This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/jxIzweNGbwp67oAJPrxn65prYVA.roa File: jxIzweNGbwp67oAJPrxn65prYVA.roa (raw, json) Hash identifier: qci5dm1heyJtkWX1qezUrzv1Lx1lqWj4xvftYho9n2c= Subject key identifier: 8F:12:33:C1:E3:46:6F:0A:7A:EE:80:09:3E:BC:67:EB:9A:6B:61:50 Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076 Certificate serial: 019B76EAB7B9E6A4B905E81D483786753216 Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/jxIzweNGbwp67oAJPrxn65prYVA.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215821 IP address blocks: 45.84.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b7:b9:e6:a4:b9:05:e8:1d:48:37:86:75:32:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f1233c1e3466f0a7aee80093ebc67eb9a6b6150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:35:a5:38:55:e1:69:11:93:7a:91:d6:d1: 77:f2:25:af:61:1f:54:50:5a:75:01:0f:ec:a4:a1: af:9f:d0:cf:d3:5e:94:64:be:22:f7:61:c6:4a:06: 7b:17:16:33:40:77:46:ea:7c:37:69:29:f6:3c:09: 28:e3:3d:d2:0e:69:ba:e4:50:b8:c5:87:31:8a:54: c9:9c:53:0d:6d:c3:d1:67:34:fc:02:49:0d:3c:1e: fd:53:f8:0b:dc:97:54:d4:cf:a6:17:15:a5:c3:02: b8:19:f7:24:f1:52:67:80:8a:30:7a:1f:a2:3b:a5: 6c:7f:78:68:82:ae:fe:0d:61:7d:49:62:92:ba:14: b2:ce:87:c5:dd:cc:d8:9e:0e:ca:2e:78:c4:07:81: ff:28:74:47:3d:0b:d1:f8:78:01:ae:8a:42:8b:6a: a1:63:eb:73:76:91:75:0c:f8:9d:ae:c0:8d:20:c3: aa:e1:cd:77:79:c9:c7:de:dd:a6:c5:dd:47:30:c3: 97:9c:31:08:20:f9:bd:fd:94:b3:d8:ca:19:15:7e: 7a:41:7f:a2:74:9c:87:c8:a3:b8:7d:eb:4f:f7:e4: 7f:15:34:4e:b6:cd:d9:96:8f:d6:f8:52:b3:0b:b5: 94:7c:fa:6b:a3:49:94:9f:06:47:83:21:d4:74:1c: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:12:33:C1:E3:46:6F:0A:7A:EE:80:09:3E:BC:67:EB:9A:6B:61:50 X509v3 Authority Key Identifier: keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/jxIzweNGbwp67oAJPrxn65prYVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.101.0/24 Signature Algorithm: sha256WithRSAEncryption 91:8f:91:e8:6b:3f:9d:39:00:24:de:c6:e7:10:22:45:ac:a4: e5:93:4e:e8:18:1a:c3:77:21:da:c6:d3:07:95:87:ba:68:c5: 8a:74:02:dc:bc:34:7b:27:ee:97:78:ad:0a:61:79:14:03:b4: a3:8c:07:a2:b0:ef:62:f5:21:79:76:ff:41:d8:fa:64:7c:06: 10:d7:be:9f:d3:ae:63:81:14:6c:65:ba:cf:00:56:9d:ec:82: e2:b9:05:35:b5:0e:7d:c6:5e:67:d9:7f:f2:97:1b:f3:94:2e: 2e:23:8f:9e:8d:94:b4:2a:e7:51:22:10:70:5a:14:fa:42:d4: 84:d7:b6:35:96:e1:a6:d8:fe:23:eb:24:af:07:1b:f5:6b:71: 37:d2:a2:ee:dd:d5:79:fa:98:00:fb:61:3a:57:0d:47:34:ee: 7d:40:29:81:1a:05:d1:d4:3a:9c:43:35:18:6a:5d:15:5d:f5: 86:ac:39:9a:d3:46:b7:0e:5c:ba:26:00:80:1e:7f:80:19:1a: df:db:31:78:7e:e4:be:3f:28:0e:6d:b1:55:6d:51:0b:8e:b5: 0c:a6:73:74:0f:f2:c3:9f:57:33:88:db:08:14:c8:a0:4a:d5: d4:39:fd:3d:c1:d1:ec:1b:d1:4a:c3:b2:56:37:d7:63:c9:f1: d2:6b:1a:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26re55qS5BegdSDeGdTIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz YTgwNzYwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjEyMzNjMWUzNDY2ZjBhN2FlZTgwMDkzZWJjNjdlYjlhNmI2MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNQ1pThV4WkRk3qR1tF38iWvYR9U UFp1AQ/spKGvn9DP016UZL4i92HGSgZ7FxYzQHdG6nw3aSn2PAko4z3SDmm65FC4 xYcxilTJnFMNbcPRZzT8AkkNPB79U/gL3JdU1M+mFxWlwwK4Gfck8VJngIoweh+i O6Vsf3hogq7+DWF9SWKSuhSyzofF3czYng7KLnjEB4H/KHRHPQvR+HgBropCi2qh Y+tzdpF1DPidrsCNIMOq4c13ecnH3t2mxd1HMMOXnDEIIPm9/ZSz2MoZFX56QX+i dJyHyKO4fetP9+R/FTROts3Zlo/W+FKzC7WUfPpro0mUnwZHgyHUdBybGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8SM8HjRm8Keu6ACT68Z+uaa2FQMB8GA1UdIwQY MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt YWQxNjNhYjM1NGM4LzEvanhJendlTkdid3A2N29BSlByeG42NXByWVZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4 LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRlMA0G CSqGSIb3DQEBCwUAA4IBAQCRj5Hoaz+dOQAk3sbnECJFrKTlk07oGBrDdyHaxtMH lYe6aMWKdALcvDR7J+6XeK0KYXkUA7SjjAeisO9i9SF5dv9B2PpkfAYQ176f065j gRRsZbrPAFad7ILiuQU1tQ59xl5n2X/ylxvzlC4uI4+ejZS0KudRIhBwWhT6QtSE 17Y1luGm2P4j6ySvBxv1a3E30qLu3dV5+pgA+2E6Vw1HNO59QCmBGgXR1DqcQzUY al0VXfWGrDma00a3Dly6JgCAHn+AGRrf2zF4fuS+PygObbFVbVELjrUMpnN0D/LD n1cziNsIFMigStXUOf09wdHsG9FKw7JWN9djyfHSaxov -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client