This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/jd-Obso-qia3Fzrm-rJvl_CyXrA.roa File: jd-Obso-qia3Fzrm-rJvl_CyXrA.roa (raw, json) Hash identifier: w+UMEthLd9XD2Eg9Qq+nBr2hQA3cH7TTPC5wOmg4x3A= Subject key identifier: 8D:DF:8E:6E:CA:3E:AA:26:B7:17:3A:E6:FA:B2:6F:97:F0:B2:5E:B0 Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854 Certificate serial: 019B7834F2DD8F293B5B0C6B82647547CAE2 Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/jd-Obso-qia3Fzrm-rJvl_CyXrA.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34350 IP address blocks: 80.70.50.0/24 maxlen: 24 80.70.52.0/22 maxlen: 22 80.70.52.0/24 maxlen: 24 80.70.53.0/24 maxlen: 24 80.70.54.0/24 maxlen: 24 80.70.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f2:dd:8f:29:3b:5b:0c:6b:82:64:75:47:ca:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ddf8e6eca3eaa26b7173ae6fab26f97f0b25eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:12:4c:a0:48:4d:98:a4:3c:34:b8:b6:77: d4:06:6e:ec:24:2c:f4:3c:95:89:61:17:da:78:87: d4:58:9a:0b:b6:d6:c6:f1:4d:ab:c8:a6:02:fa:99: e6:a6:33:ad:62:40:a0:e8:cb:62:6b:78:80:46:4c: df:a2:5d:41:2e:8c:e5:6c:4a:b9:1e:13:e9:28:69: fe:7f:73:7a:7c:7f:fe:d5:78:6c:4a:e1:ef:6b:9a: 32:12:c4:1d:37:ed:d6:8b:62:8a:a1:7e:70:c7:fe: 0f:21:91:94:ba:de:e1:dc:f7:95:bc:bb:96:54:06: 29:a4:74:95:e9:b6:c6:18:60:ad:a1:16:23:60:88: 55:88:d1:0f:9f:54:e3:80:d6:03:04:69:49:f8:13: 3a:d5:16:04:7b:8b:f2:47:8b:d8:05:2b:87:9d:c9: 42:f4:ba:77:2a:b9:9f:8f:d7:a7:5a:5a:5b:54:03: ba:7b:ba:1b:08:70:d0:03:9a:d7:80:f1:66:35:58: f6:58:37:bd:56:50:8f:ce:4f:67:87:d8:7c:0e:89: b4:14:96:23:50:82:a5:55:fb:39:3c:45:fc:9a:2d: fe:16:8a:8d:04:80:e2:c6:ba:f4:56:4c:1a:a2:0a: 38:b5:79:a6:c5:40:7f:ab:09:2b:f4:f2:51:84:23: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DF:8E:6E:CA:3E:AA:26:B7:17:3A:E6:FA:B2:6F:97:F0:B2:5E:B0 X509v3 Authority Key Identifier: keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/jd-Obso-qia3Fzrm-rJvl_CyXrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.50.0/24 80.70.52.0/22 Signature Algorithm: sha256WithRSAEncryption af:4c:7c:75:b5:a4:11:b2:d0:ca:a0:83:0d:57:b9:66:1c:81: 4e:f0:aa:fc:9b:b3:d1:6e:45:db:d9:ff:a2:0d:b2:15:3a:1b: 23:09:20:8d:86:33:e5:14:1c:25:c4:a6:a5:fa:1b:7a:95:55: 6d:51:36:c9:2b:c9:f7:3d:02:50:8c:66:d3:34:b3:1d:4b:31: 68:d6:ee:92:ad:70:bc:1f:6d:e8:2e:f7:32:f3:2f:b4:3e:18: ce:89:7d:b5:74:b3:e2:9a:df:d6:89:4b:aa:4c:5d:04:8b:62: 75:f6:00:a8:61:86:b2:e8:8c:db:89:4f:48:09:74:e3:00:23: f5:35:df:12:36:ad:70:58:84:e7:a0:3b:ec:9e:be:82:e2:30: 23:f9:84:fd:24:31:59:52:d7:1b:a8:cc:0c:4c:ba:bf:24:7d: cc:97:11:77:f6:e0:33:7e:40:8f:2b:12:10:52:83:c1:b6:90: 96:2d:6a:14:df:0c:0a:99:ed:0e:8f:d2:c1:d2:43:96:ce:ef: 19:b3:80:13:16:83:3c:77:d0:7b:b2:2c:62:7b:74:8f:16:54: 8a:32:a1:13:76:29:51:f0:e4:69:ab:82:f8:f5:01:e0:e3:fb: 1a:4c:00:52:7a:ef:0b:0f:e9:dc:1d:d8:27:9c:3e:c3:2f:5c: 3f:70:f0:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NPLdjyk7WwxrgmR1R8riMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx MDc4NTQwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGRmOGU2ZWNhM2VhYTI2YjcxNzNhZTZmYWIyNmY5N2YwYjI1ZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBkSTKBITZikPDS4tnfUBm7sJCz0 PJWJYRfaeIfUWJoLttbG8U2ryKYC+pnmpjOtYkCg6Mtia3iARkzfol1BLozlbEq5 HhPpKGn+f3N6fH/+1XhsSuHva5oyEsQdN+3Wi2KKoX5wx/4PIZGUut7h3PeVvLuW VAYppHSV6bbGGGCtoRYjYIhViNEPn1TjgNYDBGlJ+BM61RYEe4vyR4vYBSuHnclC 9Lp3Krmfj9enWlpbVAO6e7obCHDQA5rXgPFmNVj2WDe9VlCPzk9nh9h8Dom0FJYj UIKlVfs5PEX8mi3+FoqNBIDixrr0Vkwaogo4tXmmxUB/qwkr9PJRhCOOswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI3fjm7KPqomtxc65vqyb5fwsl6wMB8GA1UdIwQY MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt Y2YwMTI0Y2VkNGQ2LzEvamQtT2Jzby1xaWEzRnpybS1ySnZsX0N5WHJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2 LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEYyAwQC UEY0MA0GCSqGSIb3DQEBCwUAA4IBAQCvTHx1taQRstDKoIMNV7lmHIFO8Kr8m7PR bkXb2f+iDbIVOhsjCSCNhjPlFBwlxKal+ht6lVVtUTbJK8n3PQJQjGbTNLMdSzFo 1u6SrXC8H23oLvcy8y+0PhjOiX21dLPimt/WiUuqTF0Ei2J19gCoYYay6IzbiU9I CXTjACP1Nd8SNq1wWITnoDvsnr6C4jAj+YT9JDFZUtcbqMwMTLq/JH3MlxF39uAz fkCPKxIQUoPBtpCWLWoU3wwKme0Oj9LB0kOWzu8Zs4ATFoM8d9B7sixie3SPFlSK MqETdilR8ORpq4L49QHg4/saTABSeu8LD+ncHdgnnD7DL1w/cPB5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:56 2026 by rpki-client