This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpjhb9zEWbVSqQ8sh29oV7yNJFo.roa File: jpjhb9zEWbVSqQ8sh29oV7yNJFo.roa (raw, json) Hash identifier: eA2LdaNQstfr1AWI+BcB9j6A12ZxWJ4zZ4Q5cHPxnvM= Subject key identifier: 8E:98:E1:6F:DC:C4:59:B5:52:A9:0F:2C:87:6F:68:57:BC:8D:24:5A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D51AE1109B8FF17B7D6A6951A8536 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpjhb9zEWbVSqQ8sh29oV7yNJFo.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 161.51.48.0/20 maxlen: 24 161.51.96.0/23 maxlen: 24 161.51.192.0/19 maxlen: 24 161.51.224.0/20 maxlen: 24 161.51.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:51:ae:11:09:b8:ff:17:b7:d6:a6:95:1a:85:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e98e16fdcc459b552a90f2c876f6857bc8d245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:89:db:62:b4:08:73:5b:99:73:54:16:6d:82: 6f:20:d3:f7:bd:62:48:fb:36:aa:6a:c3:c0:c0:98: df:fc:63:93:eb:99:29:b6:ed:48:1c:01:05:99:51: ec:e6:dd:0d:e4:7d:79:7e:a5:ff:9b:8e:2c:b9:c1: 06:86:92:42:8d:0b:da:5e:6b:f0:10:d9:f7:51:f2: fc:89:f0:c6:0e:55:af:b0:11:a5:bf:93:85:f8:85: ec:6f:4b:53:e6:6b:55:48:d7:d0:f0:53:1d:1c:0b: 21:d2:bd:0c:32:0d:43:db:91:12:05:cb:4a:56:43: 70:22:91:7f:ed:62:74:57:72:d5:28:dd:12:ea:0b: 60:48:a4:23:dc:6b:8d:2b:ba:0c:62:3c:ff:1b:47: c5:62:c1:a1:3b:75:91:d3:ac:2b:55:78:22:63:26: ee:16:09:a8:2c:d0:3e:24:67:f1:95:a7:50:28:48: 21:2c:0e:45:dd:d9:7d:7a:f2:54:6c:3e:62:56:9f: 74:6a:57:fa:f4:18:7a:0a:46:9b:b3:fc:8e:18:95: ec:1e:e3:95:33:02:6c:fe:ce:3c:8b:b1:3e:57:ee: c8:95:63:1c:25:6d:dd:8f:cc:14:24:10:f2:19:09: e9:8d:0f:3d:a4:71:a8:a5:80:fa:65:c8:5f:2c:4d: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:E1:6F:DC:C4:59:B5:52:A9:0F:2C:87:6F:68:57:BC:8D:24:5A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jpjhb9zEWbVSqQ8sh29oV7yNJFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.51.48.0/20 161.51.96.0/23 161.51.192.0-161.51.239.255 161.51.252.0/23 Signature Algorithm: sha256WithRSAEncryption 37:60:f4:90:7a:90:8e:2f:1f:d7:56:14:c4:34:e5:7f:ac:77: 6a:61:3f:d3:b0:1a:24:58:67:95:85:d9:e6:45:ae:80:78:0d: cc:08:ac:aa:ac:c9:6d:25:24:e9:a7:d6:fa:39:8c:7e:6c:df: 39:42:01:0a:e3:1e:ce:63:a5:b4:77:40:b5:2a:48:74:f0:c5: 81:cc:35:ed:86:e9:9b:e7:70:24:2f:7f:a0:f5:68:80:c5:91: ec:c7:42:2c:17:cb:86:59:7b:a1:fb:0b:cd:4b:c9:a4:e4:1b: c7:c6:57:f0:3d:13:f6:49:3d:a9:3f:8d:46:09:f7:74:a5:41: 6a:a6:a8:95:73:79:47:c5:68:6a:a4:0e:99:79:91:2c:66:2a: 25:d1:ae:b3:b0:37:ee:18:96:a3:5e:b5:a7:90:a4:df:01:c5: cc:9f:a5:d7:a3:2a:0a:e5:3b:87:be:f1:95:4f:ba:fb:14:94: a8:1a:f2:5c:19:4d:a9:d5:b8:aa:05:ed:56:d4:23:6c:0d:e7: eb:83:ea:f7:cc:16:f1:a6:e6:e5:01:7e:d7:4c:6a:fe:34:cf: 7f:0d:c3:d9:dd:c3:78:e0:41:a1:d2:f6:5d:59:e1:a8:30:2b: 6d:18:b2:28:54:52:3e:0d:fa:8c:41:54:32:97:f4:ab:b7:8f: 6b:93:52:b7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9XVGuEQm4/xe31qaVGoU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTk4ZTE2ZmRjYzQ1OWI1NTJhOTBmMmM4NzZmNjg1N2JjOGQyNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8InbYrQIc1uZc1QWbYJvINP3vWJI +zaqasPAwJjf/GOT65kptu1IHAEFmVHs5t0N5H15fqX/m44sucEGhpJCjQvaXmvw ENn3UfL8ifDGDlWvsBGlv5OF+IXsb0tT5mtVSNfQ8FMdHAsh0r0MMg1D25ESBctK VkNwIpF/7WJ0V3LVKN0S6gtgSKQj3GuNK7oMYjz/G0fFYsGhO3WR06wrVXgiYybu FgmoLNA+JGfxladQKEghLA5F3dl9evJUbD5iVp90alf69Bh6Ckabs/yOGJXsHuOV MwJs/s48i7E+V+7IlWMcJW3dj8wUJBDyGQnpjQ89pHGopYD6ZchfLE3c5QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFI6Y4W/cxFm1UqkPLIdvaFe8jSRaMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvanBqaGI5ekVXYlZTcVE4c2gyOW9WN3lOSkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQEoTMwAwQB oTNgMAwDBAahM8ADBAShM+ADBAGhM/wwDQYJKoZIhvcNAQELBQADggEBADdg9JB6 kI4vH9dWFMQ05X+sd2phP9OwGiRYZ5WF2eZFroB4DcwIrKqsyW0lJOmn1vo5jH5s 3zlCAQrjHs5jpbR3QLUqSHTwxYHMNe2G6ZvncCQvf6D1aIDFkezHQiwXy4ZZe6H7 C81LyaTkG8fGV/A9E/ZJPak/jUYJ93SlQWqmqJVzeUfFaGqkDpl5kSxmKiXRrrOw N+4YlqNetaeQpN8BxcyfpdejKgrlO4e+8ZVPuvsUlKga8lwZTanVuKoF7VbUI2wN 5+uD6vfMFvGm5uUBftdMav40z38Nw9ndw3jgQaHS9l1Z4agwK20YsihUUj4N+oxB VDKX9Ku3j2uTUrc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:25 2026 by rpki-client