This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa File: JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa (raw, json) Hash identifier: UMtm5NsMwoDqBk1AdmB+70baCvbkR79TUj4KCkxO3RI= Subject key identifier: 24:D3:3E:EF:0C:26:DD:08:58:60:2D:27:20:FB:17:F0:27:71:05:10 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C803002849B694443BB9CD3BDBC9BD4 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 45.157.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:30:02:84:9b:69:44:43:bb:9c:d3:bd:bc:9b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24d33eef0c26dd0858602d2720fb17f027710510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:a3:9d:ce:61:8d:71:94:c7:c1:32:1b:95: b1:10:44:03:5f:b8:9f:16:87:6b:f6:58:05:00:9a: 09:e5:13:5f:42:90:ea:a3:01:b5:c8:b7:c8:75:b3: 9f:43:03:c7:a0:f0:8b:cc:57:e4:ed:e8:8c:ed:11: 05:c2:36:d1:3c:b6:c6:e1:74:50:2d:d1:2f:0b:a5: 44:77:3e:d5:af:81:3a:6a:03:ee:40:8e:fe:eb:30: ef:09:68:75:c7:32:86:93:8a:91:cb:61:37:24:5b: f8:90:cc:ef:66:59:30:96:a1:f5:b4:a7:3e:4a:a9: a3:91:c1:58:d6:3c:51:46:62:7e:c4:53:9e:8d:ac: b4:fa:b2:a6:13:0d:da:b4:ef:c2:98:cc:ff:4c:06: 74:76:73:d5:b8:cd:57:d9:03:b4:53:a2:fa:9c:7c: 8a:ec:9e:c1:7b:af:51:75:95:25:df:22:c9:b8:4a: fb:7b:a6:4d:29:26:42:8b:fb:a2:c8:78:44:ef:6b: 72:f1:49:6c:62:8a:34:ee:23:99:64:dd:e3:4c:c8: eb:bb:87:11:a2:56:73:ba:7e:69:3b:ce:db:1e:0b: d7:d0:6c:f8:02:17:3d:6d:92:c7:75:5c:be:0b:51: bc:25:3a:27:bb:b0:7c:88:40:30:8c:95:44:89:2a: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D3:3E:EF:0C:26:DD:08:58:60:2D:27:20:FB:17:F0:27:71:05:10 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.158.0/23 Signature Algorithm: sha256WithRSAEncryption 65:4b:2b:ea:ce:5c:39:f6:bb:8d:bf:d0:dd:fe:74:5a:98:76: 7d:f1:2d:9c:d6:66:5e:2e:ba:e7:ea:df:11:c8:9e:57:a7:11: 2d:c9:22:32:eb:f8:89:a8:a2:70:81:a9:de:11:65:9e:a3:cd: 3e:d5:97:2c:f0:fa:8a:1a:4b:96:9c:71:6a:0d:ad:4b:86:de: 97:47:d1:53:30:62:f7:d6:f5:c2:6b:ec:b4:75:6e:f0:95:ce: 04:eb:2b:ba:08:3f:aa:0c:09:99:75:6d:bd:43:8a:6a:73:c9: 9b:3d:ce:94:7a:81:91:a6:aa:29:96:26:d5:04:b9:e7:1e:9d: 3c:07:82:1d:6e:72:e3:a9:a2:39:ed:81:32:da:6d:bd:22:9a: ae:f4:26:b4:c9:3f:1d:5d:23:59:91:5c:75:dd:28:9d:34:f1: 6a:bd:d7:62:f5:7d:fb:e0:b9:24:73:06:cc:fe:6d:e6:83:a4: 3e:57:81:7d:6a:7f:c1:43:e6:a4:30:b4:bd:52:97:38:b4:83: 0d:a9:47:6a:6b:d1:00:77:6d:93:d7:34:a0:c1:bf:95:9d:9e: eb:77:a4:e2:5c:9d:5b:b2:18:c5:f3:03:6a:ee:21:69:f7:60: 92:f0:a2:51:ca:e8:8b:81:60:43:2a:9c:81:47:b2:5a:dd:5a: 76:64:31:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDAChJtpREO7nNO9vJvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGQzM2VlZjBjMjZkZDA4NTg2MDJkMjcyMGZiMTdmMDI3NzEwNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyjnc5hjXGUx8EyG5WxEEQDX7if Fodr9lgFAJoJ5RNfQpDqowG1yLfIdbOfQwPHoPCLzFfk7eiM7REFwjbRPLbG4XRQ LdEvC6VEdz7Vr4E6agPuQI7+6zDvCWh1xzKGk4qRy2E3JFv4kMzvZlkwlqH1tKc+ SqmjkcFY1jxRRmJ+xFOejay0+rKmEw3atO/CmMz/TAZ0dnPVuM1X2QO0U6L6nHyK 7J7Be69RdZUl3yLJuEr7e6ZNKSZCi/uiyHhE72ty8UlsYoo07iOZZN3jTMjru4cR olZzun5pO87bHgvX0Gz4Ahc9bZLHdVy+C1G8JTonu7B8iEAwjJVEiSpc4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTTPu8MJt0IWGAtJyD7F/AncQUQMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvSk5NLTd3d20zUWhZWUMwbklQc1g4Q2R4QlJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ2eMA0G CSqGSIb3DQEBCwUAA4IBAQBlSyvqzlw59ruNv9Dd/nRamHZ98S2c1mZeLrrn6t8R yJ5XpxEtySIy6/iJqKJwganeEWWeo80+1Zcs8PqKGkuWnHFqDa1Lht6XR9FTMGL3 1vXCa+y0dW7wlc4E6yu6CD+qDAmZdW29Q4pqc8mbPc6UeoGRpqoplibVBLnnHp08 B4IdbnLjqaI57YEy2m29Ipqu9Ca0yT8dXSNZkVx13SidNPFqvddi9X374LkkcwbM /m3mg6Q+V4F9an/BQ+akMLS9Upc4tIMNqUdqa9EAd22T1zSgwb+VnZ7rd6TiXJ1b shjF8wNq7iFp92CS8KJRyuiLgWBDKpyBR7Ja3Vp2ZDFF -----END CERTIFICATE-----Generated at Tue Jan 20 21:17:17 2026 by rpki-client