This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/JGOkLh2PzH5oVETn1detOd-TQdk.roa File: JGOkLh2PzH5oVETn1detOd-TQdk.roa (raw, json) Hash identifier: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew= Subject key identifier: 24:63:A4:2E:1D:8F:CC:7E:68:54:44:E7:D5:D7:AD:39:DF:93:41:D9 Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Certificate serial: 019B791012CE33F63A6E6573680059ABE302 Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/JGOkLh2PzH5oVETn1detOd-TQdk.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36492 IP address blocks: 185.150.148.0/22 maxlen: 22 185.150.148.0/23 maxlen: 23 185.150.148.0/24 maxlen: 24 185.150.149.0/24 maxlen: 24 185.150.150.0/23 maxlen: 23 185.150.150.0/24 maxlen: 24 185.150.151.0/24 maxlen: 24 2a03:ace0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:12:ce:33:f6:3a:6e:65:73:68:00:59:ab:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2463a42e1d8fcc7e685444e7d5d7ad39df9341d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:87:9c:2a:5e:e9:3e:c9:71:73:92:75:e8: 7c:53:dc:1d:2d:0f:a1:21:75:ae:17:87:7a:5a:27: 4c:3e:7a:05:38:35:93:2e:1d:c0:46:d7:8f:1d:33: 55:8d:2a:0a:8d:a7:eb:fe:2b:a3:01:b4:14:cb:49: 13:75:66:e2:52:63:35:53:66:8a:21:37:a0:c9:44: 56:37:df:92:2e:9c:1f:91:dc:aa:7d:35:7c:97:0f: a5:5f:59:a9:8c:4b:74:a7:11:54:6a:ab:84:a5:bb: 80:fc:0e:a2:d4:a2:ed:c3:3e:f4:7b:bc:d2:b3:fa: c2:a9:8b:7d:f5:e9:b2:8a:3d:15:ab:e7:ce:0a:7e: f2:d3:7e:46:0e:95:65:94:80:c7:fd:be:45:fe:7b: 51:ca:83:58:7c:7e:fb:c2:36:d2:fb:f1:6a:ff:23: 4c:7b:18:9a:28:61:45:0e:9c:c3:36:bf:b2:5b:37: a2:7a:47:f5:35:69:21:c7:ab:da:8e:d3:b0:a6:08: 8c:88:b3:e1:9b:ab:88:f1:ea:06:75:c9:be:0c:fe: 41:ed:cc:9d:96:98:4e:1c:c7:be:79:8d:f9:a7:1e: 4e:d5:8b:2e:2e:52:5d:45:f9:6a:2e:93:69:61:ce: 82:65:7d:09:37:94:b2:f1:8d:48:d0:42:e6:41:f0: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:A4:2E:1D:8F:CC:7E:68:54:44:E7:D5:D7:AD:39:DF:93:41:D9 X509v3 Authority Key Identifier: keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/JGOkLh2PzH5oVETn1detOd-TQdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.148.0/22 IPv6: 2a03:ace0::/32 Signature Algorithm: sha256WithRSAEncryption 12:36:bb:37:7c:cf:5c:0c:d3:3a:95:75:01:55:bf:25:74:ae: a4:e0:02:4a:61:dd:d3:22:03:fe:ce:53:4b:bb:5c:61:e1:43: a9:a0:76:ba:4e:7d:ac:f3:dc:fe:a1:78:63:77:ed:30:7d:17: 22:e9:dc:a5:e3:29:29:50:37:99:81:4d:43:c5:1d:4f:39:3c: 81:6d:e0:54:30:f4:d7:08:52:9a:02:f1:7f:46:10:ee:23:4f: 69:4d:a2:82:7d:b7:91:93:6a:84:94:e2:db:a7:b5:dc:b6:61: 3d:59:40:e6:c1:c0:f6:37:13:9c:63:47:6e:38:91:0d:0d:e1: e5:0b:54:5d:15:69:74:64:80:60:d6:14:a2:75:86:86:69:c6: b1:1a:e8:99:1b:6b:21:29:cb:e8:22:26:8e:be:44:6a:bb:54: dd:df:00:27:02:01:db:8a:73:20:cf:45:b2:0a:b5:43:bd:ab: b2:0d:ad:d8:55:e7:4f:f2:dd:f7:19:87:af:b2:c0:8a:c0:bd: 8c:bb:a6:f6:37:fe:eb:0e:ab:ef:38:e1:48:eb:21:f5:08:d1: de:b8:4a:67:26:69:15:a3:e7:cc:d4:23:ed:f2:b2:34:79:7b: 7d:da:c0:28:b1:00:e2:5b:29:7e:ab:70:89:d8:70:4d:78:c8: 93:c1:5d:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EBLOM/Y6bmVzaABZq+MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy ZDM2YTUwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDYzYTQyZTFkOGZjYzdlNjg1NDQ0ZTdkNWQ3YWQzOWRmOTM0MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquuHnCpe6T7JcXOSdeh8U9wdLQ+h IXWuF4d6WidMPnoFODWTLh3ARtePHTNVjSoKjafr/iujAbQUy0kTdWbiUmM1U2aK ITegyURWN9+SLpwfkdyqfTV8lw+lX1mpjEt0pxFUaquEpbuA/A6i1KLtwz70e7zS s/rCqYt99emyij0Vq+fOCn7y035GDpVllIDH/b5F/ntRyoNYfH77wjbS+/Fq/yNM exiaKGFFDpzDNr+yWzeiekf1NWkhx6vajtOwpgiMiLPhm6uI8eoGdcm+DP5B7cyd lphOHMe+eY35px5O1YsuLlJdRflqLpNpYc6CZX0JN5Sy8Y1I0ELmQfBvfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCRjpC4dj8x+aFRE59XXrTnfk0HZMB8GA1UdIwQY MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt MDRiYzg3YTI5ZTRkLzEvSkdPa0xoMlB6SDVvVkVUbjFkZXRPZC1UUWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZaUMA0E AgACMAcDBQAqA6zgMA0GCSqGSIb3DQEBCwUAA4IBAQASNrs3fM9cDNM6lXUBVb8l dK6k4AJKYd3TIgP+zlNLu1xh4UOpoHa6Tn2s89z+oXhjd+0wfRci6dyl4ykpUDeZ gU1DxR1POTyBbeBUMPTXCFKaAvF/RhDuI09pTaKCfbeRk2qElOLbp7XctmE9WUDm wcD2NxOcY0duOJENDeHlC1RdFWl0ZIBg1hSidYaGacaxGuiZG2shKcvoIiaOvkRq u1Td3wAnAgHbinMgz0WyCrVDvauyDa3YVedP8t33GYevssCKwL2Mu6b2N/7rDqvv OOFI6yH1CNHeuEpnJmkVo+fM1CPt8rI0eXt92sAosQDiWyl+q3CJ2HBNeMiTwV1E -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:30 2026 by rpki-client