This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa File: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (raw, json) Hash identifier: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA= Subject key identifier: 24:D0:E8:3D:4F:DD:D0:89:88:5D:59:AB:02:7E:C7:A9:BF:DD:3E:E1 Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Certificate serial: 019B7DC9D4F415F85F158A3CA76936825CED Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa Signing time: Fri 02 Jan 2026 08:18:57 +0000 ROA not before: Fri 02 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212947 IP address blocks: 93.157.187.0/24 maxlen: 24 206.204.104.0/24 maxlen: 24 206.204.105.0/24 maxlen: 24 206.204.106.0/24 maxlen: 24 206.204.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d4:f4:15:f8:5f:15:8a:3c:a7:69:36:82:5c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Validity Not Before: Jan 2 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d0e83d4fddd089885d59ab027ec7a9bfdd3ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:a7:f8:dc:81:d7:97:77:1c:84:4d:f6:d7: 57:a7:1d:12:93:57:f2:35:fa:30:4a:b0:6c:52:28: 83:8f:81:5a:d7:4d:9b:be:c0:a7:06:76:c3:b3:ce: 11:8c:73:36:fe:56:be:15:28:c8:a3:1a:39:7a:f3: 5c:37:69:32:38:b3:0f:f0:e0:e4:aa:28:4e:c4:4a: 34:8d:a8:ef:31:1c:8a:e9:b8:0e:67:52:0b:7b:75: 7f:70:50:ce:0d:fb:73:0c:5c:ee:2a:bf:40:c3:fd: 80:22:68:43:7e:2e:50:fe:ba:c6:d3:1c:15:9c:17: 06:02:a9:dc:14:39:54:21:1e:3f:b3:e1:1f:9a:a1: 00:81:af:e4:f1:10:4c:7b:4b:c9:41:a5:9f:59:5d: 90:d8:56:a4:5d:49:3b:27:2a:c4:3f:60:2a:d1:e9: 44:6e:53:81:c5:31:2b:7e:48:4f:24:e3:56:47:4a: 67:52:d8:d6:47:d9:0e:44:a0:56:07:30:db:d6:11: cf:bf:ac:f9:d4:b9:6d:3d:5d:19:e6:ad:c7:90:34: 2b:82:8a:53:93:a4:32:52:0b:e2:1b:a9:db:20:88: 52:f5:f0:e7:67:f2:d6:35:09:e9:c5:c6:a4:4a:d8: 33:76:53:0a:ca:43:a2:6f:15:e7:f1:b5:0b:cd:7e: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:E8:3D:4F:DD:D0:89:88:5D:59:AB:02:7E:C7:A9:BF:DD:3E:E1 X509v3 Authority Key Identifier: keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.187.0/24 206.204.104.0/22 Signature Algorithm: sha256WithRSAEncryption 78:db:04:47:8f:bc:bb:6c:17:8a:df:81:8a:53:c9:1b:8c:4e: 70:0f:0c:aa:91:0c:af:86:0c:85:8a:f8:d4:52:38:17:47:f0: 1d:66:3b:c7:ca:02:8c:fe:70:42:7c:74:04:68:f2:d1:4f:c1: 9d:37:9f:b8:4f:e7:8a:ab:98:7b:44:45:5f:12:69:02:21:01: 8f:45:7c:bb:5b:bc:54:3a:f0:4b:e0:8d:c3:2a:2b:c8:cd:5e: 29:99:6e:9d:05:62:90:8c:d8:76:ff:9c:9c:5f:b5:3a:15:88: a2:f9:d5:94:bd:85:07:c2:f3:c4:b3:21:ba:7c:49:82:93:dd: 57:64:6a:3b:2e:7a:db:56:fb:bd:5b:7d:c5:24:8c:fa:e5:cf: 01:c0:62:57:9f:57:de:72:59:2f:71:cd:d4:33:bb:00:cc:e2: ec:d7:f1:73:aa:56:8e:33:30:fe:db:2b:86:c9:29:5d:05:98: 38:b1:12:ee:54:44:2a:44:73:76:e5:ba:b1:7f:43:3b:be:42: e4:79:ba:a4:f1:56:3d:2b:a4:06:9d:f0:25:2a:0a:20:36:cb: 19:8c:bf:41:d6:1c:95:05:51:87:c9:92:9e:2c:c4:db:2b:c7: 4f:c8:2c:df:1f:62:20:54:b0:00:72:a4:41:65:22:05:54:8d: 21:64:69:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ydT0FfhfFYo8p2k2glztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi NWJiODkwHhcNMjYwMTAyMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQwZTgzZDRmZGRkMDg5ODg1ZDU5YWIwMjdlYzdhOWJmZGQzZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLCn+NyB15d3HIRN9tdXpx0Sk1fy NfowSrBsUiiDj4Fa102bvsCnBnbDs84RjHM2/la+FSjIoxo5evNcN2kyOLMP8ODk qihOxEo0jajvMRyK6bgOZ1ILe3V/cFDODftzDFzuKr9Aw/2AImhDfi5Q/rrG0xwV nBcGAqncFDlUIR4/s+EfmqEAga/k8RBMe0vJQaWfWV2Q2FakXUk7JyrEP2Aq0elE blOBxTErfkhPJONWR0pnUtjWR9kORKBWBzDb1hHPv6z51LltPV0Z5q3HkDQrgopT k6QyUgviG6nbIIhS9fDnZ/LWNQnpxcakStgzdlMKykOibxXn8bULzX7h3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCTQ6D1P3dCJiF1ZqwJ+x6m/3T7hMB8GA1UdIwQY MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt M2E4YTYxMDA2YTRmLzEvSk5Eb1BVX2QwSW1JWFZtckFuN0hxYl9kUHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXZ27AwQC zsxoMA0GCSqGSIb3DQEBCwUAA4IBAQB42wRHj7y7bBeK34GKU8kbjE5wDwyqkQyv hgyFivjUUjgXR/AdZjvHygKM/nBCfHQEaPLRT8GdN5+4T+eKq5h7REVfEmkCIQGP RXy7W7xUOvBL4I3DKivIzV4pmW6dBWKQjNh2/5ycX7U6FYii+dWUvYUHwvPEsyG6 fEmCk91XZGo7LnrbVvu9W33FJIz65c8BwGJXn1feclkvcc3UM7sAzOLs1/FzqlaO MzD+2yuGySldBZg4sRLuVEQqRHN25bqxf0M7vkLkebqk8VY9K6QGnfAlKgogNssZ jL9B1hyVBVGHyZKeLMTbK8dPyCzfH2IgVLAAcqRBZSIFVI0hZGmm -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:55 2026 by rpki-client