This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/js7BIXqY58XWed2Q4s96AfESldo.roa File: js7BIXqY58XWed2Q4s96AfESldo.roa (raw, json) Hash identifier: AbASHLnbeI2S6u9qR+8CJhwhBuIrRsD38/FVXEtJTqs= Subject key identifier: 8E:CE:C1:21:7A:98:E7:C5:D6:79:DD:90:E2:CF:7A:01:F1:12:95:DA Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A707BBE0CF71CBA9C625F4690E06 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/js7BIXqY58XWed2Q4s96AfESldo.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198150 IP address blocks: 46.8.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a7:07:bb:e0:cf:71:cb:a9:c6:25:f4:69:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ecec1217a98e7c5d679dd90e2cf7a01f11295da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:10:b4:45:31:3a:37:c5:36:c9:a4:52:9e: 9f:09:9e:8a:72:79:d4:7e:d7:39:c3:26:c2:6c:0e: 94:4f:39:4a:1c:88:fe:4a:7d:0f:8f:de:7e:a6:59: c7:18:92:1b:c7:14:9c:4c:15:38:c6:35:64:10:ce: 9b:3f:b1:38:40:4b:3c:45:e5:4a:c8:01:18:40:9b: db:ae:05:ee:ef:f3:f1:16:7a:a7:23:68:88:31:19: 82:c4:25:fe:8c:a6:9d:b0:ed:35:82:75:b8:9e:9e: 10:f2:37:8f:12:1d:65:ab:d2:0f:b2:c7:b9:cb:12: 64:8c:d1:55:3f:03:cf:1e:ce:02:40:6c:7a:52:5d: 75:12:bc:79:cc:fe:ab:7e:ac:35:7b:eb:90:b3:54: 78:52:c2:ad:c9:ce:30:87:a3:d9:8c:d8:53:d1:5f: 0e:6e:6e:3b:99:96:5a:11:ad:16:7e:e5:1c:96:fd: 8e:44:8a:54:be:c2:45:1c:ea:f0:75:94:8a:39:49: 77:55:42:ef:ca:32:28:17:cf:fe:fe:fa:fa:4d:fe: 25:97:68:34:60:2c:0b:79:1a:5e:2b:57:70:43:51: 1e:ba:a6:89:03:1b:ca:55:18:fe:12:23:1b:19:0c: 4b:3e:81:fd:11:6b:7d:42:e5:92:01:a3:1e:ca:ef: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CE:C1:21:7A:98:E7:C5:D6:79:DD:90:E2:CF:7A:01:F1:12:95:DA X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/js7BIXqY58XWed2Q4s96AfESldo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.37.0/24 Signature Algorithm: sha256WithRSAEncryption 04:37:26:38:9f:35:7b:9a:17:30:35:da:fd:8d:d2:f5:fb:ef: c9:f0:fc:68:a4:79:6f:9b:ac:34:b5:8b:93:80:4d:47:77:dc: 73:67:e0:69:bf:e8:cc:14:df:23:83:40:06:4e:03:74:35:70: 6f:a1:6b:75:9a:97:17:23:f4:b9:31:7c:44:19:c1:a1:01:9c: 32:c0:10:6b:cf:8c:9b:62:56:2e:c7:3a:ba:a6:fe:de:c7:9f: 6d:3c:2e:ea:e6:af:69:6c:3e:de:e9:0e:0d:34:a3:3a:99:21: 28:a5:6e:fe:00:58:40:c8:5e:27:f3:e4:e1:3e:8a:79:21:b3: 67:ba:28:ce:54:7c:c2:0a:2d:ba:0b:ef:ad:d7:92:4c:db:f2: 30:a7:3d:5d:dd:6f:7f:50:99:d3:2b:a4:fd:bb:46:49:60:cd: e0:27:1a:cb:c7:c4:45:ae:25:93:38:00:17:60:bd:b5:9e:e2: b2:e8:c0:5e:a9:0d:d5:5d:09:53:5e:ca:59:4c:98:6e:09:ce: 2b:3d:f0:a8:f8:40:b3:a6:52:e4:ce:bb:2a:db:cc:66:df:cb: da:7f:ff:f7:00:60:4a:b4:90:bb:fc:5d:f0:23:16:8b:f3:32: 32:fc:47:14:25:4b:d5:3d:02:3d:9a:6f:76:8c:cc:f8:6b:c1: d5:7e:37:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqcHu+DPccupxiX0aQ4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWNlYzEyMTdhOThlN2M1ZDY3OWRkOTBlMmNmN2EwMWYxMTI5NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6kQtEUxOjfFNsmkUp6fCZ6KcnnU ftc5wybCbA6UTzlKHIj+Sn0Pj95+plnHGJIbxxScTBU4xjVkEM6bP7E4QEs8ReVK yAEYQJvbrgXu7/PxFnqnI2iIMRmCxCX+jKadsO01gnW4np4Q8jePEh1lq9IPsse5 yxJkjNFVPwPPHs4CQGx6Ul11Erx5zP6rfqw1e+uQs1R4UsKtyc4wh6PZjNhT0V8O bm47mZZaEa0WfuUclv2ORIpUvsJFHOrwdZSKOUl3VULvyjIoF8/+/vr6Tf4ll2g0 YCwLeRpeK1dwQ1EeuqaJAxvKVRj+EiMbGQxLPoH9EWt9QuWSAaMeyu9L8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7OwSF6mOfF1nndkOLPegHxEpXaMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvanM3QklYcVk1OFhXZWQyUTRzOTZBZkVTbGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgglMA0G CSqGSIb3DQEBCwUAA4IBAQAENyY4nzV7mhcwNdr9jdL1++/J8PxopHlvm6w0tYuT gE1Hd9xzZ+Bpv+jMFN8jg0AGTgN0NXBvoWt1mpcXI/S5MXxEGcGhAZwywBBrz4yb YlYuxzq6pv7ex59tPC7q5q9pbD7e6Q4NNKM6mSEopW7+AFhAyF4n8+ThPop5IbNn uijOVHzCCi26C++t15JM2/Iwpz1d3W9/UJnTK6T9u0ZJYM3gJxrLx8RFriWTOAAX YL21nuKy6MBeqQ3VXQlTXspZTJhuCc4rPfCo+ECzplLkzrsq28xm38vaf//3AGBK tJC7/F3wIxaL8zIy/EcUJUvVPQI9mm92jMz4a8HVfjdY -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:34 2026 by rpki-client