This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa File: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (raw, json) Hash identifier: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc= Subject key identifier: 24:34:D9:0D:6E:80:61:64:3E:CA:3E:CD:E5:9A:1E:9F:3D:7D:BD:76 Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019B76EB0992B9D25F814BAD1A659210D65C Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3271 IP address blocks: 193.46.3.0/24 maxlen: 24 194.39.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:09:92:b9:d2:5f:81:4b:ad:1a:65:92:10:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2434d90d6e8061643eca3ecde59a1e9f3d7dbd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:ab:1c:fb:c2:f5:59:37:bf:ec:55:e1:3a: 9b:ed:66:d3:59:a8:dc:7f:d7:9d:60:7b:a7:77:3f: f6:5f:90:72:65:bd:01:b3:92:8a:3e:a0:9e:b7:98: e6:89:3b:53:8b:93:33:c1:13:c1:35:45:6b:05:13: 7c:95:47:4d:48:5f:36:79:c6:0e:bd:e7:ac:e4:64: fd:90:e8:97:e3:94:a8:42:42:bb:8a:90:36:eb:8e: 8e:76:5b:2c:a4:97:3f:57:f6:d4:b1:64:2d:06:3f: 6b:96:38:7c:bd:ab:eb:4b:b0:7d:87:f9:f4:58:f7: 1f:a6:da:22:9a:5e:8d:e4:25:26:58:de:4a:7d:cc: 2c:f6:7d:55:b2:65:5d:0e:ae:33:e7:56:d5:b0:1e: 91:22:fe:20:71:c7:09:c8:b1:35:dc:c2:c6:c9:eb: 52:5e:0b:f9:58:e9:c6:6b:68:7e:ab:3e:13:07:e8: 44:8c:23:f2:87:d7:24:70:7f:12:51:d0:42:7d:cf: 4b:6c:ac:ba:43:5d:37:86:a6:cf:0e:f1:b7:ba:06: c5:b1:9a:04:61:35:2a:52:0e:27:6c:d3:62:f0:3c: 87:f7:4d:69:b1:88:f1:ba:16:36:87:1b:f0:51:fd: a7:95:52:ea:34:35:4e:7a:fc:f2:dc:0f:4a:96:12: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:34:D9:0D:6E:80:61:64:3E:CA:3E:CD:E5:9A:1E:9F:3D:7D:BD:76 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.3.0/24 194.39.130.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f1:32:7a:bd:1a:46:cc:0c:77:31:d1:11:1f:88:2e:72:6c: 19:77:ad:11:2a:cf:82:e7:09:9c:e3:ba:72:3f:82:97:4a:79: 58:26:78:73:7c:60:32:3c:72:2a:ee:65:2e:75:3c:b3:10:40: e9:7f:a7:dd:b6:d4:84:eb:36:92:6f:0a:43:6e:72:0c:91:7b: d3:3b:c9:db:4c:b2:ca:ea:02:cd:6d:a2:58:ef:8b:a4:6b:f1: cd:b0:41:87:57:94:ed:8f:95:c5:53:5e:7f:f3:aa:78:2b:cf: fc:10:17:fa:b5:7b:ea:f0:e5:c3:ad:a9:6a:85:2e:88:73:cf: 17:8f:76:67:d0:11:1d:4b:76:6e:88:6a:21:cc:46:23:80:da: e9:99:68:e0:50:05:ff:ac:2d:8a:c2:7e:63:1d:17:39:e4:b4: a2:0c:5f:27:4d:9c:c5:62:c6:4e:49:d1:9b:10:9c:b7:e9:bc: 15:aa:9b:28:71:e7:5a:4f:af:f3:41:5b:88:72:3b:99:dd:28: a8:87:18:a4:30:37:b3:4c:e4:d0:cd:29:77:41:b4:7f:2a:2f: 07:14:86:c5:35:bb:b7:b2:ce:c5:12:a1:16:1a:02:f0:93:97: e5:58:7b:6b:16:54:c2:a6:9f:bf:27:28:3a:32:0d:b6:8f:69: e5:1a:ef:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26wmSudJfgUutGmWSENZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDM0ZDkwZDZlODA2MTY0M2VjYTNlY2RlNTlhMWU5ZjNkN2RiZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFqrHPvC9Vk3v+xV4Tqb7WbTWajc f9edYHundz/2X5ByZb0Bs5KKPqCet5jmiTtTi5MzwRPBNUVrBRN8lUdNSF82ecYO vees5GT9kOiX45SoQkK7ipA2646OdlsspJc/V/bUsWQtBj9rljh8vavrS7B9h/n0 WPcfptoiml6N5CUmWN5Kfcws9n1VsmVdDq4z51bVsB6RIv4gcccJyLE13MLGyetS Xgv5WOnGa2h+qz4TB+hEjCPyh9ckcH8SUdBCfc9LbKy6Q103hqbPDvG3ugbFsZoE YTUqUg4nbNNi8DyH901psYjxuhY2hxvwUf2nlVLqNDVOevzy3A9KlhLbEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQ02Q1ugGFkPso+zeWaHp89fb12MB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvSkRUWkRXNkFZV1EteWo3TjVab2VuejE5dlhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS4DAwQA wieCMA0GCSqGSIb3DQEBCwUAA4IBAQCZ8TJ6vRpGzAx3MdERH4gucmwZd60RKs+C 5wmc47pyP4KXSnlYJnhzfGAyPHIq7mUudTyzEEDpf6fdttSE6zaSbwpDbnIMkXvT O8nbTLLK6gLNbaJY74uka/HNsEGHV5Ttj5XFU15/86p4K8/8EBf6tXvq8OXDralq hS6Ic88Xj3Zn0BEdS3ZuiGohzEYjgNrpmWjgUAX/rC2Kwn5jHRc55LSiDF8nTZzF YsZOSdGbEJy36bwVqpsocedaT6/zQVuIcjuZ3SiohxikMDezTOTQzSl3QbR/Ki8H FIbFNbu3ss7FEqEWGgLwk5flWHtrFlTCpp+/Jyg6Mg22j2nlGu/O -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:20 2026 by rpki-client