This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPLjGRamYxcQKrEVq_jygP1X57g.roa File: JPLjGRamYxcQKrEVq_jygP1X57g.roa (raw, json) Hash identifier: jccSBF0vSgB5ePcdKlDr9Cyvs4tfFT8qaxlE89cZ/5k= Subject key identifier: 24:F2:E3:19:16:A6:63:17:10:2A:B1:15:AB:F8:F2:80:FD:57:E7:B8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B6F451E791F5DEE2FF81422C8E2A0111F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPLjGRamYxcQKrEVq_jygP1X57g.roa Signing time: Tue 30 Dec 2025 12:39:19 +0000 ROA not before: Tue 30 Dec 2025 12:39:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401322 IP address blocks: 151.240.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:45:1e:79:1f:5d:ee:2f:f8:14:22:c8:e2:a0:11:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 30 12:39:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24f2e31916a66317102ab115abf8f280fd57e7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:dd:4f:ac:fa:a4:44:b6:ff:b0:70:c5:26: bc:0f:1e:41:a5:4f:bc:80:ed:59:53:44:ce:4d:5f: 3b:95:14:2f:d8:93:1a:b3:98:23:74:70:e5:c5:0b: b7:62:2a:9b:0e:46:bf:13:ce:9b:6a:08:23:c8:09: a9:19:73:43:be:e9:9f:b2:04:ea:e7:f7:ff:54:13: 31:a7:b8:75:eb:8d:75:1d:04:4e:92:81:e7:d0:a3: cc:12:0f:c9:e6:52:f4:87:4a:6a:02:96:29:38:2e: 91:e9:63:02:b2:7b:c8:eb:ed:cf:46:c0:bb:7e:a3: 37:c1:3a:c1:28:e7:08:2b:b5:ed:47:9a:d2:0d:88: 65:97:76:c1:7d:6f:ab:5c:3d:4c:5c:ae:00:7e:15: 27:43:25:77:22:99:05:dc:15:a5:76:e3:f5:47:8b: 5e:31:aa:77:fc:57:cb:05:29:88:18:15:5c:24:1c: 3b:42:f2:85:16:e5:19:f1:91:2f:e1:48:4b:c9:60: de:cd:a4:bb:f5:42:06:7b:80:37:79:c0:68:50:9c: ae:e9:f0:7f:ce:bb:c5:e0:b3:3c:9e:5c:07:e9:e1: 39:cb:f7:9f:99:b4:bc:a0:90:2b:d2:0c:cc:1d:d7: c2:5b:0e:f2:c4:b7:27:68:3e:5c:d9:df:63:95:ce: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:E3:19:16:A6:63:17:10:2A:B1:15:AB:F8:F2:80:FD:57:E7:B8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPLjGRamYxcQKrEVq_jygP1X57g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.14.0/24 Signature Algorithm: sha256WithRSAEncryption 88:b6:e7:cd:63:c3:f9:52:d1:65:cf:a2:ca:d2:9a:19:36:b0: 11:d9:31:96:ae:6d:d6:dc:81:45:f3:59:02:e9:3c:64:86:8a: bd:95:b5:b7:66:e6:ef:64:ae:7c:48:09:f4:29:e6:c0:99:60: 50:a7:b0:0e:20:25:9f:3c:64:f5:29:49:5b:5a:43:10:bb:76: 7d:e7:e2:da:48:ad:b6:24:2c:1c:df:a4:54:ab:a0:c4:ba:66: 75:d9:53:0f:de:0f:80:13:ec:61:44:45:0e:a2:5a:c6:40:00: c3:9b:9e:03:dc:6c:1f:d2:6a:d5:3a:d9:90:e3:a7:e1:33:aa: 0a:e8:41:91:18:74:a3:62:a8:74:39:8c:46:56:38:5a:b6:d1: 58:21:22:4c:ba:14:1c:b7:81:8a:44:47:39:9f:a8:96:32:bb: 33:98:50:f5:2b:00:5d:ea:03:e4:7c:1f:54:95:f1:b9:b0:f5: 39:b5:7a:86:a2:cd:16:30:50:fc:84:59:0e:f1:ba:e4:9d:89: 11:ef:39:53:f3:97:86:ec:13:b3:81:04:b7:29:6d:8e:6f:d3: 87:45:1b:94:9a:df:40:0a:f5:ca:e4:8d:b6:55:87:3c:ca:e4: c0:f2:08:e1:a3:95:06:01:a6:8e:e2:a0:d1:b3:66:ee:6d:3c: 17:4e:38:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtvRR55H13uL/gUIsjioBEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjMwMTIzOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGYyZTMxOTE2YTY2MzE3MTAyYWIxMTVhYmY4ZjI4MGZkNTdlN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0TdT6z6pES2/7BwxSa8Dx5BpU+8 gO1ZU0TOTV87lRQv2JMas5gjdHDlxQu3YiqbDka/E86baggjyAmpGXNDvumfsgTq 5/f/VBMxp7h16411HQROkoHn0KPMEg/J5lL0h0pqApYpOC6R6WMCsnvI6+3PRsC7 fqM3wTrBKOcIK7XtR5rSDYhll3bBfW+rXD1MXK4AfhUnQyV3IpkF3BWlduP1R4te Map3/FfLBSmIGBVcJBw7QvKFFuUZ8ZEv4UhLyWDezaS79UIGe4A3ecBoUJyu6fB/ zrvF4LM8nlwH6eE5y/efmbS8oJAr0gzMHdfCWw7yxLcnaD5c2d9jlc4AZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTy4xkWpmMXECqxFav48oD9V+e4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSlBMakdSYW1ZeGNRS3JFVnFfanlnUDFYNTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/AOMA0G CSqGSIb3DQEBCwUAA4IBAQCItufNY8P5UtFlz6LK0poZNrAR2TGWrm3W3IFF81kC 6Txkhoq9lbW3ZubvZK58SAn0KebAmWBQp7AOICWfPGT1KUlbWkMQu3Z95+LaSK22 JCwc36RUq6DEumZ12VMP3g+AE+xhREUOolrGQADDm54D3Gwf0mrVOtmQ46fhM6oK 6EGRGHSjYqh0OYxGVjhattFYISJMuhQct4GKREc5n6iWMrszmFD1KwBd6gPkfB9U lfG5sPU5tXqGos0WMFD8hFkO8brknYkR7zlT85eG7BOzgQS3KW2Ob9OHRRuUmt9A CvXK5I22VYc8yuTA8gjho5UGAaaO4qDRs2bubTwXTjhP -----END CERTIFICATE-----Generated at Wed Dec 31 07:55:52 2025 by rpki-client