This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/JaeXTOyEwRJ7x7aS4Hz5gprDoaQ.roa File: JaeXTOyEwRJ7x7aS4Hz5gprDoaQ.roa (raw, json) Hash identifier: Fo23Q6DrTuu3SVvASSEO4DU+ylJ1lbiqMeiNp79hP5c= Subject key identifier: 25:A7:97:4C:EC:84:C1:12:7B:C7:B6:92:E0:7C:F9:82:9A:C3:A1:A4 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E5D997CF7CDA5E0AEDE85594DEBF Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/JaeXTOyEwRJ7x7aS4Hz5gprDoaQ.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31654 IP address blocks: 82.150.71.0/24 maxlen: 24 84.44.29.0/24 maxlen: 24 84.44.30.0/24 maxlen: 24 84.44.42.0/24 maxlen: 24 84.44.65.0/24 maxlen: 24 84.44.66.0/24 maxlen: 24 84.44.67.0/24 maxlen: 24 84.44.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e5:d9:97:cf:7c:da:5e:0a:ed:e8:55:94:de:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a7974cec84c1127bc7b692e07cf9829ac3a1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:56:a6:73:f2:8d:6f:da:13:ec:26:d8:46: c2:4e:c5:a4:f0:79:8c:d4:30:3a:4b:5c:3c:a8:73: ae:8b:26:3c:a7:4f:f4:fc:7f:ce:46:64:73:28:70: f8:20:52:2e:14:54:7a:40:72:13:bb:18:8c:d6:47: d8:71:a9:bc:8d:83:32:d5:55:89:f8:47:a6:fa:29: 2e:50:7d:3a:21:f7:79:10:7f:d3:2e:9a:b9:01:29: 9b:bc:7c:27:7b:da:4c:3c:28:56:78:fb:4c:58:a9: 6b:16:6f:9b:f7:c3:bb:64:bf:14:d0:49:3c:e1:30: 00:a4:b3:52:7c:3e:f3:f0:4f:89:60:cc:75:9a:ea: 50:db:2b:d4:96:87:2d:44:20:e5:c7:ba:df:8b:55: 9e:d0:8c:79:5f:eb:d6:d4:55:15:ce:b8:43:40:4b: 44:0f:8a:f0:7c:5f:d4:38:d3:2b:ce:b8:82:bc:0b: 9b:34:61:0c:fb:7f:18:0d:da:11:46:a5:bd:6b:8f: 1d:a9:fe:1b:1f:52:d6:84:24:81:d8:b7:87:53:ec: 6c:e1:1b:f4:74:88:30:ad:f6:bc:aa:ae:36:17:fc: 29:45:0b:7c:2c:27:04:e0:c5:a7:78:73:93:2c:19: fb:ba:a1:a3:83:81:f6:98:fd:3e:c0:ba:64:4b:fe: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A7:97:4C:EC:84:C1:12:7B:C7:B6:92:E0:7C:F9:82:9A:C3:A1:A4 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/JaeXTOyEwRJ7x7aS4Hz5gprDoaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.71.0/24 84.44.29.0-84.44.30.255 84.44.42.0/24 84.44.65.0-84.44.68.255 Signature Algorithm: sha256WithRSAEncryption 9a:e2:e3:a3:a6:fc:38:29:9c:62:37:a1:9d:7d:5a:96:b4:26: c2:e0:89:96:2e:6f:20:9c:f6:a4:bc:a7:fa:76:30:29:fd:e9: e9:46:fa:77:fd:65:f3:21:1b:49:85:08:ff:df:3a:80:16:ad: e3:d4:3e:48:fc:ce:fb:d6:7e:7c:0e:39:fd:6e:57:8c:e9:9e: 16:6c:95:77:49:0e:ea:d1:81:4a:33:6d:64:32:f8:52:5a:e5: 71:c1:cc:38:cf:4c:d3:72:ae:1b:13:9b:97:40:44:ef:92:88: ae:3c:6a:e5:d9:ff:92:67:69:6d:b7:19:a5:5e:e3:5e:00:b8: e7:98:45:5a:98:64:e5:ef:cc:b0:35:55:06:6c:cd:a6:f8:c4: d1:4a:4b:b9:dc:92:d9:74:f0:93:b3:6a:4b:1a:1d:b8:aa:0a: a8:7b:d3:4e:c1:c0:ca:c3:17:c7:e3:ec:60:9e:4d:73:87:b4: f2:7e:33:de:cd:e3:43:fa:58:bf:0e:7b:d9:dd:95:f2:d3:8f: 62:84:5f:b6:c0:b3:ca:41:19:30:b3:d0:b7:95:4d:cb:5c:b7: 52:59:f7:6a:d8:3a:9c:91:cd:6c:d0:58:72:02:d0:16:28:31: d0:5d:89:92:5f:28:5e:ee:57:97:78:a9:c7:c2:90:36:d1:ed: 66:42:c7:07 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+N+XZl8982l4K7ehVlN6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWE3OTc0Y2VjODRjMTEyN2JjN2I2OTJlMDdjZjk4MjlhYzNhMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e1WpnPyjW/aE+wm2EbCTsWk8HmM 1DA6S1w8qHOuiyY8p0/0/H/ORmRzKHD4IFIuFFR6QHITuxiM1kfYcam8jYMy1VWJ +Eem+ikuUH06Ifd5EH/TLpq5ASmbvHwne9pMPChWePtMWKlrFm+b98O7ZL8U0Ek8 4TAApLNSfD7z8E+JYMx1mupQ2yvUloctRCDlx7rfi1We0Ix5X+vW1FUVzrhDQEtE D4rwfF/UONMrzriCvAubNGEM+38YDdoRRqW9a48dqf4bH1LWhCSB2LeHU+xs4Rv0 dIgwrfa8qq42F/wpRQt8LCcE4MWneHOTLBn7uqGjg4H2mP0+wLpkS/5Z8wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCWnl0zshMESe8e2kuB8+YKaw6GkMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvSmFlWFRPeUV3Uko3eDdhUzRIejVncHJEb2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAUpZHMAwD BABULB0DBABULB4DBABULCowDAMEAFQsQQMEAFQsRDANBgkqhkiG9w0BAQsFAAOC AQEAmuLjo6b8OCmcYjehnX1alrQmwuCJli5vIJz2pLyn+nYwKf3p6Ub6d/1l8yEb SYUI/986gBat49Q+SPzO+9Z+fA45/W5XjOmeFmyVd0kO6tGBSjNtZDL4UlrlccHM OM9M03KuGxObl0BE75KIrjxq5dn/kmdpbbcZpV7jXgC455hFWphk5e/MsDVVBmzN pvjE0UpLudyS2XTwk7NqSxoduKoKqHvTTsHAysMXx+PsYJ5Nc4e08n4z3s3jQ/pY vw572d2V8tOPYoRftsCzykEZMLPQt5VNy1y3Uln3atg6nJHNbNBYcgLQFigx0F2J kl8oXu5Xl3ipx8KQNtHtZkLHBw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:17 2026 by rpki-client