This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/JHMmDbVRrRsKn48GITbyHSYvb4k.roa File: JHMmDbVRrRsKn48GITbyHSYvb4k.roa (raw, json) Hash identifier: JTG+SkQZDZHDvGwrOeoKbRRR7PNa8rHubeMF5VYtzkQ= Subject key identifier: 24:73:26:0D:B5:51:AD:1B:0A:9F:8F:06:21:36:F2:1D:26:2F:6F:89 Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529 Certificate serial: 019B7A5AE85FD1A37DD0BE4D483E3FADB10F Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/JHMmDbVRrRsKn48GITbyHSYvb4k.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60880 IP address blocks: 5.133.84.0/22 maxlen: 22 5.133.84.0/24 maxlen: 24 185.159.127.0/24 maxlen: 24 185.197.188.0/22 maxlen: 22 185.205.240.0/22 maxlen: 22 185.214.128.0/22 maxlen: 24 192.145.24.0/22 maxlen: 22 194.164.116.0/23 maxlen: 23 2a0a:7cc0::/29 maxlen: 29 2a0a:7cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e8:5f:d1:a3:7d:d0:be:4d:48:3e:3f:ad:b1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2473260db551ad1b0a9f8f062136f21d262f6f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:fe:33:95:6a:f1:9e:53:b8:68:af:d4:1a: 92:f7:f9:22:47:35:77:a6:9c:7f:52:bc:c2:76:c7: de:24:4c:5b:79:a7:4b:5b:89:6b:da:3c:3f:ad:49: bb:c3:1d:32:72:7e:90:e0:12:a8:a6:3c:cc:6e:8e: b5:c5:a9:b3:f9:c7:ca:58:c2:01:33:91:79:03:1b: 38:23:c0:67:29:e1:00:5a:14:b0:da:12:25:d8:2f: 09:9e:50:14:ef:fd:36:81:44:d8:04:45:aa:b7:33: 7d:cb:73:75:46:3b:ee:d6:77:23:66:13:1e:1b:f3: 3a:33:ce:78:1e:48:6d:2e:f6:f2:36:75:37:a1:e5: b1:de:28:78:18:eb:3b:57:3d:d9:36:6d:1f:79:4f: 3c:2b:f7:5d:3a:e5:62:9a:f9:9e:69:68:4b:d9:bf: d0:8c:1a:7c:f8:62:8e:7f:45:60:7b:f3:60:2e:01: 9d:ba:2f:82:3e:fa:6e:35:f3:05:c2:7a:9c:91:f8: f8:62:b6:20:64:10:53:16:70:a4:75:b4:4b:7a:ef: 37:f8:28:30:ba:71:a8:03:4d:7c:58:26:05:e9:68: f0:3b:5b:26:6a:50:17:9b:82:20:16:f5:e9:54:78: 20:f8:84:5e:e3:aa:9a:a6:82:66:89:77:06:6b:85: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:26:0D:B5:51:AD:1B:0A:9F:8F:06:21:36:F2:1D:26:2F:6F:89 X509v3 Authority Key Identifier: keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/JHMmDbVRrRsKn48GITbyHSYvb4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.84.0/22 185.159.127.0/24 185.197.188.0/22 185.205.240.0/22 185.214.128.0/22 192.145.24.0/22 194.164.116.0/23 IPv6: 2a0a:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 24:5a:6f:6b:ef:59:1a:1f:e6:f9:32:03:2b:f0:c8:a7:60:5d: ef:7a:af:b6:ce:52:78:68:6c:aa:97:84:f8:18:1d:e8:41:45: b1:11:7a:76:f4:a4:31:68:a1:1b:d0:7f:00:b5:20:6a:e6:27: f6:49:0b:2a:38:1b:c9:81:b4:23:90:c7:6f:a4:b1:51:56:6c: 78:fe:9a:4b:38:9c:09:25:77:7b:99:c3:3f:4f:d1:1b:d1:53: 13:fa:ab:01:89:03:e9:ac:11:89:62:d9:b4:ef:0d:0d:66:bf: 45:0a:3e:1b:4f:e7:ee:0c:c2:01:32:8b:33:e3:7b:b9:bb:99: 98:90:07:f6:b6:6e:0a:3a:dd:cd:93:9a:ad:20:53:d5:1d:33: 8c:f0:56:16:49:bb:e3:a1:c8:0c:e5:72:6e:c6:eb:64:a3:6c: df:5e:c0:40:46:43:34:6c:ef:1d:d8:83:f1:25:1b:24:4c:07: c5:dd:a0:64:12:45:99:e1:6b:1b:6c:58:d2:58:05:4e:83:3d: bd:bf:c3:f9:70:33:0d:e4:19:ad:ec:0d:b4:e5:dc:76:73:31: 4c:28:36:b0:98:90:7a:73:a1:7f:ec:d8:1d:fa:bf:ce:19:fc: 6f:15:5d:c5:eb:58:62:40:77:c6:9b:2e:4b:62:97:13:4e:06: 76:24:7b:41 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt6Wuhf0aN90L5NSD4/rbEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmU4YjZkNzNmMmYzODU0ODk5NmY2NjYyMTMzMGE4ZDcx MDg1MjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDczMjYwZGI1NTFhZDFiMGE5ZjhmMDYyMTM2ZjIxZDI2MmY2Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTn+M5Vq8Z5TuGiv1BqS9/kiRzV3 ppx/UrzCdsfeJExbeadLW4lr2jw/rUm7wx0ycn6Q4BKopjzMbo61xamz+cfKWMIB M5F5Axs4I8BnKeEAWhSw2hIl2C8JnlAU7/02gUTYBEWqtzN9y3N1Rjvu1ncjZhMe G/M6M854HkhtLvbyNnU3oeWx3ih4GOs7Vz3ZNm0feU88K/ddOuVimvmeaWhL2b/Q jBp8+GKOf0Vge/NgLgGdui+CPvpuNfMFwnqckfj4YrYgZBBTFnCkdbRLeu83+Cgw unGoA018WCYF6WjwO1smalAXm4IgFvXpVHgg+IRe46qapoJmiXcGa4XogQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFCRzJg21Ua0bCp+PBiE28h0mL2+JMB8GA1UdIwQY MBaAFLlui21z8vOFSJlvZmITMKjXEIUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYt YmMwMDQ2NDllZTk5LzEvSkhNbURiVlJyUnNLbjQ4R0lUYnlIU1l2YjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYtYmMwMDQ2NDllZTk5 LzEvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCBYVUAwQA uZ9/AwQCucW8AwQCuc3wAwQCudaAAwQCwJEYAwQBwqR0MA0EAgACMAcDBQMqCnzA MA0GCSqGSIb3DQEBCwUAA4IBAQAkWm9r71kaH+b5MgMr8MinYF3veq+2zlJ4aGyq l4T4GB3oQUWxEXp29KQxaKEb0H8AtSBq5if2SQsqOBvJgbQjkMdvpLFRVmx4/ppL OJwJJXd7mcM/T9Eb0VMT+qsBiQPprBGJYtm07w0NZr9FCj4bT+fuDMIBMosz43u5 u5mYkAf2tm4KOt3Nk5qtIFPVHTOM8FYWSbvjocgM5XJuxutko2zfXsBARkM0bO8d 2IPxJRskTAfF3aBkEkWZ4WsbbFjSWAVOgz29v8P5cDMN5Bmt7A205dx2czFMKDaw mJB6c6F/7Ngd+r/OGfxvFV3F61hiQHfGmy5LYpcTTgZ2JHtB -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:07 2026 by rpki-client