This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/JONbkjOcThPFPe34Q68G6YG7CEA.roa File: JONbkjOcThPFPe34Q68G6YG7CEA.roa (raw, json) Hash identifier: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4= Subject key identifier: 24:E3:5B:92:33:9C:4E:13:C5:3D:ED:F8:43:AF:06:E9:81:BB:08:40 Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Certificate serial: 019B7A5A6688A142F32028D22EAA745112A0 Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/JONbkjOcThPFPe34Q68G6YG7CEA.roa Signing time: Thu 01 Jan 2026 16:18:23 +0000 ROA not before: Thu 01 Jan 2026 16:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57457 IP address blocks: 91.232.64.0/24 maxlen: 24 91.232.65.0/24 maxlen: 24 91.232.66.0/24 maxlen: 24 91.232.67.0/24 maxlen: 24 91.232.68.0/24 maxlen: 24 91.232.69.0/24 maxlen: 24 185.210.200.0/24 maxlen: 24 185.210.201.0/24 maxlen: 24 185.210.202.0/24 maxlen: 24 185.210.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:66:88:a1:42:f3:20:28:d2:2e:aa:74:51:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24e35b92339c4e13c53dedf843af06e981bb0840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:b3:04:4a:87:cf:9d:36:f4:51:23:83:f3: 46:39:bf:dd:47:55:29:5f:89:d3:22:c4:9b:af:9f: 9f:4b:52:ea:65:fe:e0:40:a6:5c:68:e0:e5:e3:3e: 91:88:3c:6d:2a:6a:14:9c:52:d4:d6:96:40:1c:74: 8e:9e:54:a0:29:de:9e:81:52:40:14:71:7b:cb:f7: 8e:f2:38:cc:a3:2d:68:fd:6d:29:26:8f:e5:11:a2: fe:be:28:4e:24:60:ac:74:e5:f3:61:79:60:0b:dc: 0f:b3:95:38:0e:cb:b4:72:37:b1:29:ab:d8:41:dc: 2c:2d:7a:bb:17:e7:4f:52:d2:5c:5e:7e:55:8f:8d: e3:8b:cc:9a:69:91:99:dd:ec:64:3f:34:f0:f7:c9: 92:0c:63:03:e3:f4:36:36:26:28:42:a2:4f:b8:47: 3a:82:f6:98:88:6a:d9:41:4a:e8:ea:0e:49:3c:08: b0:ab:e1:ac:7d:82:0b:dc:24:ed:2e:06:5f:86:38: a6:2b:af:27:80:1a:ba:11:28:bf:31:ad:82:a0:e2: 08:92:e6:4f:d1:57:7e:8c:0a:0c:e0:f3:80:c9:0b: ce:7f:33:99:34:92:6b:b8:1b:cd:e8:49:05:e4:5c: 8f:a8:33:41:83:ec:e4:d5:aa:a7:7a:05:38:2b:9e: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E3:5B:92:33:9C:4E:13:C5:3D:ED:F8:43:AF:06:E9:81:BB:08:40 X509v3 Authority Key Identifier: keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/JONbkjOcThPFPe34Q68G6YG7CEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.64.0-91.232.69.255 185.210.200.0/22 Signature Algorithm: sha256WithRSAEncryption 22:62:ee:58:3f:9c:9c:54:29:36:b1:bf:6f:8c:0c:c3:17:ce: 3f:2d:04:33:2d:c8:b9:c2:36:0d:f5:97:3d:18:23:e1:3e:52: 0c:84:86:8e:f1:4d:9a:d5:7c:51:21:13:94:f4:17:c0:09:4f: 09:e8:7e:f6:09:27:9e:4c:88:57:6f:02:41:6d:a7:e3:0d:5a: 28:02:c6:26:e2:52:56:12:da:bf:69:1e:02:ba:a9:98:9f:c4: 27:18:50:a9:62:c2:32:08:39:37:22:39:bd:9b:7f:a9:2d:37: 39:e0:ae:4d:e4:16:1f:9d:59:e2:0f:2f:91:1a:a4:33:da:56: 82:1f:f8:84:52:32:91:c3:3f:e1:1f:19:cc:5c:d0:a1:f4:92: 8b:92:f2:4f:4b:2a:c5:2e:06:4c:46:cc:e6:01:de:e0:a6:30: dc:59:15:e9:83:f4:e7:9f:56:89:07:ba:82:ad:bf:84:28:c4: c3:c6:5b:d4:e2:96:09:a3:03:7e:fb:8a:23:27:d7:68:51:60: 16:35:8b:2d:a7:69:4d:ea:22:48:9a:ea:da:a4:2b:f4:d9:1a: 3c:6b:ba:32:0d:fd:7f:a0:f5:14:ce:3e:14:6e:e8:24:2a:78: 7c:f2:11:14:17:71:04:93:a1:b3:ee:51:62:63:bd:16:df:e7: f0:80:be:4c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6WmaIoULzICjSLqp0URKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4 NThhNGMwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGUzNWI5MjMzOWM0ZTEzYzUzZGVkZjg0M2FmMDZlOTgxYmIwODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7+zBEqHz5029FEjg/NGOb/dR1Up X4nTIsSbr5+fS1LqZf7gQKZcaODl4z6RiDxtKmoUnFLU1pZAHHSOnlSgKd6egVJA FHF7y/eO8jjMoy1o/W0pJo/lEaL+vihOJGCsdOXzYXlgC9wPs5U4Dsu0cjexKavY QdwsLXq7F+dPUtJcXn5Vj43ji8yaaZGZ3exkPzTw98mSDGMD4/Q2NiYoQqJPuEc6 gvaYiGrZQUro6g5JPAiwq+GsfYIL3CTtLgZfhjimK68ngBq6ESi/Ma2CoOIIkuZP 0Vd+jAoM4POAyQvOfzOZNJJruBvN6EkF5FyPqDNBg+zk1aqnegU4K55SOQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCTjW5IznE4TxT3t+EOvBumBuwhAMB8GA1UdIwQY MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt MWMyODAwODMxYzY0LzEvSk9OYmtqT2NUaFBGUGUzNFE2OEc2WUc3Q0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0 LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZb6EAD BAFb6EQDBAK50sgwDQYJKoZIhvcNAQELBQADggEBACJi7lg/nJxUKTaxv2+MDMMX zj8tBDMtyLnCNg31lz0YI+E+UgyEho7xTZrVfFEhE5T0F8AJTwnofvYJJ55MiFdv AkFtp+MNWigCxibiUlYS2r9pHgK6qZifxCcYUKliwjIIOTciOb2bf6ktNzngrk3k Fh+dWeIPL5EapDPaVoIf+IRSMpHDP+EfGcxc0KH0kouS8k9LKsUuBkxGzOYB3uCm MNxZFemD9OefVokHuoKtv4QoxMPGW9TilgmjA377iiMn12hRYBY1iy2naU3qIkia 6tqkK/TZGjxrujIN/X+g9RTOPhRu6CQqeHzyERQXcQSTobPuUWJjvRbf5/CAvkw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:50 2026 by rpki-client