This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jxE-bqQIw7U79IbBizQW2pIQJjM.roa File: jxE-bqQIw7U79IbBizQW2pIQJjM.roa (raw, json) Hash identifier: s23hU/sL0N2hE6GCP2WlFxNdJxuwnkbuT42NWpGSIOw= Subject key identifier: 8F:11:3E:6E:A4:08:C3:B5:3B:F4:86:C1:8B:34:16:DA:92:10:26:33 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB4C04E35957B05B1658AF87D830FE Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jxE-bqQIw7U79IbBizQW2pIQJjM.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209655 IP address blocks: 212.22.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4c:04:e3:59:57:b0:5b:16:58:af:87:d8:30:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f113e6ea408c3b53bf486c18b3416da92102633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:eb:18:52:c7:d5:33:d7:c3:16:b2:fb:31: 28:13:9f:33:de:18:44:67:97:a8:1b:24:e4:fd:e4: 04:df:54:f3:0b:d7:52:1e:bb:6e:5c:8e:d6:9f:6f: 7a:10:c6:33:24:01:01:66:64:a8:a8:12:9f:f4:0c: ba:e9:13:44:62:22:07:6c:81:e4:13:54:12:0f:38: b2:02:41:62:50:21:92:67:db:66:18:ec:b9:9c:2c: 3d:6b:e3:4d:9a:94:ae:30:ce:aa:4f:c9:d2:03:f8: 51:a6:eb:b3:1a:5d:d6:35:1d:3e:f7:b3:1c:97:88: 6e:9d:a8:a9:e7:7d:d6:da:7d:dc:1d:c2:cf:51:54: 0b:1c:8a:f6:f1:99:af:f5:cd:69:8c:c1:61:f6:de: 2a:19:42:ad:7d:ef:a0:93:d9:b2:0e:ce:7d:f6:8f: 5a:43:43:2b:3f:ba:32:10:bb:f2:14:d8:31:fc:52: 19:9d:1f:4c:fa:36:be:17:52:01:0e:af:9f:08:82: 77:5a:4f:f6:ea:00:12:37:f9:d7:91:21:2d:d6:5b: ca:d7:a5:36:ef:b4:6d:8b:aa:80:26:df:8e:60:61: cb:4b:31:a7:7e:dc:49:ad:09:16:c4:8f:3e:2e:33: d2:71:12:82:2c:35:51:57:33:5f:2c:d5:40:f4:29: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:3E:6E:A4:08:C3:B5:3B:F4:86:C1:8B:34:16:DA:92:10:26:33 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jxE-bqQIw7U79IbBizQW2pIQJjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.72.0/24 Signature Algorithm: sha256WithRSAEncryption c0:80:1b:5b:4d:50:9a:9b:da:a9:17:66:67:1e:c2:87:94:a2: 2c:ac:76:d9:7d:30:3d:af:e8:f2:cd:72:77:99:a6:1f:06:7a: 3d:fe:bf:4b:1b:f9:d7:44:e5:f3:a5:67:e0:bd:7d:47:52:f4: 65:9c:3d:6a:07:f1:a3:4b:45:88:61:8d:cf:c9:7a:5d:7c:73: 27:5a:58:55:ca:b8:ea:97:d3:8f:9e:0b:83:89:f8:ff:a8:ff: 15:54:06:9a:81:4f:da:11:ec:e1:6e:bb:23:f8:ed:eb:ff:47: 42:62:41:b1:5e:17:c0:1d:90:f0:66:40:8e:b0:67:de:1d:ec: 8a:58:60:2b:b3:d5:05:d3:20:a0:6a:50:b1:4e:f4:f0:98:f6: b4:47:74:b4:1a:db:7f:5b:7d:47:1d:24:b9:b5:2f:53:30:dd: 64:18:d7:18:e2:0e:79:eb:5c:d0:5f:d9:6d:b4:9e:12:f1:d9: 6f:a1:db:f6:70:cb:38:a4:20:2c:5c:06:a8:a6:4d:a3:0e:7e: 79:85:5b:f5:6f:3d:d9:03:39:b6:44:5c:cb:bd:c1:3c:4e:2f: f5:77:da:42:df:90:74:ab:d2:b2:41:6e:da:94:f1:2f:9f:70: 06:d8:86:c9:b1:d9:4f:3e:c3:0d:bd:9c:7f:fa:51:5d:08:81: 4e:62:a9:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0wE41lXsFsWWK+H2DD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjExM2U2ZWE0MDhjM2I1M2JmNDg2YzE4YjM0MTZkYTkyMTAyNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HPrGFLH1TPXwxay+zEoE58z3hhE Z5eoGyTk/eQE31TzC9dSHrtuXI7Wn296EMYzJAEBZmSoqBKf9Ay66RNEYiIHbIHk E1QSDziyAkFiUCGSZ9tmGOy5nCw9a+NNmpSuMM6qT8nSA/hRpuuzGl3WNR0+97Mc l4hunaip533W2n3cHcLPUVQLHIr28Zmv9c1pjMFh9t4qGUKtfe+gk9myDs599o9a Q0MrP7oyELvyFNgx/FIZnR9M+ja+F1IBDq+fCIJ3Wk/26gASN/nXkSEt1lvK16U2 77Rti6qAJt+OYGHLSzGnftxJrQkWxI8+LjPScRKCLDVRVzNfLNVA9Cn75wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8RPm6kCMO1O/SGwYs0FtqSECYzMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvanhFLWJxUUl3N1U3OUliQml6UVcycElRSmpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZIMA0G CSqGSIb3DQEBCwUAA4IBAQDAgBtbTVCam9qpF2ZnHsKHlKIsrHbZfTA9r+jyzXJ3 maYfBno9/r9LG/nXROXzpWfgvX1HUvRlnD1qB/GjS0WIYY3PyXpdfHMnWlhVyrjq l9OPnguDifj/qP8VVAaagU/aEezhbrsj+O3r/0dCYkGxXhfAHZDwZkCOsGfeHeyK WGArs9UF0yCgalCxTvTwmPa0R3S0Gtt/W31HHSS5tS9TMN1kGNcY4g5561zQX9lt tJ4S8dlvodv2cMs4pCAsXAaopk2jDn55hVv1bz3ZAzm2RFzLvcE8Ti/1d9pC35B0 q9KyQW7alPEvn3AG2IbJsdlPPsMNvZx/+lFdCIFOYqlB -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:11 2026 by rpki-client