This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/JrNORGbnZ0DYF54WM2wEiYBVYoc.roa File: JrNORGbnZ0DYF54WM2wEiYBVYoc.roa (raw, json) Hash identifier: ctjRgpZF3vMlmOhDTVXBddzBy3Sl7VPZrnHCRKodZaw= Subject key identifier: 26:B3:4E:44:66:E7:67:40:D8:17:9E:16:33:6C:04:89:80:55:62:87 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019BD72A71F8B0EE747D220C5D6FEEEE1420 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/JrNORGbnZ0DYF54WM2wEiYBVYoc.roa Signing time: Mon 19 Jan 2026 16:50:41 +0000 ROA not before: Mon 19 Jan 2026 16:50:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:2a:71:f8:b0:ee:74:7d:22:0c:5d:6f:ee:ee:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Jan 19 16:50:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26b34e4466e76740d8179e16336c048980556287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:3f:2d:ef:e8:f2:d7:04:2a:93:6b:bd:b4: 64:e5:38:ec:55:56:fe:74:78:1e:ad:e3:f2:83:53: 33:b6:d5:02:44:22:c0:21:90:37:b6:df:67:f0:27: 5e:13:66:98:12:cb:51:3a:a2:a3:bb:f7:92:5d:71: 21:c6:ee:c3:a7:58:dc:db:78:3a:1a:6a:73:fc:8b: 34:b9:05:5e:3f:e5:b1:31:c7:c3:01:77:16:9c:3e: 75:9b:a0:18:e4:5a:ea:67:cf:a4:f2:b5:13:a5:07: 26:b4:5f:03:59:af:e8:14:8f:d3:3e:32:22:cd:3c: c8:c1:34:98:d1:3b:de:f2:46:93:f1:92:ec:30:a9: 0c:1e:41:19:21:4e:5a:67:17:c7:8b:29:22:e8:62: 7a:7f:e3:e8:1b:0f:9e:6b:4a:77:ca:67:44:cc:c4: 07:08:22:9b:50:ef:fe:b0:8d:a6:c1:5b:69:d8:6c: ac:42:92:e9:db:8a:29:00:d7:b1:10:b5:e4:2e:d1: a8:0a:92:84:66:36:dc:d0:63:08:0a:78:79:3a:9d: 0b:11:8a:bf:a2:7d:03:63:c9:e1:cf:b1:22:10:55: b6:7a:37:d5:9c:82:b0:03:7c:ee:55:10:48:99:c0: c2:ee:88:ce:cf:2c:77:ce:c6:4f:06:fc:2d:88:f6: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B3:4E:44:66:E7:67:40:D8:17:9E:16:33:6C:04:89:80:55:62:87 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/JrNORGbnZ0DYF54WM2wEiYBVYoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption c8:96:5e:6b:e1:8d:c3:4d:7e:b2:00:64:47:71:cd:b5:5d:16: 3e:9b:34:a3:12:dc:dd:c4:16:d4:90:01:ff:53:a1:22:4b:d1: 39:6c:3d:cc:70:50:83:57:9a:4b:52:ef:cf:83:f3:cc:e4:2a: 74:e0:03:70:43:5f:f4:4f:2c:af:1d:ea:59:be:00:32:dc:f3: 2e:6e:5b:33:c2:e5:a6:9b:53:88:1f:a8:9d:05:42:d6:27:2a: 0d:37:3a:49:84:99:6b:6a:89:41:79:80:9f:61:93:93:e3:a0: 56:39:ef:76:2f:0c:b6:82:53:2f:6c:dd:29:e7:ac:5f:28:18: 88:59:6d:de:9c:f9:dd:b7:16:1b:ff:7c:de:d3:dc:0b:92:f7: 99:f6:f1:ba:0f:17:b3:1e:e1:42:47:2b:87:1e:99:e9:f2:b4: 32:70:a7:36:74:82:51:6d:c8:46:d6:78:a9:b2:59:26:27:e9: 74:6e:b4:87:8f:50:40:a7:b3:da:eb:52:4d:3c:90:74:ec:3a: 33:ad:60:a0:2c:2c:f1:2a:1e:3e:78:26:39:45:61:b4:29:cf: c9:3a:d3:e3:58:6c:75:33:0d:2e:69:e9:ef:16:c3:37:3c:3f: 71:ae:7a:dd:1b:57:5b:17:59:1e:3e:dc:4a:11:4f:56:cc:02: 3b:e5:59:5c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvXKnH4sO50fSIMXW/u7hQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjYwMTE5MTY1MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmIzNGU0NDY2ZTc2NzQwZDgxNzllMTYzMzZjMDQ4OTgwNTU2Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmo/Le/o8tcEKpNrvbRk5TjsVVb+ dHgerePyg1MzttUCRCLAIZA3tt9n8CdeE2aYEstROqKju/eSXXEhxu7Dp1jc23g6 Gmpz/Is0uQVeP+WxMcfDAXcWnD51m6AY5FrqZ8+k8rUTpQcmtF8DWa/oFI/TPjIi zTzIwTSY0Tve8kaT8ZLsMKkMHkEZIU5aZxfHiyki6GJ6f+PoGw+ea0p3ymdEzMQH CCKbUO/+sI2mwVtp2GysQpLp24opANexELXkLtGoCpKEZjbc0GMICnh5Op0LEYq/ on0DY8nhz7EiEFW2ejfVnIKwA3zuVRBImcDC7ojOzyx3zsZPBvwtiPb9KQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCazTkRm52dA2BeeFjNsBImAVWKHMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvSnJOT1JHYm5aMERZRjU0V00yd0VpWUJWWW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQDIll5r4Y3DTX6yAGRHcc21 XRY+mzSjEtzdxBbUkAH/U6EiS9E5bD3McFCDV5pLUu/Pg/PM5Cp04ANwQ1/0Tyyv HepZvgAy3PMublszwuWmm1OIH6idBULWJyoNNzpJhJlraolBeYCfYZOT46BWOe92 Lwy2glMvbN0p56xfKBiIWW3enPndtxYb/3ze09wLkveZ9vG6DxezHuFCRyuHHpnp 8rQycKc2dIJRbchG1nipslkmJ+l0brSHj1BAp7Pa61JNPJB07DozrWCgLCzxKh4+ eCY5RWG0Kc/JOtPjWGx1Mw0uaenvFsM3PD9xrnrdG1dbF1kePtxKEU9WzAI75Vlc -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:23 2026 by rpki-client