This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/JhmecN5URCtv1yBIbMEV6e9g8Co.roa File: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (raw, json) Hash identifier: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4= Subject key identifier: 26:19:9E:70:DE:54:44:2B:6F:D7:20:48:6C:C1:15:E9:EF:60:F0:2A Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Certificate serial: 019B7D5C4FB202653E20739088D8FBAEE4C3 Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/JhmecN5URCtv1yBIbMEV6e9g8Co.roa Signing time: Fri 02 Jan 2026 06:19:20 +0000 ROA not before: Fri 02 Jan 2026 06:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39484 IP address blocks: 89.106.32.0/19 maxlen: 19 185.239.192.0/22 maxlen: 22 2a02:13c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4f:b2:02:65:3e:20:73:90:88:d8:fb:ae:e4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26199e70de54442b6fd720486cc115e9ef60f02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:02:f2:fd:d8:d6:e3:94:9b:38:d5:9f:5d: 3f:ac:d0:8f:7b:36:7b:75:68:ef:2b:ef:b8:7e:a7: b0:d1:b3:ff:18:61:fe:7b:3c:2e:5a:56:e3:6f:34: fe:8f:f1:7f:07:13:17:e4:5f:6d:6b:18:5f:42:9e: 86:94:b7:fc:80:80:ea:15:1f:45:4a:bb:14:3a:12: 4a:5e:d2:cd:1e:f8:cc:b6:9a:f4:69:b0:a4:0a:cd: 20:bb:35:9f:4e:98:55:06:89:fe:91:69:fc:5e:f1: f0:c7:a7:b7:15:38:8f:d8:02:6f:cb:0f:85:46:ee: e6:b6:55:05:c4:2c:18:0f:86:d8:8c:21:07:18:98: 4c:c3:3f:ef:48:7a:97:d8:90:8d:0c:23:17:80:84: f6:9b:29:6e:db:ba:87:19:1e:f0:85:62:24:3a:b7: 46:10:94:75:2c:40:e4:fd:be:b6:8c:f9:93:09:ce: f7:80:d7:86:06:7a:76:b9:09:49:62:ec:ed:73:7d: 5f:c7:f1:07:0e:6e:ba:7d:61:19:0d:a5:5b:2d:f8: 11:80:55:b5:d3:7d:4d:db:0f:57:ee:d6:d1:34:fe: 7f:9a:09:48:ac:0d:2a:33:3a:8c:ff:06:0a:9f:18: d8:5e:70:ec:03:da:a8:9b:7c:2f:19:88:28:ec:22: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:9E:70:DE:54:44:2B:6F:D7:20:48:6C:C1:15:E9:EF:60:F0:2A X509v3 Authority Key Identifier: keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/JhmecN5URCtv1yBIbMEV6e9g8Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.32.0/19 185.239.192.0/22 IPv6: 2a02:13c8::/32 Signature Algorithm: sha256WithRSAEncryption 32:bb:c6:8a:3b:3a:ba:e5:17:39:17:63:21:70:ba:a6:08:fd: f6:9b:24:99:4c:8a:f9:64:aa:00:47:f7:14:35:7e:85:3f:3f: 92:35:b0:40:ea:a7:5b:86:f4:a1:e4:6a:0e:b5:df:07:b3:d8: 94:fc:7e:1c:1f:65:f5:de:70:c7:9c:64:d4:81:f7:21:07:7e: e1:52:71:74:f0:33:16:62:a4:c8:1e:4b:f9:a1:b3:a1:b9:ee: ae:b4:2c:30:a6:3f:96:f8:9b:b0:87:7c:85:6c:8c:9b:02:b5: 35:dd:a4:e1:bf:82:25:17:fe:bd:67:a3:24:80:fe:68:21:3e: 78:14:8f:20:72:76:14:61:76:df:9d:44:98:11:ae:e3:f0:0b: ff:02:10:7d:3e:55:21:7f:6f:b7:86:0e:72:69:19:8e:e1:6f: 70:16:a7:a9:81:65:12:1e:f0:d1:c7:1e:a2:a8:34:74:b6:0a: d0:2f:e7:64:0c:83:18:1d:f0:b0:20:b1:94:a2:1a:10:ff:3f: 63:0d:e0:1b:08:e1:50:56:fb:9e:e6:5b:01:1a:47:54:12:87: 28:01:94:5e:f0:8e:35:f0:8a:77:c9:86:8c:91:59:a9:bc:e8: f2:ae:a6:43:52:c2:a1:e7:d7:64:8d:d1:91:48:5f:a4:ea:36: 90:b1:73:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XE+yAmU+IHOQiNj7ruTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzkxMzUzZjZlMWY1MDI1MDRhMDg2OGViZjhhZDBkZWJj OWRhNzgwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjE5OWU3MGRlNTQ0NDJiNmZkNzIwNDg2Y2MxMTVlOWVmNjBmMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQsC8v3Y1uOUmzjVn10/rNCPezZ7 dWjvK++4fqew0bP/GGH+ezwuWlbjbzT+j/F/BxMX5F9taxhfQp6GlLf8gIDqFR9F SrsUOhJKXtLNHvjMtpr0abCkCs0guzWfTphVBon+kWn8XvHwx6e3FTiP2AJvyw+F Ru7mtlUFxCwYD4bYjCEHGJhMwz/vSHqX2JCNDCMXgIT2mylu27qHGR7whWIkOrdG EJR1LEDk/b62jPmTCc73gNeGBnp2uQlJYuztc31fx/EHDm66fWEZDaVbLfgRgFW1 031N2w9X7tbRNP5/mglIrA0qMzqM/wYKnxjYXnDsA9qom3wvGYgo7CJPqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCYZnnDeVEQrb9cgSGzBFenvYPAqMB8GA1UdIwQY MBaAFJI5E1P24fUCUEoIaOv4rQ3rydp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgt YjI1NDViNDA0ZWVjLzEvSmhtZWNONVVSQ3R2MXlCSWJNRVY2ZTlnOENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgtYjI1NDViNDA0ZWVj LzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFWWogAwQC ue/AMA0EAgACMAcDBQAqAhPIMA0GCSqGSIb3DQEBCwUAA4IBAQAyu8aKOzq65Rc5 F2MhcLqmCP32mySZTIr5ZKoAR/cUNX6FPz+SNbBA6qdbhvSh5GoOtd8Hs9iU/H4c H2X13nDHnGTUgfchB37hUnF08DMWYqTIHkv5obOhue6utCwwpj+W+Juwh3yFbIyb ArU13aThv4IlF/69Z6MkgP5oIT54FI8gcnYUYXbfnUSYEa7j8Av/AhB9PlUhf2+3 hg5yaRmO4W9wFqepgWUSHvDRxx6iqDR0tgrQL+dkDIMYHfCwILGUohoQ/z9jDeAb COFQVvue5lsBGkdUEocoAZRe8I418Ip3yYaMkVmpvOjyrqZDUsKh59dkjdGRSF+k 6jaQsXPT -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:31 2026 by rpki-client