This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/JoxiTEz__YOaOxCEi1AcTpW23BQ.roa File: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (raw, json) Hash identifier: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY= Subject key identifier: 26:8C:62:4C:4C:FF:FD:83:9A:3B:10:84:8B:50:1C:4E:95:B6:DC:14 Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Certificate serial: 019B7D5CCF949FFE2451DF079C5471788B0B Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/JoxiTEz__YOaOxCEi1AcTpW23BQ.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 132.230.0.0/16 maxlen: 16 192.52.0.0/19 maxlen: 19 192.52.32.0/20 maxlen: 20 192.52.48.0/23 maxlen: 23 192.52.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:94:9f:fe:24:51:df:07:9c:54:71:78:8b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268c624c4cfffd839a3b10848b501c4e95b6dc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:33:37:a5:3a:e7:d9:41:3d:93:08:ce:93: a4:4e:23:18:0f:ec:55:25:fc:96:c7:34:fa:4d:62: a7:8d:12:c7:57:79:39:07:28:df:af:4b:76:7b:d5: 6e:53:05:8b:da:dd:3b:53:3a:3f:0e:fd:16:ab:75: 94:9e:ed:27:2a:80:3c:ef:ad:f2:25:fe:18:fe:e3: c9:66:62:4b:09:6c:e5:a5:b1:d7:b0:dd:db:07:7c: b9:e6:6e:33:22:74:ce:5d:a1:73:37:11:1a:4d:3d: 3e:cb:1c:1c:c7:3f:96:98:e6:95:73:9a:ae:db:19: 1a:2c:10:95:d9:3b:e2:07:02:c1:b4:ea:d0:85:76: 80:e7:62:eb:0b:51:ac:77:31:15:c7:27:0a:f6:8c: 1c:38:b2:9d:84:63:d1:15:a4:1c:b3:32:67:cd:89: d2:c4:00:44:a9:f7:ee:cb:36:1d:29:10:ac:28:6d: d5:a6:a2:0a:35:3e:c1:75:4b:3c:e3:b3:ed:63:5b: 1e:01:f5:26:bb:5e:1e:41:af:ec:67:8b:fb:94:12: 76:f1:96:3b:1f:96:f4:bb:fa:50:a9:e4:4e:0d:0e: 58:ee:05:3c:90:62:eb:66:87:69:2c:45:2c:3c:ee: f2:3e:47:a2:19:8a:cf:e2:85:50:01:e8:39:75:43: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8C:62:4C:4C:FF:FD:83:9A:3B:10:84:8B:50:1C:4E:95:B6:DC:14 X509v3 Authority Key Identifier: keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/JoxiTEz__YOaOxCEi1AcTpW23BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.230.0.0/16 192.52.0.0-192.52.50.255 Signature Algorithm: sha256WithRSAEncryption 95:bc:1c:79:39:4b:5b:29:40:2d:c6:47:e7:c5:16:1f:be:41: cc:cd:6d:9a:f7:ef:bd:ef:cf:fa:e1:d2:cb:00:03:cc:cf:e0: 0c:1d:7f:a1:c2:2c:77:e4:f8:38:2a:d8:b5:7d:a4:0f:d4:1c: 54:e7:50:68:4a:10:b9:e8:50:79:fa:9f:ea:1c:f6:bf:01:38: e4:f1:79:a4:ea:80:6d:ec:e2:d4:3a:7c:0f:b5:1d:16:60:92: 80:95:7d:de:b0:b7:d8:c3:c6:05:b5:79:c8:fb:ca:08:f9:2e: 5e:79:96:73:0c:f6:11:10:32:90:ec:65:94:13:17:6a:83:0d: ed:15:28:0b:37:2b:48:7d:dd:20:2a:8b:26:88:0f:87:2b:16: fa:71:00:7c:a5:bb:73:19:9a:9d:0d:6d:77:03:1e:b0:54:39: ca:df:7e:58:f4:59:cc:cb:55:e4:92:5e:e8:03:91:29:f2:76: 69:81:d3:48:e1:f7:02:5a:f6:1a:5c:4a:ad:8f:3e:97:10:c7: 98:9e:17:fb:c2:5e:19:b1:ed:94:02:f2:40:d4:64:0c:d6:2c: 40:54:2f:39:7d:07:d0:4b:5d:60:91:90:54:98:7b:1f:60:b3: 5e:b8:78:b9:15:f9:a7:95:b5:c0:90:75:a0:92:48:bb:83:19: a7:1d:36:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XM+Un/4kUd8HnFRxeIsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi MTg2OGYwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjhjNjI0YzRjZmZmZDgzOWEzYjEwODQ4YjUwMWM0ZTk1YjZkYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4zN6U659lBPZMIzpOkTiMYD+xV JfyWxzT6TWKnjRLHV3k5Byjfr0t2e9VuUwWL2t07Uzo/Dv0Wq3WUnu0nKoA8763y Jf4Y/uPJZmJLCWzlpbHXsN3bB3y55m4zInTOXaFzNxEaTT0+yxwcxz+WmOaVc5qu 2xkaLBCV2TviBwLBtOrQhXaA52LrC1GsdzEVxycK9owcOLKdhGPRFaQcszJnzYnS xABEqffuyzYdKRCsKG3VpqIKNT7BdUs847PtY1seAfUmu14eQa/sZ4v7lBJ28ZY7 H5b0u/pQqeRODQ5Y7gU8kGLrZodpLEUsPO7yPkeiGYrP4oVQAeg5dUOpIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCaMYkxM//2DmjsQhItQHE6VttwUMB8GA1UdIwQY MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt OTFhMzJlZmY2Y2NkLzEvSm94aVRFel9fWU9hT3hDRWkxQWNUcFcyM0JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMAhOYwCwMD AsA0AwQAwDQyMA0GCSqGSIb3DQEBCwUAA4IBAQCVvBx5OUtbKUAtxkfnxRYfvkHM zW2a9++978/64dLLAAPMz+AMHX+hwix35Pg4Kti1faQP1BxU51BoShC56FB5+p/q HPa/ATjk8Xmk6oBt7OLUOnwPtR0WYJKAlX3esLfYw8YFtXnI+8oI+S5eeZZzDPYR EDKQ7GWUExdqgw3tFSgLNytIfd0gKosmiA+HKxb6cQB8pbtzGZqdDW13Ax6wVDnK 335Y9FnMy1Xkkl7oA5Ep8nZpgdNI4fcCWvYaXEqtjz6XEMeYnhf7wl4Zse2UAvJA 1GQM1ixAVC85fQfQS11gkZBUmHsfYLNeuHi5FfmnlbXAkHWgkki7gxmnHTZm -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:24 2026 by rpki-client