This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JrrOFQjL67j7mWEbcUz8WZG31Ew.roa File: JrrOFQjL67j7mWEbcUz8WZG31Ew.roa (raw, json) Hash identifier: 2u7Ou9E9W3oEo5TDyLt4nvLFCeCCzeGxkS9x6ETgAe4= Subject key identifier: 26:BA:CE:15:08:CB:EB:B8:FB:99:61:1B:71:4C:FC:59:91:B7:D4:4C Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019AC3EB6736BF919A92C25006952D0D31F5 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JrrOFQjL67j7mWEbcUz8WZG31Ew.roa Signing time: Thu 27 Nov 2025 06:06:15 +0000 ROA not before: Thu 27 Nov 2025 06:06:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203530 IP address blocks: 94.198.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c3:eb:67:36:bf:91:9a:92:c2:50:06:95:2d:0d:31:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Nov 27 06:06:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26bace1508cbebb8fb99611b714cfc5991b7d44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:24:31:c4:06:26:82:a6:66:76:70:f2:9d: 71:f6:3e:99:09:99:b3:8d:70:01:2f:d7:2e:eb:1f: 63:89:03:74:a5:be:ef:57:d0:8d:b3:3d:2d:78:e7: 9c:09:26:08:2a:ad:23:94:0a:4e:15:f5:0c:71:6c: 37:3d:26:f3:65:de:a3:15:6d:12:24:2f:dc:b5:a6: a1:86:79:f1:5d:df:c5:2c:a6:70:52:f7:1a:a2:02: bc:fd:52:f7:09:17:5c:48:f8:dd:4a:f1:12:bf:ad: 72:cd:7b:89:8a:ce:a4:68:3f:3d:7d:58:77:9e:5d: 56:90:df:a2:4d:b0:8c:93:f0:e0:18:96:9a:9e:6d: e1:64:f0:ad:13:43:88:36:f8:71:46:8c:ae:05:a3: 38:9b:54:80:fb:a3:24:f3:9a:23:28:9d:de:dd:c9: 8a:2d:30:92:7a:89:ca:79:ce:de:55:02:2f:00:05: 80:da:81:d9:c0:b2:3f:bf:bf:0b:56:97:ef:2d:05: 97:a2:82:ba:79:36:38:e5:8f:a8:40:ca:65:e5:a6: 66:bc:a4:08:f1:29:0c:9f:79:ec:65:ef:65:34:66: f1:aa:48:55:5a:de:bd:42:18:19:45:b0:55:57:0a: f7:d6:09:1f:e2:9d:e4:ef:11:c2:6e:53:bc:6c:b4: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:CE:15:08:CB:EB:B8:FB:99:61:1B:71:4C:FC:59:91:B7:D4:4C X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JrrOFQjL67j7mWEbcUz8WZG31Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.188.0/24 Signature Algorithm: sha256WithRSAEncryption b8:be:2c:45:67:b2:fe:74:10:83:f3:c6:bc:2a:c5:ea:26:aa: bd:cb:9a:c2:61:dd:5f:a5:8a:7d:f7:e8:f0:cc:6e:9d:eb:54: 4f:75:bd:f7:42:8e:b5:ba:59:c4:93:bb:6c:7d:be:44:c3:66: a0:ce:1c:7b:3a:72:bf:c5:59:a8:5b:d9:52:b4:f0:13:8a:3b: 86:a7:2e:b3:a4:cd:69:06:13:08:0d:d7:c2:96:25:eb:c9:9b: cb:1f:20:c3:2e:70:84:72:b9:31:6e:80:a5:30:7c:b0:1b:48: 4f:4c:86:3c:ee:5d:4a:41:8e:f4:03:09:df:4e:d8:01:fe:08: ae:c7:9c:e3:7e:6e:9d:85:68:01:1d:06:aa:5e:93:cd:69:2b: a8:37:5a:61:86:4f:d2:89:c9:19:ad:15:d7:7a:36:5e:77:ab: a5:ee:44:a9:08:e0:8e:fd:7c:dc:21:b1:69:c8:d5:56:c6:4f: ae:d3:fb:78:28:06:3a:24:fb:7a:5f:c9:02:45:68:0d:ae:f5: 3f:ab:38:82:68:70:c5:c7:a7:19:12:90:ef:40:c4:d3:fe:a7: d0:67:52:67:00:6e:ec:0b:e3:2f:41:c7:23:84:05:f7:93:ae: c2:f0:9c:eb:a0:18:2a:b4:84:c8:a1:ae:37:b9:f7:a9:07:bc: 35:b7:8a:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrD62c2v5GaksJQBpUtDTH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMTI3MDYwNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmJhY2UxNTA4Y2JlYmI4ZmI5OTYxMWI3MTRjZmM1OTkxYjdkNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19wkMcQGJoKmZnZw8p1x9j6ZCZmz jXABL9cu6x9jiQN0pb7vV9CNsz0teOecCSYIKq0jlApOFfUMcWw3PSbzZd6jFW0S JC/ctaahhnnxXd/FLKZwUvcaogK8/VL3CRdcSPjdSvESv61yzXuJis6kaD89fVh3 nl1WkN+iTbCMk/DgGJaanm3hZPCtE0OINvhxRoyuBaM4m1SA+6Mk85ojKJ3e3cmK LTCSeonKec7eVQIvAAWA2oHZwLI/v78LVpfvLQWXooK6eTY45Y+oQMpl5aZmvKQI 8SkMn3nsZe9lNGbxqkhVWt69QhgZRbBVVwr31gkf4p3k7xHCblO8bLQhAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCa6zhUIy+u4+5lhG3FM/FmRt9RMMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvSnJyT0ZRakw2N2o3bVdFYmNVejhXWkczMUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXsa8MA0G CSqGSIb3DQEBCwUAA4IBAQC4vixFZ7L+dBCD88a8KsXqJqq9y5rCYd1fpYp99+jw zG6d61RPdb33Qo61ulnEk7tsfb5Ew2agzhx7OnK/xVmoW9lStPATijuGpy6zpM1p BhMIDdfCliXryZvLHyDDLnCEcrkxboClMHywG0hPTIY87l1KQY70AwnfTtgB/giu x5zjfm6dhWgBHQaqXpPNaSuoN1phhk/SickZrRXXejZed6ul7kSpCOCO/XzcIbFp yNVWxk+u0/t4KAY6JPt6X8kCRWgNrvU/qziCaHDFx6cZEpDvQMTT/qfQZ1JnAG7s C+MvQccjhAX3k67C8JzroBgqtITIoa43ufepB7w1t4oh -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:36 2025 by rpki-client