This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/jsRZDwsXNurKIL7Ap1QBapz6Isg.roa File: jsRZDwsXNurKIL7Ap1QBapz6Isg.roa (raw, json) Hash identifier: kXprBjnQdFsbwsvgqdQQMN7XDtL6GdbNTSFugYgOzB8= Subject key identifier: 8E:C4:59:0F:0B:17:36:EA:CA:20:BE:C0:A7:54:01:6A:9C:FA:22:C8 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D13AF69B005D252E723D56BD1A6E Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/jsRZDwsXNurKIL7Ap1QBapz6Isg.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41720 IP address blocks: 45.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d1:3a:f6:9b:00:5d:25:2e:72:3d:56:bd:1a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8ec4590f0b1736eaca20bec0a754016a9cfa22c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:c3:10:6b:9f:ca:23:96:46:67:84:a8:20: 9c:65:14:ef:6e:a0:a3:ad:20:bd:4c:0f:99:9c:1f: 73:e7:8b:de:0b:40:2e:20:17:d4:5c:a8:89:08:15: aa:88:4d:c9:6a:3c:09:72:3f:2b:65:11:50:c7:fa: c8:f9:7c:72:29:9d:f9:5f:d0:c6:f8:bd:b6:44:5f: d4:ae:8f:4e:19:ec:32:c3:6d:c9:8a:0c:24:cc:80: b0:f6:36:71:74:66:5d:fe:bf:f6:04:64:b9:8b:a0: ca:64:71:ad:77:99:dc:7d:e0:c1:55:d9:cd:fa:cd: b6:38:5a:62:0f:a5:e2:75:b8:02:77:1a:55:a5:54: d6:e2:82:50:a2:44:c7:f0:08:d1:ea:6a:e3:19:23: 89:f2:f6:96:fb:95:4e:39:e1:9a:6c:26:c2:09:25: f9:53:36:5d:10:1f:4e:50:f4:30:d8:b5:4c:ca:b4: 8b:09:c1:cc:42:59:08:a4:23:c8:e7:9b:26:ad:22: d6:c8:16:97:68:c2:1a:af:e2:ba:9d:c8:a5:65:0c: d0:1d:37:fc:aa:cb:bc:f3:38:3b:f4:2c:33:bd:4e: de:bb:44:a1:5c:de:dc:28:ed:5c:45:97:32:fb:02: 21:74:33:a2:a4:34:31:7b:00:4e:5a:f6:34:e6:f6: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:59:0F:0B:17:36:EA:CA:20:BE:C0:A7:54:01:6A:9C:FA:22:C8 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/jsRZDwsXNurKIL7Ap1QBapz6Isg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.119.0/24 Signature Algorithm: sha256WithRSAEncryption 98:af:ce:1d:c8:ac:cf:28:0b:a2:5a:67:12:46:69:a2:b7:de: 84:8a:45:80:18:a9:32:81:5d:07:9c:78:5c:f8:0e:b3:20:f0: e9:ac:d7:8b:36:10:c6:8e:1d:86:a2:71:1e:2f:82:3b:ef:43: eb:99:ce:bb:74:e3:f1:3a:5f:0e:b1:e7:6b:8a:26:fd:24:84: 22:15:e6:d7:06:2f:3a:39:91:b5:b0:79:8f:1c:b0:50:48:cc: 42:1c:bc:67:c2:0a:10:51:56:21:c1:a6:df:2c:8c:c6:31:63: 15:3a:59:ec:d9:9c:54:f3:fa:68:73:ff:c3:ed:33:bf:67:1e: 7c:76:5b:ea:e2:86:43:8f:2c:ec:c8:20:e9:03:07:a4:6a:bd: a7:19:98:30:c3:36:36:52:0c:ef:d6:bc:3c:50:fb:af:0f:26: 54:00:01:8d:c1:e9:bc:f0:9f:ae:af:8a:4f:10:16:76:dc:4b: 75:dc:39:85:2b:bc:5d:58:9a:7d:f4:b8:b6:fe:19:ab:42:5b: 87:00:f5:af:ab:8b:0e:37:ca:3e:73:68:0a:8e:37:82:7b:30: 2b:c2:34:50:56:5d:da:0f:0b:9f:e1:c8:71:b7:95:6b:d1:53: a2:80:2e:3c:2d:c8:4d:5c:ca:d4:b0:74:08:e4:c6:20:0a:71: b8:b2:03:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttE69psAXSUucj1WvRpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWM0NTkwZjBiMTczNmVhY2EyMGJlYzBhNzU0MDE2YTljZmEyMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti7DEGufyiOWRmeEqCCcZRTvbqCj rSC9TA+ZnB9z54veC0AuIBfUXKiJCBWqiE3JajwJcj8rZRFQx/rI+XxyKZ35X9DG +L22RF/Uro9OGewyw23JigwkzICw9jZxdGZd/r/2BGS5i6DKZHGtd5ncfeDBVdnN +s22OFpiD6XidbgCdxpVpVTW4oJQokTH8AjR6mrjGSOJ8vaW+5VOOeGabCbCCSX5 UzZdEB9OUPQw2LVMyrSLCcHMQlkIpCPI55smrSLWyBaXaMIar+K6ncilZQzQHTf8 qsu88zg79CwzvU7eu0ShXN7cKO1cRZcy+wIhdDOipDQxewBOWvY05vZawQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7EWQ8LFzbqyiC+wKdUAWqc+iLIMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvanNSWkR3c1hOdXJLSUw3QXAxUUJhcHo2SXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV3MA0G CSqGSIb3DQEBCwUAA4IBAQCYr84dyKzPKAuiWmcSRmmit96EikWAGKkygV0HnHhc +A6zIPDprNeLNhDGjh2GonEeL4I770Prmc67dOPxOl8Osedriib9JIQiFebXBi86 OZG1sHmPHLBQSMxCHLxnwgoQUVYhwabfLIzGMWMVOlns2ZxU8/poc//D7TO/Zx58 dlvq4oZDjyzsyCDpAwekar2nGZgwwzY2Ugzv1rw8UPuvDyZUAAGNwem88J+ur4pP EBZ23Et13DmFK7xdWJp99Li2/hmrQluHAPWvq4sON8o+c2gKjjeCezArwjRQVl3a Dwuf4chxt5Vr0VOigC48LchNXMrUsHQI5MYgCnG4sgO8 -----END CERTIFICATE-----Generated at Wed Dec 3 13:08:58 2025 by rpki-client