This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JJIiH0-sPntHyinorpTaNwMA-3c.roa File: JJIiH0-sPntHyinorpTaNwMA-3c.roa (raw, json) Hash identifier: 8XPoX0eY9PUG3LkU9hAhIsTNWXmXi+OHtPC8894gX6U= Subject key identifier: 24:92:22:1F:4F:AC:3E:7B:47:CA:29:E8:AE:94:DA:37:03:00:FB:77 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB73A9C02D3DB8D1A9AD61B040934 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JJIiH0-sPntHyinorpTaNwMA-3c.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199614 IP address blocks: 109.176.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b7:3a:9c:02:d3:db:8d:1a:9a:d6:1b:04:09:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2492221f4fac3e7b47ca29e8ae94da370300fb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:ed:b6:a3:6f:fd:59:85:5b:56:3e:e3:e3: 48:eb:73:83:c0:d5:bf:cf:b8:be:a4:02:b3:93:12: 89:3a:c0:70:b5:6e:22:99:41:37:aa:dd:2b:f0:ac: 87:92:c7:cc:55:5b:de:52:e3:40:0e:dd:dc:4d:fa: e8:55:7c:f7:30:bf:5f:52:6d:82:61:a9:c0:99:7c: 02:d3:56:56:df:86:61:9e:0e:f5:8b:70:6e:06:fc: 17:94:02:dd:f9:3a:49:40:17:3b:34:00:df:68:6d: 31:33:de:e8:fd:f2:91:4f:51:ea:f8:1e:2f:9c:40: 82:4d:75:e5:6c:58:35:14:89:e2:47:58:64:b2:b8: 3b:bb:9a:12:6c:c8:97:c0:10:9a:65:21:81:60:66: 03:f6:31:c7:c6:51:00:d9:ff:8c:06:40:f4:e9:07: 7e:64:8a:93:b6:a1:2e:88:c4:ad:a4:e5:ca:a2:03: 95:f7:9d:06:24:10:54:1f:1a:81:31:1f:ca:55:d4: cf:c9:a9:cf:4a:3f:e5:64:06:a3:9e:59:9f:fc:9d: b6:2a:8a:14:75:7f:21:d0:df:1a:6c:c3:7c:f6:03: a9:ca:82:4a:45:9f:6e:fe:53:62:6b:41:23:18:be: 08:4b:b9:ec:29:98:b1:a7:8c:5d:10:f4:28:8b:16: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:22:1F:4F:AC:3E:7B:47:CA:29:E8:AE:94:DA:37:03:00:FB:77 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JJIiH0-sPntHyinorpTaNwMA-3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.28.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ff:dd:96:26:9a:64:00:f1:bd:cb:35:4a:fa:27:ac:7d:91: 6f:e0:77:23:ab:00:dd:c3:da:2c:06:38:cb:ee:c7:d7:08:02: 71:e4:f6:07:3c:ec:c1:46:8e:cc:5c:9c:27:64:69:a3:0e:b3: 80:12:87:71:86:cc:77:07:58:42:1a:17:ed:e0:44:5c:20:2a: a5:a2:46:a1:83:78:f7:aa:24:50:be:ce:1f:d5:87:35:9b:3a: 8a:6d:58:dd:54:d5:81:e3:58:ab:d0:05:d2:9c:df:3f:8f:c1: 22:dc:f1:6c:32:0e:0f:d5:ff:2a:b3:41:22:cf:ed:e4:a6:2f: 49:bc:0d:a3:bb:cb:a1:62:bb:ec:eb:96:0f:3a:75:a9:af:86: 3f:d4:32:4f:4b:44:c1:a5:fe:62:69:79:a2:d7:54:21:6f:76: b2:d5:b9:23:4c:29:84:95:1b:82:88:15:ab:b5:81:6f:51:23: ba:41:30:3c:99:a8:83:aa:68:a5:8c:8e:57:ed:27:58:8d:3f: 9a:0b:6e:3b:ff:8c:03:1f:98:46:c1:45:eb:10:49:20:37:4e: a0:be:66:c2:76:0e:57:62:ba:22:e2:f7:aa:9c:fd:3f:e1:9c: 8e:b2:bd:da:0f:b1:f6:02:40:53:70:8e:b3:21:e2:53:6c:9a: d5:bd:28:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wrc6nALT240amtYbBAk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkyMjIxZjRmYWMzZTdiNDdjYTI5ZThhZTk0ZGEzNzAzMDBmYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz3ttqNv/VmFW1Y+4+NI63ODwNW/ z7i+pAKzkxKJOsBwtW4imUE3qt0r8KyHksfMVVveUuNADt3cTfroVXz3ML9fUm2C YanAmXwC01ZW34Zhng71i3BuBvwXlALd+TpJQBc7NADfaG0xM97o/fKRT1Hq+B4v nECCTXXlbFg1FIniR1hksrg7u5oSbMiXwBCaZSGBYGYD9jHHxlEA2f+MBkD06Qd+ ZIqTtqEuiMStpOXKogOV950GJBBUHxqBMR/KVdTPyanPSj/lZAajnlmf/J22KooU dX8h0N8abMN89gOpyoJKRZ9u/lNia0EjGL4IS7nsKZixp4xdEPQoixYS0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSSIh9PrD57R8op6K6U2jcDAPt3MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSkpJaUgwLXNQbnRIeWlub3JwVGFOd01BLTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAcMA0G CSqGSIb3DQEBCwUAA4IBAQBR/92WJppkAPG9yzVK+iesfZFv4HcjqwDdw9osBjjL 7sfXCAJx5PYHPOzBRo7MXJwnZGmjDrOAEodxhsx3B1hCGhft4ERcICqlokahg3j3 qiRQvs4f1Yc1mzqKbVjdVNWB41ir0AXSnN8/j8Ei3PFsMg4P1f8qs0Eiz+3kpi9J vA2ju8uhYrvs65YPOnWpr4Y/1DJPS0TBpf5iaXmi11Qhb3ay1bkjTCmElRuCiBWr tYFvUSO6QTA8maiDqmiljI5X7SdYjT+aC247/4wDH5hGwUXrEEkgN06gvmbCdg5X Yroi4veqnP0/4ZyOsr3aD7H2AkBTcI6zIeJTbJrVvShv -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:10 2026 by rpki-client