This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa File: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (raw, json) Hash identifier: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A= Subject key identifier: 24:D9:2B:E6:C2:7B:8A:9E:BD:29:B0:DD:BC:3E:24:3E:B3:11:08:51 Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574 Certificate serial: 019B78A36274B4526A5264882F1564FE2FE2 Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208981 IP address blocks: 45.12.124.0/24 maxlen: 24 45.12.126.0/24 maxlen: 24 45.12.127.0/24 maxlen: 24 91.213.144.0/24 maxlen: 24 91.232.93.0/24 maxlen: 24 91.243.190.0/24 maxlen: 24 91.243.191.0/24 maxlen: 24 2a0e:a900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:62:74:b4:52:6a:52:64:88:2f:15:64:fe:2f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d92be6c27b8a9ebd29b0ddbc3e243eb3110851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:f4:31:79:a5:b2:2b:98:66:5e:42:d7:a0: a3:3b:a6:9f:d5:17:ce:62:9e:fe:c5:34:c4:cc:12: 01:64:6a:4d:b4:9e:9a:57:f3:3b:5f:db:6e:4e:96: b7:ca:fc:2e:2e:88:f0:ae:91:05:c9:a3:ca:f7:f5: ee:ca:df:e3:f5:05:3a:22:24:ef:c1:b2:02:7c:01: bd:d0:f0:4d:ce:c7:8f:1f:7c:12:7c:57:9d:dc:ac: e4:fd:70:cb:f1:78:64:15:10:6a:16:21:70:f8:d2: 9a:5b:e9:3d:c8:2d:e4:37:a1:9e:ac:6e:8c:0c:4a: 87:c2:9e:75:8f:05:9b:4a:32:23:e7:8d:7a:fa:b6: c4:05:d6:f1:33:34:b0:9e:4b:da:c6:09:7c:88:77: 30:cd:fd:57:56:78:35:e8:81:c7:41:48:22:bf:3d: c0:11:9f:74:ff:b7:54:c5:81:eb:2e:32:b1:0e:b3: 9d:d0:9d:28:c9:cf:2b:76:f0:bb:07:b8:e9:77:de: e9:2f:23:c1:c7:30:b6:14:e0:02:0b:04:5b:54:5d: c1:67:ec:ae:ba:47:42:8e:f9:70:12:8d:69:6e:f1: a2:08:12:ab:f3:6f:b7:af:34:9b:5b:43:14:44:78: 4f:0c:58:52:10:c1:2c:c9:35:4d:1e:21:f1:4d:f8: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:2B:E6:C2:7B:8A:9E:BD:29:B0:DD:BC:3E:24:3E:B3:11:08:51 X509v3 Authority Key Identifier: keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.124.0/24 45.12.126.0/23 91.213.144.0/24 91.232.93.0/24 91.243.190.0/23 IPv6: 2a0e:a900::/29 Signature Algorithm: sha256WithRSAEncryption a7:46:04:c0:d4:37:e4:a0:a6:d9:16:f8:6a:98:34:9f:01:09: 22:48:fc:0a:5a:5f:90:a3:d4:19:d7:80:b6:d0:e8:a6:dc:11: a6:30:45:d7:44:5c:12:eb:48:6c:0e:1d:cc:40:19:85:22:af: f0:67:1e:5e:6b:bc:80:65:f4:5a:b1:6c:5b:37:05:c2:8c:5c: ca:0c:dc:35:d4:f0:de:5e:1a:4e:de:cc:c8:ee:83:64:fc:86: c7:f0:46:b1:d4:8f:28:fd:59:69:d3:f0:27:88:9a:b1:4b:7f: 09:01:18:0a:ee:92:3b:81:b3:01:d3:fc:e0:25:9b:38:c6:c0: 09:72:af:14:2b:fd:f3:ca:2d:1d:9b:74:2b:4f:e7:c9:08:57: 10:64:06:77:36:1e:0d:ec:b4:a7:87:6d:bb:af:46:cb:0d:28: 49:a9:60:32:76:28:d0:ce:0d:94:c5:f1:6b:b6:6b:22:8d:18: 67:e1:9d:e8:4a:d6:e0:e2:a9:70:e4:b2:e2:6c:25:eb:92:e9: ec:69:18:58:98:ba:be:6a:4b:96:29:0a:d6:38:8b:d6:f7:b9: c8:0c:f2:39:af:1e:90:76:15:3b:4e:34:cd:03:91:71:88:89: c9:7e:57:02:d7:30:56:3c:c9:a9:d9:73:99:88:00:ff:9a:23: 4f:a8:96:0a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4o2J0tFJqUmSILxVk/i/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjgwNTJhZTdkMTBmZDIyNjFhMjI0OGZjMDBkMjAyYjBm MjU1NzQwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQ5MmJlNmMyN2I4YTllYmQyOWIwZGRiYzNlMjQzZWIzMTEwODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNf0MXmlsiuYZl5C16CjO6af1RfO Yp7+xTTEzBIBZGpNtJ6aV/M7X9tuTpa3yvwuLojwrpEFyaPK9/Xuyt/j9QU6IiTv wbICfAG90PBNzsePH3wSfFed3Kzk/XDL8XhkFRBqFiFw+NKaW+k9yC3kN6GerG6M DEqHwp51jwWbSjIj5416+rbEBdbxMzSwnkvaxgl8iHcwzf1XVng16IHHQUgivz3A EZ90/7dUxYHrLjKxDrOd0J0oyc8rdvC7B7jpd97pLyPBxzC2FOACCwRbVF3BZ+yu ukdCjvlwEo1pbvGiCBKr82+3rzSbW0MURHhPDFhSEMEsyTVNHiHxTfhQMwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCTZK+bCe4qevSmw3bw+JD6zEQhRMB8GA1UdIwQY MBaAFHcoBSrn0Q/SJhoiSPwA0gKw8lV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUt MmNiYzQwZTVmZTYyLzEvSk5rcjVzSjdpcDY5S2JEZHZENGtQck1SQ0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUtMmNiYzQwZTVmZTYy LzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALQx8AwQB LQx+AwQAW9WQAwQAW+hdAwQBW/O+MA0EAgACMAcDBQMqDqkAMA0GCSqGSIb3DQEB CwUAA4IBAQCnRgTA1DfkoKbZFvhqmDSfAQkiSPwKWl+Qo9QZ14C20Oim3BGmMEXX RFwS60hsDh3MQBmFIq/wZx5ea7yAZfRasWxbNwXCjFzKDNw11PDeXhpO3szI7oNk /IbH8Eax1I8o/Vlp0/AniJqxS38JARgK7pI7gbMB0/zgJZs4xsAJcq8UK/3zyi0d m3QrT+fJCFcQZAZ3Nh4N7LSnh227r0bLDShJqWAydijQzg2UxfFrtmsijRhn4Z3o Stbg4qlw5LLibCXrkunsaRhYmLq+akuWKQrWOIvW97nIDPI5rx6QdhU7TjTNA5Fx iInJflcC1zBWPMmp2XOZiAD/miNPqJYK -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client