This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JzWqzNfxAUB1Iu8WXQvx5y9SNeI.roa File: JzWqzNfxAUB1Iu8WXQvx5y9SNeI.roa (raw, json) Hash identifier: 7/gWmVqxAbC6/hhihq+p0TpCcn5MTfVGJt+2Qb3VqS0= Subject key identifier: 27:35:AA:CC:D7:F1:01:40:75:22:EF:16:5D:0B:F1:E7:2F:52:35:E2 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4F8E6FD632F1933D0BF6EF659D36 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JzWqzNfxAUB1Iu8WXQvx5y9SNeI.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 171.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4f:8e:6f:d6:32:f1:93:3d:0b:f6:ef:65:9d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2735aaccd7f101407522ef165d0bf1e72f5235e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:66:54:15:03:42:47:0d:14:fb:e3:4c:28:8b: 9f:b6:dd:97:ce:54:f8:d2:c4:df:df:37:bf:e0:f4: 91:93:be:5c:50:58:61:cf:ba:0a:d8:fd:7c:62:a3: 5b:aa:48:4d:1c:50:25:c1:1d:0c:98:fc:7c:4f:6c: 95:24:58:94:62:61:57:60:82:61:a5:9d:ef:40:fa: 14:ff:65:bf:4d:ba:9f:fa:85:22:fc:de:4b:a5:b6: 8d:79:55:7c:fb:36:93:6d:5f:4d:82:df:77:21:b2: 99:a0:b4:fa:35:63:6b:1c:21:de:b4:7e:15:a2:e3: bb:8c:b0:78:05:8a:89:7f:16:29:c8:43:b4:50:57: 47:9c:5d:1d:9b:82:f7:da:dd:51:15:c7:43:af:c6: ff:d8:fc:fd:99:25:a4:b0:4d:54:79:ac:9e:33:19: 4c:ca:64:f2:be:a4:79:5e:3f:85:42:31:48:f3:66: 07:76:b3:5b:39:21:07:a2:73:c8:f8:ed:88:7c:4d: e7:7c:e7:fb:33:f6:c1:8c:30:95:67:60:f7:38:5a: 5d:c5:ff:19:4c:1d:51:7d:40:ad:b0:92:c1:be:e4: 42:87:07:b0:ba:f6:64:45:dc:82:b2:01:aa:53:65: 82:a2:34:cd:80:d9:b9:9b:04:6a:07:90:26:c6:c3: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:AA:CC:D7:F1:01:40:75:22:EF:16:5D:0B:F1:E7:2F:52:35:E2 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JzWqzNfxAUB1Iu8WXQvx5y9SNeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.101.0/24 Signature Algorithm: sha256WithRSAEncryption 88:84:23:83:6c:fe:40:62:c1:ff:22:45:1a:66:58:54:e4:bb: 5f:cf:58:6b:93:a7:89:9a:75:9c:9e:42:c1:48:b8:56:45:a8: 8b:5a:cc:f8:f2:90:e3:f4:26:76:eb:0c:ff:6a:36:51:54:0a: 6c:31:a1:9f:52:17:e1:71:71:a4:96:c6:4d:fb:f6:43:89:a3: e3:41:cf:80:9c:40:d4:90:6f:f4:3b:f5:d4:22:6a:31:f2:e6: 05:8e:40:60:2c:53:4e:9d:e5:c6:26:a7:81:16:b2:25:b1:ca: 21:c1:51:ca:4c:cc:95:0e:c8:81:9a:ab:47:f5:48:17:ff:52: 50:6b:3b:15:d8:37:94:a9:9a:3d:a9:6f:f2:67:5f:73:76:8e: 60:92:9e:e1:da:c4:af:92:d7:4f:ef:c9:2e:cf:3b:61:25:eb: 7c:02:50:f5:7b:16:b7:97:e2:6d:71:a3:55:f3:1a:71:6a:a7: d9:13:4a:f6:28:86:7c:5d:2d:0d:06:24:4f:90:d8:42:31:62: 0c:d3:0d:b5:cf:0c:46:62:43:03:d4:a0:4b:59:3d:d1:84:e8: f5:00:aa:fc:08:ee:ca:99:f7:45:69:c5:ca:b0:ee:6e:8f:ee: 43:0c:0f:7e:eb:d9:05:0a:99:5f:99:3a:61:94:0c:f7:48:9b: e8:7c:15:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XU+Ob9Yy8ZM9C/bvZZ02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzM1YWFjY2Q3ZjEwMTQwNzUyMmVmMTY1ZDBiZjFlNzJmNTIzNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mZUFQNCRw0U++NMKIuftt2XzlT4 0sTf3ze/4PSRk75cUFhhz7oK2P18YqNbqkhNHFAlwR0MmPx8T2yVJFiUYmFXYIJh pZ3vQPoU/2W/Tbqf+oUi/N5LpbaNeVV8+zaTbV9Ngt93IbKZoLT6NWNrHCHetH4V ouO7jLB4BYqJfxYpyEO0UFdHnF0dm4L32t1RFcdDr8b/2Pz9mSWksE1UeayeMxlM ymTyvqR5Xj+FQjFI82YHdrNbOSEHonPI+O2IfE3nfOf7M/bBjDCVZ2D3OFpdxf8Z TB1RfUCtsJLBvuRChwewuvZkRdyCsgGqU2WCojTNgNm5mwRqB5AmxsOyDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCc1qszX8QFAdSLvFl0L8ecvUjXiMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvSnpXcXpOZnhBVUIxSXU4V1hRdng1eTlTTmVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxZlMA0G CSqGSIb3DQEBCwUAA4IBAQCIhCODbP5AYsH/IkUaZlhU5Ltfz1hrk6eJmnWcnkLB SLhWRaiLWsz48pDj9CZ26wz/ajZRVApsMaGfUhfhcXGklsZN+/ZDiaPjQc+AnEDU kG/0O/XUImox8uYFjkBgLFNOneXGJqeBFrIlscohwVHKTMyVDsiBmqtH9UgX/1JQ azsV2DeUqZo9qW/yZ19zdo5gkp7h2sSvktdP78kuzzthJet8AlD1exa3l+JtcaNV 8xpxaqfZE0r2KIZ8XS0NBiRPkNhCMWIM0w21zwxGYkMD1KBLWT3RhOj1AKr8CO7K mfdFacXKsO5uj+5DDA9+69kFCplfmTphlAz3SJvofBVi -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client