This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jPnsS8wfwuN66Rzo6U1g7QKa_ts.roa File: jPnsS8wfwuN66Rzo6U1g7QKa_ts.roa (raw, json) Hash identifier: DinftPNN19zHOt+GlK4SXFgM1Wi82J0Hh/ZfVTHnOug= Subject key identifier: 8C:F9:EC:4B:CC:1F:C2:E3:7A:E9:1C:E8:E9:4D:60:ED:02:9A:FE:DB Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6AC5366FE8722941CA98A935AD0AA Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jPnsS8wfwuN66Rzo6U1g7QKa_ts.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204917 IP address blocks: 109.248.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:53:66:fe:87:22:94:1c:a9:8a:93:5a:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf9ec4bcc1fc2e37ae91ce8e94d60ed029afedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:b4:ca:f6:c9:22:c1:1d:23:0b:b4:c7:56: 8b:d4:ed:14:a2:c6:2c:a9:e1:20:e9:16:a1:6c:e0: 81:4b:f7:71:e6:64:92:a6:27:28:f3:c3:21:44:75: e8:11:75:93:de:da:c4:49:67:7b:7b:2c:e2:73:c2: b1:25:23:6b:a7:77:01:27:fe:21:7a:71:ca:d4:86: f9:24:9c:d7:70:17:5e:1e:2f:c4:58:a5:71:f6:0c: 0c:64:47:33:85:b1:35:d4:65:c3:a9:f6:27:40:42: 38:f9:88:c4:67:1b:72:fa:94:1f:e8:cb:cf:8c:df: d0:88:d3:ac:b3:3c:ae:9f:ce:0d:f7:22:69:87:45: 91:a6:63:20:e2:48:36:02:e6:cb:dc:bf:81:74:26: 7d:ae:e0:da:32:cb:6b:26:6f:7d:2a:57:35:b3:5f: a3:a8:ed:cf:83:39:67:34:d6:c2:1f:3b:a7:5e:0b: b9:ee:75:e9:56:5f:af:0b:03:74:d6:36:c3:f1:41: a2:8b:3e:e7:6b:eb:7d:32:35:0f:3b:a4:bc:99:a9: 84:b1:ad:29:99:d9:d0:f7:19:2f:ca:07:30:80:05: a6:0b:39:7a:39:08:a6:d8:d0:ba:8e:19:21:25:93: 55:f8:b4:d5:60:cc:36:e3:0f:06:19:8e:6e:1e:2e: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:EC:4B:CC:1F:C2:E3:7A:E9:1C:E8:E9:4D:60:ED:02:9A:FE:DB X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jPnsS8wfwuN66Rzo6U1g7QKa_ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.245.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:27:62:60:e7:4b:14:eb:c3:d9:9c:32:ee:3b:3a:f5:57:d6: 64:2c:ed:5a:79:52:bb:d3:12:e0:b1:7f:8e:c5:0d:05:d2:e3: ed:4b:43:eb:2d:93:1e:0c:08:f5:b6:f7:35:6e:17:7d:76:e5: 45:c1:15:70:03:c6:2d:f6:0a:8f:82:35:af:d0:60:d5:8a:1c: a0:cd:c8:49:80:54:43:cb:87:73:ae:57:4f:d1:93:c2:9d:79: 16:90:99:68:43:c0:0a:a7:8e:af:10:6e:07:8a:bd:e6:4d:5b: e2:25:87:09:bd:1e:ce:d7:56:f8:f8:ba:91:e8:69:07:a2:7d: 76:89:b8:fd:a1:37:e2:58:9a:34:38:c5:39:17:99:18:e3:04: 5c:de:16:10:3c:4c:65:53:d3:91:f7:93:d0:fb:d1:ea:22:74: ae:15:5e:92:35:53:8d:77:93:11:3d:90:5c:38:2c:79:c9:96: f9:f0:31:0a:ed:fc:27:71:12:b1:9e:69:7c:8c:39:e4:e2:eb: fc:b5:24:33:ec:69:b9:11:67:f1:ab:73:84:b3:15:a4:03:2d: b3:a3:6a:98:1b:10:bd:a6:d4:43:64:70:cb:e3:fb:82:a8:c6: 17:5b:85:1d:64:66:d8:f0:da:ac:1f:09:93:19:57:33:1b:32: 7b:d6:85:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqxTZv6HIpQcqYqTWtCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Y5ZWM0YmNjMWZjMmUzN2FlOTFjZThlOTRkNjBlZDAyOWFmZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM+0yvbJIsEdIwu0x1aL1O0UosYs qeEg6RahbOCBS/dx5mSSpico88MhRHXoEXWT3trESWd7eyzic8KxJSNrp3cBJ/4h enHK1Ib5JJzXcBdeHi/EWKVx9gwMZEczhbE11GXDqfYnQEI4+YjEZxty+pQf6MvP jN/QiNOsszyun84N9yJph0WRpmMg4kg2AubL3L+BdCZ9ruDaMstrJm99Klc1s1+j qO3PgzlnNNbCHzunXgu57nXpVl+vCwN01jbD8UGiiz7na+t9MjUPO6S8mamEsa0p mdnQ9xkvygcwgAWmCzl6OQim2NC6jhkhJZNV+LTVYMw24w8GGY5uHi6VRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIz57EvMH8Ljeukc6OlNYO0Cmv7bMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvalBuc1M4d2Z3dU42NlJ6bzZVMWc3UUthX3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfj1MA0G CSqGSIb3DQEBCwUAA4IBAQBaJ2Jg50sU68PZnDLuOzr1V9ZkLO1aeVK70xLgsX+O xQ0F0uPtS0PrLZMeDAj1tvc1bhd9duVFwRVwA8Yt9gqPgjWv0GDVihygzchJgFRD y4dzrldP0ZPCnXkWkJloQ8AKp46vEG4Hir3mTVviJYcJvR7O11b4+LqR6GkHon12 ibj9oTfiWJo0OMU5F5kY4wRc3hYQPExlU9OR95PQ+9HqInSuFV6SNVONd5MRPZBc OCx5yZb58DEK7fwncRKxnml8jDnk4uv8tSQz7Gm5EWfxq3OEsxWkAy2zo2qYGxC9 ptRDZHDL4/uCqMYXW4UdZGbY8NqsHwmTGVczGzJ71oWy -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:43 2026 by rpki-client