This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa File: JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa (raw, json) Hash identifier: GTd8cCkoiW0FGNR73NG1lnLnp97HhBUrrNAzm3q5ilE= Subject key identifier: 25:DA:EB:CC:1E:DA:D6:A1:FD:00:7A:35:84:8E:FC:1D:0F:6F:64:C9 Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45 Certificate serial: 019B7C7FFE8DC593DDF98924EA3F60725C3F Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210979 IP address blocks: 91.231.47.0/24 maxlen: 24 2a14:df80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fe:8d:c5:93:dd:f9:89:24:ea:3f:60:72:5c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25daebcc1edad6a1fd007a35848efc1d0f6f64c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:8b:2c:8c:dd:29:a5:4d:b9:44:80:50:6a: 6b:95:d6:c8:e5:22:91:17:06:a4:04:00:b9:b4:a7: 14:9e:00:61:a3:b2:13:44:34:bf:6f:40:43:fc:f0: 8d:8b:54:cb:a6:f9:7c:8e:07:09:37:80:61:d1:e6: 55:c5:de:41:c9:1c:50:d7:b1:ba:c2:b9:5c:b3:db: 31:b9:cd:db:f1:07:21:ed:5a:46:ce:1e:28:1e:9e: 3b:92:9b:26:75:a0:25:b5:e2:97:6c:f1:20:e7:7c: ba:b9:b9:26:fb:8c:58:ef:c4:61:4f:37:02:ff:f1: a5:91:92:5e:fc:01:3d:ba:82:4e:fb:f3:14:f0:a8: eb:b0:3b:a1:dd:17:2b:b5:4f:39:ab:05:ae:8f:cc: a6:12:e9:56:53:aa:a2:3d:02:0d:a8:aa:55:ad:5b: d1:f4:55:c4:6a:c0:76:a0:7f:fb:5e:29:9a:e5:20: e8:31:9a:8c:22:59:8b:13:5f:3d:d8:1e:d0:a1:4a: 20:ea:bb:88:01:ac:80:d6:02:bb:a8:ea:5d:b9:ba: ef:09:31:bd:39:13:c1:ee:f1:0f:f0:5e:30:f1:7a: da:2e:35:f8:8c:98:68:eb:a7:f5:0f:a5:4c:78:44: 03:70:aa:7d:05:df:22:49:b1:f1:b6:54:42:de:b3: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:EB:CC:1E:DA:D6:A1:FD:00:7A:35:84:8E:FC:1D:0F:6F:64:C9 X509v3 Authority Key Identifier: keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.47.0/24 IPv6: 2a14:df80::/29 Signature Algorithm: sha256WithRSAEncryption a4:f1:21:20:92:94:46:f4:ec:72:60:31:d2:75:a7:2c:fc:d4: 80:44:da:21:69:fa:a5:b3:f7:eb:5e:3d:22:c7:d0:74:47:b3: cc:d6:17:86:94:af:f5:0a:62:47:86:4b:80:25:11:22:3c:75: 73:4c:00:dc:3a:86:f1:9c:96:f0:29:74:4d:82:2a:f8:a6:2e: 63:e4:52:66:61:07:29:5e:5e:4f:62:b9:59:c4:d8:0f:58:3d: 9d:d3:bc:4b:93:c9:2d:d4:12:d3:32:9b:57:75:b9:01:82:82: 72:40:ae:9e:7f:88:4f:6c:1d:ef:f8:42:53:c0:05:1e:71:4b: 47:2b:d0:73:39:59:12:38:8b:37:93:9b:3c:45:dc:7d:ff:da: 21:90:81:8b:51:ac:e0:92:ba:07:e0:6d:21:da:b3:05:84:9c: ca:a8:e6:4b:bc:2c:af:3e:75:a2:c7:ac:7f:f0:c3:d5:86:6b: 99:fa:6e:89:fc:59:6b:5f:c6:d7:c5:9b:70:ce:dc:a9:2f:03: bd:2a:f6:b5:e2:69:56:11:ff:b5:c6:e6:3a:10:19:af:52:d5: 87:51:0c:1b:cf:50:89:dc:9e:18:f4:32:bd:2a:ac:9b:1e:71: 04:15:59:2a:b7:85:c2:e2:9e:4d:4b:19:9a:25:61:99:57:17: 22:c5:8f:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f/6NxZPd+Ykk6j9gclw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTViODBjNDVkZmI1ZWE3YWFhN2RkMWQ4ZWQ4YjE0Zjlj MWRjNDUwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWRhZWJjYzFlZGFkNmExZmQwMDdhMzU4NDhlZmMxZDBmNmY2NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zeLLIzdKaVNuUSAUGprldbI5SKR FwakBAC5tKcUngBho7ITRDS/b0BD/PCNi1TLpvl8jgcJN4Bh0eZVxd5ByRxQ17G6 wrlcs9sxuc3b8Qch7VpGzh4oHp47kpsmdaAlteKXbPEg53y6ubkm+4xY78RhTzcC //GlkZJe/AE9uoJO+/MU8KjrsDuh3RcrtU85qwWuj8ymEulWU6qiPQINqKpVrVvR 9FXEasB2oH/7Xima5SDoMZqMIlmLE1892B7QoUog6ruIAayA1gK7qOpdubrvCTG9 ORPB7vEP8F4w8XraLjX4jJho66f1D6VMeEQDcKp9Bd8iSbHxtlRC3rPotQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCXa68we2tah/QB6NYSO/B0Pb2TJMB8GA1UdIwQY MBaAFJhVuAxF37Xqeqp90djtixT5wdxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQt ZWU2YzUwOWI2MjIxLzEvSmRycnpCN2ExcUg5QUhvMWhJNzhIUTl2Wk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQtZWU2YzUwOWI2MjIx LzEvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+cvMA0E AgACMAcDBQMqFN+AMA0GCSqGSIb3DQEBCwUAA4IBAQCk8SEgkpRG9OxyYDHSdacs /NSARNohafqls/frXj0ix9B0R7PM1heGlK/1CmJHhkuAJREiPHVzTADcOobxnJbw KXRNgir4pi5j5FJmYQcpXl5PYrlZxNgPWD2d07xLk8kt1BLTMptXdbkBgoJyQK6e f4hPbB3v+EJTwAUecUtHK9BzOVkSOIs3k5s8Rdx9/9ohkIGLUazgkroH4G0h2rMF hJzKqOZLvCyvPnWix6x/8MPVhmuZ+m6J/FlrX8bXxZtwztypLwO9Kva14mlWEf+1 xuY6EBmvUtWHUQwbz1CJ3J4Y9DK9KqybHnEEFVkqt4XC4p5NSxmaJWGZVxcixY83 -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:18 2026 by rpki-client