This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JrX-zWKQC4ZtoTO33ghqyC4AR0Y.roa File: JrX-zWKQC4ZtoTO33ghqyC4AR0Y.roa (raw, json) Hash identifier: 2T+PiXpvsnHHVfuqcvcjZhw8f9KRUgMoZEGndA3Oitw= Subject key identifier: 26:B5:FE:CD:62:90:0B:86:6D:A1:33:B7:DE:08:6A:C8:2E:00:47:46 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0AE950DE9FDCDE42528DE318625E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JrX-zWKQC4ZtoTO33ghqyC4AR0Y.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215620 IP address blocks: 89.45.44.0/24 maxlen: 24 94.177.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0a:e9:50:de:9f:dc:de:42:52:8d:e3:18:62:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26b5fecd62900b866da133b7de086ac82e004746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:b0:23:86:b3:69:ed:1f:50:50:b8:1e:4d: 9f:98:d7:39:6e:f0:02:8a:65:bb:65:65:40:99:63: e9:2c:77:df:1f:dd:5c:79:7c:1d:57:cb:1d:f2:36: 29:2f:6a:25:7e:04:ca:74:7e:db:2b:e8:03:ce:53: be:cc:83:84:a1:77:c3:d4:99:a2:50:6b:39:69:8a: 36:3a:67:ee:71:36:46:30:35:28:d5:72:a5:63:01: b7:dc:ea:21:2f:cc:a9:0e:5d:59:5d:a5:23:cc:e1: c4:33:60:91:cb:22:d9:13:a1:c0:09:6a:99:62:ee: 5e:23:d8:24:1e:2f:60:66:6e:c1:aa:d8:41:5b:1e: da:5c:a0:ed:f4:ed:42:4a:8b:17:dc:f8:54:a2:fb: 81:77:29:da:f2:fe:0d:31:1e:5f:b1:47:5b:55:1a: eb:b4:95:72:8d:6c:1d:c7:a9:30:b5:15:ce:f9:d9: c7:d9:58:07:7a:58:bd:51:36:ec:3d:5f:00:8a:fd: 82:07:a2:e0:67:05:7c:f0:84:39:c5:8e:ad:85:d0: 5d:de:37:88:f9:a3:98:2d:9e:f2:51:0a:1a:85:08: 9d:f3:d3:47:20:01:87:31:c3:64:b4:51:6b:da:db: c8:83:31:79:e0:41:ff:4b:25:37:d5:29:cb:61:d9: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B5:FE:CD:62:90:0B:86:6D:A1:33:B7:DE:08:6A:C8:2E:00:47:46 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JrX-zWKQC4ZtoTO33ghqyC4AR0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.44.0/24 94.177.147.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b0:c4:4e:50:b4:9c:25:8b:49:e1:a0:19:fa:9e:ac:33:5a: 8d:2c:9b:03:ba:70:63:79:c8:c9:b1:8f:a8:92:b5:93:4b:42: b9:be:89:9d:4d:20:70:91:c3:0e:c6:85:c8:1c:24:1f:5b:92: dd:89:90:b2:50:3f:ec:4a:98:09:15:48:d8:2f:c0:df:1f:99: 55:a7:23:db:bc:ba:d9:a1:7b:27:fa:a2:01:56:a5:7f:b1:5a: d5:53:00:67:d4:12:c0:95:d5:c9:25:ef:e8:89:1d:d2:58:e8: 83:db:c9:64:6e:c6:2f:47:ab:66:4c:92:db:f8:02:38:73:30: 7b:37:3b:8b:a8:b0:97:bc:bc:d7:b5:8d:21:44:8e:00:fb:d1: 96:05:60:b3:66:73:a4:ca:0b:a5:6c:9a:d9:3b:a8:29:e6:35: 97:a7:e3:22:fd:7e:d3:b3:1c:8b:96:b6:de:70:d3:67:66:a8: 5d:69:30:c2:5b:da:c2:12:49:23:59:2c:a8:90:7d:84:05:bd: 2f:89:17:a1:fc:a9:be:00:c3:d5:c4:3b:c2:ce:dc:c7:5c:cf: 14:82:fb:88:44:ae:fc:7c:ce:4d:c6:af:dd:22:83:4f:c3:4d: 09:20:04:58:b3:35:4a:47:ac:77:dd:25:8c:4f:b5:73:63:69: 83:cf:9a:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fgrpUN6f3N5CUo3jGGJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmI1ZmVjZDYyOTAwYjg2NmRhMTMzYjdkZTA4NmFjODJlMDA0NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoiwI4azae0fUFC4Hk2fmNc5bvAC imW7ZWVAmWPpLHffH91ceXwdV8sd8jYpL2olfgTKdH7bK+gDzlO+zIOEoXfD1Jmi UGs5aYo2OmfucTZGMDUo1XKlYwG33OohL8ypDl1ZXaUjzOHEM2CRyyLZE6HACWqZ Yu5eI9gkHi9gZm7BqthBWx7aXKDt9O1CSosX3PhUovuBdyna8v4NMR5fsUdbVRrr tJVyjWwdx6kwtRXO+dnH2VgHeli9UTbsPV8Aiv2CB6LgZwV88IQ5xY6thdBd3jeI +aOYLZ7yUQoahQid89NHIAGHMcNktFFr2tvIgzF54EH/SyU31SnLYdkHqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCa1/s1ikAuGbaEzt94IasguAEdGMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvSnJYLXpXS1FDNFp0b1RPMzNnaHF5QzRBUjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS0sAwQA XrGTMA0GCSqGSIb3DQEBCwUAA4IBAQAZsMROULScJYtJ4aAZ+p6sM1qNLJsDunBj ecjJsY+okrWTS0K5vomdTSBwkcMOxoXIHCQfW5LdiZCyUD/sSpgJFUjYL8DfH5lV pyPbvLrZoXsn+qIBVqV/sVrVUwBn1BLAldXJJe/oiR3SWOiD28lkbsYvR6tmTJLb +AI4czB7NzuLqLCXvLzXtY0hRI4A+9GWBWCzZnOkygulbJrZO6gp5jWXp+Mi/X7T sxyLlrbecNNnZqhdaTDCW9rCEkkjWSyokH2EBb0viReh/Km+AMPVxDvCztzHXM8U gvuIRK78fM5Nxq/dIoNPw00JIARYszVKR6x33SWMT7VzY2mDz5rR -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client