This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/JTLXgLzRLUbBBSRVTWms-KrY030.roa File: JTLXgLzRLUbBBSRVTWms-KrY030.roa (raw, json) Hash identifier: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw= Subject key identifier: 25:32:D7:80:BC:D1:2D:46:C1:05:24:55:4D:69:AC:F8:AA:D8:D3:7D Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA291AF8DA87D6AB09C9A303A86AD Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/JTLXgLzRLUbBBSRVTWms-KrY030.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31367 IP address blocks: 159.151.250.0/24 maxlen: 24 159.151.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a2:91:af:8d:a8:7d:6a:b0:9c:9a:30:3a:86:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2532d780bcd12d46c10524554d69acf8aad8d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:23:a8:12:91:ef:81:f7:15:d3:45:b7:fd: b3:e9:e7:dd:d2:a1:fb:a9:35:30:7d:b1:ff:46:08: 1a:b6:5d:02:48:10:55:5f:f4:76:10:b5:3b:00:f4: fc:cc:64:ab:9c:34:42:c0:dc:0e:a3:40:fb:96:ee: 64:28:78:69:a0:bb:98:73:ac:24:14:1b:9f:9d:9a: 5c:39:c1:d0:c7:55:fb:2a:7f:c3:a5:94:ff:5e:4e: fe:55:2b:ad:f0:9c:6a:8c:9b:df:19:86:8f:0d:af: 98:d9:5a:ad:00:ec:7d:bb:e2:b8:eb:b7:5a:45:01: c8:9a:e6:6d:ed:8e:48:6b:3a:06:3d:70:a8:a9:e6: 0f:be:26:10:e1:a5:ee:64:1d:d5:11:7c:7f:0a:b0: cb:98:d2:54:01:87:e6:68:22:13:3a:4c:7f:74:7f: 1b:4c:d1:de:cc:01:a8:b7:bd:cf:66:3a:d1:b1:52: 47:df:9c:2b:7f:37:2a:5d:c9:3b:db:11:da:f6:1e: e4:59:01:a0:5b:b7:52:3e:ba:90:44:5d:1d:4a:f6: a8:1a:ad:ee:f9:1c:6e:90:bf:69:0f:0e:37:13:d2: 84:f2:b6:4e:d1:65:60:df:f5:90:69:c3:e8:30:fd: ec:c3:de:73:05:af:4d:0a:6e:27:17:e9:a7:44:8e: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:D7:80:BC:D1:2D:46:C1:05:24:55:4D:69:AC:F8:AA:D8:D3:7D X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/JTLXgLzRLUbBBSRVTWms-KrY030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.250.0/23 Signature Algorithm: sha256WithRSAEncryption 69:c7:7e:2e:ea:67:0d:5e:87:9a:ab:8e:c5:2a:e5:a9:9b:16: f7:6d:bf:24:2a:3a:e5:f6:08:60:cb:ac:59:c4:34:33:40:be: b1:77:df:4e:4d:1e:3e:d4:87:f4:cb:07:3c:da:26:74:e4:68: b6:9b:df:7d:11:f7:c7:ef:ff:c5:bc:4b:5a:c8:0a:89:0b:8b: b7:b9:74:06:a1:88:8b:b6:54:8f:60:25:a1:48:91:c0:ad:67: 54:1b:52:14:ba:25:61:96:af:c2:ce:78:85:c6:52:a1:92:87: 9e:a9:ea:03:8d:45:c4:72:be:77:34:b9:80:85:2e:51:14:5d: 6c:0c:f8:e6:74:a0:c8:97:99:e9:f9:ab:56:bc:9d:7a:96:ec: 77:07:96:b4:c4:4b:35:80:a7:84:11:5a:d2:60:d1:72:fa:27: 76:3e:1b:4e:6c:76:08:d0:6b:76:80:62:bf:35:67:38:d5:c3: 5a:d0:9e:b7:35:38:1c:a5:2c:35:ee:77:32:41:2b:80:5f:fa: 7e:08:dc:6c:61:59:73:b9:fc:7a:7d:35:cd:37:aa:9d:51:1b: 22:09:58:18:90:8a:2c:93:42:db:c3:24:80:a5:6e:0c:99:9f: 08:bf:60:4c:40:f4:2c:56:33:d7:f4:3a:ab:93:d6:84:1c:06: f9:75:ac:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqKRr42ofWqwnJowOoatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTMyZDc4MGJjZDEyZDQ2YzEwNTI0NTU0ZDY5YWNmOGFhZDhkMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz8jqBKR74H3FdNFt/2z6efd0qH7 qTUwfbH/Rggatl0CSBBVX/R2ELU7APT8zGSrnDRCwNwOo0D7lu5kKHhpoLuYc6wk FBufnZpcOcHQx1X7Kn/DpZT/Xk7+VSut8JxqjJvfGYaPDa+Y2VqtAOx9u+K467da RQHImuZt7Y5IazoGPXCoqeYPviYQ4aXuZB3VEXx/CrDLmNJUAYfmaCITOkx/dH8b TNHezAGot73PZjrRsVJH35wrfzcqXck72xHa9h7kWQGgW7dSPrqQRF0dSvaoGq3u +RxukL9pDw43E9KE8rZO0WVg3/WQacPoMP3sw95zBa9NCm4nF+mnRI6NiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUy14C80S1GwQUkVU1prPiq2NN9MB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvSlRMWGdMelJMVWJCQlNSVlRXbXMtS3JZMDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn5f6MA0G CSqGSIb3DQEBCwUAA4IBAQBpx34u6mcNXoeaq47FKuWpmxb3bb8kKjrl9ghgy6xZ xDQzQL6xd99OTR4+1If0ywc82iZ05Gi2m999EffH7//FvEtayAqJC4u3uXQGoYiL tlSPYCWhSJHArWdUG1IUuiVhlq/CzniFxlKhkoeeqeoDjUXEcr53NLmAhS5RFF1s DPjmdKDIl5np+atWvJ16lux3B5a0xEs1gKeEEVrSYNFy+id2PhtObHYI0Gt2gGK/ NWc41cNa0J63NTgcpSw17ncyQSuAX/p+CNxsYVlzufx6fTXNN6qdURsiCVgYkIos k0LbwySApW4MmZ8Iv2BMQPQsVjPX9Dqrk9aEHAb5dawn -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:23 2026 by rpki-client