This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/JMtxM_e2f4IyQOe7ag83ATmrnwo.roa File: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (raw, json) Hash identifier: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w= Subject key identifier: 24:CB:71:33:F7:B6:7F:82:32:40:E7:BB:6A:0F:37:01:39:AB:9F:0A Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee Certificate serial: 019B79ECB20F42FFCBAAD0D68A19798AE9F2 Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/JMtxM_e2f4IyQOe7ag83ATmrnwo.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34661 IP address blocks: 91.200.248.0/22 maxlen: 24 94.45.32.0/21 maxlen: 24 94.45.32.0/22 maxlen: 24 94.45.36.0/22 maxlen: 24 94.45.60.0/22 maxlen: 24 193.43.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b2:0f:42:ff:cb:aa:d0:d6:8a:19:79:8a:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24cb7133f7b67f823240e7bb6a0f370139ab9f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:4d:dc:4a:52:36:40:3e:77:58:d6:8a:45: bf:46:98:0f:35:fe:71:2b:79:df:de:08:3e:db:ec: 7b:65:b4:3e:e7:e7:b8:45:44:2d:b3:00:98:e9:90: 75:88:18:35:79:c0:ed:0a:f2:a2:cc:df:a8:38:fd: 92:3f:5b:a1:b2:c5:5a:9d:31:f8:b0:45:83:c0:4a: f7:cc:15:b6:78:9f:e6:a5:51:78:05:aa:68:35:92: 30:0a:85:6c:08:e4:17:29:68:71:ce:3e:13:fe:45: a6:a2:28:3c:54:9c:df:89:58:ce:b0:6c:5b:86:f3: 1e:b6:f7:2a:6b:81:a5:85:e9:89:e0:ef:72:88:c6: cb:83:5a:75:a5:8e:e8:4a:ac:8c:99:6e:7c:27:ab: c9:fd:04:60:d1:4d:f4:b1:de:5e:06:b1:60:f0:5e: 5d:37:2d:ac:10:cb:5d:c2:1a:3d:88:2a:4c:9b:87: bf:60:81:f6:ea:8f:30:13:a2:f3:d6:73:e7:20:da: 5d:c2:5f:c3:f6:81:f4:dc:b8:14:e5:8a:2e:c7:b1: 78:b2:a5:62:c6:41:e3:7f:20:40:e8:2a:dd:f4:45: a7:fa:85:b7:f5:10:23:ba:d4:5c:ac:32:4a:ac:1c: b5:c5:8c:67:02:ea:cc:3a:e5:42:fb:a8:5f:d5:55: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:71:33:F7:B6:7F:82:32:40:E7:BB:6A:0F:37:01:39:AB:9F:0A X509v3 Authority Key Identifier: keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/JMtxM_e2f4IyQOe7ag83ATmrnwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.248.0/22 94.45.32.0/21 94.45.60.0/22 193.43.224.0/22 Signature Algorithm: sha256WithRSAEncryption a0:79:46:e2:6e:ba:69:a8:c1:cf:d6:05:ad:e6:a1:22:aa:52: eb:f8:5c:a4:fd:4a:d4:39:27:e4:41:7d:05:69:01:e4:f3:25: e4:29:55:9e:7a:97:77:da:e4:62:e7:46:6e:32:ff:d7:f4:33: 51:23:81:eb:d2:2d:c6:4f:ba:87:80:14:62:33:a1:c5:7f:55: c9:e6:91:e3:0f:85:91:db:86:32:c6:b7:f5:bf:62:ef:2e:77: 88:27:e9:1a:33:ea:fa:1c:4e:ec:57:bf:c0:fe:59:59:82:14: 5c:97:fc:15:0e:65:d8:3b:48:f2:84:e5:3e:35:95:93:da:e0: d6:e0:45:d9:eb:9a:40:5a:1a:38:1f:e6:28:65:d5:ec:6d:55: 5f:72:44:a0:2b:b3:13:5a:68:8b:a2:8b:8d:e7:be:65:be:99: 08:03:07:df:00:d6:04:27:f6:0c:ed:ed:18:b7:f9:34:62:61: 4c:1e:2d:62:98:c0:0e:64:48:d8:54:4f:0b:6f:97:d1:66:a4: 61:eb:8e:63:c0:55:7d:01:29:75:24:27:0e:0c:8c:b5:53:f6: da:d7:fb:fa:92:07:0f:27:2a:8b:ce:7a:03:9b:dd:c9:23:7a: ef:72:ab:be:12:62:97:1f:0e:60:db:e0:65:2d:ac:0c:75:c5: 22:32:c3:da -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57LIPQv/LqtDWihl5iunyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5 MDZjZWUwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGNiNzEzM2Y3YjY3ZjgyMzI0MGU3YmI2YTBmMzcwMTM5YWI5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX5N3EpSNkA+d1jWikW/RpgPNf5x K3nf3gg+2+x7ZbQ+5+e4RUQtswCY6ZB1iBg1ecDtCvKizN+oOP2SP1uhssVanTH4 sEWDwEr3zBW2eJ/mpVF4BapoNZIwCoVsCOQXKWhxzj4T/kWmoig8VJzfiVjOsGxb hvMetvcqa4GlhemJ4O9yiMbLg1p1pY7oSqyMmW58J6vJ/QRg0U30sd5eBrFg8F5d Ny2sEMtdwho9iCpMm4e/YIH26o8wE6Lz1nPnINpdwl/D9oH03LgU5Youx7F4sqVi xkHjfyBA6Crd9EWn+oW39RAjutRcrDJKrBy1xYxnAurMOuVC+6hf1VWwqwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCTLcTP3tn+CMkDnu2oPNwE5q58KMB8GA1UdIwQY MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt MDkwYzQ2ZTlmMmVkLzEvSk10eE1fZTJmNEl5UU9lN2FnODNBVG1ybndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW8j4AwQD Xi0gAwQCXi08AwQCwSvgMA0GCSqGSIb3DQEBCwUAA4IBAQCgeUbibrppqMHP1gWt 5qEiqlLr+Fyk/UrUOSfkQX0FaQHk8yXkKVWeepd32uRi50ZuMv/X9DNRI4Hr0i3G T7qHgBRiM6HFf1XJ5pHjD4WR24Yyxrf1v2LvLneIJ+kaM+r6HE7sV7/A/llZghRc l/wVDmXYO0jyhOU+NZWT2uDW4EXZ65pAWho4H+YoZdXsbVVfckSgK7MTWmiLoouN 575lvpkIAwffANYEJ/YM7e0Yt/k0YmFMHi1imMAOZEjYVE8Lb5fRZqRh645jwFV9 ASl1JCcODIy1U/ba1/v6kgcPJyqLznoDm93JI3rvcqu+EmKXHw5g2+BlLawMdcUi MsPa -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:09 2026 by rpki-client