This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jgrnqFUINh9yQSbIH4pj0x-gEk0.roa File: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (raw, json) Hash identifier: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I= Subject key identifier: 8E:0A:E7:A8:55:08:36:1F:72:41:26:C8:1F:8A:63:D3:1F:A0:12:4D Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC38961556D9B57522F20AE577B3A Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jgrnqFUINh9yQSbIH4pj0x-gEk0.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214330 IP address blocks: 89.44.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c3:89:61:55:6d:9b:57:52:2f:20:ae:57:7b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e0ae7a85508361f724126c81f8a63d31fa0124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:cd:0f:86:e3:26:b1:13:23:84:ae:09:f3: a3:3a:b2:38:97:68:6d:39:44:8d:c1:5e:62:50:d8: be:91:46:84:b6:28:fd:61:78:58:10:a6:57:fe:7f: 68:57:cc:7a:61:58:ec:ba:8e:9a:5b:95:65:6f:f4: 85:e7:e1:e1:39:8b:7f:00:d4:88:13:be:2c:c0:0b: f3:1a:84:69:9d:fd:98:e9:49:51:30:ac:c4:cf:60: 93:f2:4f:2a:56:b6:79:e9:e1:64:30:b8:ec:85:14: ae:13:eb:08:65:64:35:c1:0d:ea:15:ba:e0:fb:3b: a4:04:4f:69:51:f7:a4:5a:52:f5:a7:92:a6:f2:ad: 92:55:21:df:0f:c1:97:f4:06:1b:bd:cc:ea:aa:4b: 97:22:39:80:36:61:7f:1a:44:a2:d8:66:e8:d8:c8: 3b:c6:7d:b3:e0:e9:27:44:79:0e:64:4e:99:37:c7: bf:90:06:75:ea:50:d9:f5:4f:84:0d:bd:ce:09:fb: 57:a2:0b:58:87:67:89:9f:5b:42:e3:78:9b:cb:51: be:7f:f4:37:17:78:1c:2b:a6:ad:a4:83:05:5a:a8: 07:99:89:da:25:a0:93:e9:33:7b:44:b3:11:d2:0c: f0:13:fb:75:da:d0:5e:5f:ab:aa:e4:87:bf:cf:f7: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0A:E7:A8:55:08:36:1F:72:41:26:C8:1F:8A:63:D3:1F:A0:12:4D X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jgrnqFUINh9yQSbIH4pj0x-gEk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.246.0/24 Signature Algorithm: sha256WithRSAEncryption 79:52:14:8b:9d:8c:90:26:41:da:b4:98:47:6b:fa:42:87:e0: 68:44:ab:a0:22:79:da:11:84:6e:d0:63:c4:4a:df:e1:2a:14: 9a:ec:a8:35:b9:87:7d:c6:cc:9a:2c:f7:4a:b7:2a:4e:e1:a8: 4d:94:46:98:71:4a:2d:bb:18:4b:00:48:90:5c:31:4b:e2:e7: db:2a:ec:51:d4:75:46:6c:60:9b:bc:66:be:d6:e7:f9:ba:1f: f2:fa:f1:20:b6:9b:bd:b9:8e:33:9b:42:dd:b3:6e:cd:2a:1d: 54:76:e6:94:fa:64:20:d1:5e:2a:21:4f:a5:cc:00:5b:b6:77: 8d:7e:84:64:a8:a4:5a:96:30:fd:7d:c7:05:2b:3d:bf:e4:cf: 87:f3:50:58:74:e2:3e:e9:43:70:a0:4c:48:cf:56:df:54:59: d4:9f:ab:66:96:67:6c:97:6b:f8:1e:0b:85:48:a3:17:d4:39: 01:21:a7:f1:a1:fa:f9:0d:bd:aa:f0:59:34:2b:57:62:f3:51: 92:8f:44:46:26:dd:2c:cc:2c:8e:60:86:5f:72:d6:44:d9:ef: 04:87:2f:31:04:bd:3b:19:41:e9:00:f2:be:a3:9b:45:9a:da: d3:d9:17:91:98:83:1a:c2:5b:60:15:80:a8:80:73:3c:db:f9: 26:19:7d:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568OJYVVtm1dSLyCuV3s6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTBhZTdhODU1MDgzNjFmNzI0MTI2YzgxZjhhNjNkMzFmYTAxMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AjND4bjJrETI4SuCfOjOrI4l2ht OUSNwV5iUNi+kUaEtij9YXhYEKZX/n9oV8x6YVjsuo6aW5Vlb/SF5+HhOYt/ANSI E74swAvzGoRpnf2Y6UlRMKzEz2CT8k8qVrZ56eFkMLjshRSuE+sIZWQ1wQ3qFbrg +zukBE9pUfekWlL1p5Km8q2SVSHfD8GX9AYbvczqqkuXIjmANmF/GkSi2Gbo2Mg7 xn2z4OknRHkOZE6ZN8e/kAZ16lDZ9U+EDb3OCftXogtYh2eJn1tC43iby1G+f/Q3 F3gcK6atpIMFWqgHmYnaJaCT6TN7RLMR0gzwE/t12tBeX6uq5Ie/z/eEBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4K56hVCDYfckEmyB+KY9MfoBJNMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvamdybnFGVUlOaDl5UVNiSUg0cGoweC1nRWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSz2MA0G CSqGSIb3DQEBCwUAA4IBAQB5UhSLnYyQJkHatJhHa/pCh+BoRKugInnaEYRu0GPE St/hKhSa7Kg1uYd9xsyaLPdKtypO4ahNlEaYcUotuxhLAEiQXDFL4ufbKuxR1HVG bGCbvGa+1uf5uh/y+vEgtpu9uY4zm0Lds27NKh1UduaU+mQg0V4qIU+lzABbtneN foRkqKRaljD9fccFKz2/5M+H81BYdOI+6UNwoExIz1bfVFnUn6tmlmdsl2v4HguF SKMX1DkBIafxofr5Db2q8Fk0K1di81GSj0RGJt0szCyOYIZfctZE2e8Ehy8xBL07 GUHpAPK+o5tFmtrT2ReRmIMawltgFYCogHM82/kmGX2o -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:03 2026 by rpki-client