This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa File: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (raw, json) Hash identifier: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA= Subject key identifier: 25:21:97:06:D5:C1:0E:15:35:BA:0C:A2:FD:75:C7:55:53:97:33:71 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B7A5AB5EC95BD152C8A1CEA0F055CD018 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64433 IP address blocks: 94.137.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:ec:95:bd:15:2c:8a:1c:ea:0f:05:5c:d0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25219706d5c10e1535ba0ca2fd75c75553973371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:74:c6:79:ec:e2:39:d1:ed:d0:39:bb:4d: ef:9b:53:48:23:ed:67:4d:33:c4:3d:94:e5:8e:a6: f8:16:b5:29:ac:0c:ed:e1:a9:20:88:b1:29:18:b7: 0c:d7:5e:72:d1:fe:ba:e1:54:53:ee:65:9d:e6:38: ea:f0:53:ae:e0:94:da:4d:9d:ce:dc:3d:d4:16:ba: 1b:d8:e2:25:59:32:6e:50:c0:fc:8b:bc:14:1c:47: 74:47:89:d0:f0:43:e2:38:91:6b:cd:4e:e9:56:5e: e0:47:b4:5f:ec:bb:bf:6b:3f:6d:c7:15:80:62:97: 30:64:53:8d:23:cf:3c:7d:b3:1e:96:22:e2:38:00: b8:48:f7:ba:34:2f:0a:50:e6:7f:03:5a:7a:d3:6a: 31:0e:db:b4:71:02:75:04:98:da:de:93:06:96:f5: 36:81:9b:da:12:30:b4:aa:b2:dc:f6:70:2b:85:8a: 4b:11:4b:06:ed:f6:40:5c:9f:cf:fd:4f:81:31:d6: 26:2d:45:6a:62:b4:5d:8d:43:b4:aa:bf:fc:d5:e6: 2a:f1:0a:90:ce:2f:96:da:4a:0f:fe:4c:41:47:74: 59:b3:75:27:b2:37:8d:19:e9:9c:46:c4:59:f7:0b: ec:0a:ef:4a:5f:66:76:ae:2e:5e:ce:de:19:6f:23: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:21:97:06:D5:C1:0E:15:35:BA:0C:A2:FD:75:C7:55:53:97:33:71 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.137.74.0/23 Signature Algorithm: sha256WithRSAEncryption 20:cd:81:b7:41:ad:84:b6:89:3c:1f:ab:fc:e5:18:61:1c:6f: 6f:c9:2f:b9:c1:f9:3d:17:f3:a1:5d:22:b2:cf:87:d8:4c:52: 52:93:aa:dd:0a:aa:fd:27:98:a0:18:d2:c2:c7:13:f6:0e:bd: 2c:0c:cf:21:0f:6e:a5:fb:fd:bf:0a:62:08:0a:d7:16:c6:f5: cf:76:2d:42:73:ba:1f:46:0a:a6:10:6f:37:81:10:28:bd:0d: bd:2c:cd:34:29:c6:41:0d:d5:f9:a6:2f:c3:0f:82:f5:82:1d: 1b:4e:ab:6f:10:b0:a0:5a:c9:ca:76:39:cf:21:35:28:89:1b: 3b:6a:cc:2b:bb:81:be:8f:44:60:60:c2:f2:e6:47:70:c4:7d: d9:f8:68:3c:90:5f:3f:4a:46:d0:d5:b2:66:cb:3a:2e:f7:79: 42:00:8b:71:58:7b:29:68:8d:a7:75:fb:ba:dd:76:32:e4:40: 54:06:60:6e:70:e6:3e:f1:9b:c8:72:14:77:24:3b:cf:ea:f4: b6:06:e5:7b:e7:e5:49:31:4f:bd:b2:58:c6:27:d8:99:8c:70: ba:3f:59:fc:e7:95:0e:7e:0b:e3:f8:4a:69:3e:65:55:4e:5e: 9e:bf:90:fa:b3:5c:c8:98:bc:71:51:a4:d2:c9:ee:5a:53:ef: 4c:a0:0f:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrXslb0VLIoc6g8FXNAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTIxOTcwNmQ1YzEwZTE1MzViYTBjYTJmZDc1Yzc1NTUzOTczMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFt0xnns4jnR7dA5u03vm1NII+1n TTPEPZTljqb4FrUprAzt4akgiLEpGLcM115y0f664VRT7mWd5jjq8FOu4JTaTZ3O 3D3UFrob2OIlWTJuUMD8i7wUHEd0R4nQ8EPiOJFrzU7pVl7gR7Rf7Lu/az9txxWA YpcwZFONI888fbMeliLiOAC4SPe6NC8KUOZ/A1p602oxDtu0cQJ1BJja3pMGlvU2 gZvaEjC0qrLc9nArhYpLEUsG7fZAXJ/P/U+BMdYmLUVqYrRdjUO0qr/81eYq8QqQ zi+W2koP/kxBR3RZs3UnsjeNGemcRsRZ9wvsCu9KX2Z2ri5ezt4ZbyO76wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUhlwbVwQ4VNboMov11x1VTlzNxMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvSlNHWEJ0WEJEaFUxdWd5aV9YWEhWVk9YTTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXolKMA0G CSqGSIb3DQEBCwUAA4IBAQAgzYG3Qa2Etok8H6v85RhhHG9vyS+5wfk9F/OhXSKy z4fYTFJSk6rdCqr9J5igGNLCxxP2Dr0sDM8hD26l+/2/CmIICtcWxvXPdi1Cc7of RgqmEG83gRAovQ29LM00KcZBDdX5pi/DD4L1gh0bTqtvELCgWsnKdjnPITUoiRs7 aswru4G+j0RgYMLy5kdwxH3Z+Gg8kF8/SkbQ1bJmyzou93lCAItxWHspaI2ndfu6 3XYy5EBUBmBucOY+8ZvIchR3JDvP6vS2BuV75+VJMU+9sljGJ9iZjHC6P1n855UO fgvj+EppPmVVTl6ev5D6s1zImLxxUaTSye5aU+9MoA8/ -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:52 2026 by rpki-client