This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/JKAnK2en3odHT3-Pq6Exoze1jvQ.roa File: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (raw, json) Hash identifier: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg= Subject key identifier: 24:A0:27:2B:67:A7:DE:87:47:4F:7F:8F:AB:A1:31:A3:37:B5:8E:F4 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B36479387B2A4290A69B9519125A258 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/JKAnK2en3odHT3-Pq6Exoze1jvQ.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 45.157.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:47:93:87:b2:a4:29:0a:69:b9:51:91:25:a2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24a0272b67a7de87474f7f8faba131a337b58ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:75:82:1d:98:23:30:0a:c5:d8:bd:4e:51: 25:b8:e3:3d:e1:30:3b:be:0a:ae:fc:0c:15:ee:0f: c4:03:57:2b:48:ce:a6:87:fb:1e:6d:bb:38:99:30: 7e:80:f6:e3:b2:08:bc:32:66:96:72:ad:1c:5a:dd: 08:f8:3d:54:83:f3:72:52:3d:bb:98:00:db:34:eb: 96:ab:56:82:bb:73:f2:54:f5:09:46:93:57:b0:3f: b3:7b:2f:ab:47:b6:58:2e:a0:f6:f7:ca:fb:64:86: 39:0c:78:73:42:02:1e:b5:75:e9:4f:92:d6:c4:d5: bd:ea:14:d6:64:df:75:05:30:a2:93:d5:55:fa:9d: 03:f3:c9:a0:ff:72:2b:3c:75:a3:7e:73:0e:5d:b2: 43:cb:3e:78:f6:f8:d7:97:c9:a4:1f:57:c4:f8:5a: 10:67:51:45:75:f7:d9:11:e9:9c:a6:ca:90:9d:ec: 9e:37:03:ed:26:3e:cb:e2:89:e5:76:10:f5:c6:03: 51:b3:db:b5:c0:5e:85:b0:a5:74:33:cd:2d:45:56: d8:22:31:70:a2:4d:51:51:e8:85:ba:15:7a:4c:c5: a4:6a:12:2f:aa:d1:6a:65:de:da:d2:e6:0b:cf:47: 40:fc:ea:59:27:65:90:d9:6a:47:0b:66:92:bc:53: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:27:2B:67:A7:DE:87:47:4F:7F:8F:AB:A1:31:A3:37:B5:8E:F4 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/JKAnK2en3odHT3-Pq6Exoze1jvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:19:79:d2:b8:66:a0:17:c6:16:d4:4e:dc:7f:1e:50:e3:4f: 6b:24:5e:a8:0c:66:15:96:4d:8e:19:48:88:93:1a:93:3e:8b: 6e:49:fa:f2:38:27:1f:6b:f6:4a:5e:c3:6d:99:7f:6a:d2:11: 0e:dc:9b:3a:13:e0:8d:8b:2a:20:23:99:0d:10:21:21:36:6f: d2:ad:0c:e4:ab:ef:ad:45:03:bd:b7:4f:f8:39:9c:9b:d7:5e: 01:07:18:6b:dd:35:cc:a8:40:fa:7a:80:a3:a6:5a:29:0b:74: b7:7d:70:09:eb:18:c8:68:b8:15:fd:50:92:1f:f9:74:b4:05: 39:78:69:70:76:37:78:02:99:83:d0:91:70:4e:3e:2d:00:de: a4:81:81:45:9c:a5:b2:e9:b7:61:e8:48:aa:0d:09:b0:8b:af: dd:31:85:9a:54:26:cf:d4:bd:18:3c:95:ce:ad:4d:2c:7d:93: d0:34:60:7d:63:74:0a:c9:c0:c7:e0:51:77:d1:2e:05:5c:66: 51:be:90:98:db:2c:0e:05:63:f0:5d:f0:32:bb:f5:6c:52:1d: 22:63:1d:d4:cb:f9:00:9e:f0:88:2e:4b:e4:c9:08:44:ed:b9: 82:7c:cc:96:d6:23:7d:73:1b:e2:be:12:43:bf:dc:54:a9:43: 07:e6:e0:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkeTh7KkKQppuVGRJaJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGEwMjcyYjY3YTdkZTg3NDc0ZjdmOGZhYmExMzFhMzM3YjU4ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDJ1gh2YIzAKxdi9TlEluOM94TA7 vgqu/AwV7g/EA1crSM6mh/sebbs4mTB+gPbjsgi8MmaWcq0cWt0I+D1Ug/NyUj27 mADbNOuWq1aCu3PyVPUJRpNXsD+zey+rR7ZYLqD298r7ZIY5DHhzQgIetXXpT5LW xNW96hTWZN91BTCik9VV+p0D88mg/3IrPHWjfnMOXbJDyz549vjXl8mkH1fE+FoQ Z1FFdffZEemcpsqQneyeNwPtJj7L4onldhD1xgNRs9u1wF6FsKV0M80tRVbYIjFw ok1RUeiFuhV6TMWkahIvqtFqZd7a0uYLz0dA/OpZJ2WQ2WpHC2aSvFORZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSgJytnp96HR09/j6uhMaM3tY70MB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvSktBbksyZW4zb2RIVDMtUHE2RXhvemUxanZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ2AMA0G CSqGSIb3DQEBCwUAA4IBAQBLGXnSuGagF8YW1E7cfx5Q409rJF6oDGYVlk2OGUiI kxqTPotuSfryOCcfa/ZKXsNtmX9q0hEO3Js6E+CNiyogI5kNECEhNm/SrQzkq++t RQO9t0/4OZyb114BBxhr3TXMqED6eoCjplopC3S3fXAJ6xjIaLgV/VCSH/l0tAU5 eGlwdjd4ApmD0JFwTj4tAN6kgYFFnKWy6bdh6EiqDQmwi6/dMYWaVCbP1L0YPJXO rU0sfZPQNGB9Y3QKycDH4FF30S4FXGZRvpCY2ywOBWPwXfAyu/VsUh0iYx3Uy/kA nvCILkvkyQhE7bmCfMyW1iN9cxvivhJDv9xUqUMH5uD6 -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:31 2026 by rpki-client