This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JZLfSebEIWvoormhexMznNOTHBU.roa File: JZLfSebEIWvoormhexMznNOTHBU.roa (raw, json) Hash identifier: 5MbsEyIh758gTehSqYdIiLhGSeWl1hexW7YZzTaWsBE= Subject key identifier: 25:92:DF:49:E6:C4:21:6B:E8:A2:B9:A1:7B:13:33:9C:D3:93:1C:15 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149AD15101BCA75A0B764616964BEB Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JZLfSebEIWvoormhexMznNOTHBU.roa Signing time: Fri 02 Jan 2026 14:20:15 +0000 ROA not before: Fri 02 Jan 2026 14:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3308 IP address blocks: 194.231.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9a:d1:51:01:bc:a7:5a:0b:76:46:16:96:4b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2592df49e6c4216be8a2b9a17b13339cd3931c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:7c:97:4f:e8:32:50:68:39:41:a8:68:5a: 71:79:6a:68:ab:6f:9d:72:0b:2e:3c:ad:3b:25:cd: ce:ac:c6:a2:2f:c1:a3:47:68:2c:db:e3:69:18:1b: 91:54:87:75:cc:2c:78:54:f7:dd:ed:80:5e:1b:5d: f5:5f:75:fd:ce:b0:86:5a:f3:99:6f:70:4f:9b:06: 7e:f8:d9:84:aa:2c:f1:80:84:6d:ec:41:32:2e:1b: bd:cf:9a:35:7c:b1:96:bf:5d:23:dc:4e:08:df:a5: e2:c1:43:97:c2:8e:7b:b8:60:da:4a:f4:8b:c1:f2: 13:e5:d6:9f:83:77:bc:19:5c:c2:89:92:70:63:87: 6e:3a:de:d1:84:a3:b2:87:68:5d:d7:98:0e:ef:31: 68:9e:f1:8b:7b:05:b2:d9:93:24:29:e2:3c:5e:2f: 02:af:99:e6:6d:34:02:6f:66:cf:ee:14:09:c7:a5: 66:0e:fd:ca:be:cd:96:26:a2:29:9e:c9:22:c0:7e: 85:61:cc:17:df:36:8f:9c:60:23:f1:75:66:00:eb: cd:4f:50:a0:56:ad:ae:77:e1:e8:53:ec:2f:6f:f4: 52:08:cb:9c:33:a3:c8:03:f1:4d:09:38:82:ad:5b: 75:71:ce:a9:03:8d:90:72:0f:78:db:21:a6:03:65: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:DF:49:E6:C4:21:6B:E8:A2:B9:A1:7B:13:33:9C:D3:93:1C:15 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JZLfSebEIWvoormhexMznNOTHBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.159.0/24 Signature Algorithm: sha256WithRSAEncryption e4:11:b9:fe:53:61:6b:e0:11:9b:11:60:01:07:8c:01:8e:42: a7:44:7a:76:22:c1:ec:be:1b:58:11:4c:be:08:d8:51:a0:b9: 4d:16:27:be:8f:f2:84:ad:7c:fe:30:fb:87:f6:4e:f9:11:cb: af:3f:42:62:a9:be:5d:c7:47:17:0a:5e:de:68:3c:36:bb:b7: 87:7b:ab:0b:32:16:3d:b0:9e:56:65:2b:dd:a2:50:af:cb:51: 58:a5:14:e1:5a:ad:c8:00:82:ae:12:f1:a4:27:64:22:85:1f: 7f:83:6b:1e:77:eb:be:9f:15:e1:38:b9:2b:dd:e6:50:f5:ee: b7:de:50:3e:6c:4d:c5:b1:ce:7f:ce:97:d0:90:9c:2c:8c:2f: ad:d3:87:35:21:4f:f9:d7:ae:3c:2d:03:bd:6b:a2:7c:dd:69: a5:e5:64:b6:24:b0:e9:43:ec:d5:68:dc:3e:9b:18:db:96:fe: 8d:4a:19:a4:21:87:e9:8a:a1:8f:54:c1:7f:b4:fe:49:53:74: f7:84:04:09:fc:f9:a5:f9:ca:24:70:74:7c:f1:f8:8b:90:66: 76:c6:0c:48:98:b0:0c:81:a6:e4:89:e5:d7:bf:7b:a9:9a:96: fc:c0:9a:e9:11:ad:30:eb:eb:9a:83:f9:e4:61:ca:0b:0a:bd: 5d:64:cb:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FJrRUQG8p1oLdkYWlkvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTkyZGY0OWU2YzQyMTZiZThhMmI5YTE3YjEzMzM5Y2QzOTMxYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr698l0/oMlBoOUGoaFpxeWpoq2+d cgsuPK07Jc3OrMaiL8GjR2gs2+NpGBuRVId1zCx4VPfd7YBeG131X3X9zrCGWvOZ b3BPmwZ++NmEqizxgIRt7EEyLhu9z5o1fLGWv10j3E4I36XiwUOXwo57uGDaSvSL wfIT5dafg3e8GVzCiZJwY4duOt7RhKOyh2hd15gO7zFonvGLewWy2ZMkKeI8Xi8C r5nmbTQCb2bP7hQJx6VmDv3Kvs2WJqIpnskiwH6FYcwX3zaPnGAj8XVmAOvNT1Cg Vq2ud+HoU+wvb/RSCMucM6PIA/FNCTiCrVt1cc6pA42Qcg942yGmA2WfiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWS30nmxCFr6KK5oXsTM5zTkxwVMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSlpMZlNlYkVJV3Zvb3JtaGV4TXpuTk9USEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuefMA0G CSqGSIb3DQEBCwUAA4IBAQDkEbn+U2Fr4BGbEWABB4wBjkKnRHp2IsHsvhtYEUy+ CNhRoLlNFie+j/KErXz+MPuH9k75EcuvP0Jiqb5dx0cXCl7eaDw2u7eHe6sLMhY9 sJ5WZSvdolCvy1FYpRThWq3IAIKuEvGkJ2QihR9/g2sed+u+nxXhOLkr3eZQ9e63 3lA+bE3Fsc5/zpfQkJwsjC+t04c1IU/51648LQO9a6J83Wml5WS2JLDpQ+zVaNw+ mxjblv6NShmkIYfpiqGPVMF/tP5JU3T3hAQJ/Pml+cokcHR88fiLkGZ2xgxImLAM gabkieXXv3upmpb8wJrpEa0w6+uag/nkYcoLCr1dZMsK -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:21 2026 by rpki-client