This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/JbQaL2RBjoHVTuti7UfCcrYJr_A.roa File: JbQaL2RBjoHVTuti7UfCcrYJr_A.roa (raw, json) Hash identifier: iaksrkAEfaFgIKF/4+Tz3YZIiRYiBmDSf/pDYQdploo= Subject key identifier: 25:B4:1A:2F:64:41:8E:81:D5:4E:EB:62:ED:47:C2:72:B6:09:AF:F0 Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7 Certificate serial: 019B7BA33915EDCBD529155A636BEBD896E1 Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/JbQaL2RBjoHVTuti7UfCcrYJr_A.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44557 IP address blocks: 91.214.148.0/24 maxlen: 24 91.214.149.0/24 maxlen: 24 91.214.150.0/24 maxlen: 24 91.214.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:39:15:ed:cb:d5:29:15:5a:63:6b:eb:d8:96:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25b41a2f64418e81d54eeb62ed47c272b609aff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:53:e3:77:a0:d9:53:ba:9d:b5:26:5b:80: e6:91:37:0f:eb:b2:aa:5f:57:c1:f2:b5:fd:41:11: b4:86:38:0b:d9:53:3d:ab:05:a7:ef:d3:e4:c2:f1: 78:a7:71:7d:56:cf:65:e5:46:3e:20:8f:d0:ff:a2: 45:c6:9f:4f:43:43:91:94:41:31:30:0e:e1:68:58: 1b:88:1b:7f:c1:99:4a:38:dd:b2:5c:95:71:66:fc: e4:7f:53:33:5c:c8:4d:1f:a0:41:7b:18:6a:30:8e: 8a:27:d9:a5:b6:38:bb:e9:d2:6c:c7:36:ea:a0:27: 3c:14:38:c0:c6:2b:f2:b9:b5:bb:75:bf:c8:77:7d: 1d:0a:8c:b8:ef:68:5e:e6:6a:28:6d:34:9e:84:c3: 37:ad:e5:ae:fe:5d:8f:ab:3d:50:f3:af:8e:1e:0e: 93:48:6d:29:b4:f5:0e:bf:27:89:bc:1c:4a:37:90: 61:ee:be:3c:66:5d:72:48:78:24:12:1f:90:56:a8: bc:87:b7:6c:e8:ed:2b:e4:fd:d2:53:40:12:ba:84: a5:c0:56:c6:3e:de:8b:01:59:47:4d:00:c7:7a:70: f6:5b:7b:14:1c:34:18:0d:1b:b3:ef:96:04:b3:69: 4c:56:cf:f5:ff:16:b7:e9:69:19:51:f4:31:25:37: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:1A:2F:64:41:8E:81:D5:4E:EB:62:ED:47:C2:72:B6:09:AF:F0 X509v3 Authority Key Identifier: keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/JbQaL2RBjoHVTuti7UfCcrYJr_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.148.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:e5:ac:9a:27:8c:23:6d:8b:74:4a:25:e9:41:9e:0a:b7:c9: 9c:04:fb:9a:92:59:99:7d:a0:c6:7e:e9:74:26:1d:b8:68:bd: 1a:6a:a1:7d:b0:74:ed:f1:cf:00:f5:c0:8b:9c:a1:ee:67:ce: d1:d3:1c:28:ca:c3:66:67:8f:86:83:00:cf:ce:ea:fe:7a:b1: 49:66:da:5c:b4:b5:a3:5e:7f:9d:ad:23:e5:25:0c:6d:ad:f3: eb:83:b3:d2:5c:03:ec:d0:bd:f0:97:6e:41:62:41:34:8b:5e: 29:01:ce:3b:cb:83:72:3b:d9:1c:7c:ac:54:dd:07:29:14:4a: 08:2e:ef:6f:10:e7:4e:01:7c:5b:93:cc:76:a9:f2:59:dc:68: 93:a6:6a:0c:65:13:62:e1:d0:27:44:04:09:0c:72:3e:ba:09: 26:11:d7:f0:3a:68:7e:3b:fb:1b:31:13:ea:ce:5b:b5:59:4b: 00:25:c6:55:58:1d:06:f8:2e:a6:d2:4a:74:71:fb:aa:39:7c: 8c:90:dd:d8:f9:1b:d9:71:64:d3:5d:2a:14:c7:98:1b:55:d9: 13:3d:94:68:72:36:49:b4:fb:a4:02:3a:f5:4d:61:fb:a9:24: 6d:d4:04:02:f9:13:4c:29:cc:ca:e8:72:39:6d:14:c9:d4:97: 61:bd:43:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozkV7cvVKRVaY2vr2JbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjQyYjFmNWRkNzNhZjdkM2FkMDU0ODdlMDg2MDAxZGZm OWIyZTcwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWI0MWEyZjY0NDE4ZTgxZDU0ZWViNjJlZDQ3YzI3MmI2MDlhZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBZT43eg2VO6nbUmW4DmkTcP67Kq X1fB8rX9QRG0hjgL2VM9qwWn79PkwvF4p3F9Vs9l5UY+II/Q/6JFxp9PQ0ORlEEx MA7haFgbiBt/wZlKON2yXJVxZvzkf1MzXMhNH6BBexhqMI6KJ9mltji76dJsxzbq oCc8FDjAxivyubW7db/Id30dCoy472he5moobTSehMM3reWu/l2Pqz1Q86+OHg6T SG0ptPUOvyeJvBxKN5Bh7r48Zl1ySHgkEh+QVqi8h7ds6O0r5P3SU0ASuoSlwFbG Pt6LAVlHTQDHenD2W3sUHDQYDRuz75YEs2lMVs/1/xa36WkZUfQxJTf2VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCW0Gi9kQY6B1U7rYu1HwnK2Ca/wMB8GA1UdIwQY MBaAFMxkKx9d1zr3060FSH4IYAHf+bLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2Mt NWQxNGEwZmY2ZGVlLzEvSmJRYUwyUkJqb0hWVHV0aTdVZkNjcllKcl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2MtNWQxNGEwZmY2ZGVl LzEvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9aUMA0G CSqGSIb3DQEBCwUAA4IBAQBd5ayaJ4wjbYt0SiXpQZ4Kt8mcBPuaklmZfaDGful0 Jh24aL0aaqF9sHTt8c8A9cCLnKHuZ87R0xwoysNmZ4+GgwDPzur+erFJZtpctLWj Xn+drSPlJQxtrfPrg7PSXAPs0L3wl25BYkE0i14pAc47y4NyO9kcfKxU3QcpFEoI Lu9vEOdOAXxbk8x2qfJZ3GiTpmoMZRNi4dAnRAQJDHI+ugkmEdfwOmh+O/sbMRPq zlu1WUsAJcZVWB0G+C6m0kp0cfuqOXyMkN3Y+RvZcWTTXSoUx5gbVdkTPZRocjZJ tPukAjr1TWH7qSRt1AQC+RNMKczK6HI5bRTJ1JdhvUMN -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:48 2026 by rpki-client