This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JSKI-vqzYPpxPD--836wXZLvQjM.roa File: JSKI-vqzYPpxPD--836wXZLvQjM.roa (raw, json) Hash identifier: 0WcAxWRD2ZECpAWCk+jgRJ/Z6UY42WJzDY95+ZHbsJs= Subject key identifier: 25:22:88:FA:FA:B3:60:FA:71:3C:3F:BE:F3:7E:B0:5D:92:EF:42:33 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABB37A13C8D841AA115144C3EFEB4 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JSKI-vqzYPpxPD--836wXZLvQjM.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203576 IP address blocks: 77.93.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:37:a1:3c:8d:84:1a:a1:15:14:4c:3e:fe:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=252288fafab360fa713c3fbef37eb05d92ef4233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:f5:24:fc:be:c4:03:c8:99:21:9f:a7:06: 94:9c:34:f9:90:d4:94:3b:1f:e5:fe:76:ed:1e:25: 75:8c:51:78:b8:13:83:9d:82:77:2d:36:b4:f8:6d: b6:24:3c:35:f9:b0:30:bd:82:55:ee:0f:b2:17:40: 07:35:1f:35:43:6a:90:0f:9a:17:bc:bf:7f:83:3b: 02:38:ec:dc:34:5e:a3:2b:42:27:88:95:d3:5b:9d: 69:3a:57:66:07:18:25:f9:f4:6d:aa:59:41:a6:c0: 99:fa:49:c4:d2:b1:9f:b4:40:4c:ef:e6:6b:74:24: 1d:a5:dc:5c:85:61:f1:93:f3:d8:b1:ed:8e:a8:ee: cc:2c:d2:78:f9:51:7a:fe:6e:df:c5:fc:fd:fa:c6: 02:e9:c3:3a:11:55:52:d6:21:2c:f7:73:ff:5d:c9: 25:f4:70:b5:71:4f:70:10:84:1c:fd:e6:c7:62:f4: 13:cb:aa:3f:d6:75:d1:4a:65:e2:ae:75:d3:ac:57: a5:48:b9:21:7b:f8:60:e7:d5:03:63:6f:04:a4:b6: d1:97:f3:34:01:5a:da:76:97:50:21:e1:d3:ff:4d: 66:f6:22:62:0b:ca:d2:eb:ef:3e:6a:86:40:47:d5: 88:c8:19:8b:65:d5:6f:8d:27:66:db:26:70:ee:2a: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:88:FA:FA:B3:60:FA:71:3C:3F:BE:F3:7E:B0:5D:92:EF:42:33 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JSKI-vqzYPpxPD--836wXZLvQjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.148.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ab:7b:be:f0:3c:37:b8:3a:38:db:e7:b9:6a:7b:75:43:70: 23:a1:09:a5:f8:66:7d:01:82:83:ef:f8:b3:16:48:4e:d4:41: be:b7:3c:a1:a8:ff:9e:7a:e2:41:f5:24:90:8c:6b:a7:26:ad: d5:78:e0:20:b0:b4:a3:5a:f9:9e:7c:8e:e8:d6:00:13:9a:39: 69:00:04:65:a4:fd:04:aa:b6:92:c6:ce:00:9f:e2:8b:31:a8: 67:53:94:eb:fc:e5:ee:8d:08:b7:2d:76:4a:e1:5b:bb:4a:4f: 6b:12:8d:51:26:93:f0:e5:c2:84:12:45:dc:f2:99:90:06:c5: 9b:62:23:ff:39:9c:e6:0c:d2:ca:36:0e:97:e3:a9:3a:b4:ef: 2c:68:68:35:6c:09:9e:d9:c5:dc:74:c9:d5:31:07:76:6e:99: 0e:61:0b:1b:46:79:02:c1:fc:0c:fc:bf:ef:52:23:85:7c:ef: 4e:7f:00:02:ba:ad:cd:d7:57:f1:f6:6d:9d:7a:e5:eb:58:af: ef:ff:84:83:c5:8d:d3:98:71:e5:0c:60:ad:38:25:fe:98:69: 6e:27:4a:6b:67:d2:50:6b:9b:04:61:1d:58:9d:da:56:df:b6: 85:be:5f:a7:67:03:98:64:7b:63:30:18:2d:97:8e:2d:8a:79: b8:65:19:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wrs3oTyNhBqhFRRMPv60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTIyODhmYWZhYjM2MGZhNzEzYzNmYmVmMzdlYjA1ZDkyZWY0MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjL1JPy+xAPImSGfpwaUnDT5kNSU Ox/l/nbtHiV1jFF4uBODnYJ3LTa0+G22JDw1+bAwvYJV7g+yF0AHNR81Q2qQD5oX vL9/gzsCOOzcNF6jK0IniJXTW51pOldmBxgl+fRtqllBpsCZ+knE0rGftEBM7+Zr dCQdpdxchWHxk/PYse2OqO7MLNJ4+VF6/m7fxfz9+sYC6cM6EVVS1iEs93P/Xckl 9HC1cU9wEIQc/ebHYvQTy6o/1nXRSmXirnXTrFelSLkhe/hg59UDY28EpLbRl/M0 AVradpdQIeHT/01m9iJiC8rS6+8+aoZAR9WIyBmLZdVvjSdm2yZw7ir9jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUiiPr6s2D6cTw/vvN+sF2S70IzMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSlNLSS12cXpZUHB4UEQtLTgzNndYWkx2UWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2UMA0G CSqGSIb3DQEBCwUAA4IBAQCbq3u+8Dw3uDo42+e5ant1Q3AjoQml+GZ9AYKD7/iz FkhO1EG+tzyhqP+eeuJB9SSQjGunJq3VeOAgsLSjWvmefI7o1gATmjlpAARlpP0E qraSxs4An+KLMahnU5Tr/OXujQi3LXZK4Vu7Sk9rEo1RJpPw5cKEEkXc8pmQBsWb YiP/OZzmDNLKNg6X46k6tO8saGg1bAme2cXcdMnVMQd2bpkOYQsbRnkCwfwM/L/v UiOFfO9OfwACuq3N11fx9m2deuXrWK/v/4SDxY3TmHHlDGCtOCX+mGluJ0prZ9JQ a5sEYR1YndpW37aFvl+nZwOYZHtjMBgtl44tinm4ZRnj -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:26 2026 by rpki-client