This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/1-JP0PPtCDIK_UNysSaQZClIqsZk.roa File: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (raw, json) Hash identifier: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ= Subject key identifier: F8:93:F4:3C:FB:42:0C:82:BF:50:DC:AC:49:A4:19:0A:52:2A:B1:99 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB4AC105EA8A3EACB4A5C426A98638 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/1-JP0PPtCDIK_UNysSaQZClIqsZk.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208483 IP address blocks: 212.22.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:c1:05:ea:8a:3e:ac:b4:a5:c4:26:a9:86:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f893f43cfb420c82bf50dcac49a4190a522ab199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:a5:dc:55:fd:cd:92:d0:5b:da:9d:ff:98: e2:b2:cd:a5:70:e2:c7:07:8b:91:10:d9:95:3c:35: 26:06:78:fa:5b:7b:cc:55:7f:32:4e:fc:5e:39:b7: af:05:1d:75:10:2e:26:5d:70:bb:7c:1e:ae:2f:11: 55:d6:70:1d:15:a6:26:81:51:08:05:b2:29:ab:a5: d8:c0:f2:3a:98:35:03:5a:c6:46:55:fb:17:ab:b4: f8:ab:c7:61:91:ee:3a:b6:6b:72:e4:50:f4:1a:db: 36:4e:6a:60:bd:47:ca:29:68:ee:4e:6a:b9:f7:64: 37:bd:1d:52:6d:94:2f:42:9c:3d:47:6e:5e:be:6d: f4:54:14:ef:04:fa:f2:4d:3e:da:71:c4:85:68:f1: 19:6a:df:49:1c:2c:75:61:a8:da:92:c1:b2:6a:b7: 10:6c:30:17:89:e1:ae:7d:cc:35:fd:f7:7b:bb:0b: 70:10:7d:88:ce:d3:7f:c9:2f:64:0d:82:d5:6f:6a: 22:d1:9d:b4:82:8e:2e:df:f9:b6:08:f6:c0:3c:91: 3b:ce:c2:91:ba:95:9d:b3:cb:5e:d8:59:af:55:7d: 69:f1:a2:b0:1c:94:39:1e:85:bf:76:43:c0:e0:4a: 9f:f9:6b:95:02:0e:95:77:08:3d:80:12:f5:6e:13: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:F4:3C:FB:42:0C:82:BF:50:DC:AC:49:A4:19:0A:52:2A:B1:99 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/1-JP0PPtCDIK_UNysSaQZClIqsZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.69.0/24 Signature Algorithm: sha256WithRSAEncryption bd:52:72:c9:28:b9:d8:05:5c:dc:30:d9:32:ae:46:40:b7:85: ea:5f:58:ff:26:fb:d5:3f:96:e5:bc:e4:68:c5:4e:78:b4:a3: aa:be:42:ee:33:55:cd:ea:7a:59:c6:1c:91:d6:46:fb:98:08: b2:ed:b6:75:4d:a1:ff:8f:18:43:12:e3:5b:66:ed:ad:84:7e: 3f:cc:83:89:f1:4a:8b:6e:ae:7f:19:93:91:b9:05:61:09:2a: 9a:01:42:36:09:58:53:5d:4b:49:1c:c4:4c:bf:10:9a:43:29: e0:f4:9a:45:cc:f8:fb:38:6d:61:9d:b7:3c:71:78:08:97:31: ff:bd:74:45:1b:49:fa:63:d8:32:7b:a6:0f:86:9c:81:9b:23: f9:39:1c:8f:af:ec:4f:5a:1b:06:b9:dd:cf:ef:b6:4d:38:e4: 1e:21:03:70:0c:61:1a:ca:60:00:86:cb:ad:95:d5:a6:1c:fc: 71:cf:4e:77:78:2f:f2:36:34:73:bd:19:ea:86:48:d2:25:62: c2:01:9b:67:4c:b4:2f:67:31:52:25:c9:66:a0:1d:cf:fa:0b: 8e:0a:95:f6:5a:0d:e3:d4:91:90:6f:78:5d:f1:f7:08:35:5d: 44:fd:69:8a:17:e7:3b:ae:ba:0e:d7:18:db:b3:38:b5:f1:cc: cd:49:92:8b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y0rBBeqKPqy0pcQmqYY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODkzZjQzY2ZiNDIwYzgyYmY1MGRjYWM0OWE0MTkwYTUyMmFiMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bel3FX9zZLQW9qd/5jiss2lcOLH B4uRENmVPDUmBnj6W3vMVX8yTvxeObevBR11EC4mXXC7fB6uLxFV1nAdFaYmgVEI BbIpq6XYwPI6mDUDWsZGVfsXq7T4q8dhke46tmty5FD0Gts2TmpgvUfKKWjuTmq5 92Q3vR1SbZQvQpw9R25evm30VBTvBPryTT7accSFaPEZat9JHCx1YajaksGyarcQ bDAXieGufcw1/fd7uwtwEH2IztN/yS9kDYLVb2oi0Z20go4u3/m2CPbAPJE7zsKR upWds8te2FmvVX1p8aKwHJQ5HoW/dkPA4Eqf+WuVAg6Vdwg9gBL1bhN6NwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiT9Dz7QgyCv1DcrEmkGQpSKrGZMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvMS1KUDBQUHRDRElLX1VOeXNTYVFaQ2xJcXNaay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvYWVhMzZkLWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNi MS8xL2RHTmxOVnRtVldTaUVNTll4b29CRjdmNzY1by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQWRTAN BgkqhkiG9w0BAQsFAAOCAQEAvVJyySi52AVc3DDZMq5GQLeF6l9Y/yb71T+W5bzk aMVOeLSjqr5C7jNVzep6WcYckdZG+5gIsu22dU2h/48YQxLjW2btrYR+P8yDifFK i26ufxmTkbkFYQkqmgFCNglYU11LSRzETL8QmkMp4PSaRcz4+zhtYZ23PHF4CJcx /710RRtJ+mPYMnumD4acgZsj+Tkcj6/sT1obBrndz++2TTjkHiEDcAxhGspgAIbL rZXVphz8cc9Od3gv8jY0c70Z6oZI0iViwgGbZ0y0L2cxUiXJZqAdz/oLjgqV9loN 49SRkG94XfH3CDVdRP1pihfnO666DtcY27M4tfHMzUmSiw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:57 2026 by rpki-client