This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Jmz4FnP7cL-QtALX1djqMHOUM6o.roa File: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (raw, json) Hash identifier: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q= Subject key identifier: 26:6C:F8:16:73:FB:70:BF:90:B4:02:D7:D5:D8:EA:30:73:94:33:AA Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED37F989BA185C62A7F23D4A1A737B Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Jmz4FnP7cL-QtALX1djqMHOUM6o.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28883 IP address blocks: 194.240.69.0/24 maxlen: 24 195.237.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:37:f9:89:ba:18:5c:62:a7:f2:3d:4a:1a:73:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266cf81673fb70bf90b402d7d5d8ea30739433aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:72:77:5c:e8:a7:4d:e3:c2:4a:ac:75:1a: 09:17:f3:29:f2:57:21:11:4f:e6:03:8e:5b:ab:ce: 3f:f3:b0:85:3d:b7:ea:f2:9e:71:02:d6:41:7d:4d: 1d:fc:e4:7f:f4:f3:d1:8e:4c:46:c2:ef:1d:f1:c2: 42:77:65:14:ed:4b:eb:f4:63:bc:c5:ae:a8:63:3a: 63:2a:c7:07:cf:86:d4:44:26:cc:34:35:0d:67:71: 13:bc:85:d4:e8:84:41:22:b1:f4:31:98:4b:4f:0e: c3:5e:17:c8:c0:46:a2:95:9f:a2:3c:5f:29:82:e8: 89:25:bb:9c:46:89:c3:9f:03:35:20:0c:a3:b8:0e: af:54:51:de:67:7e:83:dd:f2:49:07:83:d1:85:42: 4b:80:8f:16:79:ba:47:93:1d:87:a3:42:f9:0c:90: 55:a5:5d:70:1b:24:b5:6f:ea:bb:a9:02:3c:91:9f: 1d:17:c6:84:e8:d5:e0:86:08:c5:35:00:18:60:33: 93:09:e3:eb:15:5d:d2:08:ea:02:5c:92:77:e0:77: 2c:a4:0a:c3:e3:d2:a1:7f:21:62:a3:4c:f0:c4:b1: 51:65:49:70:53:36:0f:c6:24:c7:05:16:72:92:3e: 40:88:84:54:71:98:bc:87:e2:2e:4e:bf:7f:6e:40: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:F8:16:73:FB:70:BF:90:B4:02:D7:D5:D8:EA:30:73:94:33:AA X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Jmz4FnP7cL-QtALX1djqMHOUM6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.240.69.0/24 195.237.80.0/24 Signature Algorithm: sha256WithRSAEncryption 74:bf:13:72:9b:87:8d:fe:13:e2:d9:42:b7:7e:77:47:2c:0e: be:43:ad:7c:2e:02:da:86:b7:b5:13:2a:3a:d5:2a:81:87:ea: 05:3b:4a:d9:fe:fd:78:77:5f:dd:95:59:18:af:3b:fc:3a:63: 60:ea:62:4e:99:30:7d:38:05:60:ee:2a:7a:8b:0b:a2:f4:80: 30:ba:fd:23:63:0c:b1:b0:e8:94:1a:67:fb:7d:e4:5d:f5:6a: 7d:25:de:50:f0:27:34:34:0c:5b:ce:6c:64:f7:c2:6d:d8:a4: e0:ed:bf:16:dd:7c:46:3c:3e:c9:57:de:7c:81:bb:9a:65:33: ec:ec:fb:fe:97:b4:b7:a7:ec:87:77:99:5e:e6:6b:39:71:54: 9b:d3:6a:04:50:bf:f0:fd:72:1b:cd:3b:ee:8e:ab:1e:75:81: 85:70:29:cf:7a:04:cf:c2:fc:f1:fa:25:22:28:87:c3:1f:94: 76:d8:93:37:f4:b4:92:90:db:0a:d0:43:1f:53:4e:14:f8:db: 3e:42:7e:12:1d:ff:ec:01:79:fd:38:93:d7:23:b9:bd:71:5d: 85:97:89:0a:e8:42:37:eb:d0:13:53:94:21:f7:71:a5:d7:08: 5a:37:a2:5e:b8:89:ad:5f:0e:3c:c0:52:87:1a:b1:52:20:17: 29:9e:4e:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Tf5iboYXGKn8j1KGnN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZjZjgxNjczZmI3MGJmOTBiNDAyZDdkNWQ4ZWEzMDczOTQzM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aJyd1zop03jwkqsdRoJF/Mp8lch EU/mA45bq84/87CFPbfq8p5xAtZBfU0d/OR/9PPRjkxGwu8d8cJCd2UU7Uvr9GO8 xa6oYzpjKscHz4bURCbMNDUNZ3ETvIXU6IRBIrH0MZhLTw7DXhfIwEailZ+iPF8p guiJJbucRonDnwM1IAyjuA6vVFHeZ36D3fJJB4PRhUJLgI8WebpHkx2Ho0L5DJBV pV1wGyS1b+q7qQI8kZ8dF8aE6NXghgjFNQAYYDOTCePrFV3SCOoCXJJ34HcspArD 49KhfyFio0zwxLFRZUlwUzYPxiTHBRZykj5AiIRUcZi8h+IuTr9/bkD5+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCZs+BZz+3C/kLQC19XY6jBzlDOqMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvSm16NEZuUDdjTC1RdEFMWDFkanFNSE9VTTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwvBFAwQA w+1QMA0GCSqGSIb3DQEBCwUAA4IBAQB0vxNym4eN/hPi2UK3fndHLA6+Q618LgLa hre1Eyo61SqBh+oFO0rZ/v14d1/dlVkYrzv8OmNg6mJOmTB9OAVg7ip6iwui9IAw uv0jYwyxsOiUGmf7feRd9Wp9Jd5Q8Cc0NAxbzmxk98Jt2KTg7b8W3XxGPD7JV958 gbuaZTPs7Pv+l7S3p+yHd5le5ms5cVSb02oEUL/w/XIbzTvujqsedYGFcCnPegTP wvzx+iUiKIfDH5R22JM39LSSkNsK0EMfU04U+Ns+Qn4SHf/sAXn9OJPXI7m9cV2F l4kK6EI369ATU5Qh93Gl1whaN6JeuImtXw48wFKHGrFSIBcpnk5l -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:05 2026 by rpki-client