This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jdwpJk36RgMYVelIWOx1i2eSrmg.roa File: jdwpJk36RgMYVelIWOx1i2eSrmg.roa (raw, json) Hash identifier: 3RXvujgEX+JeLYLzw1+B8dgtbcRU/0WaNNmFqiFKn+Y= Subject key identifier: 8D:DC:29:26:4D:FA:46:03:18:55:E9:48:58:EC:75:8B:67:92:AE:68 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1374C0506CB390666E9FF6A5CDA26E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jdwpJk36RgMYVelIWOx1i2eSrmg.roa Signing time: Fri 02 Jan 2026 00:20:08 +0000 ROA not before: Fri 02 Jan 2026 00:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 45.81.154.0/24 maxlen: 24 45.90.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:74:c0:50:6c:b3:90:66:6e:9f:f6:a5:cd:a2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ddc29264dfa46031855e94858ec758b6792ae68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:80:d7:6f:e3:5d:27:b7:4d:2c:39:cf:e0: f8:7f:85:ef:84:8b:a5:97:dd:80:de:8b:d1:bc:e4: 02:5f:d1:94:92:12:5e:79:3d:74:b4:3b:1e:df:ab: ea:ab:66:1a:5a:63:43:b2:aa:db:c3:e2:b0:57:36: 37:14:cb:98:0b:53:79:f9:57:b7:ff:0b:31:f3:dd: 63:3c:ba:02:5c:51:68:9d:2a:2f:b2:02:13:7a:e0: 18:20:30:39:d7:e6:82:62:7f:31:74:29:24:20:e9: 72:8f:05:d3:6c:d2:6a:51:64:6a:e9:02:30:d2:fc: a2:b3:b8:f7:85:ba:a1:9c:0a:0c:9d:39:02:b7:cc: d4:22:93:84:99:fb:85:17:a5:4a:b2:68:47:b4:11: e8:33:36:2c:75:e4:f8:ef:63:c0:33:68:d8:c8:f9: ac:6c:26:d3:c3:b9:00:96:1f:4b:7f:66:cd:eb:0d: 0a:d1:98:eb:a6:40:e2:f0:45:63:b5:50:ce:c9:e0: 64:9c:60:ba:c0:88:8d:be:f2:17:93:0f:3c:44:20: 83:f9:05:5c:d3:44:ed:3f:e6:c3:9a:1c:3c:e8:56: df:d0:6b:f9:18:28:b8:fc:f1:7c:9e:7e:7b:91:bf: 18:c4:26:eb:30:6e:79:d3:ae:38:48:77:e2:45:86: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:29:26:4D:FA:46:03:18:55:E9:48:58:EC:75:8B:67:92:AE:68 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jdwpJk36RgMYVelIWOx1i2eSrmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.154.0/24 45.90.16.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b6:a1:10:78:2d:13:cd:3f:ef:37:10:8c:ba:5d:05:dc:89: f8:6f:9b:3b:0c:9d:ac:a0:e4:3c:5b:14:57:da:7c:41:fc:f0: 87:d8:28:d7:81:00:8b:ff:1e:b6:6e:65:14:9e:a8:d8:71:9d: 5b:af:da:4a:fd:78:30:19:af:5b:f9:cd:23:57:b3:76:9b:37: f2:c3:50:c6:18:c9:44:5d:87:11:67:f7:b7:63:c3:11:8a:96: 50:1e:29:93:18:94:54:e1:25:65:12:9e:3f:d0:b7:29:77:d0: 2a:65:cd:34:d9:e5:56:4e:49:f5:6a:77:c8:e9:e5:e3:51:09: f2:05:96:d3:b1:6b:10:7d:b0:0a:23:f0:cb:6b:48:94:80:6f: f4:e3:7a:14:10:b0:1e:15:7c:da:6d:9c:ff:2e:57:ba:21:b7: f9:c3:70:84:ab:e6:7f:51:80:82:b8:f0:74:22:be:70:72:a8: 13:53:40:9c:4e:ff:66:04:db:7f:ca:54:09:2e:e8:5a:af:b5: 44:dd:22:01:74:70:62:a0:20:a0:cf:a8:73:67:15:81:f7:0f: 19:a0:fa:b0:9d:4f:2e:57:f2:52:8b:86:03:dd:c4:ac:70:b6: e8:59:1b:5d:0a:bb:64:a6:6c:a1:25:e9:7e:4a:44:59:fb:7a: f9:84:de:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E3TAUGyzkGZun/alzaJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGRjMjkyNjRkZmE0NjAzMTg1NWU5NDg1OGVjNzU4YjY3OTJhZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdiA12/jXSe3TSw5z+D4f4XvhIul l92A3ovRvOQCX9GUkhJeeT10tDse36vqq2YaWmNDsqrbw+KwVzY3FMuYC1N5+Ve3 /wsx891jPLoCXFFonSovsgITeuAYIDA51+aCYn8xdCkkIOlyjwXTbNJqUWRq6QIw 0vyis7j3hbqhnAoMnTkCt8zUIpOEmfuFF6VKsmhHtBHoMzYsdeT472PAM2jYyPms bCbTw7kAlh9Lf2bN6w0K0ZjrpkDi8EVjtVDOyeBknGC6wIiNvvIXkw88RCCD+QVc 00TtP+bDmhw86Fbf0Gv5GCi4/PF8nn57kb8YxCbrMG550644SHfiRYYr1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI3cKSZN+kYDGFXpSFjsdYtnkq5oMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvamR3cEprMzZSZ01ZVmVsSVdPeDFpMmVTcm1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGaAwQA LVoQMA0GCSqGSIb3DQEBCwUAA4IBAQAltqEQeC0TzT/vNxCMul0F3In4b5s7DJ2s oOQ8WxRX2nxB/PCH2CjXgQCL/x62bmUUnqjYcZ1br9pK/XgwGa9b+c0jV7N2mzfy w1DGGMlEXYcRZ/e3Y8MRipZQHimTGJRU4SVlEp4/0Lcpd9AqZc002eVWTkn1anfI 6eXjUQnyBZbTsWsQfbAKI/DLa0iUgG/043oUELAeFXzabZz/Lle6Ibf5w3CEq+Z/ UYCCuPB0Ir5wcqgTU0CcTv9mBNt/ylQJLuhar7VE3SIBdHBioCCgz6hzZxWB9w8Z oPqwnU8uV/JSi4YD3cSscLboWRtdCrtkpmyhJel+SkRZ+3r5hN5g -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:30 2026 by rpki-client