This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/JqdskFuFmziaPGBY-7Tw9Pq4w38.roa File: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (raw, json) Hash identifier: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418= Subject key identifier: 26:A7:6C:90:5B:85:9B:38:9A:3C:60:58:FB:B4:F0:F4:FA:B8:C3:7F Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C80534DCBDDE701D897DFDAE700E5D5 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/JqdskFuFmziaPGBY-7Tw9Pq4w38.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 91.190.184.0/24 maxlen: 24 194.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:4d:cb:dd:e7:01:d8:97:df:da:e7:00:e5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a76c905b859b389a3c6058fbb4f0f4fab8c37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:e5:3b:81:9c:ff:36:f6:d3:46:f2:ed:b3: 51:02:fb:ce:a4:1e:92:2f:28:3d:12:2a:fe:62:71: d3:fc:15:41:33:6f:aa:67:42:93:21:99:38:64:ea: a6:0a:27:5e:77:b9:0e:ee:0e:ca:53:1d:b0:24:b0: a4:da:85:79:9d:74:d5:d7:75:39:37:5b:70:56:f1: 37:46:17:28:b1:8a:4d:fe:e5:71:cc:a0:be:39:fe: 8a:a4:ad:2e:1c:47:4b:31:50:81:f7:a3:d0:68:9e: 62:ef:58:7f:fd:8e:f7:00:3b:03:a4:67:68:65:91: 18:b3:66:e2:2b:f6:fe:02:bc:df:68:24:56:29:17: e5:9f:7f:5a:70:b3:fc:77:2e:26:47:aa:d8:09:ed: 79:62:0f:0e:85:6e:52:ec:61:c1:a1:06:b8:87:4a: 0b:a0:4b:a0:c3:ae:de:7e:42:e1:55:bc:b1:50:38: 18:d4:e9:17:ab:4a:0b:78:b5:c3:31:65:56:0a:cb: 8c:b8:39:9d:60:84:7a:d9:7f:3d:48:86:f1:fe:8f: 45:e8:e8:93:88:a1:09:ad:06:d6:58:d7:4d:3b:e7: 4a:a1:16:59:25:e8:c8:fd:93:03:e4:8e:84:d4:0e: bd:6a:fb:c4:35:cb:bd:e4:82:b3:04:53:9c:0d:7b: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A7:6C:90:5B:85:9B:38:9A:3C:60:58:FB:B4:F0:F4:FA:B8:C3:7F X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/JqdskFuFmziaPGBY-7Tw9Pq4w38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.184.0/24 194.152.133.0/24 Signature Algorithm: sha256WithRSAEncryption 61:3a:75:79:09:f5:43:a6:70:99:f4:4a:2d:25:bc:8f:1f:30: d1:50:15:f0:cd:7a:e6:93:cf:b9:26:ae:f4:33:89:bf:ad:2d: ec:14:76:00:c1:1e:d7:03:09:e9:a8:0d:aa:ce:86:cc:99:16: e6:8a:f8:86:af:71:5c:a1:fc:ee:f8:63:67:4b:5e:91:18:f5: eb:4f:13:14:58:f6:e5:32:b5:ca:da:c0:73:2b:6a:ee:0a:f2: 15:2a:24:7f:a4:c9:cf:c0:e9:fa:4e:02:05:70:ff:98:43:30: c9:86:5e:85:1e:96:16:15:8e:ab:7d:46:20:3f:4c:df:71:7f: de:58:3b:bc:5c:ee:75:b0:7b:56:40:ea:88:b0:69:50:a4:8a: 1b:45:b5:71:01:89:e1:6d:81:8a:28:f0:09:2d:01:10:f7:c8: 23:13:a0:2a:00:80:00:ac:43:d3:9f:8f:a6:31:e8:69:9e:91: bf:2a:88:6e:76:15:f8:62:dc:7f:ec:b4:95:4e:07:d1:de:ae: a2:3b:66:72:cd:3a:65:33:dd:97:a4:b9:02:55:03:36:52:62: 64:d9:7b:f5:09:fa:f3:fc:b8:88:d5:0d:90:73:b8:c1:35:50: ab:00:54:48:e2:90:c7:24:21:4a:2b:c8:48:26:d1:05:c0:eb: 83:f3:06:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFNNy93nAdiX39rnAOXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE3NmM5MDViODU5YjM4OWEzYzYwNThmYmI0ZjBmNGZhYjhjMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulHlO4Gc/zb200by7bNRAvvOpB6S Lyg9Eir+YnHT/BVBM2+qZ0KTIZk4ZOqmCided7kO7g7KUx2wJLCk2oV5nXTV13U5 N1twVvE3RhcosYpN/uVxzKC+Of6KpK0uHEdLMVCB96PQaJ5i71h//Y73ADsDpGdo ZZEYs2biK/b+ArzfaCRWKRfln39acLP8dy4mR6rYCe15Yg8OhW5S7GHBoQa4h0oL oEugw67efkLhVbyxUDgY1OkXq0oLeLXDMWVWCsuMuDmdYIR62X89SIbx/o9F6OiT iKEJrQbWWNdNO+dKoRZZJejI/ZMD5I6E1A69avvENcu95IKzBFOcDXt+TwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCanbJBbhZs4mjxgWPu08PT6uMN/MB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvSnFkc2tGdUZtemlhUEdCWS03VHc5UHE0dzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW764AwQA wpiFMA0GCSqGSIb3DQEBCwUAA4IBAQBhOnV5CfVDpnCZ9EotJbyPHzDRUBXwzXrm k8+5Jq70M4m/rS3sFHYAwR7XAwnpqA2qzobMmRbmiviGr3Fcofzu+GNnS16RGPXr TxMUWPblMrXK2sBzK2ruCvIVKiR/pMnPwOn6TgIFcP+YQzDJhl6FHpYWFY6rfUYg P0zfcX/eWDu8XO51sHtWQOqIsGlQpIobRbVxAYnhbYGKKPAJLQEQ98gjE6AqAIAA rEPTn4+mMehpnpG/KohudhX4Ytx/7LSVTgfR3q6iO2ZyzTplM92XpLkCVQM2UmJk 2Xv1Cfrz/LiI1Q2Qc7jBNVCrAFRI4pDHJCFKK8hIJtEFwOuD8wZI -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:52 2026 by rpki-client