This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jqk7oDaY0GyweY_m1dLexacLzPE.roa File: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (raw, json) Hash identifier: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM= Subject key identifier: 26:A9:3B:A0:36:98:D0:6C:B0:79:8F:E6:D5:D2:DE:C5:A7:0B:CC:F1 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B7910FCC5CC3762012DB596D1869B6688 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jqk7oDaY0GyweY_m1dLexacLzPE.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 185.245.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fc:c5:cc:37:62:01:2d:b5:96:d1:86:9b:66:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a93ba03698d06cb0798fe6d5d2dec5a70bccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:62:e1:4a:a0:e9:28:5f:81:e4:04:82:7c:28: 7d:e9:53:9e:bb:6b:a6:33:08:d7:32:f7:b5:eb:62: 66:7b:4a:00:96:49:b9:05:33:25:58:b1:23:65:58: b9:0f:7a:9f:b8:3b:5a:24:ec:04:cb:87:7e:d4:5e: a7:7d:f3:cd:bd:7d:70:d5:f8:82:aa:02:57:3b:14: 56:b9:c4:71:dd:fb:d5:9e:a2:3b:b8:b2:c3:03:83: 60:d5:44:bd:ab:49:10:33:60:d3:42:49:79:88:a3: 5a:ba:33:d1:4f:a2:59:8b:8a:51:43:73:56:9a:99: 83:13:7a:0c:10:9a:df:ea:eb:1b:8e:9d:33:08:3f: 68:66:71:1e:ef:bb:30:f5:a6:11:01:3c:62:ea:af: 02:90:4c:b9:41:d4:d1:6c:79:47:45:57:1d:0d:29: be:cb:cd:fa:f7:2a:54:89:93:da:84:12:b0:3b:bb: 3d:2d:9b:65:de:f8:b9:25:4b:01:ea:83:a9:0d:43: db:d8:96:77:64:04:5d:a2:2f:08:cd:04:ed:0e:82: ff:7a:12:d4:98:ce:8e:23:cf:40:6e:fd:14:11:0b: 8e:8a:c8:42:b5:22:5b:b3:b2:12:a7:10:4a:59:f4: 47:c2:c5:af:87:a9:b8:36:8a:6f:e3:ca:08:97:9f: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A9:3B:A0:36:98:D0:6C:B0:79:8F:E6:D5:D2:DE:C5:A7:0B:CC:F1 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jqk7oDaY0GyweY_m1dLexacLzPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.66.0/23 Signature Algorithm: sha256WithRSAEncryption 91:77:ec:3c:2a:42:76:24:a9:89:83:41:4c:f1:52:c2:a1:85: 4c:55:5c:73:e6:06:b8:28:f2:bf:b5:ab:0b:88:0e:54:af:f2: 01:11:2f:2f:77:36:b0:c6:84:a8:06:9f:3b:e0:7b:e3:1d:12: 3f:79:dd:77:5b:d3:e8:ae:09:8b:82:0d:8d:8f:d0:6f:f9:52: 0e:31:ec:c7:2d:37:6b:b2:d1:c1:38:07:90:69:c3:e4:bd:3a: 21:0f:56:2a:c2:86:28:84:5e:ee:f4:c5:d5:8e:57:93:28:3f: 07:fc:f3:ac:ee:85:e6:f2:38:69:b1:84:59:d2:99:1e:d8:0d: bf:8c:f5:cb:82:91:6f:1a:ae:ee:0a:58:7b:dd:00:cb:21:b2: f9:d9:81:5d:0b:35:bb:d2:97:c1:53:29:d0:11:fb:13:8f:15: df:43:dc:b4:9a:35:36:e9:9e:03:e5:11:00:a9:12:2f:91:12: d4:4a:d8:89:eb:ed:2c:3d:9b:12:be:78:cf:34:a5:80:90:c3: 0d:c8:2c:19:7d:0d:df:7c:d4:ac:94:8c:bb:51:f8:0e:9f:a4: 79:52:19:f4:21:0a:7e:df:36:64:eb:6c:f5:34:99:f3:45:e0: 2c:84:2f:d2:49:7c:76:b6:7a:c1:78:4d:db:64:ac:a5:67:60: 3a:fc:d6:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPzFzDdiAS21ltGGm2aIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE5M2JhMDM2OThkMDZjYjA3OThmZTZkNWQyZGVjNWE3MGJjY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mLhSqDpKF+B5ASCfCh96VOeu2um MwjXMve162Jme0oAlkm5BTMlWLEjZVi5D3qfuDtaJOwEy4d+1F6nffPNvX1w1fiC qgJXOxRWucRx3fvVnqI7uLLDA4Ng1US9q0kQM2DTQkl5iKNaujPRT6JZi4pRQ3NW mpmDE3oMEJrf6usbjp0zCD9oZnEe77sw9aYRATxi6q8CkEy5QdTRbHlHRVcdDSm+ y8369ypUiZPahBKwO7s9LZtl3vi5JUsB6oOpDUPb2JZ3ZARdoi8IzQTtDoL/ehLU mM6OI89Abv0UEQuOishCtSJbs7ISpxBKWfRHwsWvh6m4Nopv48oIl58i0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCapO6A2mNBssHmP5tXS3sWnC8zxMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSnFrN29EYVkwR3l3ZVlfbTFkTGV4YWNMelBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufVCMA0G CSqGSIb3DQEBCwUAA4IBAQCRd+w8KkJ2JKmJg0FM8VLCoYVMVVxz5ga4KPK/tasL iA5Ur/IBES8vdzawxoSoBp874HvjHRI/ed13W9PorgmLgg2Nj9Bv+VIOMezHLTdr stHBOAeQacPkvTohD1YqwoYohF7u9MXVjleTKD8H/POs7oXm8jhpsYRZ0pke2A2/ jPXLgpFvGq7uClh73QDLIbL52YFdCzW70pfBUynQEfsTjxXfQ9y0mjU26Z4D5REA qRIvkRLUStiJ6+0sPZsSvnjPNKWAkMMNyCwZfQ3ffNSslIy7UfgOn6R5Uhn0IQp+ 3zZk62z1NJnzReAshC/SSXx2tnrBeE3bZKylZ2A6/Nbt -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:54 2026 by rpki-client