This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/JkxzftXxBP-vXJDMHiEIGkiEedU.roa File: JkxzftXxBP-vXJDMHiEIGkiEedU.roa (raw, json) Hash identifier: okOGWD6NJlFcOrkCnqjaP6NoTcyEZKu0Sq4XrnddyYw= Subject key identifier: 26:4C:73:7E:D5:F1:04:FF:AF:5C:90:CC:1E:21:08:1A:48:84:79:D5 Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Certificate serial: 019B79ECD13DFB59045FE96B45F0DF61361F Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/JkxzftXxBP-vXJDMHiEIGkiEedU.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12945 IP address blocks: 91.212.176.0/24 maxlen: 24 194.126.241.0/24 maxlen: 24 2001:67c:2e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d1:3d:fb:59:04:5f:e9:6b:45:f0:df:61:36:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=264c737ed5f104ffaf5c90cc1e21081a488479d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:d4:80:86:b9:ac:c4:e1:35:88:83:a3:73: 3d:05:81:b9:e3:49:81:60:c2:cf:f5:ac:42:ae:a5: 07:98:56:78:f5:f3:a5:db:15:d4:d6:21:08:6f:69: ff:f1:3b:33:f5:2e:5a:4c:37:fe:7a:04:05:9e:13: 45:1c:08:e0:ac:f3:74:bc:5e:b3:77:65:7d:52:ca: e4:da:54:07:13:68:b4:da:8d:07:42:fe:8d:f5:3e: 7a:b0:de:0f:ad:cf:f9:06:86:26:2e:97:0d:28:11: 7e:62:21:ef:40:73:ec:d6:49:87:f6:65:f5:7c:55: 43:df:04:26:33:ae:16:fd:24:fc:c3:4f:d6:05:74: ad:d8:fb:a1:8f:fd:46:8a:35:fc:b5:b1:86:5c:d2: 02:f1:13:97:4f:fd:b0:ea:2d:25:36:ff:59:29:f5: 81:fd:ac:c5:74:e0:a4:50:56:da:3a:fe:27:9d:7a: a7:c7:c0:fb:77:17:7b:a1:9a:a0:0d:89:ef:94:75: 62:98:79:6a:33:ac:c4:25:35:6f:34:aa:c3:2a:a7: 9a:c6:90:07:b7:e6:23:7d:e0:b6:10:bb:37:87:bb: 62:ac:b3:63:cc:0b:e5:86:ac:c9:fe:f9:9f:ae:36: 09:c2:11:23:94:00:3b:67:b1:d8:ef:d0:ad:04:d5: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:73:7E:D5:F1:04:FF:AF:5C:90:CC:1E:21:08:1A:48:84:79:D5 X509v3 Authority Key Identifier: keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/JkxzftXxBP-vXJDMHiEIGkiEedU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.176.0/24 194.126.241.0/24 IPv6: 2001:67c:2e20::/48 Signature Algorithm: sha256WithRSAEncryption ac:13:bd:c8:90:ed:a8:15:85:dd:c1:f4:cb:7e:db:03:43:38: bf:0e:48:ee:1f:8b:c2:55:78:47:2b:7d:b3:e4:d8:56:71:3b: 31:c2:b8:a4:3d:c4:ad:34:09:67:25:eb:e2:7c:3f:5c:0b:f7: 4e:ca:8a:b9:02:a2:28:3b:35:05:a9:80:e9:a1:24:1e:77:55: 66:11:b7:48:16:6a:98:af:70:06:23:3e:29:e6:d4:c4:01:8a: 56:d3:24:04:b6:3e:3b:6e:3c:01:69:b5:30:a4:17:2f:39:69: ea:81:9d:94:e2:48:1d:10:c3:31:8d:38:8d:9f:7f:44:bd:3c: dc:6a:de:a8:32:4a:06:3e:68:de:28:f8:56:04:b9:45:2a:bb: 2a:0d:ff:f6:41:10:be:07:04:91:12:63:59:b2:c6:0d:1a:d1: e5:78:8b:3b:6f:4b:4a:91:40:25:84:49:52:fd:b9:e8:c4:15: 43:28:37:d5:5d:8a:4d:07:41:37:21:61:7d:84:0f:6a:72:19: f3:f9:72:de:0a:d2:bf:68:1d:4b:f9:aa:58:08:be:6a:34:4e: 5b:8e:3f:04:87:31:01:34:63:8d:38:99:f2:3f:64:fe:11:f9: 32:b9:3c:85:b7:3b:28:b9:02:b0:de:ca:95:26:50:1f:78:91: bb:d5:f9:d9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt57NE9+1kEX+lrRfDfYTYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz ZjYwZGQwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjRjNzM3ZWQ1ZjEwNGZmYWY1YzkwY2MxZTIxMDgxYTQ4ODQ3OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7UgIa5rMThNYiDo3M9BYG540mB YMLP9axCrqUHmFZ49fOl2xXU1iEIb2n/8Tsz9S5aTDf+egQFnhNFHAjgrPN0vF6z d2V9Usrk2lQHE2i02o0HQv6N9T56sN4Prc/5BoYmLpcNKBF+YiHvQHPs1kmH9mX1 fFVD3wQmM64W/ST8w0/WBXSt2Puhj/1GijX8tbGGXNIC8ROXT/2w6i0lNv9ZKfWB /azFdOCkUFbaOv4nnXqnx8D7dxd7oZqgDYnvlHVimHlqM6zEJTVvNKrDKqeaxpAH t+YjfeC2ELs3h7tirLNjzAvlhqzJ/vmfrjYJwhEjlAA7Z7HY79CtBNX7ywIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFCZMc37V8QT/r1yQzB4hCBpIhHnVMB8GA1UdIwQY MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt OWQxYTJlMDkxMWI5LzEvSmt4emZ0WHhCUC12WEpETUhpRUlHa2lFZWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5 LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9SwAwQA wn7xMA8EAgACMAkDBwAgAQZ8LiAwDQYJKoZIhvcNAQELBQADggEBAKwTvciQ7agV hd3B9Mt+2wNDOL8OSO4fi8JVeEcrfbPk2FZxOzHCuKQ9xK00CWcl6+J8P1wL907K irkCoig7NQWpgOmhJB53VWYRt0gWapivcAYjPinm1MQBilbTJAS2PjtuPAFptTCk Fy85aeqBnZTiSB0QwzGNOI2ff0S9PNxq3qgySgY+aN4o+FYEuUUquyoN//ZBEL4H BJESY1myxg0a0eV4iztvS0qRQCWESVL9uejEFUMoN9Vdik0HQTchYX2ED2pyGfP5 ct4K0r9oHUv5qlgIvmo0TluOPwSHMQE0Y404mfI/ZP4R+TK5PIW3Oyi5ArDeypUm UB94kbvV+dk= -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:46 2026 by rpki-client