This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jNypfI22z1sEVKo78CIrOpiwvHA.roa File: jNypfI22z1sEVKo78CIrOpiwvHA.roa (raw, json) Hash identifier: Bbyg4G1jKLjeyUOdRHgEEoeGPBtaoVHtnlspR2cF5Q0= Subject key identifier: 8C:DC:A9:7C:8D:B6:CF:5B:04:54:AA:3B:F0:22:2B:3A:98:B0:BC:70 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019BF0A8270C6A1E8611BD8028522292055A Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jNypfI22z1sEVKo78CIrOpiwvHA.roa Signing time: Sat 24 Jan 2026 15:38:30 +0000 ROA not before: Sat 24 Jan 2026 15:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 46.249.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:a8:27:0c:6a:1e:86:11:bd:80:28:52:22:92:05:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 24 15:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cdca97c8db6cf5b0454aa3bf0222b3a98b0bc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:01:94:2f:1d:5a:8e:9d:d6:f1:47:ea:53: da:8b:01:a2:16:d4:aa:13:1b:bb:a2:66:13:2c:9d: bb:42:f0:22:d9:9e:15:aa:5b:ac:bf:0a:b8:a7:f8: 6a:dd:3c:69:2a:76:7d:e6:d7:74:64:52:17:1d:a6: 19:d6:a9:81:0d:0e:7a:43:db:68:88:c8:c2:8a:20: c9:67:b6:3d:a2:ff:14:3e:f3:44:a7:f6:a3:bf:af: 8e:25:2a:59:13:d1:f8:7d:e3:75:e1:d4:50:e1:fe: 98:05:9c:52:5a:c8:77:30:dd:38:90:81:02:90:50: ae:71:47:b1:c2:69:c4:7f:4f:14:e9:f4:dd:5e:56: ca:a1:9b:64:23:e4:b6:19:e0:24:12:c6:f2:6b:32: 7b:21:53:66:8d:02:dc:a4:07:d6:9e:76:bb:f5:cb: 29:5c:a1:db:e3:8e:58:7a:95:f2:c0:ae:df:ce:18: 44:ab:33:05:c4:9c:1f:77:ac:a7:c7:1a:f7:08:fa: 72:94:6c:ab:d4:12:bc:59:2a:5b:ac:0a:5d:3a:a2: de:26:ae:57:5b:37:0b:15:a4:30:1d:58:c7:05:ce: b5:aa:bd:1f:41:ee:b7:a1:72:a4:30:7a:76:ab:d9: e5:4e:3e:6f:38:77:b7:22:cf:b1:d8:e2:74:b7:33: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DC:A9:7C:8D:B6:CF:5B:04:54:AA:3B:F0:22:2B:3A:98:B0:BC:70 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jNypfI22z1sEVKo78CIrOpiwvHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.110.0/24 Signature Algorithm: sha256WithRSAEncryption 99:d9:43:1c:43:56:35:a6:99:4d:2f:81:d1:38:b5:49:c3:ff: 47:bb:24:61:96:ae:ad:b3:8a:78:3d:a2:53:70:de:a6:3a:e3: 4a:3f:2d:ea:6b:77:71:db:57:26:58:8b:a0:b8:19:a4:2c:38: eb:bf:9b:77:f7:11:1f:ab:bd:00:64:52:55:50:96:46:c1:1c: d2:7e:e2:6a:f0:c8:4c:12:9f:be:13:17:19:65:ff:56:0e:06: a1:d0:16:8f:f2:b4:34:9d:53:e9:0e:eb:2a:f5:50:91:0e:05: 3f:14:6f:6e:58:91:e5:cb:9c:7a:b5:2b:3b:78:fc:bb:a5:d3: 9b:dc:c6:ef:c8:77:6e:1e:fb:0c:82:c5:8c:da:a8:6d:61:48: a6:c4:fa:26:0c:c8:87:35:76:51:e4:b6:2e:7d:b6:97:3b:73: 1f:78:a9:49:72:15:ed:10:30:84:7f:8e:2a:a8:ff:ff:fb:f9: 36:d0:68:d8:41:1c:59:8a:24:01:b7:91:77:6f:00:44:d5:de: 29:f4:ee:ea:a6:00:61:0a:bf:5d:8b:2f:ef:fd:2e:f4:52:ed: 42:35:1c:fe:a1:40:43:ac:9f:28:62:88:0d:ed:36:c3:70:9d: 48:e0:ec:e2:6b:7d:52:55:da:19:21:7f:de:7c:e4:40:f5:1c: b5:1e:0c:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvwqCcMah6GEb2AKFIikgVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTI0MTUzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2RjYTk3YzhkYjZjZjViMDQ1NGFhM2JmMDIyMmIzYTk4YjBiYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQoBlC8dWo6d1vFH6lPaiwGiFtSq Exu7omYTLJ27QvAi2Z4Vqlusvwq4p/hq3TxpKnZ95td0ZFIXHaYZ1qmBDQ56Q9to iMjCiiDJZ7Y9ov8UPvNEp/ajv6+OJSpZE9H4feN14dRQ4f6YBZxSWsh3MN04kIEC kFCucUexwmnEf08U6fTdXlbKoZtkI+S2GeAkEsbyazJ7IVNmjQLcpAfWnna79csp XKHb445YepXywK7fzhhEqzMFxJwfd6ynxxr3CPpylGyr1BK8WSpbrApdOqLeJq5X WzcLFaQwHVjHBc61qr0fQe63oXKkMHp2q9nlTj5vOHe3Is+x2OJ0tzOgrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzcqXyNts9bBFSqO/AiKzqYsLxwMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvak55cGZJMjJ6MXNFVktvNzhDSXJPcGl3dkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvluMA0G CSqGSIb3DQEBCwUAA4IBAQCZ2UMcQ1Y1pplNL4HROLVJw/9HuyRhlq6ts4p4PaJT cN6mOuNKPy3qa3dx21cmWIuguBmkLDjrv5t39xEfq70AZFJVUJZGwRzSfuJq8MhM Ep++ExcZZf9WDgah0BaP8rQ0nVPpDusq9VCRDgU/FG9uWJHly5x6tSs7ePy7pdOb 3MbvyHduHvsMgsWM2qhtYUimxPomDMiHNXZR5LYufbaXO3MfeKlJchXtEDCEf44q qP//+/k20GjYQRxZiiQBt5F3bwBE1d4p9O7qpgBhCr9diy/v/S70Uu1CNRz+oUBD rJ8oYogN7TbDcJ1I4Ozia31SVdoZIX/efORA9Ry1HgwU -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:08 2026 by rpki-client