This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa File: JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa (raw, json) Hash identifier: GohFVvvq+XYJmNC5kEf/pp9o0uUty9wky/EpnIbRt08= Subject key identifier: 24:3C:E3:92:70:E1:BB:A6:3F:61:89:F4:3D:D5:47:C2:24:EB:D9:80 Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7DE12C27AC6FD8B758F45A0FDE1C1 Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 213.165.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:de:12:c2:7a:c6:fd:8b:75:8f:45:a0:fd:e1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=243ce39270e1bba63f6189f43dd547c224ebd980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:71:23:a0:bf:32:b6:56:2e:92:c7:bb:fa: 7a:bc:1e:e5:7e:5d:4f:fd:d7:90:d1:a1:64:25:35: 49:0a:dc:d3:39:a3:5d:a6:aa:1f:9b:b2:18:7a:ce: 18:1b:9b:ec:8e:c0:7b:b9:62:73:56:a2:06:04:0d: 40:97:5e:fd:56:22:02:4f:ef:7b:4f:a7:34:2c:a7: 5a:1b:0d:c6:1d:df:8f:33:26:af:16:d8:fc:c2:57: 2e:4c:ad:37:48:83:b1:00:1c:f0:a1:ee:b1:be:8e: fd:62:0e:03:5f:51:3a:8c:ba:ed:31:fc:32:88:aa: d8:12:31:08:22:bf:01:13:4f:2d:42:2f:db:21:a4: dd:87:34:1d:77:d9:39:4d:ce:30:8e:c7:b9:00:ce: 2a:13:93:14:85:ec:f8:6f:bd:fa:12:48:05:d5:f1: 6b:84:d4:74:b7:a6:f7:e3:78:4d:79:b5:6e:b9:43: 99:70:7b:73:0a:8b:36:5e:2e:64:cd:fd:24:9a:8f: 8f:cc:6a:bc:bd:d6:58:48:6d:6e:a6:d4:21:ff:07: 50:00:8d:3b:be:31:68:85:81:63:eb:d7:1f:d7:e6: be:dc:b6:49:ef:94:38:94:bf:ec:d4:55:e8:4f:1e: d2:dc:0d:45:de:1f:05:8e:03:ca:61:5e:db:c8:30: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:E3:92:70:E1:BB:A6:3F:61:89:F4:3D:D5:47:C2:24:EB:D9:80 X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.52.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a0:9c:ef:92:78:68:4f:c5:ab:c7:87:1b:e2:5e:2d:fb:65: ee:85:56:ce:65:f9:da:4d:b7:66:45:3e:8d:63:f5:fc:b1:3c: a5:b6:12:51:96:cc:7e:c0:29:8f:da:76:11:10:31:47:e0:96: 6c:c7:ac:57:87:1e:bb:b6:da:be:04:f4:98:27:50:21:4c:c7: 26:bc:04:5d:0b:b0:42:14:5e:b8:59:c0:72:60:80:9d:67:f5: 29:5c:e5:02:ab:5c:59:f5:88:36:92:04:25:44:43:f4:c1:1f: d9:b5:28:2a:e7:cd:11:11:16:1f:00:51:82:67:33:ef:4f:99: ab:e6:47:48:e0:ff:40:0f:80:fc:c7:d0:70:8a:c5:63:c5:d6: aa:22:df:a8:8c:c3:ec:b2:80:ee:8a:75:17:4c:ff:1c:41:f6: 2a:34:0e:59:6f:a8:86:07:79:73:4a:66:7d:4b:c2:71:66:93: a6:9b:94:14:7e:03:e5:9e:bf:f5:cb:6a:6d:33:7d:ab:90:2f: 20:22:4c:02:01:8a:c3:47:dc:33:e9:52:00:bf:93:3d:6b:5a: 1d:3f:e7:45:ae:c1:9f:56:a6:0a:3f:af:a9:06:da:10:e4:3e: 36:9a:d0:5b:d2:2a:34:f3:78:8c:5e:51:75:06:d9:a7:5b:54: e5:cb:d9:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x94SwnrG/Yt1j0Wg/eHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDNjZTM5MjcwZTFiYmE2M2Y2MTg5ZjQzZGQ1NDdjMjI0ZWJkOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBdxI6C/MrZWLpLHu/p6vB7lfl1P /deQ0aFkJTVJCtzTOaNdpqofm7IYes4YG5vsjsB7uWJzVqIGBA1Al179ViICT+97 T6c0LKdaGw3GHd+PMyavFtj8wlcuTK03SIOxABzwoe6xvo79Yg4DX1E6jLrtMfwy iKrYEjEIIr8BE08tQi/bIaTdhzQdd9k5Tc4wjse5AM4qE5MUhez4b736EkgF1fFr hNR0t6b343hNebVuuUOZcHtzCos2Xi5kzf0kmo+PzGq8vdZYSG1uptQh/wdQAI07 vjFohYFj69cf1+a+3LZJ75Q4lL/s1FXoTx7S3A1F3h8FjgPKYV7byDAILQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQ845Jw4bumP2GJ9D3VR8Ik69mAMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvSkR6amtuRGh1NllfWVluMFBkVkh3aVRyMllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aU0MA0G CSqGSIb3DQEBCwUAA4IBAQCNoJzvknhoT8Wrx4cb4l4t+2XuhVbOZfnaTbdmRT6N Y/X8sTylthJRlsx+wCmP2nYREDFH4JZsx6xXhx67ttq+BPSYJ1AhTMcmvARdC7BC FF64WcByYICdZ/UpXOUCq1xZ9Yg2kgQlREP0wR/ZtSgq580RERYfAFGCZzPvT5mr 5kdI4P9AD4D8x9BwisVjxdaqIt+ojMPssoDuinUXTP8cQfYqNA5Zb6iGB3lzSmZ9 S8JxZpOmm5QUfgPlnr/1y2ptM32rkC8gIkwCAYrDR9wz6VIAv5M9a1odP+dFrsGf VqYKP6+pBtoQ5D42mtBb0io083iMXlF1BtmnW1Tly9nU -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:34 2026 by rpki-client