This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jKcEmRIDilRbegMXDvNfe4imvAk.roa File: jKcEmRIDilRbegMXDvNfe4imvAk.roa (raw, json) Hash identifier: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E= Subject key identifier: 8C:A7:04:99:12:03:8A:54:5B:7A:03:17:0E:F3:5F:7B:88:A6:BC:09 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B79111E52759DACBF897A5D46AC2E104D Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jKcEmRIDilRbegMXDvNfe4imvAk.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265919 IP address blocks: 45.89.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1e:52:75:9d:ac:bf:89:7a:5d:46:ac:2e:10:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ca7049912038a545b7a03170ef35f7b88a6bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:0c:d5:d5:c6:10:b6:2b:00:44:66:64:0b: 23:a7:81:5d:7c:59:84:1b:c1:d9:dd:ca:b6:5b:54: 58:17:60:d9:08:3b:3c:40:80:b1:52:6a:ee:3f:db: 22:84:95:09:56:06:16:2d:cc:e1:97:50:a1:67:42: 35:80:70:b3:e5:29:4a:88:77:f6:c7:93:dd:6f:ab: 70:f7:38:5e:fa:e8:4c:fe:53:01:69:e6:c7:2b:d9: 97:b0:81:a5:3b:24:2c:5a:d1:16:f4:25:fb:ef:b0: 46:8f:30:ef:67:e4:b5:ba:5e:00:7f:4b:9a:70:b1: a5:da:fe:e9:f2:0b:8e:53:a9:ed:36:6c:7b:48:ff: 12:d5:74:78:4b:3c:9e:9b:f1:fa:9b:40:52:a5:45: 2f:10:2f:56:de:ce:4b:45:02:5b:56:1a:33:86:09: 2d:31:ff:de:dc:74:8c:2d:ae:4a:b5:30:23:22:6c: 4a:9c:6a:47:69:d2:ce:81:aa:57:7b:83:63:8b:b7: b8:64:4a:6c:6e:6d:1d:76:9d:c0:0c:12:e3:81:fe: 24:2c:50:e5:58:e4:99:ef:e8:40:30:1e:63:2b:c0: 74:09:62:92:9f:f5:87:ea:12:78:08:8a:24:a5:6a: f6:fd:fa:7e:56:ce:49:76:2d:9b:88:94:35:b7:74: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A7:04:99:12:03:8A:54:5B:7A:03:17:0E:F3:5F:7B:88:A6:BC:09 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jKcEmRIDilRbegMXDvNfe4imvAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.30.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3a:81:5e:4c:34:0d:21:f5:40:33:dc:e0:d3:bf:c4:b2:28: ea:6d:b2:f2:9f:f9:47:12:51:5c:54:3d:e4:d6:44:4f:c9:ea: 76:e0:22:86:4f:eb:d2:e4:ed:31:2f:31:5c:a3:c4:f5:4b:af: f8:9e:1e:0f:3e:87:89:e9:a6:8b:7b:ae:37:1c:97:c5:61:94: f4:3b:c2:35:4f:6b:db:19:b0:99:b7:a7:af:12:ae:b2:94:40: 4e:b4:77:02:0e:0b:3a:b5:7f:c9:e8:5b:db:08:52:a1:00:da: f3:66:9b:09:7b:9a:45:85:e1:68:2b:fb:cf:41:c9:22:d5:02: af:75:68:6d:ce:38:a5:92:a9:0c:a6:52:e3:1d:16:d0:f1:75: 24:5f:f3:f4:b5:31:0f:a7:93:95:ce:11:40:fa:52:40:e0:9a: b4:66:35:06:90:c2:12:f4:13:7a:25:39:02:af:47:38:00:78: a0:8e:dd:2f:1e:da:8f:3a:b1:3a:15:0c:ea:30:68:05:5d:13: d2:52:28:95:61:95:46:70:ba:88:1d:ca:e4:28:79:8d:4f:20: 4e:0c:d5:7b:97:b2:aa:13:a7:6a:74:37:d9:4f:53:f5:78:4c: 60:0c:1f:95:53:64:f9:68:3e:6f:27:d1:c6:16:dd:5b:3d:8b: cf:b4:82:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ER5SdZ2sv4l6XUasLhBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2E3MDQ5OTEyMDM4YTU0NWI3YTAzMTcwZWYzNWY3Yjg4YTZiYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rwM1dXGELYrAERmZAsjp4FdfFmE G8HZ3cq2W1RYF2DZCDs8QICxUmruP9sihJUJVgYWLczhl1ChZ0I1gHCz5SlKiHf2 x5Pdb6tw9zhe+uhM/lMBaebHK9mXsIGlOyQsWtEW9CX777BGjzDvZ+S1ul4Af0ua cLGl2v7p8guOU6ntNmx7SP8S1XR4Szyem/H6m0BSpUUvEC9W3s5LRQJbVhozhgkt Mf/e3HSMLa5KtTAjImxKnGpHadLOgapXe4Nji7e4ZEpsbm0ddp3ADBLjgf4kLFDl WOSZ7+hAMB5jK8B0CWKSn/WH6hJ4CIokpWr2/fp+Vs5Jdi2biJQ1t3Sm/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIynBJkSA4pUW3oDFw7zX3uIprwJMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvaktjRW1SSURpbFJiZWdNWER2TmZlNGltdkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkeMA0G CSqGSIb3DQEBCwUAA4IBAQA5OoFeTDQNIfVAM9zg07/EsijqbbLyn/lHElFcVD3k 1kRPyep24CKGT+vS5O0xLzFco8T1S6/4nh4PPoeJ6aaLe643HJfFYZT0O8I1T2vb GbCZt6evEq6ylEBOtHcCDgs6tX/J6FvbCFKhANrzZpsJe5pFheFoK/vPQcki1QKv dWhtzjilkqkMplLjHRbQ8XUkX/P0tTEPp5OVzhFA+lJA4Jq0ZjUGkMIS9BN6JTkC r0c4AHigjt0vHtqPOrE6FQzqMGgFXRPSUiiVYZVGcLqIHcrkKHmNTyBODNV7l7Kq E6dqdDfZT1P1eExgDB+VU2T5aD5vJ9HGFt1bPYvPtIKD -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client