This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/JVABJxvLxkj1mSPSAUuE7d0cXpc.roa File: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (raw, json) Hash identifier: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU= Subject key identifier: 25:50:01:27:1B:CB:C6:48:F5:99:23:D2:01:4B:84:ED:DD:1C:5E:97 Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449 Certificate serial: 019B7DCB4ECECF5FCBC74CFFA7E0290EEA18 Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/JVABJxvLxkj1mSPSAUuE7d0cXpc.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57187 IP address blocks: 94.207.32.0/20 maxlen: 24 2a00:f2f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:ce:cf:5f:cb:c7:4c:ff:a7:e0:29:0e:ea:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=255001271bcbc648f59923d2014b84eddd1c5e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:d7:52:ca:3d:76:20:43:98:4a:8e:83:04: bf:2f:f6:18:32:ca:3b:3c:a6:57:6b:7b:4d:87:a7: fc:36:91:69:a2:b8:d1:4c:43:87:e0:5a:01:16:80: 2f:7f:2f:5d:db:d8:e1:ac:d1:80:4d:8b:f4:cc:90: db:6b:0b:45:fe:92:ac:fa:df:e7:50:1c:f4:1b:48: e6:c2:9f:15:99:c0:0c:8e:4b:52:ab:30:e3:b5:0e: 7f:fe:55:cb:78:8c:65:f0:37:4d:43:60:dc:07:14: 99:92:29:f5:95:05:fb:7f:b4:4f:2f:fc:19:70:d3: f4:5b:7f:47:9c:1b:c8:1c:92:80:a6:33:c6:dd:d8: c1:10:99:18:a9:e7:9a:a0:59:70:9b:96:18:3e:4f: 1d:ed:3e:f8:05:70:2a:f9:43:25:69:e2:65:da:f4: 8b:9b:1d:82:bc:40:28:c6:a0:a0:45:3a:0e:65:b9: 81:0f:bf:4f:0e:bd:de:b6:c8:f5:22:95:d7:fc:4b: 58:cd:c4:f2:c8:50:90:ca:7d:15:a1:6b:df:9f:6c: 76:35:89:37:b7:80:63:ab:3c:a7:a8:f3:fc:0f:44: f0:b1:21:ab:c5:84:de:44:96:b3:98:a6:2a:b7:76: a8:3b:81:5d:6e:eb:8a:76:8d:2e:50:ba:7d:e6:4e: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:01:27:1B:CB:C6:48:F5:99:23:D2:01:4B:84:ED:DD:1C:5E:97 X509v3 Authority Key Identifier: keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/JVABJxvLxkj1mSPSAUuE7d0cXpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.207.32.0/20 IPv6: 2a00:f2f::/32 Signature Algorithm: sha256WithRSAEncryption 45:af:84:5c:1b:bd:1a:6e:23:f3:34:4c:e8:ff:4d:34:ce:79: ae:85:f8:69:12:79:5f:71:d3:c6:44:6d:c0:d0:2e:d1:e0:28: b9:82:05:55:0c:cf:c1:1c:f7:e9:30:66:22:d3:21:d8:4a:be: 55:a5:ba:f2:13:86:c7:21:14:5b:61:e4:2c:cc:8c:42:c3:40: 1c:c7:26:e0:2f:5a:52:0d:9d:e5:12:08:bf:e1:24:93:6c:b2: 05:4f:50:ea:35:4b:e7:b8:8c:5c:9a:54:3a:3c:94:28:4f:95: 6f:4d:f5:9f:9c:bf:4d:de:e3:b5:7a:2f:8c:13:8e:99:5d:83: 4e:e9:4d:fe:70:31:d1:1c:d8:58:eb:f2:dd:4d:8e:35:91:3b: 98:34:ab:ab:03:63:c2:1f:e7:1b:b9:14:89:2b:36:07:62:44: 90:65:39:e1:89:09:08:7c:8a:82:28:1c:14:2b:2f:e3:ff:24: 35:5b:56:cc:24:a3:fe:b0:31:d3:d4:f6:3d:2f:08:d3:64:fc: 14:a3:f8:4b:54:d2:29:6f:4d:00:f4:71:39:bd:54:10:06:71: 54:65:09:59:6a:d8:e7:52:06:f3:9b:b4:93:0a:7f:97:c9:f3: 99:fd:f8:98:ac:99:98:e5:ad:f3:5c:85:58:80:df:aa:8b:ef: 10:ca:27:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y07Oz1/Lx0z/p+ApDuoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy NWM0NDkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTUwMDEyNzFiY2JjNjQ4ZjU5OTIzZDIwMTRiODRlZGRkMWM1ZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rfXUso9diBDmEqOgwS/L/YYMso7 PKZXa3tNh6f8NpFporjRTEOH4FoBFoAvfy9d29jhrNGATYv0zJDbawtF/pKs+t/n UBz0G0jmwp8VmcAMjktSqzDjtQ5//lXLeIxl8DdNQ2DcBxSZkin1lQX7f7RPL/wZ cNP0W39HnBvIHJKApjPG3djBEJkYqeeaoFlwm5YYPk8d7T74BXAq+UMlaeJl2vSL mx2CvEAoxqCgRToOZbmBD79PDr3etsj1IpXX/EtYzcTyyFCQyn0VoWvfn2x2NYk3 t4BjqzynqPP8D0TwsSGrxYTeRJazmKYqt3aoO4FdbuuKdo0uULp95k6xcwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCVQAScby8ZI9Zkj0gFLhO3dHF6XMB8GA1UdIwQY MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt Njk4OTBjODI5ZTMzLzEvSlZBQkp4dkx4a2oxbVNQU0FVdUU3ZDBjWHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEXs8gMA0E AgACMAcDBQAqAA8vMA0GCSqGSIb3DQEBCwUAA4IBAQBFr4RcG70abiPzNEzo/000 znmuhfhpEnlfcdPGRG3A0C7R4Ci5ggVVDM/BHPfpMGYi0yHYSr5VpbryE4bHIRRb YeQszIxCw0AcxybgL1pSDZ3lEgi/4SSTbLIFT1DqNUvnuIxcmlQ6PJQoT5VvTfWf nL9N3uO1ei+ME46ZXYNO6U3+cDHRHNhY6/LdTY41kTuYNKurA2PCH+cbuRSJKzYH YkSQZTnhiQkIfIqCKBwUKy/j/yQ1W1bMJKP+sDHT1PY9LwjTZPwUo/hLVNIpb00A 9HE5vVQQBnFUZQlZatjnUgbzm7STCn+XyfOZ/fiYrJmY5a3zXIVYgN+qi+8Qyifw -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:25 2026 by rpki-client