This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa File: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (raw, json) Hash identifier: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8= Subject key identifier: 24:5C:5F:0C:3F:80:27:E7:D8:79:0A:70:C6:53:41:0D:3A:07:C7:F0 Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Certificate serial: 019B79ED4141E96330C75A24F212C8F14320 Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197561 IP address blocks: 91.223.103.0/24 maxlen: 24 176.111.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:41:e9:63:30:c7:5a:24:f2:12:c8:f1:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=245c5f0c3f8027e7d8790a70c653410d3a07c7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:79:29:d2:c1:cd:e8:20:3a:c3:66:c3:d2: bf:09:cf:d0:a1:ea:63:0d:43:18:bc:69:ae:43:12: 98:ff:c4:16:ae:c5:58:aa:0a:65:4f:3c:84:89:e2: 79:76:49:df:64:56:43:23:bb:22:a4:a8:ae:d2:4f: bf:c6:3d:90:da:d6:a1:23:37:cd:16:0c:10:61:c2: c3:3d:5a:0c:42:17:fe:29:90:62:44:4d:f7:12:3b: f2:ab:f2:ed:95:92:a5:30:41:8b:9c:ca:96:00:d6: ba:b8:58:a0:00:8b:55:cc:a2:5c:e6:3b:82:a4:7b: a4:02:db:5c:6c:bf:10:67:4c:9d:d5:fc:47:7c:34: 67:43:33:e6:51:82:f0:48:2f:10:be:39:2a:b2:1c: ed:4b:65:0c:de:04:a6:2b:61:d5:1e:4b:e9:19:a2: dd:67:37:87:d8:c9:ed:40:7c:db:bb:74:46:b4:9f: 82:f4:c9:d4:4c:51:f3:a2:99:66:d2:53:74:49:e0: 5f:ef:78:09:a5:3d:1b:97:01:6c:0b:e3:67:4c:c3: 8b:29:a5:28:03:7b:73:e2:95:40:c9:15:2d:ac:f3: 98:9a:8b:81:b1:3b:61:cb:1d:e8:4e:96:3e:60:43: d1:ad:73:e3:c0:af:37:a6:c1:28:ab:ba:18:38:31: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5C:5F:0C:3F:80:27:E7:D8:79:0A:70:C6:53:41:0D:3A:07:C7:F0 X509v3 Authority Key Identifier: keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.103.0/24 176.111.46.0/24 Signature Algorithm: sha256WithRSAEncryption 45:f4:6a:d1:37:80:ec:8c:12:d5:1b:f9:43:e3:15:f3:3e:48: d3:2c:b8:f3:59:83:ae:b9:a1:71:e8:57:1c:05:4e:11:74:c6: f9:c3:2f:38:16:1d:bb:cd:ce:6c:fb:78:50:92:31:35:59:25: 65:d3:83:80:46:0d:df:6d:28:86:ab:83:95:55:ca:85:90:c2: 3f:72:5d:e0:ea:23:9e:e9:30:88:db:26:81:d7:78:e6:5e:3e: 0e:df:e1:53:72:04:c9:df:d8:8f:33:08:85:21:f4:34:de:12: 15:38:5b:2a:20:d4:51:b4:24:cc:b4:b8:1c:97:2e:7f:79:32: ef:87:62:f8:a3:75:f9:5e:5e:fb:b4:48:cd:c9:bc:e8:b4:4e: e1:03:ac:fc:5b:ca:d4:d2:0c:80:ca:ae:62:75:18:e3:73:df: 34:f2:54:99:99:ab:d0:f5:0f:df:eb:f3:d5:2a:96:3c:60:41: dc:eb:8e:39:68:5a:4e:d8:d3:17:23:e6:3e:77:d8:53:54:ac: 67:a9:5a:db:ac:5d:af:29:ae:a5:97:e8:2b:51:c9:30:fa:cd: 37:03:01:f5:97:b5:ba:06:53:c8:e8:24:1b:30:2e:66:d4:8e: 6f:1e:35:f1:8a:4c:73:47:7f:11:c2:24:2f:e7:6a:70:63:a2: 41:05:60:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57UFB6WMwx1ok8hLI8UMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm NjIyNGEwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDVjNWYwYzNmODAyN2U3ZDg3OTBhNzBjNjUzNDEwZDNhMDdjN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnel5KdLBzeggOsNmw9K/Cc/Qoepj DUMYvGmuQxKY/8QWrsVYqgplTzyEieJ5dknfZFZDI7sipKiu0k+/xj2Q2tahIzfN FgwQYcLDPVoMQhf+KZBiRE33Ejvyq/LtlZKlMEGLnMqWANa6uFigAItVzKJc5juC pHukAttcbL8QZ0yd1fxHfDRnQzPmUYLwSC8QvjkqshztS2UM3gSmK2HVHkvpGaLd ZzeH2MntQHzbu3RGtJ+C9MnUTFHzoplm0lN0SeBf73gJpT0blwFsC+NnTMOLKaUo A3tz4pVAyRUtrPOYmouBsTthyx3oTpY+YEPRrXPjwK83psEoq7oYODFRgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCRcXww/gCfn2HkKcMZTQQ06B8fwMB8GA1UdIwQY MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt YmE1MTMyM2RiNGU1LzEvSkZ4ZkRELUFKLWZZZVFwd3hsTkJEVG9IeF9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1 LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW99nAwQA sG8uMA0GCSqGSIb3DQEBCwUAA4IBAQBF9GrRN4DsjBLVG/lD4xXzPkjTLLjzWYOu uaFx6FccBU4RdMb5wy84Fh27zc5s+3hQkjE1WSVl04OARg3fbSiGq4OVVcqFkMI/ cl3g6iOe6TCI2yaB13jmXj4O3+FTcgTJ39iPMwiFIfQ03hIVOFsqINRRtCTMtLgc ly5/eTLvh2L4o3X5Xl77tEjNybzotE7hA6z8W8rU0gyAyq5idRjjc9808lSZmavQ 9Q/f6/PVKpY8YEHc6445aFpO2NMXI+Y+d9hTVKxnqVrbrF2vKa6ll+grUckw+s03 AwH1l7W6BlPI6CQbMC5m1I5vHjXxikxzR38RwiQv52pwY6JBBWBx -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:15 2026 by rpki-client