This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JXPwwAJkOu9evPyIRT2BuCJYbMg.roa File: JXPwwAJkOu9evPyIRT2BuCJYbMg.roa (raw, json) Hash identifier: Qegwt+3YGokgdvXJ0OPfIT9Ih6WrjHuYe5LA5gxwKjs= Subject key identifier: 25:73:F0:C0:02:64:3A:EF:5E:BC:FC:88:45:3D:81:B8:22:58:6C:C8 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFD162782825221028AD4D0AAD709 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JXPwwAJkOu9evPyIRT2BuCJYbMg.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215 IP address blocks: 90.83.218.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fd:16:27:82:82:52:21:02:8a:d4:d0:aa:d7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2573f0c002643aef5ebcfc88453d81b822586cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2f:31:40:5a:3e:21:0b:f2:f5:38:8e:83:6e: 8c:4c:e1:98:48:a1:4a:13:93:98:86:00:2b:38:3e: 42:f1:a5:23:91:34:ee:fd:cc:28:72:ad:77:7d:d6: 93:e5:47:2a:5c:ac:2d:ca:7a:2d:34:8b:ff:04:bf: 78:4d:0d:20:d1:65:5a:23:41:6e:ba:62:2f:35:82: cb:73:68:41:65:b1:6c:3d:9c:11:f2:32:40:7a:65: 64:53:36:f5:65:dc:78:8e:2d:79:8a:b5:a7:52:82: a7:1c:0f:8d:3b:0b:45:42:89:d3:67:d9:84:f9:73: 68:b9:29:8c:51:ae:10:c4:d8:28:5b:0a:35:58:ba: 63:f9:c7:55:71:d6:e4:d7:29:2a:05:9c:90:a0:6d: 38:d0:9c:48:5a:63:49:a6:e6:37:7e:6e:29:72:58: 41:ee:77:04:6f:b1:dd:ae:b1:a3:7b:d5:b9:2b:74: 26:c5:3c:8f:8d:bd:56:09:77:91:45:2f:cc:ec:df: d9:52:20:e5:ac:f1:b2:c6:48:62:21:79:76:4a:a3: 44:b7:cc:ab:2d:59:02:23:b6:21:99:2d:cc:24:5a: 41:93:6c:b2:b9:d0:e5:b8:25:f5:93:3b:5d:08:ed: 94:56:2c:89:55:20:47:cc:29:38:49:8d:0c:03:f7: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:F0:C0:02:64:3A:EF:5E:BC:FC:88:45:3D:81:B8:22:58:6C:C8 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JXPwwAJkOu9evPyIRT2BuCJYbMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.83.218.0/24 Signature Algorithm: sha256WithRSAEncryption 13:69:de:6c:ca:12:f5:d6:cd:69:3c:0b:2a:2d:c2:10:53:5b: 76:7a:ad:62:7b:8d:30:b9:ac:62:87:c3:e5:68:6d:45:f0:2f: bc:d6:53:d2:97:df:98:e0:56:c4:6c:63:b8:1e:aa:67:78:80: 8d:84:28:b6:54:5d:3e:ba:8b:7b:6f:9d:cf:00:ba:41:cb:cc: b4:1b:a2:52:43:96:2f:48:fc:35:df:a3:e1:f2:06:7e:44:b8: 4f:17:94:eb:19:4b:c0:73:76:ef:ef:10:1c:3f:59:9e:c4:d7: 3a:88:25:a3:ed:a3:cc:e2:db:9f:3a:06:f7:60:ed:7e:48:f4: 2d:c0:5d:fa:b4:67:24:e3:3c:32:c6:a2:e1:d6:37:78:28:b3: 82:f7:41:51:8e:93:31:ec:e4:73:27:04:16:a8:32:61:37:67: 18:3b:2e:c3:df:f3:63:04:50:8b:a9:b5:a3:16:77:e0:78:63: 3d:46:56:58:ec:e2:73:fc:5e:04:6a:58:80:88:cd:18:7e:5e: 42:b3:dc:de:2c:be:a5:19:d6:1a:b9:77:76:7d:7e:e1:24:66: f1:03:cb:4c:70:25:09:d9:e6:42:24:98:b7:9c:d6:7a:d1:2c: 93:2a:61:37:3d:65:13:04:52:d2:e9:4e:10:3c:bb:d0:8b:bf: d6:d6:17:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/0WJ4KCUiECitTQqtcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTczZjBjMDAyNjQzYWVmNWViY2ZjODg0NTNkODFiODIyNTg2Y2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S8xQFo+IQvy9TiOg26MTOGYSKFK E5OYhgArOD5C8aUjkTTu/cwocq13fdaT5UcqXKwtynotNIv/BL94TQ0g0WVaI0Fu umIvNYLLc2hBZbFsPZwR8jJAemVkUzb1Zdx4ji15irWnUoKnHA+NOwtFQonTZ9mE +XNouSmMUa4QxNgoWwo1WLpj+cdVcdbk1ykqBZyQoG040JxIWmNJpuY3fm4pclhB 7ncEb7HdrrGje9W5K3QmxTyPjb1WCXeRRS/M7N/ZUiDlrPGyxkhiIXl2SqNEt8yr LVkCI7YhmS3MJFpBk2yyudDluCX1kztdCO2UViyJVSBHzCk4SY0MA/fyoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVz8MACZDrvXrz8iEU9gbgiWGzIMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvSlhQd3dBSmtPdTlldlB5SVJUMkJ1Q0pZYk1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWlPaMA0G CSqGSIb3DQEBCwUAA4IBAQATad5syhL11s1pPAsqLcIQU1t2eq1ie40wuaxih8Pl aG1F8C+81lPSl9+Y4FbEbGO4HqpneICNhCi2VF0+uot7b53PALpBy8y0G6JSQ5Yv SPw136Ph8gZ+RLhPF5TrGUvAc3bv7xAcP1mexNc6iCWj7aPM4tufOgb3YO1+SPQt wF36tGck4zwyxqLh1jd4KLOC90FRjpMx7ORzJwQWqDJhN2cYOy7D3/NjBFCLqbWj FnfgeGM9RlZY7OJz/F4EaliAiM0Yfl5Cs9zeLL6lGdYauXd2fX7hJGbxA8tMcCUJ 2eZCJJi3nNZ60SyTKmE3PWUTBFLS6U4QPLvQi7/W1hdo -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:48 2026 by rpki-client