This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa File: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (raw, json) Hash identifier: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno= Subject key identifier: 25:F9:76:1D:93:AF:D1:A3:A9:4E:5A:F3:7D:38:F0:4A:36:9A:6C:10 Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019B7E387DF09E98D60A52FA07F3487D7920 Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206926 IP address blocks: 91.126.90.0/23 maxlen: 24 91.126.101.0/24 maxlen: 24 91.126.102.0/24 maxlen: 24 91.126.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7d:f0:9e:98:d6:0a:52:fa:07:f3:48:7d:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25f9761d93afd1a3a94e5af37d38f04a369a6c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:3f:c1:9b:cb:26:0b:e9:4f:32:ea:52:77: e8:d6:29:67:d4:61:c5:4d:88:de:73:37:00:84:fe: b5:e2:61:44:e8:14:dc:18:5d:3d:10:f5:a5:3d:1b: a4:3b:52:9e:8c:95:7a:fd:2e:42:cc:68:8e:e7:3c: ec:b0:fd:6b:a4:cc:5c:7b:33:c5:de:67:ee:1b:85: 7e:66:52:7f:d1:0b:fe:ab:38:72:aa:21:53:7c:51: 3d:b4:06:97:90:8c:9e:e9:dd:11:12:81:f1:43:99: 89:ac:a3:cd:31:45:0b:fc:2c:9b:6b:57:ac:ac:6e: c7:5a:8f:fb:c5:4b:af:04:5c:47:c3:1f:c2:66:c6: d6:2e:f4:85:9b:9c:54:1f:e4:e6:13:1e:fb:0a:99: cc:97:90:52:e0:79:96:ca:eb:5c:79:9e:1a:5b:98: 54:a9:ed:a5:41:df:6d:dc:02:dd:8c:44:fb:d5:01: 0b:b8:d0:55:43:65:1a:67:8e:9b:d2:5e:8d:ce:50: 51:dd:6c:63:59:46:93:c0:a0:cf:69:27:71:30:ef: 8c:db:a3:d8:9e:fb:1e:5c:4d:33:78:4c:e6:97:b2: 85:0c:0f:72:b1:e8:d9:59:22:1c:b5:36:eb:97:1c: c3:f1:0b:7d:48:7d:28:b9:28:8b:c5:fa:95:49:62: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:76:1D:93:AF:D1:A3:A9:4E:5A:F3:7D:38:F0:4A:36:9A:6C:10 X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.126.90.0/23 91.126.101.0-91.126.103.255 Signature Algorithm: sha256WithRSAEncryption 2e:56:4e:57:68:97:a6:9f:53:52:0b:6e:28:f6:79:9d:0e:e8: 87:bf:f0:f8:17:b8:ba:36:4b:6d:1f:b1:8d:b6:6d:2f:dc:66: d1:31:84:41:9e:74:78:dc:f8:f1:9d:ae:9c:ca:da:87:55:0c: 2f:d9:cd:80:fd:61:dc:02:36:33:6b:0e:ba:9f:d4:02:79:b8: cb:71:b3:ac:f9:f2:24:9d:c1:81:14:b9:74:db:e2:23:76:11: 7a:b5:28:ac:43:07:3f:9a:07:63:7a:79:42:ba:af:3a:20:58: c8:cc:2e:2a:a0:ba:d1:93:f0:b8:30:f3:39:b5:2f:96:09:c4: 91:c4:3a:45:03:3c:b6:89:0c:6c:d4:9a:89:86:73:81:07:dd: 87:0c:88:66:2a:d9:14:f3:32:16:4b:fc:29:35:d9:de:f1:58: be:55:41:4d:b0:a3:ea:2e:98:e2:63:a0:69:c1:d5:90:73:47: c0:04:46:ff:0c:c0:72:29:5b:17:9c:65:5e:62:a0:bf:43:af: af:96:61:5a:fe:01:0a:93:43:3b:0d:d7:32:d1:67:6f:a8:77: f0:21:d3:83:47:a1:ae:9d:a8:34:2e:3a:e3:3b:eb:bc:dd:88: ef:17:58:46:3d:1b:fc:fe:f4:aa:6d:57:d4:9f:33:09:b4:45: a0:5b:c9:a3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OH3wnpjWClL6B/NIfXkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWY5NzYxZDkzYWZkMWEzYTk0ZTVhZjM3ZDM4ZjA0YTM2OWE2YzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IA/wZvLJgvpTzLqUnfo1iln1GHF TYjeczcAhP614mFE6BTcGF09EPWlPRukO1KejJV6/S5CzGiO5zzssP1rpMxcezPF 3mfuG4V+ZlJ/0Qv+qzhyqiFTfFE9tAaXkIye6d0REoHxQ5mJrKPNMUUL/Cyba1es rG7HWo/7xUuvBFxHwx/CZsbWLvSFm5xUH+TmEx77CpnMl5BS4HmWyutceZ4aW5hU qe2lQd9t3ALdjET71QELuNBVQ2UaZ46b0l6NzlBR3WxjWUaTwKDPaSdxMO+M26PY nvseXE0zeEzml7KFDA9ysejZWSIctTbrlxzD8Qt9SH0ouSiLxfqVSWKKsQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCX5dh2Tr9GjqU5a83048Eo2mmwQMB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvSmZsMkhaT3YwYU9wVGxyemZUandTamFhYkJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBW35aMAwD BABbfmUDBANbfmAwDQYJKoZIhvcNAQELBQADggEBAC5WTldol6afU1ILbij2eZ0O 6Ie/8PgXuLo2S20fsY22bS/cZtExhEGedHjc+PGdrpzK2odVDC/ZzYD9YdwCNjNr Drqf1AJ5uMtxs6z58iSdwYEUuXTb4iN2EXq1KKxDBz+aB2N6eUK6rzogWMjMLiqg utGT8Lgw8zm1L5YJxJHEOkUDPLaJDGzUmomGc4EH3YcMiGYq2RTzMhZL/Ck12d7x WL5VQU2wo+oumOJjoGnB1ZBzR8AERv8MwHIpWxecZV5ioL9Dr6+WYVr+AQqTQzsN 1zLRZ2+od/Ah04NHoa6dqDQuOuM767zdiO8XWEY9G/z+9KptV9SfMwm0RaBbyaM= -----END CERTIFICATE-----Generated at Mon Jan 26 19:53:29 2026 by rpki-client