This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/JJNZOR6X4rY_GOThrdjQRSXeXBg.roa File: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (raw, json) Hash identifier: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI= Subject key identifier: 24:93:59:39:1E:97:E2:B6:3F:18:E4:E1:AD:D8:D0:45:25:DE:5C:18 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B7CEE3481CF3AD161600CFC6223D86DB8 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/JJNZOR6X4rY_GOThrdjQRSXeXBg.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203088 IP address blocks: 46.172.80.0/24 maxlen: 24 46.172.86.0/24 maxlen: 24 46.172.87.0/24 maxlen: 24 46.172.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:34:81:cf:3a:d1:61:60:0c:fc:62:23:d8:6d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=249359391e97e2b63f18e4e1add8d04525de5c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:a8:0c:96:13:06:f6:ef:41:26:38:f5:a2: ed:cf:2c:63:b4:fa:08:4a:43:e8:a4:54:a6:7b:42: 22:b3:48:0e:7b:5f:ce:ea:f0:4a:ca:e6:48:2b:b6: 65:4e:39:c0:dd:5e:11:6e:b2:76:31:7d:a5:52:26: 8c:b3:f4:3e:20:da:b4:24:f3:49:44:21:9f:41:7d: 03:7b:ac:aa:e8:c0:9e:9a:10:f0:0d:4f:28:e5:2e: 4b:74:fb:11:83:d6:f8:17:1f:dd:88:ff:fd:b1:b5: 90:46:96:85:65:59:0e:07:99:3a:20:19:49:c4:39: a9:63:6f:5c:19:77:53:94:43:0e:3e:62:f8:69:7e: ee:54:c2:7e:10:5d:d7:b0:e5:bb:cc:42:68:55:33: e2:aa:e0:11:77:1f:2a:df:ee:13:00:39:e7:93:4c: 2f:96:56:f0:47:63:43:8f:ae:e4:3f:1b:53:e4:f7: a6:38:15:a5:22:04:0e:3c:bc:46:b7:44:3a:a6:d6: 8a:f2:31:b4:11:80:c6:53:83:72:39:40:51:bb:22: 02:1c:88:24:88:e2:01:a8:72:18:7b:0e:a2:49:13: 29:7d:a2:75:17:48:29:17:38:60:ea:01:07:80:d1: cb:b3:94:46:0d:c5:50:c5:8a:c4:38:ab:a5:6c:1c: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:59:39:1E:97:E2:B6:3F:18:E4:E1:AD:D8:D0:45:25:DE:5C:18 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/JJNZOR6X4rY_GOThrdjQRSXeXBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.80.0/24 46.172.86.0/23 46.172.94.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f9:a5:3a:c7:46:d9:00:ab:68:e3:24:94:dc:3e:36:0e:33: c0:33:a0:a6:78:af:71:b7:79:6c:51:a3:36:dd:1c:b0:34:60: 24:ea:5d:62:04:b2:4e:10:04:34:df:4f:7f:a7:71:30:6b:b0: 08:c1:b5:06:5f:7d:fc:a1:02:06:c8:e9:a2:36:1c:24:83:b7: df:c7:7d:ab:2b:fe:39:f2:87:83:d9:1c:64:18:99:03:8a:96: 52:28:35:51:d2:e1:b8:c2:62:4d:59:9a:52:39:15:90:e2:91: 91:98:ec:7b:e2:2c:71:91:ab:ed:15:69:35:59:89:e4:f2:54: 94:02:a2:db:0e:90:30:81:59:36:08:b5:f6:2b:87:a1:41:55: 3a:65:17:64:b2:ec:1a:9e:18:28:3c:44:6d:1d:3c:13:5a:f2: 5b:fd:45:a0:d6:d5:47:b8:dc:d3:cf:8e:22:96:c3:9c:48:7e: a5:36:42:89:9e:2e:79:e5:84:ea:ae:9f:dd:dd:4d:fa:65:e9: 87:fc:14:da:c1:38:f6:3c:3d:35:46:84:04:72:1d:4d:e7:54: 82:f8:1a:71:a5:3f:bd:36:01:26:67:b7:43:16:02:1a:0f:07: ee:ec:75:38:7d:2a:fb:6e:78:1b:3d:ec:25:57:8e:24:c3:4f: 8f:61:db:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87jSBzzrRYWAM/GIj2G24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkzNTkzOTFlOTdlMmI2M2YxOGU0ZTFhZGQ4ZDA0NTI1ZGU1YzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WuoDJYTBvbvQSY49aLtzyxjtPoI SkPopFSme0Iis0gOe1/O6vBKyuZIK7ZlTjnA3V4RbrJ2MX2lUiaMs/Q+INq0JPNJ RCGfQX0De6yq6MCemhDwDU8o5S5LdPsRg9b4Fx/diP/9sbWQRpaFZVkOB5k6IBlJ xDmpY29cGXdTlEMOPmL4aX7uVMJ+EF3XsOW7zEJoVTPiquARdx8q3+4TADnnk0wv llbwR2NDj67kPxtT5PemOBWlIgQOPLxGt0Q6ptaK8jG0EYDGU4NyOUBRuyICHIgk iOIBqHIYew6iSRMpfaJ1F0gpFzhg6gEHgNHLs5RGDcVQxYrEOKulbBwSiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCSTWTkel+K2Pxjk4a3Y0EUl3lwYMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSkpOWk9SNlg0cllfR09UaHJkalFSU1hlWEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALqxQAwQB LqxWAwQALqxeMA0GCSqGSIb3DQEBCwUAA4IBAQBs+aU6x0bZAKto4ySU3D42DjPA M6CmeK9xt3lsUaM23RywNGAk6l1iBLJOEAQ0309/p3Ewa7AIwbUGX338oQIGyOmi Nhwkg7ffx32rK/458oeD2RxkGJkDipZSKDVR0uG4wmJNWZpSORWQ4pGRmOx74ixx kavtFWk1WYnk8lSUAqLbDpAwgVk2CLX2K4ehQVU6ZRdksuwanhgoPERtHTwTWvJb /UWg1tVHuNzTz44ilsOcSH6lNkKJni555YTqrp/d3U36ZemH/BTawTj2PD01RoQE ch1N51SC+BpxpT+9NgEmZ7dDFgIaDwfu7HU4fSr7bngbPewlV44kw0+PYduJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:49 2026 by rpki-client