:4A:DB:D1:B5:60:93 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JmzkFV8qKGo54gZYkQxK29G1YJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.84.0/22 Signature Algorithm: sha256WithRSAEncryption a5:7f:1b:d0:a9:94:c9:6c:ae:21:0c:55:75:cc:3c:84:64:a8: 15:7b:7b:aa:43:67:7e:24:5b:ef:1b:dd:f1:2b:7d:95:54:5d: bb:a8:87:12:0b:1d:9e:a6:5f:34:70:ba:7d:3d:7b:9d:80:42: 73:1e:35:71:da:7c:b2:2f:a5:2f:e1:15:03:0c:59:de:10:59: 9d:77:38:c9:73:b3:f3:d5:f2:af:93:3c:dc:0f:71:4e:0b:1e: 78:dc:ef:66:00:1e:58:5c:61:93:76:6a:77:da:6e:76:f9:9f: 9a:45:cb:f0:89:1a:ed:0c:41:55:f5:12:a7:89:c7:e9:a6:7c: 00:74:9c:a1:ff:52:e9:67:04:7d:dc:55:78:7d:68:a6:b6:9e: af:a5:02:91:81:64:a4:46:8f:37:ec:f1:f9:06:04:75:d7:c3: 6f:bf:e6:ec:ac:1f:51:0d:59:69:9b:ca:9c:9f:f5:d5:ff:20: 3e:be:e6:b9:6d:71:98:a6:b4:df:08:05:9c:08:5c:1c:77:ac: c6:2c:a8:f9:42:d7:ba:a3:5d:0b:09:41:21:22:95:69:f0:17: 8e:c8:45:e0:03:a2:42:21:c4:66:72:c3:9f:35:46:26:6d:60: ea:2a:c1:ce:42:57:db:67:40:76:f8:c0:cd:58:ef:7c:ff:58: 0a:0c:df:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKuJxgRcSS50/Hgdu+cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZjZTQxNTVmMmEyODZhMzllMjA2NTg5MTBjNGFkYmQxYjU2MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArixCwJgTmemmuYshiyP7Y7Ur9ROR JShTzBujC2oBkENt/0hEjQvs8qSjac3WYNZ/w5P0CWhr2PJ65fgo2d53a+r9ZbOw pOe07Xsz/BfbljcB0hLvRZJirROrKaS2fB/VWOxEXbtfj38ebZsGTTGa20ic7Pld +o/+eqAaT1NaQEE8DeYY33VIDpkbedrQu45SlAV9Njdly0HsnwcKzN1j0E9DHy2g wKcYBxlK/ygsgp71vn9zBamM49gl7Sd1rAwJG9nI0Xbt4WVqxd7gSAjLOYr559q1 DXdERIO0IaCXC3oprqy46C1yo4oatRaHxn21T+gratwGDGoTmB9orcGuYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZs5BVfKihqOeIGWJEMStvRtWCTMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvSm16a0ZWOHFLR281NGdaWWtReEsyOUcxWUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YlUMA0G CSqGSIb3DQEBCwUAA4IBAQClfxvQqZTJbK4hDFV1zDyEZKgVe3uqQ2d+JFvvG93x K32VVF27qIcSCx2epl80cLp9PXudgEJzHjVx2nyyL6Uv4RUDDFneEFmddzjJc7Pz 1fKvkzzcD3FOCx543O9mAB5YXGGTdmp32m52+Z+aRcvwiRrtDEFV9RKnicfppnwA dJyh/1LpZwR93FV4fWimtp6vpQKRgWSkRo837PH5BgR118Nvv+bsrB9RDVlpm8qc n/XV/yA+vua5bXGYprTfCAWcCFwcd6zGLKj5Qte6o10LCUEhIpVp8BeOyEXgA6JC IcRmcsOfNUYmbWDqKsHOQlfbZ0B2+MDNWO98/1gKDN/T -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:48 2026 by rpki-client