This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JJziQGt5NZtw1Dt9FeDipvXsTI4.roa File: JJziQGt5NZtw1Dt9FeDipvXsTI4.roa (raw, json) Hash identifier: L1hTXjIeiBq49R+yEd8hGGlhPoMT9W7OC+105eNhVuA= Subject key identifier: 24:9C:E2:40:6B:79:35:9B:70:D4:3B:7D:15:E0:E2:A6:F5:EC:4C:8E Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37AA6ED9BCE5B79942F04BAB46789F Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JJziQGt5NZtw1Dt9FeDipvXsTI4.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 212.32.48.0/24 maxlen: 24 212.32.49.0/24 maxlen: 24 212.32.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:aa:6e:d9:bc:e5:b7:99:42:f0:4b:ab:46:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=249ce2406b79359b70d43b7d15e0e2a6f5ec4c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:00:3c:9a:60:5e:57:f6:ca:b8:01:f3:6c: ae:c2:7d:53:6b:49:42:be:5d:5d:43:8f:97:2f:8b: d6:2e:f6:61:a1:b5:51:a1:97:fe:7a:5a:c5:92:5b: 05:15:19:4b:98:0d:54:67:72:ae:e5:56:8b:3a:b3: 6b:52:fb:67:50:4b:6e:ad:e0:0a:dc:dc:85:57:72: ba:8b:42:62:c0:76:f0:c4:3d:f7:03:c9:c1:30:60: 77:03:05:8c:5a:99:dc:3b:8e:ad:fa:8b:d2:61:c4: 74:9e:8e:39:a6:b0:33:58:29:b0:1b:da:91:15:97: c1:8c:6e:a5:cc:a4:91:f4:73:62:a2:a9:8a:48:f1: 44:5f:05:79:0b:8e:6a:ae:11:fa:ff:8d:54:db:6e: 83:4d:67:30:bd:37:54:ea:d9:e9:0f:7f:a8:4b:24: 6a:11:c9:7b:15:41:23:dc:7e:65:2d:9d:67:ad:47: d2:53:78:c6:fb:5d:48:5f:c2:c8:52:32:45:28:bd: cc:d1:df:77:bc:64:9d:10:52:9d:00:f5:f8:ec:e2: 68:ea:c3:49:d7:4f:bf:11:12:42:51:e1:e0:ed:e5: 2d:e4:9d:50:6b:7c:6d:be:ab:51:ee:62:6c:da:b5: d6:a5:7d:78:3a:a2:46:a3:0a:38:c7:ae:19:ee:90: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:E2:40:6B:79:35:9B:70:D4:3B:7D:15:E0:E2:A6:F5:EC:4C:8E X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JJziQGt5NZtw1Dt9FeDipvXsTI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.32.48.0-212.32.50.255 Signature Algorithm: sha256WithRSAEncryption 63:ee:f6:70:73:1f:73:bd:2d:fb:f6:8d:d9:a4:5b:59:ec:35: 3e:ed:a9:67:e1:9e:c8:2f:13:29:b6:73:41:4b:ce:68:24:ef: 3f:21:ea:b7:f4:0d:aa:34:0d:81:2d:7b:77:cd:af:66:80:23: 5d:59:14:36:49:8b:31:27:57:34:ac:11:8f:4b:d5:4c:ec:6b: 62:27:4d:1b:f5:43:0f:6b:f4:a0:57:db:18:05:c3:9e:e2:b7: 52:9f:0b:03:04:85:0a:2e:86:41:58:3a:37:b0:97:1e:f0:87: 1b:06:d3:f5:b6:fa:78:f2:92:2f:8d:85:53:2e:0a:aa:2f:ad: bb:55:37:de:03:8e:3c:fb:b7:c4:4e:d4:c3:44:0f:f8:42:bc: ce:5d:61:dd:c1:0a:23:f0:26:89:e9:e7:84:1e:32:d8:6b:87: c5:ac:74:fa:92:85:0d:d2:a4:8f:57:74:13:3d:af:ee:cc:12: 35:bb:d7:f1:bc:1f:41:d6:48:87:5b:da:6e:69:a3:38:44:9a: 61:5e:c9:c9:8c:40:d6:63:e8:5b:00:0b:b0:62:95:f2:20:63: c9:01:60:e2:5e:d4:7a:69:6d:da:35:1c:fa:4e:c6:21:2e:7c: 41:34:ac:59:7d:42:05:f7:b9:f9:ee:8b:c0:d5:80:c3:f4:ff: 8d:1a:fe:38 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N6pu2bzlt5lC8EurRnifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDljZTI0MDZiNzkzNTliNzBkNDNiN2QxNWUwZTJhNmY1ZWM0YzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXEAPJpgXlf2yrgB82yuwn1Ta0lC vl1dQ4+XL4vWLvZhobVRoZf+elrFklsFFRlLmA1UZ3Ku5VaLOrNrUvtnUEtureAK 3NyFV3K6i0JiwHbwxD33A8nBMGB3AwWMWpncO46t+ovSYcR0no45prAzWCmwG9qR FZfBjG6lzKSR9HNioqmKSPFEXwV5C45qrhH6/41U226DTWcwvTdU6tnpD3+oSyRq Ecl7FUEj3H5lLZ1nrUfSU3jG+11IX8LIUjJFKL3M0d93vGSdEFKdAPX47OJo6sNJ 10+/ERJCUeHg7eUt5J1Qa3xtvqtR7mJs2rXWpX14OqJGowo4x64Z7pCLfwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCSc4kBreTWbcNQ7fRXg4qb17EyOMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvSkp6aVFHdDVOWnR3MUR0OUZlRGlwdlhzVEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATUIDAD BADUIDIwDQYJKoZIhvcNAQELBQADggEBAGPu9nBzH3O9Lfv2jdmkW1nsNT7tqWfh nsgvEym2c0FLzmgk7z8h6rf0Dao0DYEte3fNr2aAI11ZFDZJizEnVzSsEY9L1Uzs a2InTRv1Qw9r9KBX2xgFw57it1KfCwMEhQouhkFYOjewlx7whxsG0/W2+njyki+N hVMuCqovrbtVN94Djjz7t8RO1MNED/hCvM5dYd3BCiPwJonp54QeMthrh8WsdPqS hQ3SpI9XdBM9r+7MEjW71/G8H0HWSIdb2m5pozhEmmFeycmMQNZj6FsAC7BilfIg Y8kBYOJe1Hppbdo1HPpOxiEufEE0rFl9QgX3ufnui8DVgMP0/40a/jg= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:11 2026 by rpki-client