This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/JC85WxCaKuEyR6NXwu3_DF8LXLA.roa File: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (raw, json) Hash identifier: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E= Subject key identifier: 24:2F:39:5B:10:9A:2A:E1:32:47:A3:57:C2:ED:FF:0C:5F:0B:5C:B0 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B369E7CB2330BDA5DE4B90389CC5B50 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/JC85WxCaKuEyR6NXwu3_DF8LXLA.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142299 IP address blocks: 85.203.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9e:7c:b2:33:0b:da:5d:e4:b9:03:89:cc:5b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=242f395b109a2ae13247a357c2edff0c5f0b5cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:3a:d3:ed:78:69:f1:18:4e:8a:15:30:7a: 82:2b:21:57:1e:8a:e4:40:f2:04:68:25:d3:2f:84: c9:9e:4e:65:70:23:5d:51:ab:f8:ce:e7:a5:33:fb: be:39:84:12:93:ab:79:6e:7e:83:13:90:b6:ee:bc: 0f:77:a4:ab:b2:ec:94:9e:20:9b:1a:65:d3:93:8b: dd:37:44:b7:ee:0e:b4:5f:3f:9a:b9:ad:9d:f7:30: 72:0f:10:cb:14:97:72:23:83:17:b8:37:07:d2:80: 3e:99:78:12:4e:e9:f2:fd:f4:c6:6b:57:d7:2a:c1: ee:85:a2:40:fe:f5:68:d1:3b:de:e9:3f:70:59:c6: 01:e1:0f:74:de:23:13:62:d9:60:c2:11:a1:59:67: a2:11:33:36:52:c1:62:94:9b:56:34:e4:11:6b:52: 53:c1:27:3a:ef:11:02:60:fc:9b:8a:2e:9c:dd:0f: c3:b0:0d:72:29:98:07:95:bc:a4:d5:91:57:bc:69: 2c:00:8c:11:93:31:19:dd:21:db:df:32:c5:55:50: e4:cd:f2:97:e6:b0:4b:5a:39:3e:8a:00:78:4c:ac: 16:ef:62:32:90:5d:91:e9:49:2f:2c:40:19:0e:42: ca:fd:2d:57:b6:87:39:f9:44:12:82:6e:1e:e5:ee: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:39:5B:10:9A:2A:E1:32:47:A3:57:C2:ED:FF:0C:5F:0B:5C:B0 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/JC85WxCaKuEyR6NXwu3_DF8LXLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.4.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a6:01:86:52:46:5f:c6:b5:6b:58:1b:41:d4:44:9f:ed:92: 53:6f:02:fa:af:90:ea:fa:b8:d7:54:7d:2d:5b:3e:ce:0f:49: c9:43:d4:88:61:f9:42:15:67:2e:17:6d:cb:9a:3e:be:3f:e6: 22:e0:c3:69:f0:60:10:00:5b:48:24:00:64:e1:6c:cc:06:85: 48:6a:17:77:3c:9a:48:e2:e9:e2:41:d3:fb:91:4b:d8:00:19: 44:d3:c3:33:ca:25:48:91:9f:b5:b5:5d:2e:29:64:0b:e7:62: e9:88:39:e9:17:b0:10:00:a3:89:bb:84:9f:df:ec:ed:95:78: 5c:35:d9:7d:a0:7a:36:86:50:98:3a:37:f4:38:42:35:0b:d4: df:dc:0c:71:b9:d6:f9:f9:15:7e:06:9e:c6:62:ec:e8:73:dc: 88:3b:cb:23:92:90:43:d2:fd:f6:74:9d:a2:ae:98:bc:5b:ae: 99:4e:62:66:20:a2:a2:4e:49:d0:19:fc:db:d7:68:d3:fa:2a: 81:c4:ad:14:a7:39:f4:46:f1:d5:20:be:6a:f0:3a:96:e3:fe: 23:d3:c9:de:2f:99:20:83:c9:5b:a6:21:b7:f0:1c:ce:35:6d: b3:57:bc:ab:31:64:09:31:e6:ad:b9:7d:9f:d9:9f:e5:ee:3f: 6d:de:dc:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Np58sjML2l3kuQOJzFtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDJmMzk1YjEwOWEyYWUxMzI0N2EzNTdjMmVkZmYwYzVmMGI1Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb060+14afEYTooVMHqCKyFXHork QPIEaCXTL4TJnk5lcCNdUav4zuelM/u+OYQSk6t5bn6DE5C27rwPd6SrsuyUniCb GmXTk4vdN0S37g60Xz+aua2d9zByDxDLFJdyI4MXuDcH0oA+mXgSTuny/fTGa1fX KsHuhaJA/vVo0Tve6T9wWcYB4Q903iMTYtlgwhGhWWeiETM2UsFilJtWNOQRa1JT wSc67xECYPybii6c3Q/DsA1yKZgHlbyk1ZFXvGksAIwRkzEZ3SHb3zLFVVDkzfKX 5rBLWjk+igB4TKwW72IykF2R6UkvLEAZDkLK/S1Xtoc5+UQSgm4e5e5HIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQvOVsQmirhMkejV8Lt/wxfC1ywMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvSkM4NVd4Q2FLdUV5UjZOWHd1M19ERjhMWExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsEMA0G CSqGSIb3DQEBCwUAA4IBAQBEpgGGUkZfxrVrWBtB1ESf7ZJTbwL6r5Dq+rjXVH0t Wz7OD0nJQ9SIYflCFWcuF23Lmj6+P+Yi4MNp8GAQAFtIJABk4WzMBoVIahd3PJpI 4uniQdP7kUvYABlE08MzyiVIkZ+1tV0uKWQL52LpiDnpF7AQAKOJu4Sf3+ztlXhc Ndl9oHo2hlCYOjf0OEI1C9Tf3Axxudb5+RV+Bp7GYuzoc9yIO8sjkpBD0v32dJ2i rpi8W66ZTmJmIKKiTknQGfzb12jT+iqBxK0Upzn0RvHVIL5q8DqW4/4j08neL5kg g8lbpiG38BzONW2zV7yrMWQJMeatuX2f2Z/l7j9t3tz2 -----END CERTIFICATE-----Generated at Wed Jan 21 02:47:48 2026 by rpki-client