This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa File: Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa (raw, json) Hash identifier: SifU3rjYSstOzSyjjAgOfjY8aPan6w6IRltT7xNrspI= Subject key identifier: 25:FE:91:FD:25:DD:04:10:94:84:A5:F8:9B:30:D9:2C:C8:81:25:09 Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019B7F8268C4509689B36A842E49FF8458CE Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa Signing time: Fri 02 Jan 2026 16:20:11 +0000 ROA not before: Fri 02 Jan 2026 16:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.12.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:68:c4:50:96:89:b3:6a:84:2e:49:ff:84:58:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Jan 2 16:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25fe91fd25dd04109484a5f89b30d92cc8812509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:a3:6a:11:43:36:6f:fb:cf:e3:2b:d3:ac: b6:d4:6c:4e:d9:92:b1:f7:32:b8:a8:26:63:ea:23: 7c:e0:1f:3e:5f:75:21:d3:06:21:fc:48:f7:98:fb: b6:c9:70:2a:99:ec:50:0c:9f:08:c4:5f:ee:bf:c1: e0:cd:9b:e8:19:bd:4e:6d:4e:ff:99:f7:83:d7:89: b4:ac:3b:2d:5f:92:19:de:03:96:9d:21:b8:0f:0e: 45:53:27:a9:6a:84:e3:2e:d8:97:0f:e5:b4:06:5d: 20:85:14:f2:b9:c6:9f:04:ed:48:a6:f5:5b:7e:be: 00:95:ae:18:61:e2:b8:73:32:4e:11:e2:f0:29:16: 27:7b:28:8f:25:5d:9d:d2:e8:d3:a3:c6:74:7c:a6: 51:25:4a:a1:ac:21:a0:2a:f9:ea:33:ca:a8:b7:8b: 4c:8d:03:1f:f4:6b:c1:74:29:4c:f3:0f:de:8b:84: 82:2a:84:f8:c8:3f:38:d5:91:64:fa:d6:80:aa:62: f4:68:b1:e6:d7:cd:a0:93:c1:f0:d9:ce:2e:8e:29: e8:5b:86:fa:8b:71:d1:b0:fe:7f:60:4d:81:13:51: 06:6d:ad:6f:b3:f4:3c:51:ce:af:b4:aa:4b:ac:e8: 3f:0f:de:ce:5b:84:7e:f3:09:f3:20:57:69:f3:f0: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FE:91:FD:25:DD:04:10:94:84:A5:F8:9B:30:D9:2C:C8:81:25:09 X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.185.0/24 Signature Algorithm: sha256WithRSAEncryption 67:bb:a6:d9:52:99:d5:50:db:eb:89:2c:5f:06:17:c3:20:39: 89:5c:ce:5b:17:71:40:af:3e:20:b3:d9:37:04:79:59:85:23: 27:73:3d:77:35:c7:72:93:e9:32:9d:0e:aa:31:14:dd:80:9e: 77:33:64:08:bb:5c:1c:fa:b8:22:e0:d0:23:75:08:25:e9:ea: 15:1d:b3:9a:bd:3f:91:55:02:b2:f7:6b:bf:43:80:98:18:00: 29:6e:ca:ba:de:6a:e6:9c:f1:40:ea:c7:03:06:70:86:d3:28: f2:e3:f8:d2:dc:0a:ba:30:34:25:ef:f3:30:4f:81:00:80:93: 51:e8:f0:6f:6b:af:a0:93:dd:fd:ef:74:ea:2f:9a:c6:7e:dd: 19:4f:db:20:dd:b6:49:e6:94:aa:06:60:c9:e9:cc:5c:17:31: f3:1d:c7:ea:45:16:92:09:03:79:6f:6d:c7:42:7d:e2:e9:b3: e3:77:b4:af:c1:79:72:2e:ca:b3:3b:15:01:e0:51:bb:d6:b6: 09:bb:05:64:1b:a4:c8:f8:f3:1b:0e:95:83:51:62:ae:49:12: bf:68:d7:8c:b8:0a:fe:d0:62:a1:65:11:a2:7e:17:d7:2b:c6: bb:1f:9d:45:ed:1a:37:68:d5:99:49:74:d8:9b:41:2d:06:17: 2b:3f:44:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gmjEUJaJs2qELkn/hFjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjYwMTAyMTYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZlOTFmZDI1ZGQwNDEwOTQ4NGE1Zjg5YjMwZDkyY2M4ODEyNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslOjahFDNm/7z+Mr06y21GxO2ZKx 9zK4qCZj6iN84B8+X3Uh0wYh/Ej3mPu2yXAqmexQDJ8IxF/uv8HgzZvoGb1ObU7/ mfeD14m0rDstX5IZ3gOWnSG4Dw5FUyepaoTjLtiXD+W0Bl0ghRTyucafBO1IpvVb fr4Ala4YYeK4czJOEeLwKRYneyiPJV2d0ujTo8Z0fKZRJUqhrCGgKvnqM8qot4tM jQMf9GvBdClM8w/ei4SCKoT4yD841ZFk+taAqmL0aLHm182gk8Hw2c4ujinoW4b6 i3HRsP5/YE2BE1EGba1vs/Q8Uc6vtKpLrOg/D97OW4R+8wnzIFdp8/CXOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCX+kf0l3QQQlISl+Jsw2SzIgSUJMB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvSmY2Ul9TWGRCQkNVaEtYNG16RFpMTWlCSlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQy5MA0G CSqGSIb3DQEBCwUAA4IBAQBnu6bZUpnVUNvriSxfBhfDIDmJXM5bF3FArz4gs9k3 BHlZhSMncz13Ncdyk+kynQ6qMRTdgJ53M2QIu1wc+rgi4NAjdQgl6eoVHbOavT+R VQKy92u/Q4CYGAApbsq63mrmnPFA6scDBnCG0yjy4/jS3Aq6MDQl7/MwT4EAgJNR 6PBva6+gk93973TqL5rGft0ZT9sg3bZJ5pSqBmDJ6cxcFzHzHcfqRRaSCQN5b23H Qn3i6bPjd7SvwXlyLsqzOxUB4FG71rYJuwVkG6TI+PMbDpWDUWKuSRK/aNeMuAr+ 0GKhZRGifhfXK8a7H51F7Ro3aNWZSXTYm0EtBhcrP0Rp -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:40 2026 by rpki-client