This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/JG-FpgO91koLXjHnrbLdw0m_DUc.roa File: JG-FpgO91koLXjHnrbLdw0m_DUc.roa (raw, json) Hash identifier: fj1OTuklppVkirqmv0QJOcnEevrxbA10Hf/01NWY+bQ= Subject key identifier: 24:6F:85:A6:03:BD:D6:4A:0B:5E:31:E7:AD:B2:DD:C3:49:BF:0D:47 Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e Certificate serial: 019B7F83EE0D7A68467774C3AF40E260AE67 Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/JG-FpgO91koLXjHnrbLdw0m_DUc.roa Signing time: Fri 02 Jan 2026 16:21:51 +0000 ROA not before: Fri 02 Jan 2026 16:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 109.206.228.0/22 maxlen: 22 2a0d:c440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ee:0d:7a:68:46:77:74:c3:af:40:e2:60:ae:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e Validity Not Before: Jan 2 16:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=246f85a603bdd64a0b5e31e7adb2ddc349bf0d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:2d:fa:6e:7d:3d:ff:11:2c:69:2a:9c:c1: eb:35:7f:09:fd:aa:fd:53:8b:78:ce:16:54:4e:51: 49:6d:b2:8c:a4:1a:35:0b:eb:42:e8:d2:d6:67:d5: 75:12:80:36:63:04:0f:1d:e2:ed:b7:69:7d:0b:a6: 66:19:ff:71:db:d5:00:e4:c4:b5:5e:e8:62:9c:07: 28:28:f2:da:31:d3:59:59:33:03:d4:cb:9a:ee:ec: 42:9e:7e:92:14:6f:1f:ca:e4:9e:25:f1:10:96:af: df:bb:59:89:72:77:3f:de:1e:38:9b:98:e4:65:a1: 70:65:ec:29:ad:86:8d:f3:df:fb:5c:d7:a1:92:94: d3:a3:11:37:5a:34:f3:87:6f:68:0c:5c:cd:76:56: 83:27:d6:02:88:97:2a:be:70:ef:a9:92:5d:e0:28: 9b:2d:a4:1b:49:98:ae:b5:b6:9d:bd:f9:8c:3a:d6: cd:df:97:bc:bf:f5:3d:2e:f7:a3:20:5f:b1:9f:e0: da:21:47:3b:09:ac:98:b4:b5:94:37:0d:12:48:57: 43:68:f1:32:e3:9e:aa:a7:a8:41:7a:4f:26:cc:64: c6:6a:1b:dd:b0:3a:f6:26:1b:a5:64:3e:49:f4:dc: 00:f6:8e:fe:93:47:43:92:e9:4e:b8:9d:3a:1a:23: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6F:85:A6:03:BD:D6:4A:0B:5E:31:E7:AD:B2:DD:C3:49:BF:0D:47 X509v3 Authority Key Identifier: keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/JG-FpgO91koLXjHnrbLdw0m_DUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.206.228.0/22 IPv6: 2a0d:c440::/29 Signature Algorithm: sha256WithRSAEncryption 11:0a:d1:35:df:dd:ec:7a:97:38:29:84:29:af:5e:6f:d6:05: 67:c8:1d:95:37:16:55:18:62:39:2e:99:a8:ba:7d:80:2a:f9: 05:b7:dc:02:5e:06:80:cf:90:46:5d:f3:be:bc:15:3c:30:14: fa:7c:16:b1:13:3a:54:33:c0:5c:af:4c:eb:89:cf:d3:6c:ca: c9:69:be:1b:60:96:50:1c:d8:f2:bb:8e:89:36:2b:a3:12:cc: 6c:13:bb:13:2f:2e:79:c1:22:25:06:d8:60:55:a4:79:6d:31: 70:5b:17:0e:91:e7:56:37:72:d1:c3:aa:53:77:dd:70:50:19: 68:08:44:db:dd:05:43:7b:9c:0a:7e:d6:34:92:04:f2:93:ec: 61:c3:7e:4e:f9:c0:aa:72:d8:72:a1:07:2a:a9:2d:64:c3:ac: 1e:45:3f:f2:68:d9:2a:a9:25:9c:b9:c4:d3:a8:cc:10:ca:8f: 19:98:2b:ab:15:1c:2c:39:49:13:dc:8f:92:70:67:cc:66:b2: 35:f7:49:6f:6b:79:19:4e:4d:27:a1:cd:6c:52:17:3a:a1:96: b4:b9:eb:b7:7f:16:83:61:38:7b:f4:7e:ef:10:7d:63:89:1d: 7b:da:11:31:8d:e1:b1:18:f4:41:bd:35:13:64:9b:d3:d1:df: ac:ba:0b:f8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g+4NemhGd3TDr0DiYK5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4 NmI4MmUwHhcNMjYwMTAyMTYyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDZmODVhNjAzYmRkNjRhMGI1ZTMxZTdhZGIyZGRjMzQ5YmYwZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyYt+m59Pf8RLGkqnMHrNX8J/ar9 U4t4zhZUTlFJbbKMpBo1C+tC6NLWZ9V1EoA2YwQPHeLtt2l9C6ZmGf9x29UA5MS1 XuhinAcoKPLaMdNZWTMD1Mua7uxCnn6SFG8fyuSeJfEQlq/fu1mJcnc/3h44m5jk ZaFwZewprYaN89/7XNehkpTToxE3WjTzh29oDFzNdlaDJ9YCiJcqvnDvqZJd4Cib LaQbSZiutbadvfmMOtbN35e8v/U9LvejIF+xn+DaIUc7CayYtLWUNw0SSFdDaPEy 456qp6hBek8mzGTGahvdsDr2JhulZD5J9NwA9o7+k0dDkulOuJ06GiPfgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCRvhaYDvdZKC14x562y3cNJvw1HMB8GA1UdIwQY MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt N2NmYjE5ZjZlMTMzLzEvSkctRnBnTzkxa29MWGpIbnJiTGR3MG1fRFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCbc7kMA0E AgACMAcDBQMqDcRAMA0GCSqGSIb3DQEBCwUAA4IBAQARCtE1393sepc4KYQpr15v 1gVnyB2VNxZVGGI5Lpmoun2AKvkFt9wCXgaAz5BGXfO+vBU8MBT6fBaxEzpUM8Bc r0zric/TbMrJab4bYJZQHNjyu46JNiujEsxsE7sTLy55wSIlBthgVaR5bTFwWxcO kedWN3LRw6pTd91wUBloCETb3QVDe5wKftY0kgTyk+xhw35O+cCqcthyoQcqqS1k w6weRT/yaNkqqSWcucTTqMwQyo8ZmCurFRwsOUkT3I+ScGfMZrI190lva3kZTk0n oc1sUhc6oZa0ueu3fxaDYTh79H7vEH1jiR172hExjeGxGPRBvTUTZJvT0d+sugv4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:42 2026 by rpki-client