This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JnZJSZZp2cDuPPcVb4FA04K-Wto.roa File: JnZJSZZp2cDuPPcVb4FA04K-Wto.roa (raw, json) Hash identifier: /t7BEBpJab7uOUWNpmyA0xF8D0sjj44F3+R8CjO/dYw= Subject key identifier: 26:76:49:49:96:69:D9:C0:EE:3C:F7:15:6F:81:40:D3:82:BE:5A:DA Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5BDF30C85A5BC4B5342A1B13031D Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JnZJSZZp2cDuPPcVb4FA04K-Wto.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199453 IP address blocks: 213.189.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5b:df:30:c8:5a:5b:c4:b5:34:2a:1b:13:03:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=267649499669d9c0ee3cf7156f8140d382be5ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:a7:9a:6d:87:c9:23:08:e4:fc:2f:fc:28: a0:d2:81:6a:db:c3:be:60:1f:3e:00:b0:ea:a2:54: 80:72:1b:5a:3c:d6:d1:1b:59:fa:bc:9c:ff:f6:46: 02:29:49:2c:10:a1:88:40:e9:53:7c:32:01:95:df: fa:b8:65:af:2d:10:dd:14:7b:c4:d2:79:46:64:ca: 5f:c7:05:5d:64:74:17:38:61:e5:b9:a3:99:3e:c3: 22:9f:fb:3d:27:5d:c9:d3:35:db:40:42:f4:bf:41: 67:31:35:80:4d:c5:34:a8:ef:b1:eb:ff:e1:34:ff: 46:aa:ce:8b:1d:62:78:f7:13:a4:f4:ee:af:1d:cb: 32:2a:df:57:e8:1b:dc:e8:7d:c9:1b:c9:5d:ab:10: 77:da:12:73:78:c0:b1:81:34:5e:54:11:aa:18:34: b6:d6:4e:4a:9f:9e:38:a5:f3:34:6b:98:1a:56:13: bd:5e:7d:da:8c:b9:92:a4:41:c5:ad:08:84:c7:3d: 23:c6:c6:1d:0f:4c:d2:4f:92:1b:ae:c1:ef:36:3b: b1:34:86:f8:71:0b:81:58:07:ea:ae:eb:c5:d2:56: 30:09:0c:75:55:2b:d2:13:13:91:bf:23:d6:08:38: 09:20:27:02:46:3e:ef:1d:60:27:a4:9f:58:3e:e6: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:76:49:49:96:69:D9:C0:EE:3C:F7:15:6F:81:40:D3:82:BE:5A:DA X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JnZJSZZp2cDuPPcVb4FA04K-Wto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.39.0/24 Signature Algorithm: sha256WithRSAEncryption b6:1d:14:7d:41:d0:9e:36:8f:36:30:95:03:a8:53:ed:fe:76: fb:46:e7:e7:a6:b6:61:d5:12:92:d7:61:cd:95:27:e0:5c:63: b6:d6:63:8d:73:9d:c5:35:42:79:bf:c6:9d:ea:c8:91:ab:8e: 89:f5:2e:71:32:1f:9a:2d:a4:23:f0:64:88:db:7d:e9:9c:c9: 09:5c:4e:49:6c:b5:a3:69:19:58:5a:df:c5:a8:6a:d3:55:9f: 84:4d:ae:9f:bf:1f:3c:3a:b3:fa:c1:46:da:ad:0a:95:47:90: 54:41:72:08:99:2c:69:65:34:d7:08:1f:59:60:5b:91:ae:db: 67:91:24:30:3b:35:6b:7c:98:55:c7:28:96:3b:6e:28:74:73: 69:af:ff:98:81:1e:e0:80:fd:22:eb:40:1a:ba:ae:6c:88:94: 3f:06:6a:c7:da:a5:7b:9e:bb:f4:3e:f8:b2:17:35:bf:99:48: 94:87:cb:7f:a0:1a:2c:b6:2b:77:0d:2e:da:56:3f:da:e5:1e: c0:d9:c4:8f:05:55:29:fa:26:f0:f1:9e:4d:bd:3c:df:87:51: 58:e4:2e:94:d0:74:cb:7d:67:82:7a:51:e1:9b:bd:54:ce:53: 3d:4c:54:7b:6f:e0:91:5d:db:bb:f8:a5:2e:e9:56:67:c7:aa: db:3b:85:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1vfMMhaW8S1NCobEwMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc2NDk0OTk2NjlkOWMwZWUzY2Y3MTU2ZjgxNDBkMzgyYmU1YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xinmm2HySMI5Pwv/Cig0oFq28O+ YB8+ALDqolSAchtaPNbRG1n6vJz/9kYCKUksEKGIQOlTfDIBld/6uGWvLRDdFHvE 0nlGZMpfxwVdZHQXOGHluaOZPsMin/s9J13J0zXbQEL0v0FnMTWATcU0qO+x6//h NP9Gqs6LHWJ49xOk9O6vHcsyKt9X6Bvc6H3JG8ldqxB32hJzeMCxgTReVBGqGDS2 1k5Kn544pfM0a5gaVhO9Xn3ajLmSpEHFrQiExz0jxsYdD0zST5IbrsHvNjuxNIb4 cQuBWAfqruvF0lYwCQx1VSvSExORvyPWCDgJICcCRj7vHWAnpJ9YPuYiJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZ2SUmWadnA7jz3FW+BQNOCvlraMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvSm5aSlNaWnAyY0R1UFBjVmI0RkEwNEstV3RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0nMA0G CSqGSIb3DQEBCwUAA4IBAQC2HRR9QdCeNo82MJUDqFPt/nb7RufnprZh1RKS12HN lSfgXGO21mONc53FNUJ5v8ad6siRq46J9S5xMh+aLaQj8GSI233pnMkJXE5JbLWj aRlYWt/FqGrTVZ+ETa6fvx88OrP6wUbarQqVR5BUQXIImSxpZTTXCB9ZYFuRrttn kSQwOzVrfJhVxyiWO24odHNpr/+YgR7ggP0i60Aauq5siJQ/BmrH2qV7nrv0Pviy FzW/mUiUh8t/oBostit3DS7aVj/a5R7A2cSPBVUp+ibw8Z5NvTzfh1FY5C6U0HTL fWeCelHhm71UzlM9TFR7b+CRXdu7+KUu6VZnx6rbO4Wt -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:49 2026 by rpki-client