This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/sp__UWCgdxP7bzoqkk56wrdwFzY.roa File: sp__UWCgdxP7bzoqkk56wrdwFzY.roa (raw, json) Hash identifier: x+RNqXskpD2D4AGv2+Sqx9lS+lyi0Cw+nu+2VioSmmo= Subject key identifier: B2:9F:FF:51:60:A0:77:13:FB:6F:3A:2A:92:4E:7A:C2:B7:70:17:36 Certificate issuer: /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88 Certificate serial: 019B7F842FC2C0D4C9386F3EA390AAB81F2E Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/sp__UWCgdxP7bzoqkk56wrdwFzY.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58083 IP address blocks: 91.238.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2f:c2:c0:d4:c9:38:6f:3e:a3:90:aa:b8:1f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29fff5160a07713fb6f3a2a924e7ac2b7701736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:c2:0c:c3:ef:56:ca:be:8a:66:de:14:ac: fe:49:bf:7f:e7:77:57:0a:cc:d4:ea:94:6b:f0:f7: f8:70:88:b8:8e:13:c3:50:76:18:55:d2:1b:56:06: fb:49:3f:18:68:ad:a8:23:5c:1d:7e:99:e8:80:25: ce:44:0e:32:64:53:e4:16:b0:f4:eb:e4:03:08:4c: e6:45:db:8b:5e:48:b3:55:5b:15:9a:d5:4e:a8:61: 61:53:a1:34:d3:66:66:cf:8b:83:1c:2d:05:bd:9a: e6:5d:1e:10:c3:31:98:36:04:9f:6a:24:50:86:ec: 2b:03:68:2c:b6:b4:e2:fd:6b:4c:de:32:db:93:d9: 1d:a5:9d:7a:88:00:18:e8:06:aa:7d:8f:31:c7:c5: e0:7d:5b:05:c8:2d:f0:c7:60:2b:07:f0:8a:8e:7b: e9:8b:fa:1d:a3:c1:44:36:f5:34:b2:da:f0:6b:98: 1a:ee:b9:b5:99:df:c7:48:68:0e:d4:54:f3:50:ca: 76:23:f9:96:8e:f0:07:e4:2d:52:71:13:ef:6b:36: 17:a9:56:92:03:d1:07:62:9e:12:a5:d9:a2:d2:8a: 3f:84:c2:39:98:ad:55:94:1d:67:b8:26:7e:f0:41: 86:de:4f:43:04:73:2e:dc:5f:bf:cf:02:12:70:27: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9F:FF:51:60:A0:77:13:FB:6F:3A:2A:92:4E:7A:C2:B7:70:17:36 X509v3 Authority Key Identifier: keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/sp__UWCgdxP7bzoqkk56wrdwFzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.141.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:59:f4:e2:fb:9b:62:7f:77:e6:74:98:ae:9f:f5:0f:13:94: a3:62:01:f1:c7:2a:64:92:b2:ec:d4:2b:1e:58:7c:0a:38:4e: 7c:3f:d4:39:b7:b1:f8:35:d0:84:41:c1:3d:8a:81:1d:93:6f: cd:94:5b:3e:cd:c2:13:ef:8b:d6:62:5f:1c:33:dd:10:ee:4d: 12:87:2d:3c:a6:55:01:ba:82:40:1e:f2:79:ac:79:5c:d5:a9: 1e:f3:eb:06:47:e3:06:78:8e:58:b5:45:85:bf:79:d3:3a:3f: 67:4d:e3:c1:f4:fb:c2:57:61:9d:53:22:a6:17:94:9d:a3:d1: 53:24:f8:27:f6:16:80:89:cd:ab:38:24:6a:43:bf:c6:d5:e7: 21:c7:ac:82:db:78:49:aa:5d:9f:50:51:34:0d:8d:11:d2:d6: d1:a2:09:01:56:10:f6:00:00:94:a4:38:61:e9:d0:c9:69:ed: a4:73:5e:9b:27:29:b5:26:f1:15:e9:45:97:f2:22:97:91:b1: cf:d9:94:5e:cd:85:43:bc:4f:47:18:05:3c:2b:c0:e3:d6:5c: 67:79:58:d0:dd:09:21:c0:1e:e8:6c:2a:80:47:0f:e6:dd:e2: 05:a8:81:02:fe:2b:3d:9c:45:89:7c:0a:b1:79:f5:c9:e5:71: 20:00:d9:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hC/CwNTJOG8+o5CquB8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmM3M2ZhMTcwYzNhYjllYzQzNGQxZjI5ZDNkYmRlNzky MGJmODgwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjlmZmY1MTYwYTA3NzEzZmI2ZjNhMmE5MjRlN2FjMmI3NzAxNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75vCDMPvVsq+imbeFKz+Sb9/53dX CszU6pRr8Pf4cIi4jhPDUHYYVdIbVgb7ST8YaK2oI1wdfpnogCXORA4yZFPkFrD0 6+QDCEzmRduLXkizVVsVmtVOqGFhU6E002Zmz4uDHC0FvZrmXR4QwzGYNgSfaiRQ huwrA2gstrTi/WtM3jLbk9kdpZ16iAAY6AaqfY8xx8XgfVsFyC3wx2ArB/CKjnvp i/odo8FENvU0strwa5ga7rm1md/HSGgO1FTzUMp2I/mWjvAH5C1ScRPvazYXqVaS A9EHYp4Spdmi0oo/hMI5mK1VlB1nuCZ+8EGG3k9DBHMu3F+/zwIScCfm0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKf/1FgoHcT+286KpJOesK3cBc2MB8GA1UdIwQY MBaAFI4sc/oXDDq57ENNHynT2955IL+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt ZmVlMTJiZmQzYmQxLzEvc3BfX1VXQ2dkeFA3YnpvcWtrNTZ3cmR3RnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx LzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+6NMA0G CSqGSIb3DQEBCwUAA4IBAQCfWfTi+5tif3fmdJiun/UPE5SjYgHxxypkkrLs1Cse WHwKOE58P9Q5t7H4NdCEQcE9ioEdk2/NlFs+zcIT74vWYl8cM90Q7k0Shy08plUB uoJAHvJ5rHlc1ake8+sGR+MGeI5YtUWFv3nTOj9nTePB9PvCV2GdUyKmF5Sdo9FT JPgn9haAic2rOCRqQ7/G1echx6yC23hJql2fUFE0DY0R0tbRogkBVhD2AACUpDhh 6dDJae2kc16bJym1JvEV6UWX8iKXkbHP2ZRezYVDvE9HGAU8K8Dj1lxneVjQ3Qkh wB7obCqARw/m3eIFqIEC/is9nEWJfAqxefXJ5XEgANmo -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client