This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/N-JBFPGTamS_10yvOVLuuKG3Xa8.roa File: N-JBFPGTamS_10yvOVLuuKG3Xa8.roa (raw, json) Hash identifier: CpGaJlzf3xH/uU3F169rOn8ihzg+rXatnGwYLctu+F0= Subject key identifier: 37:E2:41:14:F1:93:6A:64:BF:D7:4C:AF:39:52:EE:B8:A1:B7:5D:AF Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B6E059498E01BB7DCE004DF043CCDCCA4 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/N-JBFPGTamS_10yvOVLuuKG3Xa8.roa Signing time: Tue 30 Dec 2025 06:50:18 +0000 ROA not before: Tue 30 Dec 2025 06:50:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203057 IP address blocks: 147.90.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:05:94:98:e0:1b:b7:dc:e0:04:df:04:3c:cd:cc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 30 06:50:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37e24114f1936a64bfd74caf3952eeb8a1b75daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:eb:d0:2f:f9:01:86:48:84:91:6a:aa:ec: 8c:95:e2:df:c1:e1:01:fd:bf:0b:a0:b6:4b:46:59: 89:b1:91:97:7b:7a:5f:1c:69:eb:51:2d:40:25:de: cb:4b:6e:3e:94:a9:f1:e4:ca:e5:a1:ac:2d:95:7c: c6:8a:5b:6d:1d:79:fb:37:f7:5d:25:c7:b6:56:4d: cf:08:d7:22:7d:64:dc:d2:8b:a8:d7:06:ea:15:60: 72:11:a5:d5:8b:a9:f6:f6:b4:51:b3:a8:d0:1a:ae: cd:a1:f9:a8:8c:7b:2d:1e:df:03:30:4e:96:44:20: 8c:35:15:bb:90:12:c4:d1:23:dd:2a:b0:82:92:77: 49:4a:2f:41:3c:95:1e:c3:e5:a9:0f:43:c3:0d:22: 0b:40:a7:f4:8d:f1:62:48:f2:0c:f0:33:f6:d9:51: 0c:4c:87:e9:5c:7b:2f:16:43:21:c5:70:69:9c:50: 3b:23:4c:57:a9:b8:b9:16:a6:78:87:eb:2d:3c:a7: 04:11:d4:35:13:94:ef:02:df:16:be:8d:89:1d:30: 64:66:ae:89:e3:a3:41:55:a5:71:63:1c:87:fa:7c: ef:3f:d8:47:6a:20:a1:44:c1:4c:81:e8:73:05:53: c3:c2:e6:9f:7a:05:86:c9:3f:e8:6a:0d:ab:e1:d5: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E2:41:14:F1:93:6A:64:BF:D7:4C:AF:39:52:EE:B8:A1:B7:5D:AF X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/N-JBFPGTamS_10yvOVLuuKG3Xa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.72.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:ac:0c:db:0e:b5:4b:af:85:e3:41:99:45:55:f5:d6:b9:c6: 78:04:67:41:3f:45:4a:9b:88:9c:67:f3:ce:2e:9d:a1:a2:a1: e4:0d:72:8e:a3:9e:14:47:1b:f8:2c:f4:8e:d5:dd:a9:44:17: 9e:e8:57:67:83:0c:98:e6:da:33:41:01:5d:97:55:b2:c2:cb: 86:09:7c:da:ed:f3:97:0d:a5:a1:5a:e6:f2:41:26:7f:d5:ed: 07:8f:aa:4a:c2:a0:4f:00:d1:21:45:cc:ed:fc:76:5c:d9:ab: 2c:c2:cb:8c:87:04:65:6a:a2:1a:e2:29:7b:e5:8b:d1:ee:1b: 75:5f:c6:21:32:e4:35:10:f3:d6:bf:3f:49:d8:e5:2a:06:c3: 1f:b5:5d:5f:f0:86:e0:7b:ec:36:aa:db:69:e3:c3:c8:2e:e8: 4b:09:58:7e:dd:b0:be:b2:2c:8b:88:57:7f:d2:01:79:58:8d: e4:60:dc:02:6f:ce:49:53:e8:c1:2c:03:66:f8:6d:b2:d1:81: dc:02:c6:45:6a:8e:55:a6:3e:6e:ef:a3:21:e9:59:01:59:2d: 89:cb:fb:61:86:68:6b:0b:c2:1c:a9:de:94:77:96:e3:7a:68: f0:3a:37:16:1a:a4:65:36:db:d7:73:52:bf:fb:33:6a:d8:7e: e7:3c:cc:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtuBZSY4Bu33OAE3wQ8zcykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjMwMDY1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2UyNDExNGYxOTM2YTY0YmZkNzRjYWYzOTUyZWViOGExYjc1ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSvr0C/5AYZIhJFqquyMleLfweEB /b8LoLZLRlmJsZGXe3pfHGnrUS1AJd7LS24+lKnx5MrloawtlXzGilttHXn7N/dd Jce2Vk3PCNcifWTc0ouo1wbqFWByEaXVi6n29rRRs6jQGq7NofmojHstHt8DME6W RCCMNRW7kBLE0SPdKrCCkndJSi9BPJUew+WpD0PDDSILQKf0jfFiSPIM8DP22VEM TIfpXHsvFkMhxXBpnFA7I0xXqbi5FqZ4h+stPKcEEdQ1E5TvAt8Wvo2JHTBkZq6J 46NBVaVxYxyH+nzvP9hHaiChRMFMgehzBVPDwuafegWGyT/oag2r4dXUmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfiQRTxk2pkv9dMrzlS7riht12vMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvTi1KQkZQR1RhbVNfMTB5dk9WTHV1S0czWGE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk1pIMA0G CSqGSIb3DQEBCwUAA4IBAQBarAzbDrVLr4XjQZlFVfXWucZ4BGdBP0VKm4icZ/PO Lp2hoqHkDXKOo54URxv4LPSO1d2pRBee6FdngwyY5tozQQFdl1WywsuGCXza7fOX DaWhWubyQSZ/1e0Hj6pKwqBPANEhRczt/HZc2asswsuMhwRlaqIa4il75YvR7ht1 X8YhMuQ1EPPWvz9J2OUqBsMftV1f8Ibge+w2qttp48PILuhLCVh+3bC+siyLiFd/ 0gF5WI3kYNwCb85JU+jBLANm+G2y0YHcAsZFao5Vpj5u76Mh6VkBWS2Jy/thhmhr C8Icqd6Ud5bjemjwOjcWGqRlNtvXc1K/+zNq2H7nPMyX -----END CERTIFICATE-----Generated at Wed Dec 31 09:40:10 2025 by rpki-client