This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jMmbJVCF-lDZheiKAQrv8420mpg.roa File: jMmbJVCF-lDZheiKAQrv8420mpg.roa (raw, json) Hash identifier: xhDc85d1KG/E/hQ9Bxv5JcrIDCmvXNwCk+dLC2LLBKk= Subject key identifier: 8C:C9:9B:25:50:85:FA:50:D9:85:E8:8A:01:0A:EF:F3:8D:B4:9A:98 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53B63DFAD5980AA39A3C92B1C79B9 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jMmbJVCF-lDZheiKAQrv8420mpg.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51987 IP address blocks: 62.73.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3b:63:df:ad:59:80:aa:39:a3:c9:2b:1c:79:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cc99b255085fa50d985e88a010aeff38db49a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:c9:97:26:7b:b1:f0:d4:bf:7f:8c:fd:84: d1:0e:21:47:f7:ba:d1:aa:46:b9:51:d9:10:91:62: bb:03:b1:d7:7f:25:86:39:5a:26:bb:70:68:fc:e5: 24:52:82:49:f4:22:de:b8:69:c0:e2:e7:13:7b:f3: 79:71:e5:e7:68:c3:98:4e:d0:eb:35:74:92:93:27: bd:26:63:5e:43:b9:a4:2f:d9:cd:5e:7b:0b:56:a6: 35:49:8c:a9:4a:fa:99:44:ee:32:02:70:cd:fa:1a: b8:8b:e8:24:7b:56:56:f6:84:a9:e0:f8:84:bd:5a: 1b:77:02:ab:ca:47:e4:12:1a:c5:ca:bc:f5:17:12: e6:13:d4:43:7c:ff:79:d3:fd:03:d5:a4:f8:07:c9: bb:7c:7f:0a:cd:d7:5c:d8:b7:95:d5:d8:e8:3b:66: 02:7b:72:27:58:28:72:41:ad:b6:64:70:f1:55:20: 1e:2d:7a:11:ec:b8:f5:48:15:9b:79:23:17:b4:37: 16:f5:bd:e1:66:ef:14:b1:83:9c:6a:05:a8:e0:35: b2:d6:55:b1:4c:05:3e:27:75:ff:28:46:69:89:36: cd:29:99:cd:50:1f:c0:e8:ae:ce:5c:f2:81:63:96: 75:d7:67:b9:c4:42:4c:00:97:9e:66:53:3e:18:82: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:9B:25:50:85:FA:50:D9:85:E8:8A:01:0A:EF:F3:8D:B4:9A:98 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/jMmbJVCF-lDZheiKAQrv8420mpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.73.95.0/24 Signature Algorithm: sha256WithRSAEncryption 97:48:a5:d5:54:b1:d9:41:fb:25:cf:ff:c4:4c:17:f6:da:1a: 0a:04:44:6e:e8:cf:9a:1c:f6:67:46:50:14:1c:08:74:66:ad: 8b:62:75:fa:9b:c2:73:fa:c9:a6:db:8a:dc:4a:77:19:a1:d3: bd:e5:93:d3:e3:00:c0:09:48:b8:8c:91:96:fb:34:3a:03:65: de:9a:96:7c:4c:70:cd:65:a7:ea:55:8d:2b:5e:52:e5:10:52: fb:b4:29:05:9a:8b:87:4b:f7:4c:bb:32:5b:c9:81:da:32:e7: d3:95:e2:60:a8:6c:32:bd:b0:52:e3:0d:45:b0:4a:2d:ba:8f: ec:ed:7f:ab:19:8f:ad:20:50:b9:29:09:e3:9b:be:f6:0b:e3: 85:d5:81:76:10:4b:88:06:40:e8:d6:29:3f:43:c6:c9:e5:56: ce:ca:b4:af:eb:4c:67:ed:14:84:2d:1c:1e:c4:71:17:2f:b7: 45:d7:33:f2:d4:01:85:f4:c1:97:3c:93:ab:45:30:2e:ff:b2: 6b:72:8c:c9:1e:f9:f0:ba:71:a0:d8:37:5c:f0:32:cc:cf:8a: 77:41:08:c2:cb:f9:56:a7:45:0f:81:99:f0:7b:df:ac:a3:bf: 8a:15:a7:5f:ab:d1:5c:95:c0:cc:20:e7:4e:e5:f1:49:f7:6c: bd:40:e5:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTtj361ZgKo5o8krHHm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2M5OWIyNTUwODVmYTUwZDk4NWU4OGEwMTBhZWZmMzhkYjQ5YTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWLJlyZ7sfDUv3+M/YTRDiFH97rR qka5UdkQkWK7A7HXfyWGOVomu3Bo/OUkUoJJ9CLeuGnA4ucTe/N5ceXnaMOYTtDr NXSSkye9JmNeQ7mkL9nNXnsLVqY1SYypSvqZRO4yAnDN+hq4i+gke1ZW9oSp4PiE vVobdwKrykfkEhrFyrz1FxLmE9RDfP950/0D1aT4B8m7fH8Kzddc2LeV1djoO2YC e3InWChyQa22ZHDxVSAeLXoR7Lj1SBWbeSMXtDcW9b3hZu8UsYOcagWo4DWy1lWx TAU+J3X/KEZpiTbNKZnNUB/A6K7OXPKBY5Z112e5xEJMAJeeZlM+GIIcpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzJmyVQhfpQ2YXoigEK7/ONtJqYMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvak1tYkpWQ0YtbERaaGVpS0FRcnY4NDIwbXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPklfMA0G CSqGSIb3DQEBCwUAA4IBAQCXSKXVVLHZQfslz//ETBf22hoKBERu6M+aHPZnRlAU HAh0Zq2LYnX6m8Jz+smm24rcSncZodO95ZPT4wDACUi4jJGW+zQ6A2XempZ8THDN ZafqVY0rXlLlEFL7tCkFmouHS/dMuzJbyYHaMufTleJgqGwyvbBS4w1FsEotuo/s 7X+rGY+tIFC5KQnjm772C+OF1YF2EEuIBkDo1ik/Q8bJ5VbOyrSv60xn7RSELRwe xHEXL7dF1zPy1AGF9MGXPJOrRTAu/7JrcozJHvnwunGg2Ddc8DLMz4p3QQjCy/lW p0UPgZnwe9+so7+KFadfq9FclcDMIOdO5fFJ92y9QOWF -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:37 2026 by rpki-client