This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jSTmw6QNVRai_EuoNhY73OP3VjE.roa File: jSTmw6QNVRai_EuoNhY73OP3VjE.roa (raw, json) Hash identifier: AYD6OFv8HTxuycJJf0ziwoDHoVKLGuICS6c+LYT5M5c= Subject key identifier: 8D:24:E6:C3:A4:0D:55:16:A2:FC:4B:A8:36:16:3B:DC:E3:F7:56:31 Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Certificate serial: 019B7EA590D58DA86F6BFDF13F41966988B9 Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jSTmw6QNVRai_EuoNhY73OP3VjE.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49720 IP address blocks: 94.131.240.0/24 maxlen: 24 94.131.241.0/24 maxlen: 24 94.131.242.0/24 maxlen: 24 94.131.243.0/24 maxlen: 24 94.131.246.0/24 maxlen: 24 94.131.247.0/24 maxlen: 24 185.241.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:90:d5:8d:a8:6f:6b:fd:f1:3f:41:96:69:88:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d24e6c3a40d5516a2fc4ba836163bdce3f75631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:9a:c3:32:c1:67:45:33:49:84:b5:14:e0: 99:c6:5c:0d:74:54:f4:9d:b3:f1:1d:7d:75:69:a0: 77:09:b2:68:9a:5d:1c:8d:10:ee:ab:64:b9:86:d8: fd:fc:30:ec:18:a9:84:89:af:0d:4d:92:99:85:7f: 33:a6:ac:31:59:5c:e3:ab:9f:82:2c:ac:dc:98:6b: 8c:6a:7f:8b:bd:df:2c:6b:17:24:1c:00:7d:4e:fe: 72:f7:50:82:88:d9:5c:80:05:d0:1f:39:3e:82:e9: b6:77:58:09:2b:0e:09:b3:0f:a1:81:a4:19:ee:fd: ee:92:5c:99:b5:4a:59:9f:69:bf:48:1a:b5:63:e2: 88:d2:3b:cc:4b:bb:31:c9:f8:04:6a:3a:8d:48:98: f1:3b:d1:3e:d5:65:f9:7e:df:dc:fe:e6:58:3a:e7: 68:6a:00:17:47:74:1a:06:85:30:e1:f6:e1:59:68: e0:22:af:f7:ac:8f:cc:9d:72:70:c4:88:df:e8:ec: 01:da:b6:ff:ff:4c:90:39:00:1b:c2:f8:06:be:62: 85:42:cb:52:b3:58:ea:eb:b9:1b:cb:3b:4e:71:c3: 4f:7b:b0:2f:4c:42:b5:36:d4:75:75:55:85:84:5b: 02:e4:f9:2a:81:07:49:88:76:39:4d:8e:42:5c:3e: 9f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:E6:C3:A4:0D:55:16:A2:FC:4B:A8:36:16:3B:DC:E3:F7:56:31 X509v3 Authority Key Identifier: keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/jSTmw6QNVRai_EuoNhY73OP3VjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.240.0/22 94.131.246.0/23 185.241.109.0/24 Signature Algorithm: sha256WithRSAEncryption b5:94:c8:da:1e:93:90:99:94:75:c5:4d:4d:ff:4e:22:94:16: c1:8b:81:ec:52:33:0c:be:02:29:8a:b5:77:84:ed:b7:e4:6c: 26:8d:64:00:37:c5:52:ab:f2:03:6d:d0:50:95:b6:e7:13:e3: 2e:aa:97:db:4d:dc:d5:1e:79:02:ab:cd:30:7d:b2:95:56:bc: b3:87:a6:f2:a2:05:4c:7e:ab:29:dc:9e:42:38:13:13:bc:df: db:83:85:c3:45:e2:39:26:64:8a:fe:ad:7b:3b:04:28:16:48: df:a8:f6:09:26:f6:97:80:35:b0:cb:12:49:5b:f3:a2:45:10: 93:17:55:73:9a:1b:22:d5:96:e9:7b:65:64:ad:9a:7e:70:71: e8:7c:30:2f:1a:c9:e9:39:05:a9:2a:43:04:f9:e8:1a:2c:49: 99:e7:4e:2f:08:9b:99:8b:5a:75:37:e7:02:d8:09:31:f1:7f: e9:bf:13:14:b1:9c:8f:d4:28:d8:50:96:ca:78:fa:b5:ae:e0: e6:a3:15:6b:de:6a:b1:49:08:de:47:02:e4:97:53:07:a8:0a: 0e:cc:05:b2:ad:b1:57:d9:c0:77:d3:06:56:35:09:40:93:0e: a2:1a:b5:93:fd:45:d2:f1:4c:ed:db:29:6a:e6:55:6e:33:e9: 8a:9e:e0:35 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pZDVjahva/3xP0GWaYi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw M2MwMTkwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDI0ZTZjM2E0MGQ1NTE2YTJmYzRiYTgzNjE2M2JkY2UzZjc1NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7KawzLBZ0UzSYS1FOCZxlwNdFT0 nbPxHX11aaB3CbJoml0cjRDuq2S5htj9/DDsGKmEia8NTZKZhX8zpqwxWVzjq5+C LKzcmGuMan+Lvd8saxckHAB9Tv5y91CCiNlcgAXQHzk+gum2d1gJKw4Jsw+hgaQZ 7v3uklyZtUpZn2m/SBq1Y+KI0jvMS7sxyfgEajqNSJjxO9E+1WX5ft/c/uZYOudo agAXR3QaBoUw4fbhWWjgIq/3rI/MnXJwxIjf6OwB2rb//0yQOQAbwvgGvmKFQstS s1jq67kbyztOccNPe7AvTEK1NtR1dVWFhFsC5PkqgQdJiHY5TY5CXD6fcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI0k5sOkDVUWovxLqDYWO9zj91YxMB8GA1UdIwQY MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt YzE4ZTNjY2M3NDJiLzEvalNUbXc2UU5WUmFpX0V1b05oWTczT1AzVmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXoPwAwQB XoP2AwQAufFtMA0GCSqGSIb3DQEBCwUAA4IBAQC1lMjaHpOQmZR1xU1N/04ilBbB i4HsUjMMvgIpirV3hO235GwmjWQAN8VSq/IDbdBQlbbnE+MuqpfbTdzVHnkCq80w fbKVVryzh6byogVMfqsp3J5COBMTvN/bg4XDReI5JmSK/q17OwQoFkjfqPYJJvaX gDWwyxJJW/OiRRCTF1Vzmhsi1Zbpe2VkrZp+cHHofDAvGsnpOQWpKkME+egaLEmZ 504vCJuZi1p1N+cC2Akx8X/pvxMUsZyP1CjYUJbKePq1ruDmoxVr3mqxSQjeRwLk l1MHqAoOzAWyrbFX2cB30wZWNQlAkw6iGrWT/UXS8Uzt2ylq5lVuM+mKnuA1 -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:32 2026 by rpki-client