This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa File: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (raw, json) Hash identifier: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g= Subject key identifier: 8D:FA:5D:B8:F3:56:90:D2:E0:BC:18:C8:22:B4:6C:2A:82:E1:57:74 Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Certificate serial: 019B7F15EEBBEF966656D0277420050E1C6A Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 91.205.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ee:bb:ef:96:66:56:d0:27:74:20:05:0e:1c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dfa5db8f35690d2e0bc18c822b46c2a82e15774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:4c:e1:f4:af:e5:c8:25:86:f0:39:5a:1a: f4:3b:aa:69:20:33:f7:74:24:f1:e6:e5:bc:a5:f0: 7d:1e:ae:dc:7a:65:e5:1a:9e:d3:1b:70:c6:d8:c8: a8:d7:83:71:83:d7:a2:39:a2:e4:1e:46:b7:ed:00: 5f:24:09:8f:a1:90:bd:53:36:b6:e5:05:02:39:3c: e3:ea:f4:6d:0f:14:7a:26:6d:86:d0:1e:45:27:fa: 4f:e4:ee:8b:a7:f3:e7:3d:84:d0:b3:1a:96:ae:ce: fd:05:3e:72:89:94:7b:3a:00:57:71:a3:c2:06:e4: 05:42:d7:09:9c:c1:92:e6:cf:b0:9d:32:0e:ad:9f: 49:9d:d4:85:c1:5c:0f:9a:6f:34:fc:98:80:7a:84: f8:71:61:9d:f7:82:da:ef:9c:f4:0a:12:19:68:4d: 0a:05:62:53:2e:a7:ea:dd:18:72:9f:08:8f:44:d9: 9c:89:93:02:4e:52:0e:85:22:99:e2:f9:26:fa:dd: 91:19:1e:6c:9a:5e:0e:ef:9a:2f:5b:5c:41:7c:90: ed:9f:2f:76:62:3d:51:61:a7:0d:47:f0:68:98:e0: dc:44:b2:1c:9d:d3:d3:a9:5d:61:6c:6e:ed:44:e3: 5c:d8:5e:73:f6:d2:5e:67:53:70:9b:4a:8d:52:8d: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:5D:B8:F3:56:90:D2:E0:BC:18:C8:22:B4:6C:2A:82:E1:57:74 X509v3 Authority Key Identifier: keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.125.0/24 Signature Algorithm: sha256WithRSAEncryption 58:f2:7b:51:91:a4:96:33:70:44:1a:a1:02:46:e2:45:d8:48: 2b:35:d5:b0:e2:e7:5d:e0:aa:75:13:da:84:d7:87:1d:04:38: cd:a9:d2:f6:38:9e:2c:08:04:6c:da:1c:78:fd:e3:8d:00:d4: f3:47:33:6f:df:4c:8f:85:ae:9b:61:2f:ac:13:87:2a:a0:a4: 04:ff:b8:5e:19:6f:59:06:dc:02:06:ad:9d:6b:18:c2:ff:12: a6:53:3d:1c:68:51:65:58:86:15:f3:ba:ec:16:03:e0:83:3f: b0:91:f0:67:58:b2:36:de:ee:71:49:68:0c:44:fa:82:c6:a8: 43:14:d0:86:1a:e5:e1:79:eb:4e:a7:21:39:5b:e9:6c:e6:90: 85:a7:7b:92:04:eb:88:93:b9:6a:d5:b5:79:1b:9b:b5:81:19: cc:6b:4d:4b:c6:e5:f4:b8:92:94:b9:44:b8:cd:d2:d9:1a:df: ce:32:00:fb:a7:f1:06:63:c3:4e:b8:b1:23:c3:f3:74:5e:5b: a7:56:fd:45:cd:56:56:b5:37:e5:63:91:ec:f7:d7:2f:57:24: c1:3a:71:f8:ad:bd:4c:1f:d6:f5:48:29:28:22:ef:49:22:d1: fb:d3:50:b4:fc:8f:e3:15:6a:5d:62:01:ee:82:44:6e:18:9f: f2:e1:99:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe6775ZmVtAndCAFDhxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2 Y2U0NzkwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGZhNWRiOGYzNTY5MGQyZTBiYzE4YzgyMmI0NmMyYTgyZTE1Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsRM4fSv5cglhvA5Whr0O6ppIDP3 dCTx5uW8pfB9Hq7cemXlGp7TG3DG2Mio14Nxg9eiOaLkHka37QBfJAmPoZC9Uza2 5QUCOTzj6vRtDxR6Jm2G0B5FJ/pP5O6Lp/PnPYTQsxqWrs79BT5yiZR7OgBXcaPC BuQFQtcJnMGS5s+wnTIOrZ9JndSFwVwPmm80/JiAeoT4cWGd94La75z0ChIZaE0K BWJTLqfq3RhynwiPRNmciZMCTlIOhSKZ4vkm+t2RGR5sml4O75ovW1xBfJDtny92 Yj1RYacNR/BomODcRLIcndPTqV1hbG7tRONc2F5z9tJeZ1Nwm0qNUo2BHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI36XbjzVpDS4LwYyCK0bCqC4Vd0MB8GA1UdIwQY MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt NTAxMGQwNWY5OWE4LzEvamZwZHVQTldrTkxndkJqSUlyUnNLb0xoVjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4 LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW819MA0G CSqGSIb3DQEBCwUAA4IBAQBY8ntRkaSWM3BEGqECRuJF2EgrNdWw4udd4Kp1E9qE 14cdBDjNqdL2OJ4sCARs2hx4/eONANTzRzNv30yPha6bYS+sE4cqoKQE/7heGW9Z BtwCBq2daxjC/xKmUz0caFFlWIYV87rsFgPggz+wkfBnWLI23u5xSWgMRPqCxqhD FNCGGuXheetOpyE5W+ls5pCFp3uSBOuIk7lq1bV5G5u1gRnMa01LxuX0uJKUuUS4 zdLZGt/OMgD7p/EGY8NOuLEjw/N0XlunVv1FzVZWtTflY5Hs99cvVyTBOnH4rb1M H9b1SCkoIu9JItH701C0/I/jFWpdYgHugkRuGJ/y4Zn5 -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:32 2026 by rpki-client