This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa File: JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa (raw, json) Hash identifier: C2FzGkWqusy1+L9+G5l/4MmyS4qSpGF23YAr4kNJZHQ= Subject key identifier: 27:0A:82:AE:56:23:E2:35:A4:D2:48:E0:85:DD:E7:44:9B:71:F8:44 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6FCCB3657295794A4ABDCEBAE93CC Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 269800 IP address blocks: 95.164.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:cb:36:57:29:57:94:a4:ab:dc:eb:ae:93:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=270a82ae5623e235a4d248e085dde7449b71f844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:d3:62:05:fb:46:ed:92:aa:f4:30:2f:76: 09:72:04:59:bf:39:c0:b4:71:25:4c:26:f4:b2:27: f8:8e:79:3f:23:f4:ee:02:eb:cd:d0:11:3b:a1:85: 27:65:88:8c:1c:04:33:74:8b:32:9a:57:ca:df:f2: 20:c8:f5:ff:9c:a4:61:9d:a6:87:de:ba:92:c7:a3: 3e:b0:bb:ef:48:be:fa:09:45:0b:0c:17:7f:1e:5a: 65:44:8a:0d:b0:90:4a:8e:39:0d:81:af:79:00:67: 40:66:7c:91:3c:b5:03:a5:87:73:99:c9:3b:98:3b: a2:65:bc:6a:99:69:41:b9:a8:d8:74:ae:0c:fa:41: b7:25:81:a1:c6:12:02:a7:f8:af:0e:9d:2b:79:5b: 64:9a:24:37:d8:10:ae:58:83:63:a0:31:b1:d2:ea: 46:23:65:bb:50:ca:2c:1d:11:18:c2:2b:78:f9:69: 34:78:1e:8e:44:04:04:d0:f7:16:5f:fa:34:b3:e1: 2d:a8:22:cc:a2:95:d2:6e:ef:b1:e6:47:a9:e0:f0: 2b:af:89:5a:35:44:eb:67:fa:44:d6:c2:9e:47:d4: de:7c:1d:f0:cb:da:ca:55:eb:ee:e8:49:80:73:19: 58:2f:dd:c8:6b:71:ce:65:c6:37:61:ef:fd:5c:4d: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:82:AE:56:23:E2:35:A4:D2:48:E0:85:DD:E7:44:9B:71:F8:44 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/JwqCrlYj4jWk0kjghd3nRJtx-EQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.236.0/22 Signature Algorithm: sha256WithRSAEncryption 82:c8:4a:9d:f5:ed:fe:ac:a2:3f:67:4c:b5:2e:93:62:e4:4c: e5:83:37:ff:79:fc:ad:06:86:f0:f1:48:5b:75:90:3c:09:0e: f2:98:89:5c:a1:de:e6:50:33:c2:17:38:55:7c:39:96:46:0c: 68:d3:2f:55:2b:d2:b3:d4:6b:cd:5a:6c:a5:f4:0a:f5:df:6a: 60:e6:97:91:5b:53:4c:8a:d8:34:ec:17:1c:53:06:cf:13:87: b1:39:32:ae:4c:ef:fe:4e:b7:b6:56:25:a6:35:b6:b9:e9:6e: 9b:fb:15:28:2e:2d:9e:9f:ed:62:66:23:29:c8:ed:68:3c:98: 7f:b4:76:67:f5:58:9f:7a:fc:17:6d:51:01:69:55:28:29:89: c4:a3:9a:50:92:23:84:0e:e6:f8:18:e8:76:40:33:3e:0b:23: 4f:ac:b7:b3:6a:49:42:01:b8:2d:23:5e:e2:e9:80:ee:6b:03: d0:02:ac:20:0e:33:92:c0:a3:90:a8:f9:9e:56:55:0c:84:a7: 60:81:1b:39:cf:8f:56:70:61:64:ae:32:71:e5:f3:00:39:cf: 8f:35:dc:81:59:f4:08:cd:0f:08:09:02:4c:07:80:4e:16:98: c4:a9:f3:b3:a4:ec:68:f5:80:6b:df:75:b7:54:35:86:4b:50: fe:f1:b8:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvzLNlcpV5Skq9zrrpPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzBhODJhZTU2MjNlMjM1YTRkMjQ4ZTA4NWRkZTc0NDliNzFmODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgjTYgX7Ru2SqvQwL3YJcgRZvznA tHElTCb0sif4jnk/I/TuAuvN0BE7oYUnZYiMHAQzdIsymlfK3/IgyPX/nKRhnaaH 3rqSx6M+sLvvSL76CUULDBd/HlplRIoNsJBKjjkNga95AGdAZnyRPLUDpYdzmck7 mDuiZbxqmWlBuajYdK4M+kG3JYGhxhICp/ivDp0reVtkmiQ32BCuWINjoDGx0upG I2W7UMosHREYwit4+Wk0eB6ORAQE0PcWX/o0s+EtqCLMopXSbu+x5kep4PArr4la NUTrZ/pE1sKeR9TefB3wy9rKVevu6EmAcxlYL93Ia3HOZcY3Ye/9XE33MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcKgq5WI+I1pNJI4IXd50SbcfhEMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvSndxQ3JsWWo0aldrMGtqZ2hkM25SSnR4LUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX6TsMA0G CSqGSIb3DQEBCwUAA4IBAQCCyEqd9e3+rKI/Z0y1LpNi5Ezlgzf/efytBobw8Uhb dZA8CQ7ymIlcod7mUDPCFzhVfDmWRgxo0y9VK9Kz1GvNWmyl9Ar132pg5peRW1NM itg07BccUwbPE4exOTKuTO/+Tre2ViWmNba56W6b+xUoLi2en+1iZiMpyO1oPJh/ tHZn9VifevwXbVEBaVUoKYnEo5pQkiOEDub4GOh2QDM+CyNPrLezaklCAbgtI17i 6YDuawPQAqwgDjOSwKOQqPmeVlUMhKdggRs5z49WcGFkrjJx5fMAOc+PNdyBWfQI zQ8ICQJMB4BOFpjEqfOzpOxo9YBr33W3VDWGS1D+8bi9 -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:26 2026 by rpki-client