This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JUXWIRimuXmW8-JwbDxk4HmbjO4.roa File: JUXWIRimuXmW8-JwbDxk4HmbjO4.roa (raw, json) Hash identifier: NhbreL0zfOc/m+nfSnaS1uD/KQFt81tLl1Nhl5XBPLM= Subject key identifier: 25:45:D6:21:18:A6:B9:79:96:F3:E2:70:6C:3C:64:E0:79:9B:8C:EE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACA51622195D514D5BE8361158CD6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JUXWIRimuXmW8-JwbDxk4HmbjO4.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212336 IP address blocks: 77.93.157.0/24 maxlen: 24 79.99.78.0/24 maxlen: 24 89.28.239.0/24 maxlen: 24 109.176.19.0/24 maxlen: 24 213.210.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:51:62:21:95:d5:14:d5:be:83:61:15:8c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2545d62118a6b97996f3e2706c3c64e0799b8cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:4e:68:d0:e1:ff:9e:3d:c8:4d:e1:43:3e: 52:b4:05:7b:97:d5:d8:fa:d0:b1:1e:b5:58:9d:35: be:96:b1:3f:4d:fa:31:3f:d5:a6:de:ee:73:70:e6: 6a:d5:fc:60:f4:da:ee:8e:67:f4:fa:98:46:4c:04: 55:bc:91:65:57:5e:41:34:fe:70:aa:52:4f:f5:cb: d6:21:b3:2d:42:b3:35:b1:67:2f:3c:72:92:81:6e: 95:95:7b:a4:e7:4a:b5:eb:97:49:da:01:cf:98:7d: 24:71:09:8f:f9:20:4d:14:b8:a4:70:d8:9d:1d:68: 45:32:b6:ff:d0:d5:29:5e:32:e2:cb:74:fe:e3:66: 6b:96:4f:32:d7:cc:71:f2:85:e0:13:05:a6:18:2e: 42:76:34:3d:28:7d:a4:3e:4e:01:06:fa:4b:e1:b2: 10:cd:5e:1f:ba:46:d4:a6:21:11:8a:4a:1d:32:c7: c2:0e:10:4c:08:57:77:ee:8e:6b:5a:75:a3:36:07: e5:d0:d8:f8:c5:05:93:11:61:92:f2:b6:e5:24:9b: ce:44:3e:61:66:e1:9f:6c:85:0c:21:88:55:25:87: 32:e6:c3:7c:de:1f:a3:43:a5:4f:72:a5:a0:1a:dd: ba:33:7b:db:fa:57:42:2c:0e:c1:b3:08:c5:ff:e9: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:D6:21:18:A6:B9:79:96:F3:E2:70:6C:3C:64:E0:79:9B:8C:EE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JUXWIRimuXmW8-JwbDxk4HmbjO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.157.0/24 79.99.78.0/24 89.28.239.0/24 109.176.19.0/24 213.210.4.0/23 Signature Algorithm: sha256WithRSAEncryption 43:45:14:09:27:3a:70:54:fb:41:56:26:cb:8e:bf:c6:2b:8f: 9f:0a:19:2b:cd:40:e9:82:1d:2f:80:77:2c:2d:eb:5a:e0:27: 6a:46:b6:3a:18:17:78:21:60:28:d3:b2:8f:da:59:af:81:a4: ef:18:87:a4:d8:f8:79:04:0b:73:b9:e9:c8:73:26:f9:7a:c4: 4b:79:17:81:c1:fd:39:0b:a8:96:50:09:e3:3c:a5:b1:66:f9: 92:a9:9d:3e:1e:60:72:ef:f8:30:da:8e:37:db:fa:00:ff:f8: 2a:b3:bc:e9:d0:f4:dc:5f:60:b9:d3:89:56:5a:80:7c:0d:75: f2:d7:da:f2:4f:3f:97:79:2e:56:8a:08:8a:7d:2c:fb:a6:b8: 82:5c:86:cb:2c:a8:42:34:6b:34:e0:5a:00:ac:1b:a0:c6:6d: 24:80:5f:1a:b9:4f:c7:be:d3:10:42:84:77:cb:57:ad:db:b9: e5:a8:85:09:d4:14:46:5a:bb:a8:84:f4:8a:fc:66:ef:5d:c3: 0c:7c:d6:d3:4d:8b:a6:a2:22:7c:9b:09:42:18:6b:a4:44:7f: 72:94:f8:5b:1a:54:f4:a9:6f:60:81:ac:66:cd:ff:77:5e:1b: 86:d9:58:f9:be:26:38:8d:dc:ae:45:be:3f:3f:c9:13:3f:9b: 86:03:ad:06 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WspRYiGV1RTVvoNhFYzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTQ1ZDYyMTE4YTZiOTc5OTZmM2UyNzA2YzNjNjRlMDc5OWI4Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y9OaNDh/549yE3hQz5StAV7l9XY +tCxHrVYnTW+lrE/TfoxP9Wm3u5zcOZq1fxg9Nrujmf0+phGTARVvJFlV15BNP5w qlJP9cvWIbMtQrM1sWcvPHKSgW6VlXuk50q165dJ2gHPmH0kcQmP+SBNFLikcNid HWhFMrb/0NUpXjLiy3T+42Zrlk8y18xx8oXgEwWmGC5CdjQ9KH2kPk4BBvpL4bIQ zV4fukbUpiERikodMsfCDhBMCFd37o5rWnWjNgfl0Nj4xQWTEWGS8rblJJvORD5h ZuGfbIUMIYhVJYcy5sN83h+jQ6VPcqWgGt26M3vb+ldCLA7BswjF/+npSQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCVF1iEYprl5lvPicGw8ZOB5m4zuMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSlVYV0lSaW11WG1XOC1Kd2JEeGs0SG1iak80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATV2dAwQA T2NOAwQAWRzvAwQAbbATAwQB1dIEMA0GCSqGSIb3DQEBCwUAA4IBAQBDRRQJJzpw VPtBVibLjr/GK4+fChkrzUDpgh0vgHcsLeta4CdqRrY6GBd4IWAo07KP2lmvgaTv GIek2Ph5BAtzuenIcyb5esRLeReBwf05C6iWUAnjPKWxZvmSqZ0+HmBy7/gw2o43 2/oA//gqs7zp0PTcX2C504lWWoB8DXXy19ryTz+XeS5WigiKfSz7priCXIbLLKhC NGs04FoArBugxm0kgF8auU/HvtMQQoR3y1et27nlqIUJ1BRGWruohPSK/GbvXcMM fNbTTYumoiJ8mwlCGGukRH9ylPhbGlT0qW9ggaxmzf93XhuG2Vj5viY4jdyuRb4/ P8kTP5uGA60G -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:11 2026 by rpki-client