This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/jS-v8sE_nNDS2wE29fkwjQ61v88.roa File: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (raw, json) Hash identifier: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY= Subject key identifier: 8D:2F:AF:F2:C1:3F:9C:D0:D2:DB:01:36:F5:F9:30:8D:0E:B5:BF:CF Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019B7AC83A02740E594C9BA9278F741E8B86 Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/jS-v8sE_nNDS2wE29fkwjQ61v88.roa Signing time: Thu 01 Jan 2026 18:18:20 +0000 ROA not before: Thu 01 Jan 2026 18:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212151 IP address blocks: 91.213.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3a:02:74:0e:59:4c:9b:a9:27:8f:74:1e:8b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Jan 1 18:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d2faff2c13f9cd0d2db0136f5f9308d0eb5bfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:f5:54:94:3f:1e:b9:bf:2b:ca:9d:c9:b2: bc:f3:3e:da:f5:8f:58:79:65:f7:88:28:a0:c1:32: 2e:b3:c0:a6:54:46:38:31:54:80:67:99:1b:84:4f: b2:6e:16:46:71:bd:d3:02:68:84:1d:28:d5:78:0e: 66:cb:b1:ce:aa:2a:17:82:21:ae:42:7b:05:97:a9: 3b:82:f5:96:70:5c:84:a8:ad:c5:b3:47:37:f2:64: 1e:0e:0f:d0:2a:02:a3:3c:03:7a:1e:3b:54:10:e7: 2f:43:f1:ad:55:90:2d:3e:d0:7a:a6:d1:8c:e9:c7: 10:3a:5c:71:a2:2a:5d:91:bb:23:42:70:e5:a9:c8: 2d:84:39:08:cf:5d:16:1e:de:76:01:27:4a:aa:b4: 09:e8:9d:9c:42:88:a5:dc:df:0a:da:a4:44:b8:31: ca:16:72:74:d1:2b:d6:93:92:b5:ca:10:57:43:58: 55:07:a5:d8:27:a5:69:6d:86:da:3d:6a:4f:1a:f9: 62:14:54:0b:f1:b5:c2:f8:00:1f:b1:33:ee:8b:d3: 0a:7c:4a:83:a2:1d:fb:1b:c9:40:e4:f1:3f:9f:ab: ba:ec:b8:12:02:73:7f:d3:3a:09:bf:dd:b3:8e:65: c2:65:97:c5:ad:11:71:f3:f1:b6:54:bb:f1:08:8b: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:AF:F2:C1:3F:9C:D0:D2:DB:01:36:F5:F9:30:8D:0E:B5:BF:CF X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/jS-v8sE_nNDS2wE29fkwjQ61v88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.53.0/24 Signature Algorithm: sha256WithRSAEncryption 09:2a:f5:aa:cd:ce:5f:0d:9e:b9:2e:6e:b3:af:6c:6b:d5:9c: 0d:64:74:4d:dc:0f:03:89:89:7a:57:6c:02:e3:66:50:8a:b6: 63:08:f7:dc:a3:81:b7:09:6e:b7:5e:d8:79:d4:b0:24:8e:13: 3c:27:9a:e9:92:62:bc:3c:64:8f:31:cf:e4:17:05:6a:54:58: cc:08:51:28:da:cd:bd:19:83:2c:5b:bf:90:6d:b4:67:40:40: 44:29:ce:39:c1:4a:7a:cd:1a:15:6a:19:9b:7b:bf:10:d4:1d: 43:32:0f:95:19:0a:d4:26:9b:c2:7c:79:6d:88:74:27:f4:00: bf:2c:4a:13:58:b3:df:ff:9b:8a:30:1e:5b:24:dd:a3:97:34: 90:25:2b:ea:04:ae:f0:5a:d0:ea:95:95:78:30:87:f6:6b:d4: 92:d0:80:92:00:1d:67:f9:f1:3d:36:e5:a2:74:95:88:d9:93: 81:12:28:d8:f7:f5:34:01:08:06:88:77:32:29:5b:14:0f:4e: f8:b8:92:ba:98:b7:64:36:ea:cf:36:7a:b0:23:e4:84:76:36: bc:6b:7c:84:29:a9:b3:d6:24:02:f2:0f:35:d6:b6:a6:6e:e2: b1:76:ba:37:a0:7d:80:8a:bf:5f:1f:6c:21:b0:22:68:1b:fc: 40:06:70:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDoCdA5ZTJupJ490HouGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjYwMTAxMTgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDJmYWZmMmMxM2Y5Y2QwZDJkYjAxMzZmNWY5MzA4ZDBlYjViZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySv1VJQ/Hrm/K8qdybK88z7a9Y9Y eWX3iCigwTIus8CmVEY4MVSAZ5kbhE+ybhZGcb3TAmiEHSjVeA5my7HOqioXgiGu QnsFl6k7gvWWcFyEqK3Fs0c38mQeDg/QKgKjPAN6HjtUEOcvQ/GtVZAtPtB6ptGM 6ccQOlxxoipdkbsjQnDlqcgthDkIz10WHt52ASdKqrQJ6J2cQoil3N8K2qREuDHK FnJ00SvWk5K1yhBXQ1hVB6XYJ6VpbYbaPWpPGvliFFQL8bXC+AAfsTPui9MKfEqD oh37G8lA5PE/n6u67LgSAnN/0zoJv92zjmXCZZfFrRFx8/G2VLvxCIs8qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0vr/LBP5zQ0tsBNvX5MI0Otb/PMB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvalMtdjhzRV9uTkRTMndFMjlma3dqUTYxdjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9U1MA0G CSqGSIb3DQEBCwUAA4IBAQAJKvWqzc5fDZ65Lm6zr2xr1ZwNZHRN3A8DiYl6V2wC 42ZQirZjCPfco4G3CW63Xth51LAkjhM8J5rpkmK8PGSPMc/kFwVqVFjMCFEo2s29 GYMsW7+QbbRnQEBEKc45wUp6zRoVahmbe78Q1B1DMg+VGQrUJpvCfHltiHQn9AC/ LEoTWLPf/5uKMB5bJN2jlzSQJSvqBK7wWtDqlZV4MIf2a9SS0ICSAB1n+fE9NuWi dJWI2ZOBEijY9/U0AQgGiHcyKVsUD074uJK6mLdkNurPNnqwI+SEdja8a3yEKamz 1iQC8g811rambuKxdro3oH2Air9fH2whsCJoG/xABnBz -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:12 2026 by rpki-client