This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa File: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (raw, json) Hash identifier: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c= Subject key identifier: 24:7A:83:6B:6B:D1:23:EC:2A:36:0F:D8:E6:B2:E7:AD:21:D1:BD:52 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CDD8CC1BA0D85FDF8F3C5ADBED65A Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 89.23.123.0/24 maxlen: 24 194.28.225.0/24 maxlen: 24 194.28.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dd:8c:c1:ba:0d:85:fd:f8:f3:c5:ad:be:d6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=247a836b6bd123ec2a360fd8e6b2e7ad21d1bd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:24:79:17:c1:37:fa:81:65:95:77:ad:38: aa:8b:7f:7c:46:0d:9d:fc:5c:b9:b9:0b:0a:ed:19: 31:ac:e4:11:0a:f4:89:6f:ac:a3:2e:5d:30:57:c0: 93:1d:17:06:2a:ea:80:55:68:f0:bb:8d:11:56:f4: ee:3f:f4:a1:9c:59:57:d4:d5:5b:0e:69:8a:c3:3c: 42:3d:19:7a:d5:62:e7:88:44:94:c2:0a:f1:37:24: 79:e3:f9:bf:2c:72:d5:7a:6b:b4:0a:a0:84:af:5b: bc:bb:f9:81:c2:5b:fe:66:4c:6f:4e:6f:78:50:6c: 3f:23:ed:b5:7b:a1:e8:f3:9c:3b:70:54:b1:c7:df: 17:69:49:99:3f:39:67:86:13:5e:da:e6:b9:c6:d8: ad:b6:c1:31:64:d0:90:78:1f:4e:13:a7:87:0b:00: a2:c3:89:d7:ed:5f:fa:5e:7e:53:87:74:e7:a8:02: 5e:b0:c9:fd:48:ce:82:60:aa:7c:78:f9:4f:be:3c: b7:90:e3:70:58:13:d0:37:43:e7:2e:76:2f:03:36: f3:8e:3a:85:f5:b1:6f:e4:c1:93:b3:be:92:bf:28: 75:8d:7b:9b:6f:ab:97:9c:1c:c3:ef:b5:76:ce:05: b5:74:a7:9c:1c:b8:ad:12:cd:6d:52:2f:cc:76:2a: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:83:6B:6B:D1:23:EC:2A:36:0F:D8:E6:B2:E7:AD:21:D1:BD:52 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.123.0/24 194.28.225.0-194.28.226.255 Signature Algorithm: sha256WithRSAEncryption ae:1d:e0:06:e2:14:1b:dd:ee:4f:48:b6:ff:f0:b8:37:90:7f: 56:f1:f3:d1:55:83:85:58:be:26:28:68:b0:b5:25:d4:5b:73: 65:41:14:68:a6:23:04:79:17:7b:1a:82:c3:96:bf:5e:7a:23: b1:02:c1:d6:18:ff:61:2a:b8:b9:4c:9c:95:3d:64:71:de:a5: cd:d5:bd:24:6d:17:3e:63:e5:a7:11:37:ac:b2:a1:29:83:01: af:bc:bc:0b:c6:8e:b1:5a:50:7b:54:e0:c3:7b:9e:07:d7:3b: 8a:81:25:d1:89:60:dd:72:f3:0d:43:8e:6c:2f:9e:fc:a0:f4: 44:da:4b:5b:28:11:36:2e:19:66:96:96:e8:32:74:20:a1:40: 3f:f5:c8:55:03:5d:de:42:da:57:93:fd:b3:0c:c6:a7:09:e2: 8c:7b:6d:ad:61:50:5b:e1:45:8c:55:d3:50:06:7e:09:a6:84: 15:10:ea:ce:04:db:50:d5:83:ab:4c:ce:8e:18:56:5c:db:35: e4:a3:1c:fe:c3:e1:b1:ba:53:73:ae:c7:0a:d4:26:9a:53:9c: 15:61:d1:3b:d6:0e:55:4b:f5:0e:6b:90:57:a7:0f:54:62:03: d7:81:3a:42:7c:8d:18:b5:0c:c6:10:48:e4:49:e9:5e:88:62: 97:a5:b5:e5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XN2MwboNhf3488WtvtZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDdhODM2YjZiZDEyM2VjMmEzNjBmZDhlNmIyZTdhZDIxZDFiZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtugkeRfBN/qBZZV3rTiqi398Rg2d /Fy5uQsK7RkxrOQRCvSJb6yjLl0wV8CTHRcGKuqAVWjwu40RVvTuP/ShnFlX1NVb DmmKwzxCPRl61WLniESUwgrxNyR54/m/LHLVemu0CqCEr1u8u/mBwlv+ZkxvTm94 UGw/I+21e6Ho85w7cFSxx98XaUmZPzlnhhNe2ua5xtittsExZNCQeB9OE6eHCwCi w4nX7V/6Xn5Th3TnqAJesMn9SM6CYKp8ePlPvjy3kONwWBPQN0PnLnYvAzbzjjqF 9bFv5MGTs76Svyh1jXubb6uXnBzD77V2zgW1dKecHLitEs1tUi/Mdip9qwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCR6g2tr0SPsKjYP2Oay560h0b1SMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvSkhxRGEydlJJLXdxTmdfWTVyTG5yU0hSdlZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAWRd7MAwD BADCHOEDBADCHOIwDQYJKoZIhvcNAQELBQADggEBAK4d4AbiFBvd7k9Itv/wuDeQ f1bx89FVg4VYviYoaLC1JdRbc2VBFGimIwR5F3sagsOWv156I7ECwdYY/2EquLlM nJU9ZHHepc3VvSRtFz5j5acRN6yyoSmDAa+8vAvGjrFaUHtU4MN7ngfXO4qBJdGJ YN1y8w1Djmwvnvyg9ETaS1soETYuGWaWlugydCChQD/1yFUDXd5C2leT/bMMxqcJ 4ox7ba1hUFvhRYxV01AGfgmmhBUQ6s4E21DVg6tMzo4YVlzbNeSjHP7D4bG6U3Ou xwrUJppTnBVh0TvWDlVL9Q5rkFenD1RiA9eBOkJ8jRi1DMYQSORJ6V6IYpelteU= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:24 2026 by rpki-client