This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JMlv6YxWGVqrUr_6-TpHORcsR58.roa File: JMlv6YxWGVqrUr_6-TpHORcsR58.roa (raw, json) Hash identifier: tXtHRGn1q4euY2srgznTxCjsoavYgDKK1PcKak9iVvg= Subject key identifier: 24:C9:6F:E9:8C:56:19:5A:AB:52:BF:FA:F9:3A:47:39:17:2C:47:9F Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF37615C5085D3AD099BF2A318672 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JMlv6YxWGVqrUr_6-TpHORcsR58.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62048 IP address blocks: 45.86.87.0/24 maxlen: 24 188.253.1.0/24 maxlen: 24 188.253.2.0/24 maxlen: 24 188.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f3:76:15:c5:08:5d:3a:d0:99:bf:2a:31:86:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24c96fe98c56195aab52bffaf93a4739172c479f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:c0:98:6b:a2:c5:ae:e9:aa:e7:f6:60:03: ab:d4:3c:5a:10:07:05:f8:9c:ad:56:19:ec:88:77: 61:49:3d:7e:a4:9c:b8:5b:fe:fb:84:69:6c:ad:18: 9f:8d:30:57:8d:69:6e:4c:37:a6:3b:41:4f:a0:aa: 75:f4:e1:a3:b9:c3:0e:61:d6:fd:e6:61:ae:cf:95: ed:0d:df:01:17:02:b6:ba:3f:4c:d3:e0:fa:bd:a6: d4:04:e1:7e:0b:95:55:f9:45:85:35:3e:e6:86:3c: dc:4c:b2:02:fb:33:2a:06:2c:98:84:c0:32:e7:d7: 2f:fc:61:3c:ac:17:73:01:c6:80:d8:91:0e:ca:33: 37:83:0d:c7:1d:b6:cd:78:e9:82:18:36:49:be:f7: 44:18:70:70:cb:6f:a6:ef:0f:5c:44:ff:67:0f:2c: 24:14:6a:ee:1c:62:53:75:9e:30:06:7a:90:19:3b: 78:ad:9a:fd:1b:fa:89:58:62:d6:01:36:6b:4f:94: 76:a5:71:31:96:42:60:b9:8e:aa:31:d5:9c:8d:ba: 98:85:c8:90:50:5b:b6:ad:be:26:7e:21:26:ba:31: 9b:d5:66:fd:0f:a3:7e:ef:43:f0:ca:f8:d4:c5:02: 08:5e:18:49:e6:25:47:8f:6d:79:b8:57:ba:b4:7e: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C9:6F:E9:8C:56:19:5A:AB:52:BF:FA:F9:3A:47:39:17:2C:47:9F X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JMlv6YxWGVqrUr_6-TpHORcsR58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.87.0/24 188.253.1.0-188.253.3.255 Signature Algorithm: sha256WithRSAEncryption 00:95:f3:5c:d8:5f:98:83:14:76:e6:bc:5d:a8:ac:c1:2a:59: d0:45:a2:18:4c:28:42:d1:48:98:c7:ce:05:0a:9a:78:82:69: 9d:fd:01:77:59:38:fd:55:19:6f:9d:d3:6a:fa:b6:4a:3c:cb: b2:15:77:00:e3:bb:04:c1:48:2f:49:15:40:b9:ec:ca:38:23: 2c:db:dd:05:56:3e:28:8d:c5:c1:3a:f6:16:1a:6d:83:b7:4d: 34:b5:fc:fa:44:bf:a4:f4:64:e5:f7:b0:5f:b8:fb:a2:62:ae: 89:75:67:24:35:ec:94:8d:cc:b5:ba:ff:be:bb:4d:95:38:18: 81:e7:76:e5:89:ca:f5:80:6b:d2:5a:d3:63:0d:7b:e0:fd:95: 02:68:9a:6a:30:81:09:ce:5e:c8:31:7b:5f:ee:ce:85:3b:3f: 44:9f:14:fc:60:29:95:37:87:f9:22:6f:7b:e0:63:56:7d:23: 32:06:2d:76:35:ee:1b:a5:f5:45:15:44:53:9d:47:0b:0a:61: 6b:cd:7d:85:fd:47:5d:5a:83:7d:f8:a6:2c:67:93:51:c5:a9: b6:db:ed:c4:cd:c2:97:ec:59:8c:97:55:9a:d0:9c:2d:ec:ac: f5:04:a6:ad:3a:8d:27:94:90:90:5f:66:99:45:a6:bb:1d:98: 41:35:59:a3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt26vN2FcUIXTrQmb8qMYZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGM5NmZlOThjNTYxOTVhYWI1MmJmZmFmOTNhNDczOTE3MmM0NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdfAmGuixa7pquf2YAOr1DxaEAcF +JytVhnsiHdhST1+pJy4W/77hGlsrRifjTBXjWluTDemO0FPoKp19OGjucMOYdb9 5mGuz5XtDd8BFwK2uj9M0+D6vabUBOF+C5VV+UWFNT7mhjzcTLIC+zMqBiyYhMAy 59cv/GE8rBdzAcaA2JEOyjM3gw3HHbbNeOmCGDZJvvdEGHBwy2+m7w9cRP9nDywk FGruHGJTdZ4wBnqQGTt4rZr9G/qJWGLWATZrT5R2pXExlkJguY6qMdWcjbqYhciQ UFu2rb4mfiEmujGb1Wb9D6N+70PwyvjUxQIIXhhJ5iVHj215uFe6tH7RfwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCTJb+mMVhlaq1K/+vk6RzkXLEefMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvSk1sdjZZeFdHVnFyVXJfNi1UcEhPUmNzUjU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALVZXMAwD BAC8/QEDBAK8/QAwDQYJKoZIhvcNAQELBQADggEBAACV81zYX5iDFHbmvF2orMEq WdBFohhMKELRSJjHzgUKmniCaZ39AXdZOP1VGW+d02r6tko8y7IVdwDjuwTBSC9J FUC57Mo4Iyzb3QVWPiiNxcE69hYabYO3TTS1/PpEv6T0ZOX3sF+4+6Jirol1ZyQ1 7JSNzLW6/767TZU4GIHnduWJyvWAa9Ja02MNe+D9lQJommowgQnOXsgxe1/uzoU7 P0SfFPxgKZU3h/kib3vgY1Z9IzIGLXY17hul9UUVRFOdRwsKYWvNfYX9R11ag334 pixnk1HFqbbb7cTNwpfsWYyXVZrQnC3srPUEpq06jSeUkJBfZplFprsdmEE1WaM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:41 2026 by rpki-client