This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa File: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (raw, json) Hash identifier: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g= Subject key identifier: 25:88:3F:08:03:01:E1:93:7C:0C:69:D1:24:D1:C5:A6:74:5E:B3:93 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCC788F8B81B8D097FD0A3F6CD96B Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202909 IP address blocks: 77.220.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cc:78:8f:8b:81:b8:d0:97:fd:0a:3f:6c:d9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25883f080301e1937c0c69d124d1c5a6745eb393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:1e:83:ed:2c:b9:58:11:d0:73:f1:4d:c4: 0e:38:a9:5b:a1:cc:46:b4:f3:83:3d:de:59:8a:18: 17:1b:2e:b7:f4:f9:3c:df:11:b0:c0:b9:04:81:e2: e6:89:3f:ae:0c:8e:30:ba:be:45:ba:93:c5:b8:bb: 0e:44:65:d8:a2:13:85:f7:6f:05:2d:34:1f:aa:2c: 69:d7:3a:89:21:b1:7c:c2:45:43:b1:21:11:57:93: a8:a5:fe:53:92:47:82:30:34:61:6b:a3:07:eb:69: 8a:8b:2e:4f:6f:fc:1f:ea:56:b9:84:71:e6:45:5a: 3c:36:78:04:3c:12:d9:66:59:81:c9:97:16:85:c7: 96:90:88:57:41:54:24:02:18:c3:49:cf:ed:38:b8: e3:0c:43:dd:9b:f4:0c:af:63:d7:8e:a7:87:2c:63: c7:69:27:97:16:03:4d:8e:6f:f1:b7:be:b9:61:b9: da:16:3e:68:b5:ce:27:36:0d:37:f0:eb:57:7b:04: e2:9b:e4:7f:0b:e6:26:d2:9b:1b:9a:32:20:b3:bb: ec:14:1c:9d:ee:24:4c:4a:8f:e2:37:b1:28:db:a0: c8:21:4a:eb:33:ea:93:e6:db:76:97:5e:6e:bd:75: e7:3d:08:8b:12:0e:7d:de:19:ae:8f:b9:92:3b:49: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:3F:08:03:01:E1:93:7C:0C:69:D1:24:D1:C5:A6:74:5E:B3:93 X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.109.0/24 Signature Algorithm: sha256WithRSAEncryption 74:96:1b:4d:f5:fd:b4:9d:64:a4:15:aa:e2:0a:2a:ea:4c:41: ca:d8:7e:5d:e3:47:eb:f7:08:b3:d1:9a:64:ac:25:cd:34:9f: 0a:9e:82:89:8d:8f:71:e0:4b:b7:10:a7:64:10:42:eb:ca:20: 26:43:19:d6:95:63:53:25:9d:c3:6d:49:55:2f:28:72:1a:bc: 9c:5e:39:fa:97:16:7f:4c:57:2e:53:23:5e:f2:69:66:d3:c3: ab:bd:20:f1:e2:0c:fc:9b:6d:41:73:df:47:01:fa:2a:ec:3f: 22:0e:fc:e4:ab:88:e2:66:51:77:c3:5f:08:46:0b:c1:ba:5c: e8:69:cb:d7:ec:c0:4e:b1:44:97:cc:1d:76:bc:6f:29:79:77: 98:ef:30:e4:14:86:be:7c:37:da:f0:d6:cc:92:bb:89:87:9d: d1:36:66:74:10:5f:a3:9e:46:a9:fd:11:0b:0c:ed:12:d0:8e: b2:c7:1a:00:6d:c6:a2:fd:1a:46:9b:4d:94:30:ba:7f:1a:f9: db:00:9e:65:d4:57:1c:24:d7:85:b3:95:ff:04:a8:28:66:b0: cb:da:ce:1c:2a:0d:c8:81:ee:65:c2:07:08:76:06:57:ab:50: ed:f2:0c:0d:00:4b:c0:6a:7f:3f:b7:1f:f7:0f:d3:8c:06:61: 1c:d8:35:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568x4j4uBuNCX/Qo/bNlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTg4M2YwODAzMDFlMTkzN2MwYzY5ZDEyNGQxYzVhNjc0NWViMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllUeg+0suVgR0HPxTcQOOKlbocxG tPODPd5ZihgXGy639Pk83xGwwLkEgeLmiT+uDI4wur5FupPFuLsORGXYohOF928F LTQfqixp1zqJIbF8wkVDsSERV5Oopf5TkkeCMDRha6MH62mKiy5Pb/wf6la5hHHm RVo8NngEPBLZZlmByZcWhceWkIhXQVQkAhjDSc/tOLjjDEPdm/QMr2PXjqeHLGPH aSeXFgNNjm/xt765YbnaFj5otc4nNg038OtXewTim+R/C+Ym0psbmjIgs7vsFByd 7iRMSo/iN7Eo26DIIUrrM+qT5tt2l15uvXXnPQiLEg593hmuj7mSO0mrbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWIPwgDAeGTfAxp0STRxaZ0XrOTMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvSllnX0NBTUI0Wk44REduUkpOSEZwblJlczVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdxtMA0G CSqGSIb3DQEBCwUAA4IBAQB0lhtN9f20nWSkFariCirqTEHK2H5d40fr9wiz0Zpk rCXNNJ8KnoKJjY9x4Eu3EKdkEELryiAmQxnWlWNTJZ3DbUlVLyhyGrycXjn6lxZ/ TFcuUyNe8mlm08OrvSDx4gz8m21Bc99HAfoq7D8iDvzkq4jiZlF3w18IRgvBulzo acvX7MBOsUSXzB12vG8peXeY7zDkFIa+fDfa8NbMkruJh53RNmZ0EF+jnkap/REL DO0S0I6yxxoAbcai/RpGm02UMLp/GvnbAJ5l1FccJNeFs5X/BKgoZrDL2s4cKg3I ge5lwgcIdgZXq1Dt8gwNAEvAan8/tx/3D9OMBmEc2DVG -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:22 2026 by rpki-client