This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa File: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (raw, json) Hash identifier: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE= Subject key identifier: 24:C4:26:17:21:37:69:0B:E1:53:2F:A7:9A:95:55:E9:FE:DF:F0:B3 Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Certificate serial: 019B7B3656E0EACF5E4ECCB0192B144704C4 Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29657 IP address blocks: 45.66.104.0/22 maxlen: 22 45.132.100.0/22 maxlen: 24 45.132.100.0/24 maxlen: 24 45.132.101.0/24 maxlen: 24 45.132.102.0/24 maxlen: 24 45.132.103.0/24 maxlen: 24 2a14:4d80::/32 maxlen: 32 2a14:4d87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:56:e0:ea:cf:5e:4e:cc:b0:19:2b:14:47:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24c426172137690be1532fa79a9555e9fedff0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:ac:aa:b0:9d:e1:0c:8b:3d:a3:45:8f:8f: d7:4f:43:d9:29:c4:f0:9d:21:83:a2:84:50:a7:6c: ad:df:42:9a:80:ac:d8:88:5f:aa:cb:ce:86:c6:c4: 8a:17:63:02:ce:90:bf:43:45:b0:14:74:da:7b:15: a2:9d:5f:d4:01:c5:86:34:66:f6:4d:aa:c5:d0:cc: db:fe:d3:50:89:c9:0d:20:e7:98:8b:1b:f4:3a:8e: e3:3c:c4:44:78:57:a9:68:cc:05:99:01:c4:e6:6b: d0:a4:7d:89:00:ad:92:7f:19:90:19:68:7a:5f:6b: e4:4a:3c:b1:f2:84:7e:e0:c1:04:fe:8a:79:98:5d: 7a:db:bf:db:f6:ce:62:04:b5:37:e4:f2:bd:a6:f5: 21:a0:eb:ed:7b:63:ee:01:ca:9c:ef:61:43:7a:8d: ff:c3:11:0d:9d:6d:86:cd:77:85:ed:46:ad:76:b0: f3:27:09:d0:fb:78:12:db:4e:30:45:d8:ea:5f:cc: 7c:5e:08:d7:0b:bd:ef:23:c6:20:e3:b6:8f:f1:cf: 98:a7:eb:65:3e:8c:8f:c5:34:10:f1:34:6f:25:a1: 54:93:c1:d3:8b:5f:63:0b:78:10:c9:f0:c8:d9:ac: 69:1c:d5:75:3b:b8:6a:6d:72:bf:e9:dc:0b:ee:8e: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:26:17:21:37:69:0B:E1:53:2F:A7:9A:95:55:E9:FE:DF:F0:B3 X509v3 Authority Key Identifier: keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.104.0/22 45.132.100.0/22 IPv6: 2a14:4d80::/32 2a14:4d87::/32 Signature Algorithm: sha256WithRSAEncryption 49:dd:2a:0c:68:8d:fa:2e:5d:8f:3c:d3:88:03:66:af:26:75: 71:6a:c0:37:f3:55:d6:35:1d:98:fc:f9:76:34:c6:64:be:52: 5c:ff:02:6b:a3:cb:57:05:6a:a6:ac:a6:fb:5b:52:55:f9:0b: 94:e1:51:9d:f6:33:69:20:10:31:fd:c7:36:fe:bd:1b:9e:17: 83:e9:f1:8a:c0:46:e9:ee:3b:57:53:f6:f6:79:58:0d:65:2b: 4e:c9:a8:37:f6:cb:ca:c3:c0:f5:61:a1:5f:ca:b8:0f:a8:84: db:49:71:06:4e:17:35:29:70:5b:f0:42:b9:b7:a6:0e:4e:15: 04:e0:6e:99:05:05:23:75:01:4d:d5:03:5c:fd:24:8c:ae:7c: 5d:68:ef:27:37:95:41:73:3c:d1:e6:1c:78:33:46:74:9c:c5: 73:11:a5:ce:fc:00:59:a4:cf:3a:c8:22:2f:cf:9f:79:12:6b: a4:59:c7:c5:ff:39:06:90:69:1a:43:0b:08:6a:94:6d:6a:eb: 64:11:29:0d:e7:e8:b5:c8:b4:46:e4:02:be:fe:0f:35:48:61: 68:84:05:6f:66:70:43:34:09:e0:1b:fe:50:0e:3e:da:f5:9b: 21:26:82:af:98:ad:5d:3b:67:16:18:2e:4c:ca:32:99:69:77: f7:8f:fb:78 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7Nlbg6s9eTsywGSsURwTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk MmFhMzgwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGM0MjYxNzIxMzc2OTBiZTE1MzJmYTc5YTk1NTVlOWZlZGZmMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB6sqrCd4QyLPaNFj4/XT0PZKcTw nSGDooRQp2yt30KagKzYiF+qy86GxsSKF2MCzpC/Q0WwFHTaexWinV/UAcWGNGb2 TarF0Mzb/tNQickNIOeYixv0Oo7jPMREeFepaMwFmQHE5mvQpH2JAK2SfxmQGWh6 X2vkSjyx8oR+4MEE/op5mF1627/b9s5iBLU35PK9pvUhoOvte2PuAcqc72FDeo3/ wxENnW2GzXeF7UatdrDzJwnQ+3gS204wRdjqX8x8XgjXC73vI8Yg47aP8c+Yp+tl PoyPxTQQ8TRvJaFUk8HTi19jC3gQyfDI2axpHNV1O7hqbXK/6dwL7o50bQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCTEJhchN2kL4VMvp5qVVen+3/CzMB8GA1UdIwQY MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt Y2YzMDVjNTQzOTNlLzEvSk1RbUZ5RTNhUXZoVXktbm1wVlY2ZjdmOExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLUJoAwQC LYRkMBQEAgACMA4DBQAqFE2AAwUAKhRNhzANBgkqhkiG9w0BAQsFAAOCAQEASd0q DGiN+i5djzzTiANmryZ1cWrAN/NV1jUdmPz5djTGZL5SXP8Ca6PLVwVqpqym+1tS VfkLlOFRnfYzaSAQMf3HNv69G54Xg+nxisBG6e47V1P29nlYDWUrTsmoN/bLysPA 9WGhX8q4D6iE20lxBk4XNSlwW/BCubemDk4VBOBumQUFI3UBTdUDXP0kjK58XWjv JzeVQXM80eYceDNGdJzFcxGlzvwAWaTPOsgiL8+feRJrpFnHxf85BpBpGkMLCGqU bWrrZBEpDefotci0RuQCvv4PNUhhaIQFb2ZwQzQJ4Bv+UA4+2vWbISaCr5itXTtn FhguTMoymWl394/7eA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:12 2026 by rpki-client