This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa File: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (raw, json) Hash identifier: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8= Subject key identifier: 24:45:4D:C2:40:49:1A:33:D4:08:B6:F1:9A:FA:02:2E:81:8F:66:3B Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Certificate serial: 019B7BA34153F94A0C18319DB34B3432357E Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa Signing time: Thu 01 Jan 2026 22:17:35 +0000 ROA not before: Thu 01 Jan 2026 22:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57442 IP address blocks: 91.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:41:53:f9:4a:0c:18:31:9d:b3:4b:34:32:35:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Validity Not Before: Jan 1 22:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24454dc240491a33d408b6f19afa022e818f663b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:b9:08:55:d9:a8:df:b7:df:d5:dc:88:65: 92:5b:64:2c:eb:3b:7f:31:3c:81:3c:d4:64:e3:f2: bf:f8:4d:ba:1a:af:fa:f1:f7:00:1b:83:86:be:01: 55:98:62:1f:63:92:69:ae:ec:d5:db:43:b2:cd:26: 20:df:c0:e6:43:08:db:1a:7b:68:99:21:41:ae:97: 28:18:46:7c:29:6b:50:0c:c8:60:96:90:f2:84:ec: 58:ef:19:87:e8:7f:3b:22:be:60:73:07:84:d4:cd: 98:b5:a6:e9:42:2c:29:ac:4f:df:76:db:1a:71:b5: 64:17:40:c8:c2:b2:37:53:67:fe:a2:2b:5c:df:d4: e4:dd:8d:30:92:40:29:8a:df:7d:4e:0b:e3:00:8e: cf:ed:36:7d:33:94:4b:c2:23:ed:bb:af:3f:fc:5a: 79:17:a3:56:53:00:af:1c:16:d1:7f:98:fd:1f:e8: 55:25:6b:29:6c:c3:90:72:b1:85:08:85:14:7f:03: 2a:b4:f3:ba:f7:d2:ce:05:da:bb:c3:0b:6d:e2:35: 1c:87:88:82:c9:89:d7:23:fd:96:cd:67:23:cc:59: 92:6c:48:00:fc:e7:be:7f:1a:08:72:63:92:47:81: c5:76:cc:14:86:aa:50:6c:44:6f:f0:38:71:79:77: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:4D:C2:40:49:1A:33:D4:08:B6:F1:9A:FA:02:2E:81:8F:66:3B X509v3 Authority Key Identifier: keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.21.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d7:e2:c6:c5:18:a8:78:bc:05:bf:2b:8a:50:47:2b:3e:02: 7d:fa:f8:77:36:65:e4:db:a0:37:25:7f:07:20:6e:5e:6b:bd: 13:c0:bb:22:d3:42:1c:c9:fc:bb:41:e2:0c:62:c2:59:fa:bb: 13:0b:35:14:80:0c:84:55:48:d5:4e:59:4c:fc:d7:18:dd:15: 62:8f:1f:30:e1:48:2b:f8:2a:f3:0b:12:c4:33:b2:f3:d8:f1: 1c:d6:9b:bc:4e:1f:dc:ea:2d:ee:d0:d3:2d:27:01:bb:9f:f4: 72:34:df:ed:51:ed:b1:ae:e3:45:52:3a:06:47:a6:c6:98:11: de:19:2c:cc:cd:ad:a6:58:cb:4a:83:21:10:46:6b:4f:c3:3d: 88:98:11:8e:db:73:2d:5b:53:1c:4e:d6:1a:76:46:b0:60:0b: f6:88:d2:94:e5:ee:24:01:b3:4d:2a:67:01:37:98:7d:07:86: e1:9e:4e:5d:92:f3:fc:27:5b:85:24:d9:52:42:3b:d5:ca:94: bd:25:89:76:3e:79:07:d6:b9:c9:90:b6:91:dc:53:61:6c:7f: cf:78:21:28:54:2f:d4:c5:5d:c2:67:0f:99:71:af:18:a5:4b: f0:b8:1d:9e:fb:2f:b1:08:23:22:57:0a:74:7d:f5:5b:51:76: 6a:c7:f0:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0FT+UoMGDGds0s0MjV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm MTM5MDIwHhcNMjYwMTAxMjIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDQ1NGRjMjQwNDkxYTMzZDQwOGI2ZjE5YWZhMDIyZTgxOGY2NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQC5CFXZqN+339XciGWSW2Qs6zt/ MTyBPNRk4/K/+E26Gq/68fcAG4OGvgFVmGIfY5JpruzV20OyzSYg38DmQwjbGnto mSFBrpcoGEZ8KWtQDMhglpDyhOxY7xmH6H87Ir5gcweE1M2YtabpQiwprE/fdtsa cbVkF0DIwrI3U2f+oitc39Tk3Y0wkkApit99TgvjAI7P7TZ9M5RLwiPtu68//Fp5 F6NWUwCvHBbRf5j9H+hVJWspbMOQcrGFCIUUfwMqtPO699LOBdq7wwtt4jUch4iC yYnXI/2WzWcjzFmSbEgA/Oe+fxoIcmOSR4HFdswUhqpQbERv8DhxeXeVjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCRFTcJASRoz1Ai28Zr6Ai6Bj2Y7MB8GA1UdIwQY MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt NDdiYmYyMWVhYzlmLzEvSkVWTndrQkpHalBVQ0xieG12b0NMb0dQWmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+gVMA0G CSqGSIb3DQEBCwUAA4IBAQCM1+LGxRioeLwFvyuKUEcrPgJ9+vh3NmXk26A3JX8H IG5ea70TwLsi00Icyfy7QeIMYsJZ+rsTCzUUgAyEVUjVTllM/NcY3RVijx8w4Ugr +CrzCxLEM7Lz2PEc1pu8Th/c6i3u0NMtJwG7n/RyNN/tUe2xruNFUjoGR6bGmBHe GSzMza2mWMtKgyEQRmtPwz2ImBGO23MtW1McTtYadkawYAv2iNKU5e4kAbNNKmcB N5h9B4bhnk5dkvP8J1uFJNlSQjvVypS9JYl2PnkH1rnJkLaR3FNhbH/PeCEoVC/U xV3CZw+Zca8YpUvwuB2e+y+xCCMiVwp0ffVbUXZqx/CQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:39 2026 by rpki-client