This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/JfyoN48fk_c9ic3qKJlpVrYlm4U.roa File: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (raw, json) Hash identifier: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8= Subject key identifier: 25:FC:A8:37:8F:1F:93:F7:3D:89:CD:EA:28:99:69:56:B6:25:9B:85 Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Certificate serial: 019B7B367888BACBC616863F90380ED27FD2 Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/JfyoN48fk_c9ic3qKJlpVrYlm4U.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202664 IP address blocks: 81.92.240.0/22 maxlen: 24 217.196.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:78:88:ba:cb:c6:16:86:3f:90:38:0e:d2:7f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25fca8378f1f93f73d89cdea28996956b6259b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:8f:18:cf:35:47:eb:2a:e6:54:b9:38:cc: 11:1e:25:3e:47:98:0b:aa:57:6b:42:e1:c3:d9:d5: c8:a1:5b:f3:b5:60:00:2f:88:3b:1c:9f:11:83:78: 9b:a5:9e:d0:b2:e7:bf:3d:98:7a:b6:ac:c3:65:06: 8f:d0:be:c3:6e:e5:7b:20:27:fd:71:f1:b5:a5:cb: 48:90:8d:b4:56:d1:87:32:81:09:87:07:78:97:40: 59:6b:5e:7e:f5:d2:ab:47:56:65:48:fd:fe:70:e8: e1:e1:d2:6b:dc:9f:17:de:01:1d:f2:ee:c4:38:97: 70:7d:24:ba:37:92:03:71:08:54:59:08:c8:6a:b6: a6:26:91:ec:dd:1b:c6:c4:ad:6e:8f:f1:5f:69:8d: e2:f9:af:ec:a6:da:f3:13:31:1d:28:59:41:b8:32: 18:37:f2:28:1f:d1:7b:f3:f8:1a:2d:ce:f7:bb:f0: de:0c:76:06:19:cf:5a:6e:1c:54:64:e6:0d:6e:ea: d2:b0:b4:49:92:37:12:a4:e0:a1:b3:ef:f4:ef:88: 87:67:fa:7a:79:b7:95:ff:b6:f0:a2:51:5e:98:0a: a5:5d:f5:77:a1:86:21:a0:03:39:58:e4:51:a5:8a: 10:45:fe:07:90:4f:b2:72:97:27:4a:8e:af:25:36: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:A8:37:8F:1F:93:F7:3D:89:CD:EA:28:99:69:56:B6:25:9B:85 X509v3 Authority Key Identifier: keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/JfyoN48fk_c9ic3qKJlpVrYlm4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.92.240.0/22 217.196.64.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:02:d6:01:ea:bd:68:97:bf:78:85:8a:a8:20:1d:7b:9a:4f: c0:2c:48:89:8d:d5:62:11:e6:0c:e3:2c:ef:7e:88:3c:ae:e3: d9:76:e2:62:69:35:9d:e0:1e:cc:18:f7:78:a8:21:5b:2a:66: 52:1b:30:05:85:91:54:d6:3d:39:17:ee:ba:f3:67:7b:bf:ed: b5:39:82:d1:a3:6c:0d:33:6a:81:e7:4d:22:14:39:b5:2a:ee: fe:a8:42:96:6c:cc:c2:33:c5:ce:87:93:ec:d8:62:6e:d1:39: 8e:a5:87:cb:44:90:2e:89:99:1c:20:a6:a9:cc:12:be:9b:d9: 9c:a6:f7:15:4b:62:b6:ce:54:df:e3:2f:70:d4:69:8f:39:ca: 78:ad:5d:9a:45:4d:92:c7:40:76:bc:bc:cc:10:ca:bb:8a:2d: 95:2e:ec:a0:85:63:9b:02:c1:12:6c:1e:b7:6d:c1:b1:05:85: 89:2a:d4:83:af:29:cf:97:48:6f:fa:9a:bc:0a:44:98:9c:49: 29:df:c9:34:c6:80:03:04:05:d3:ba:52:07:80:d1:f0:09:ce: ee:cb:8a:ed:d5:8e:6f:86:92:98:57:04:77:35:2b:0a:61:c4: ab:11:8b:3f:58:a6:6e:7a:4b:62:8d:03:e9:e2:76:19:3c:39: 8a:4b:98:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NniIusvGFoY/kDgO0n/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz YzcyMzAwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZjYTgzNzhmMWY5M2Y3M2Q4OWNkZWEyODk5Njk1NmI2MjU5Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9GPGM81R+sq5lS5OMwRHiU+R5gL qldrQuHD2dXIoVvztWAAL4g7HJ8Rg3ibpZ7Qsue/PZh6tqzDZQaP0L7DbuV7ICf9 cfG1pctIkI20VtGHMoEJhwd4l0BZa15+9dKrR1ZlSP3+cOjh4dJr3J8X3gEd8u7E OJdwfSS6N5IDcQhUWQjIaramJpHs3RvGxK1uj/FfaY3i+a/sptrzEzEdKFlBuDIY N/IoH9F78/gaLc73u/DeDHYGGc9abhxUZOYNburSsLRJkjcSpOChs+/074iHZ/p6 ebeV/7bwolFemAqlXfV3oYYhoAM5WORRpYoQRf4HkE+ycpcnSo6vJTZdHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCX8qDePH5P3PYnN6iiZaVa2JZuFMB8GA1UdIwQY MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt NTUzOGRjMGJiMDk5LzEvSmZ5b040OGZrX2M5aWMzcUtKbHBWcllsbTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5 LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUVzwAwQF 2cRAMA0GCSqGSIb3DQEBCwUAA4IBAQAsAtYB6r1ol794hYqoIB17mk/ALEiJjdVi EeYM4yzvfog8ruPZduJiaTWd4B7MGPd4qCFbKmZSGzAFhZFU1j05F+6682d7v+21 OYLRo2wNM2qB500iFDm1Ku7+qEKWbMzCM8XOh5Ps2GJu0TmOpYfLRJAuiZkcIKap zBK+m9mcpvcVS2K2zlTf4y9w1GmPOcp4rV2aRU2Sx0B2vLzMEMq7ii2VLuyghWOb AsESbB63bcGxBYWJKtSDrynPl0hv+pq8CkSYnEkp38k0xoADBAXTulIHgNHwCc7u y4rt1Y5vhpKYVwR3NSsKYcSrEYs/WKZuektijQPp4nYZPDmKS5hv -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:58 2026 by rpki-client