This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/JzPgFYHKYPTS04-dHtGN6w7B0bw.roa File: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (raw, json) Hash identifier: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0= Subject key identifier: 27:33:E0:15:81:CA:60:F4:D2:D3:8F:9D:1E:D1:8D:EB:0E:C1:D1:BC Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Certificate serial: 019BDC18F4EBA0608E6074368A4CA6F9DD36 Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/JzPgFYHKYPTS04-dHtGN6w7B0bw.roa Signing time: Tue 20 Jan 2026 15:49:41 +0000 ROA not before: Tue 20 Jan 2026 15:49:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21221 IP address blocks: 185.169.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:18:f4:eb:a0:60:8e:60:74:36:8a:4c:a6:f9:dd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Validity Not Before: Jan 20 15:49:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2733e01581ca60f4d2d38f9d1ed18deb0ec1d1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:35:a7:95:6b:c5:b2:cc:d1:f2:8a:1c:20: 7f:2c:7e:70:a8:4f:4d:03:41:c8:f1:3e:7f:db:da: 73:c7:ca:e3:49:4a:33:54:af:ae:d8:f8:80:b3:27: 27:cc:f3:ef:5b:3c:e2:48:ef:ae:ee:ba:d4:9e:95: 6d:30:e1:1b:3d:09:9f:04:4e:e4:e3:c0:e4:c3:d3: f7:51:32:66:8c:d9:e8:70:fa:90:89:b4:50:98:4f: 0e:2a:48:a5:86:f4:03:cb:53:8a:bc:28:1d:54:c7: 47:82:0a:72:5e:62:74:a8:fb:f5:58:fd:75:21:92: e6:1d:35:b4:69:67:0c:c3:ae:1f:0d:06:31:d9:89: ba:db:3c:d9:9c:84:3a:5d:a0:cb:d8:07:fa:02:e6: 4c:03:ed:76:5c:fd:4c:57:99:bb:3d:5e:a2:a3:e1: 28:9c:ee:66:36:b7:39:68:4d:fd:eb:a2:16:cf:bb: 30:45:9b:e8:6c:e6:a6:56:4a:9e:58:42:2f:d1:f5: 3c:1a:30:ed:55:f2:1f:f5:a2:03:ac:3f:ee:d1:ff: 76:60:45:06:68:0b:9b:49:ef:3f:22:ad:5a:e4:63: 90:c9:06:4f:b0:40:f1:c8:f7:23:9a:b3:c2:38:75: 3b:19:90:a8:90:51:5d:49:b8:d2:99:5b:47:8e:4d: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:E0:15:81:CA:60:F4:D2:D3:8F:9D:1E:D1:8D:EB:0E:C1:D1:BC X509v3 Authority Key Identifier: keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/JzPgFYHKYPTS04-dHtGN6w7B0bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.76.0/24 Signature Algorithm: sha256WithRSAEncryption 42:79:ac:e2:9c:92:8d:42:56:e5:54:7d:1a:42:64:76:d5:48: 3c:89:74:8e:da:b4:db:e8:c4:0d:17:6c:1d:c9:1c:57:f0:3b: 9e:75:bc:12:ce:ff:9c:7d:15:ea:44:11:b7:5d:69:33:dd:c7: af:ac:d2:d7:64:eb:a6:8e:3e:7a:dc:c1:5e:b3:50:8c:d7:c1: 98:78:22:b6:d0:e8:bc:be:5b:36:39:21:08:f1:b8:18:9e:a1: 5e:3d:e7:f3:ba:81:88:e3:89:7b:8f:01:5b:23:db:c1:54:a4: ed:71:99:f2:8b:ad:32:f7:c4:9a:73:ff:0f:fd:3f:1c:f4:21: d9:fa:a1:40:cd:54:06:4a:f9:4d:04:d1:3f:82:a8:f8:e5:b5: fe:31:50:51:18:0c:21:5a:e4:71:b0:6d:e8:0a:19:43:cf:f0: 50:d9:87:a7:c6:50:d4:6e:0e:ca:6a:38:a8:71:0f:1a:cb:82: 66:10:11:2c:37:2a:65:e4:71:b2:c7:81:61:e3:4c:7c:b8:3c: 91:1a:ab:11:1b:34:1f:da:38:d9:7e:63:8a:76:3c:ed:30:a7: 1d:af:03:70:14:d2:fb:3f:b4:37:b2:e7:f1:b2:77:c7:c5:38: 9f:32:77:69:d2:d9:99:d3:9c:38:b6:43:ec:70:66:40:e8:3e: 87:28:ef:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcGPTroGCOYHQ2ikym+d02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy ODA5ZTgwHhcNMjYwMTIwMTU0OTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzMzZTAxNTgxY2E2MGY0ZDJkMzhmOWQxZWQxOGRlYjBlYzFkMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRc1p5VrxbLM0fKKHCB/LH5wqE9N A0HI8T5/29pzx8rjSUozVK+u2PiAsycnzPPvWzziSO+u7rrUnpVtMOEbPQmfBE7k 48Dkw9P3UTJmjNnocPqQibRQmE8OKkilhvQDy1OKvCgdVMdHggpyXmJ0qPv1WP11 IZLmHTW0aWcMw64fDQYx2Ym62zzZnIQ6XaDL2Af6AuZMA+12XP1MV5m7PV6io+Eo nO5mNrc5aE3966IWz7swRZvobOamVkqeWEIv0fU8GjDtVfIf9aIDrD/u0f92YEUG aAubSe8/Iq1a5GOQyQZPsEDxyPcjmrPCOHU7GZCokFFdSbjSmVtHjk1b5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcz4BWBymD00tOPnR7RjesOwdG8MB8GA1UdIwQY MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt ZWIxMWI0OTU0ZjMzLzEvSnpQZ0ZZSEtZUFRTMDQtZEh0R042dzdCMGJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAualMMA0G CSqGSIb3DQEBCwUAA4IBAQBCeazinJKNQlblVH0aQmR21Ug8iXSO2rTb6MQNF2wd yRxX8DuedbwSzv+cfRXqRBG3XWkz3cevrNLXZOumjj563MFes1CM18GYeCK20Oi8 vls2OSEI8bgYnqFePefzuoGI44l7jwFbI9vBVKTtcZnyi60y98Sac/8P/T8c9CHZ +qFAzVQGSvlNBNE/gqj45bX+MVBRGAwhWuRxsG3oChlDz/BQ2YenxlDUbg7Kajio cQ8ay4JmEBEsNypl5HGyx4Fh40x8uDyRGqsRGzQf2jjZfmOKdjztMKcdrwNwFNL7 P7Q3sufxsnfHxTifMndp0tmZ05w4tkPscGZA6D6HKO9/ -----END CERTIFICATE-----Generated at Wed Feb 4 09:17:41 2026 by rpki-client