This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/JAzjeJHR2U7YuIIVZrHMUJ67_CY.roa File: JAzjeJHR2U7YuIIVZrHMUJ67_CY.roa (raw, json) Hash identifier: diV/D1rDBps/tMrFtDTTIATooDbsSBJghGmPrY6r1ao= Subject key identifier: 24:0C:E3:78:91:D1:D9:4E:D8:B8:82:15:66:B1:CC:50:9E:BB:FC:26 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B7E391C6EF97992DDBD734F5DBAADB3D8 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/JAzjeJHR2U7YuIIVZrHMUJ67_CY.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62005 IP address blocks: 91.210.108.0/23 maxlen: 24 91.221.190.0/23 maxlen: 24 146.19.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1c:6e:f9:79:92:dd:bd:73:4f:5d:ba:ad:b3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=240ce37891d1d94ed8b8821566b1cc509ebbfc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:f0:34:92:03:7f:41:55:a8:9f:aa:f9:1c: ea:8e:7e:ef:4f:ac:1c:12:5e:be:fc:17:77:b5:fa: f0:d6:65:57:96:72:a0:61:12:91:42:07:f4:71:1d: f4:b0:2f:e5:24:f4:e8:1c:c9:63:63:96:f9:0e:12: d9:66:78:df:fe:5e:ec:7c:c4:e5:42:71:2c:1d:65: e5:63:67:0f:42:a9:ea:4d:c1:63:84:ca:6a:1e:c2: 34:8d:19:88:4c:57:e5:8c:c6:a9:f4:34:ea:5c:0c: bc:d1:77:45:23:5d:6f:dd:05:89:9d:4f:1b:f3:b2: a2:0f:f6:d2:f2:69:74:17:6b:4d:b4:3b:9e:27:79: ff:f8:ae:c2:ac:26:57:f3:d8:d1:b8:e7:57:9a:c2: 23:c2:4f:a3:d5:4b:bf:12:7c:e2:20:24:71:f7:9b: bf:69:c5:d6:5c:6b:cf:7d:78:ea:8d:14:42:65:48: ae:72:22:3a:44:a5:f8:35:ce:ec:fb:60:eb:8b:8a: 25:6e:fd:46:07:e9:c6:65:9b:b8:56:ba:ec:c0:79: 7f:ab:4c:bd:70:7e:50:f1:8c:5d:3a:43:13:3f:bb: cb:89:f5:3c:12:86:d6:1c:8c:3c:94:94:8c:35:9c: f5:e7:10:de:b2:f4:1f:ab:fa:69:f9:82:17:5c:38: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0C:E3:78:91:D1:D9:4E:D8:B8:82:15:66:B1:CC:50:9E:BB:FC:26 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/JAzjeJHR2U7YuIIVZrHMUJ67_CY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.108.0/23 91.221.190.0/23 146.19.49.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:0f:37:74:d8:9a:75:c6:9c:f4:a4:8d:ea:a0:08:d9:95:1e: 33:84:26:31:c9:f3:c3:b3:6a:82:69:53:e0:6f:29:28:57:4e: 58:be:76:5b:2b:71:44:55:af:b0:54:f6:c1:72:84:0f:d0:51: bc:0d:6e:ca:4f:3b:c7:24:1d:66:bc:90:e5:e7:40:98:f7:0a: 89:30:44:7e:90:8d:2d:80:11:9b:60:54:90:ba:c0:1b:d8:1e: a6:59:ab:18:83:07:7c:b2:44:68:2b:e9:a3:27:2f:86:0a:23: cd:0b:1e:01:2b:91:01:29:76:f2:e6:19:a4:c4:d2:0d:ea:62: e5:63:27:a7:10:e9:10:cc:7a:ea:f4:c2:67:cc:57:89:c6:88: 76:c6:64:f6:c6:4f:3a:06:93:9b:48:8e:3d:f1:02:93:15:78: 47:53:f0:37:f6:e7:62:bb:bc:ba:1d:5c:78:67:7b:1b:a1:24: ce:d4:2f:5d:a7:ce:33:96:00:b6:a8:69:33:1f:d1:a3:25:3e: bd:28:cc:73:a7:88:b7:01:f7:fc:2a:0b:02:fc:86:e8:c8:a1: 1f:36:79:09:73:58:a3:38:6b:a3:86:19:12:78:9d:a8:af:75: ff:44:36:27:34:64:5f:2d:01:1b:d0:03:82:fe:71:d8:8f:ef: b7:9f:9f:60 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ORxu+XmS3b1zT126rbPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDBjZTM3ODkxZDFkOTRlZDhiODgyMTU2NmIxY2M1MDllYmJmYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXwNJIDf0FVqJ+q+Rzqjn7vT6wc El6+/Bd3tfrw1mVXlnKgYRKRQgf0cR30sC/lJPToHMljY5b5DhLZZnjf/l7sfMTl QnEsHWXlY2cPQqnqTcFjhMpqHsI0jRmITFfljMap9DTqXAy80XdFI11v3QWJnU8b 87KiD/bS8ml0F2tNtDueJ3n/+K7CrCZX89jRuOdXmsIjwk+j1Uu/EnziICRx95u/ acXWXGvPfXjqjRRCZUiuciI6RKX4Nc7s+2Dri4olbv1GB+nGZZu4VrrswHl/q0y9 cH5Q8YxdOkMTP7vLifU8EobWHIw8lJSMNZz15xDesvQfq/pp+YIXXDjrMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCQM43iR0dlO2LiCFWaxzFCeu/wmMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvSkF6amVKSFIyVTdZdUlJVlpySE1VSjY3X0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW9JsAwQB W92+AwQAkhMxMA0GCSqGSIb3DQEBCwUAA4IBAQBbDzd02Jp1xpz0pI3qoAjZlR4z hCYxyfPDs2qCaVPgbykoV05YvnZbK3FEVa+wVPbBcoQP0FG8DW7KTzvHJB1mvJDl 50CY9wqJMER+kI0tgBGbYFSQusAb2B6mWasYgwd8skRoK+mjJy+GCiPNCx4BK5EB KXby5hmkxNIN6mLlYyenEOkQzHrq9MJnzFeJxoh2xmT2xk86BpObSI498QKTFXhH U/A39udiu7y6HVx4Z3sboSTO1C9dp84zlgC2qGkzH9GjJT69KMxzp4i3Aff8KgsC /IboyKEfNnkJc1ijOGujhhkSeJ2or3X/RDYnNGRfLQEb0AOC/nHYj++3n59g -----END CERTIFICATE-----Generated at Wed Jan 21 15:21:31 2026 by rpki-client