This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa File: JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa (raw, json) Hash identifier: Je/rPrN5iQLTZAw+1b3i8YRBUtHfjaLY04H9s+UkqOw= Subject key identifier: 26:25:4A:57:4E:10:E5:88:B4:61:55:D9:3E:1C:CF:AD:09:EB:75:A1 Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f Certificate serial: 019B7EA63A5EC063F160C4675A6FD979E8C0 Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa Signing time: Fri 02 Jan 2026 12:19:41 +0000 ROA not before: Fri 02 Jan 2026 12:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9155 IP address blocks: 91.221.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3a:5e:c0:63:f1:60:c4:67:5a:6f:d9:79:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f Validity Not Before: Jan 2 12:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26254a574e10e588b46155d93e1ccfad09eb75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:15:8d:e4:2c:26:8e:72:24:76:44:cd:84:a7: 4b:93:e7:84:63:12:02:bf:d8:5f:54:1d:93:0b:3e: 5a:f3:76:4b:dc:c8:73:13:2f:c1:27:c3:69:d5:49: 47:bc:a5:27:27:21:2b:d4:d8:40:ce:13:f8:31:af: 1c:20:15:96:3e:af:9f:93:9a:3a:9a:1f:e5:57:73: b4:98:e0:1b:d3:f1:45:0b:53:23:63:94:4e:a6:8a: 6b:ab:ce:a4:fe:50:df:f9:b0:94:e9:63:d0:c2:b3: 94:f5:d6:e7:46:98:c3:59:ac:4f:7d:f4:e7:5c:46: 7f:b0:ab:8c:5f:51:e8:fd:19:7e:83:76:ce:ba:e0: fa:16:7e:65:fe:17:8f:80:c8:06:a4:4e:84:f2:cf: 71:bd:18:25:72:cb:1e:6b:2f:53:50:61:22:62:ba: dd:bd:e5:34:e5:54:29:e9:01:eb:93:56:18:de:28: 70:0d:c8:05:0f:bc:59:1d:31:fb:bd:f7:42:51:52: 2f:17:8c:7f:08:ce:a6:46:9d:1d:9a:e5:cf:b7:34: 25:36:0c:3e:f5:f9:56:19:97:31:90:b6:02:7e:07: fd:22:bd:77:e1:26:e5:bd:51:8f:71:ab:bf:3b:fe: 44:12:ef:97:92:59:46:3b:5d:e1:24:df:72:52:fd: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:4A:57:4E:10:E5:88:B4:61:55:D9:3E:1C:CF:AD:09:EB:75:A1 X509v3 Authority Key Identifier: keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.128.0/24 Signature Algorithm: sha256WithRSAEncryption 51:8b:73:40:ee:01:eb:35:5d:98:80:32:07:dc:dc:1c:06:70: 87:d0:cc:97:52:74:a2:1c:02:01:45:e9:9b:31:16:94:dd:b8: 54:c4:6c:ee:2f:11:9a:82:8a:0c:60:a1:d0:1f:a6:1d:93:88: b5:e3:bf:48:31:6f:3e:28:d3:0d:2b:0b:3c:10:07:7c:58:af: 01:0d:21:db:a4:48:ca:b9:9d:2b:7c:fa:1a:d9:cd:a1:84:3c: 11:ad:d6:71:12:1d:01:2e:55:c9:eb:20:a8:a2:88:80:94:29: 71:7f:5c:88:40:60:2c:18:4c:b7:d3:31:9c:6f:30:3d:13:69: 21:d7:cd:91:9f:f3:4f:fb:a6:c7:7c:d0:ee:67:79:06:d5:71: ab:5b:ac:18:3e:b1:55:f0:52:16:8b:a5:cf:87:13:f2:56:14: eb:47:3c:0f:5e:a5:75:bd:b9:10:ac:1f:36:a7:fe:8f:bc:4b: 31:5f:00:b9:fa:8c:f9:5e:9f:7d:bc:b9:ba:3f:6f:51:1b:f2: 45:66:3e:5a:be:07:33:35:5e:6b:ee:74:06:43:06:7d:19:69: aa:8a:89:4d:ce:48:6f:c0:5f:45:64:a4:5b:78:63:56:6e:d5: e3:61:da:5a:42:ac:f7:f2:93:0c:91:66:e1:cf:a2:5b:c4:eb: 7c:a8:16:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pjpewGPxYMRnWm/ZeejAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNDNkZDg1ZmEwMWViZWMwMWVlMzMxYTEzMTc5ZThhMzNk OTAyMmYwHhcNMjYwMTAyMTIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjI1NGE1NzRlMTBlNTg4YjQ2MTU1ZDkzZTFjY2ZhZDA5ZWI3NWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hWN5CwmjnIkdkTNhKdLk+eEYxIC v9hfVB2TCz5a83ZL3MhzEy/BJ8Np1UlHvKUnJyEr1NhAzhP4Ma8cIBWWPq+fk5o6 mh/lV3O0mOAb0/FFC1MjY5ROpoprq86k/lDf+bCU6WPQwrOU9dbnRpjDWaxPffTn XEZ/sKuMX1Ho/Rl+g3bOuuD6Fn5l/hePgMgGpE6E8s9xvRglcsseay9TUGEiYrrd veU05VQp6QHrk1YY3ihwDcgFD7xZHTH7vfdCUVIvF4x/CM6mRp0dmuXPtzQlNgw+ 9flWGZcxkLYCfgf9Ir134SblvVGPcau/O/5EEu+XkllGO13hJN9yUv2NtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYlSldOEOWItGFV2T4cz60J63WhMB8GA1UdIwQY MBaAFBFD3YX6AevsAe4zGhMXnooz2QIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQt MDBhYmM0NzFmOWMxLzEvSmlWS1YwNFE1WWkwWVZYWlBoelByUW5yZGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQtMDBhYmM0NzFmOWMx LzEvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW92AMA0G CSqGSIb3DQEBCwUAA4IBAQBRi3NA7gHrNV2YgDIH3NwcBnCH0MyXUnSiHAIBRemb MRaU3bhUxGzuLxGagooMYKHQH6Ydk4i1479IMW8+KNMNKws8EAd8WK8BDSHbpEjK uZ0rfPoa2c2hhDwRrdZxEh0BLlXJ6yCoooiAlClxf1yIQGAsGEy30zGcbzA9E2kh 182Rn/NP+6bHfNDuZ3kG1XGrW6wYPrFV8FIWi6XPhxPyVhTrRzwPXqV1vbkQrB82 p/6PvEsxXwC5+oz5Xp99vLm6P29RG/JFZj5avgczNV5r7nQGQwZ9GWmqiolNzkhv wF9FZKRbeGNWbtXjYdpaQqz38pMMkWbhz6JbxOt8qBYq -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:19 2026 by rpki-client