This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/JKANABqd6E0fTlpYiraRYYJi5Is.roa File: JKANABqd6E0fTlpYiraRYYJi5Is.roa (raw, json) Hash identifier: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4= Subject key identifier: 24:A0:0D:00:1A:9D:E8:4D:1F:4E:5A:58:8A:B6:91:61:82:62:E4:8B Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841 Certificate serial: 019B7D5D2CD747D0F5A92D688438D9FEF5BE Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/JKANABqd6E0fTlpYiraRYYJi5Is.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202730 IP address blocks: 185.142.112.0/24 maxlen: 24 2a07:2d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2c:d7:47:d0:f5:a9:2d:68:84:38:d9:fe:f5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24a00d001a9de84d1f4e5a588ab691618262e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:84:92:51:ae:08:07:ed:2b:af:68:90:bf: 25:04:62:88:ed:d0:d4:29:e7:fc:d8:d6:59:79:5e: ec:dc:49:37:10:b3:d5:53:24:9b:73:f8:81:dd:64: ce:1d:4e:32:71:e5:03:71:24:6f:5f:e3:fa:cd:ca: 4e:c7:10:a4:7a:9c:82:ed:09:d2:0e:38:e6:36:61: 50:81:bc:dc:3c:3c:70:7e:72:9d:e6:16:0a:3e:c6: e4:92:6c:f9:39:05:74:04:60:b4:13:e4:7d:26:2e: c4:2b:97:7b:4d:69:0f:16:98:a9:10:d6:1d:86:cf: 28:4c:53:e0:c5:29:ce:5c:a2:35:61:40:80:6d:7a: a1:5b:3c:66:13:c1:6f:ea:c7:d0:ab:15:a4:8c:92: 96:de:46:89:1a:ec:23:36:03:5b:7b:dc:ac:97:10: 8c:98:55:8b:e7:a8:57:cd:65:75:2d:f0:dc:7c:91: a0:9e:8a:6c:71:bf:19:72:2b:20:49:9a:61:94:45: 27:75:d6:61:6e:79:74:d3:e2:7e:99:91:01:db:73: 73:4a:d2:dc:e7:1e:4b:35:c9:4d:23:91:4a:06:9e: fd:01:98:3b:a8:f3:a4:06:58:d8:cd:d1:ca:0d:e8: dc:ff:9f:c0:6b:c9:5e:ca:a2:d9:2f:d1:2e:89:37: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:0D:00:1A:9D:E8:4D:1F:4E:5A:58:8A:B6:91:61:82:62:E4:8B X509v3 Authority Key Identifier: keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/JKANABqd6E0fTlpYiraRYYJi5Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.112.0/24 IPv6: 2a07:2d00::/48 Signature Algorithm: sha256WithRSAEncryption 8b:2e:af:a5:45:91:9d:2f:68:c4:4d:96:8e:82:fe:d9:40:0b: 7a:67:e3:7e:1b:3c:75:1d:53:98:cc:10:35:c9:5d:29:37:c1: e0:b1:ab:07:52:49:56:36:d2:82:1b:91:49:40:e6:4c:38:e4: 84:7b:33:1c:bd:c0:59:d3:56:7a:af:5d:a1:0b:60:77:2c:6c: 1c:bd:10:d4:88:3c:1b:2d:99:68:91:fd:64:d3:5d:18:ed:79: c4:b6:f2:c5:e2:e4:c1:7a:c1:16:22:d4:1c:49:e8:74:b9:68: dc:83:8b:d6:a2:47:78:d5:d6:ca:72:f1:a6:7c:6e:3b:77:be: e4:d0:ed:62:e6:db:47:98:8a:cf:67:8c:17:2c:82:9f:49:95: 87:92:84:85:ee:d9:73:3e:0f:7e:ea:fa:04:e0:c0:65:e7:ff: a6:49:78:0c:d8:87:83:d6:8c:d5:e7:b7:e1:e8:e5:88:04:94: 9f:d8:b3:0d:56:22:d1:d8:25:2d:fb:b0:77:e8:13:b6:cc:28: b8:24:36:b4:ce:4a:28:99:40:dd:7d:41:20:23:81:36:0e:d0: 9e:89:d0:9f:69:7e:75:bf:60:cc:f8:28:ab:ed:41:fa:5e:69: 5c:9c:a6:0f:00:6e:d6:a0:54:94:ab:bd:c9:0e:66:28:9e:6d: cd:7b:f4:10 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XSzXR9D1qS1ohDjZ/vW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw ZTk4NDEwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGEwMGQwMDFhOWRlODRkMWY0ZTVhNTg4YWI2OTE2MTgyNjJlNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlaEklGuCAftK69okL8lBGKI7dDU Kef82NZZeV7s3Ek3ELPVUySbc/iB3WTOHU4yceUDcSRvX+P6zcpOxxCkepyC7QnS DjjmNmFQgbzcPDxwfnKd5hYKPsbkkmz5OQV0BGC0E+R9Ji7EK5d7TWkPFpipENYd hs8oTFPgxSnOXKI1YUCAbXqhWzxmE8Fv6sfQqxWkjJKW3kaJGuwjNgNbe9yslxCM mFWL56hXzWV1LfDcfJGgnopscb8ZcisgSZphlEUnddZhbnl00+J+mZEB23NzStLc 5x5LNclNI5FKBp79AZg7qPOkBljYzdHKDejc/5/Aa8leyqLZL9EuiTdlgQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCSgDQAanehNH05aWIq2kWGCYuSLMB8GA1UdIwQY MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct MTJkMGI2MzJlNWU4LzEvSktBTkFCcWQ2RTBmVGxwWWlyYVJZWUppNUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4 LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY5wMA8E AgACMAkDBwAqBy0AAAAwDQYJKoZIhvcNAQELBQADggEBAIsur6VFkZ0vaMRNlo6C /tlAC3pn434bPHUdU5jMEDXJXSk3weCxqwdSSVY20oIbkUlA5kw45IR7Mxy9wFnT VnqvXaELYHcsbBy9ENSIPBstmWiR/WTTXRjtecS28sXi5MF6wRYi1BxJ6HS5aNyD i9aiR3jV1spy8aZ8bjt3vuTQ7WLm20eYis9njBcsgp9JlYeShIXu2XM+D37q+gTg wGXn/6ZJeAzYh4PWjNXnt+Ho5YgElJ/Ysw1WItHYJS37sHfoE7bMKLgkNrTOSiiZ QN19QSAjgTYO0J6J0J9pfnW/YMz4KKvtQfpeaVycpg8AbtagVJSrvckOZiiebc17 9BA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:46 2026 by rpki-client