This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jpqw9kyQWNXBww86kbGwbPfXFgI.roa File: jpqw9kyQWNXBww86kbGwbPfXFgI.roa (raw, json) Hash identifier: IWd2Np2lM6IR2Rrx253rWdK0A18ykFo1zHImnqtxXzE= Subject key identifier: 8E:9A:B0:F6:4C:90:58:D5:C1:C3:0F:3A:91:B1:B0:6C:F7:D7:16:02 Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8C2640D83793DE4333E1BF00DC7C Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jpqw9kyQWNXBww86kbGwbPfXFgI.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134450 IP address blocks: 45.114.8.0/22 maxlen: 32 103.240.180.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:26:40:d8:37:93:de:43:33:e1:bf:00:dc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9ab0f64c9058d5c1c30f3a91b1b06cf7d71602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:28:2a:88:2a:95:98:86:b5:0d:fe:01:69: 4c:e2:62:a3:f5:b7:04:e2:9e:43:19:cc:95:98:eb: 23:06:e9:9c:2e:1b:36:bb:d7:0b:39:7e:3d:99:6d: bd:64:2e:80:92:53:65:28:bd:63:02:b5:02:87:ff: 5d:b2:21:e8:33:3a:9f:3a:bc:7c:fa:b2:70:4e:2a: af:bd:35:d1:38:3e:cb:47:25:f0:df:f8:56:5a:98: 46:2a:55:f2:a2:8b:bf:66:6f:43:ae:b6:9f:99:81: de:7b:73:ba:29:dd:2f:3d:51:49:5e:2c:30:e0:12: 4d:2c:ed:c8:37:bf:aa:cd:89:03:67:6f:54:3e:d8: bb:2a:23:c8:a5:e7:dc:0b:fb:ec:fa:7a:98:64:16: 60:31:52:5a:17:51:61:15:d3:a5:cb:7b:22:ce:d9: 6e:08:e1:fd:00:29:d9:9f:c1:55:87:58:d7:6a:d7: da:6e:82:14:b3:6c:fe:cc:fe:b2:5b:f4:fb:31:8f: ce:26:ae:85:3a:08:3c:b1:bc:67:bb:07:72:ef:2c: ee:7b:f9:2a:14:6a:93:bd:67:12:a6:74:1b:d0:88: 1b:cc:47:2c:f9:28:24:39:ec:1e:86:a9:fe:9a:e6: 5e:78:44:c5:2a:e4:6d:29:c6:22:13:1e:7b:76:4d: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:B0:F6:4C:90:58:D5:C1:C3:0F:3A:91:B1:B0:6C:F7:D7:16:02 X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jpqw9kyQWNXBww86kbGwbPfXFgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.114.8.0/22 103.240.180.0/22 Signature Algorithm: sha256WithRSAEncryption 84:82:c8:de:8c:74:ec:be:dd:c3:c8:a4:63:a9:da:ef:8f:1e: 07:2c:c2:af:53:c4:c2:96:a1:c2:74:38:79:16:dd:a7:c2:51: 79:0d:2b:18:ed:59:72:91:d2:df:8c:70:b2:12:9d:ac:70:68: b3:a6:33:51:1c:bc:5d:dc:f8:f1:e5:17:0d:2d:40:0b:eb:b7: 4d:d0:46:4a:b2:14:f9:37:5f:1d:d8:02:43:6f:d4:2d:41:29: d7:c6:95:f2:d5:fa:ff:7b:b9:d2:04:41:3c:89:4c:68:75:2b: 5e:cd:10:a1:25:6d:3b:73:12:f5:f6:79:75:59:82:06:b6:8b: ff:d3:84:ec:db:a6:12:05:18:87:1f:db:00:30:a9:75:83:f6: 16:12:10:38:8b:f3:db:b9:80:36:2d:d9:52:e0:50:c9:62:31: 74:9c:75:b9:bc:0e:ac:b6:1d:af:32:4a:bc:d3:51:18:06:ac: c7:54:86:5a:fc:2e:a0:63:a6:0c:0b:b4:25:2f:11:f4:9d:48: 8b:d7:96:c3:5c:4e:40:3b:23:e7:fc:e8:f1:66:da:68:b1:32: 0d:8e:18:a4:d3:04:44:da:76:17:4a:f3:fd:cd:92:89:6f:3c: 79:e3:ec:64:79:8d:f1:40:b4:fc:71:e0:4d:17:9d:2c:4a:51: ea:85:c3:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt264wmQNg3k95DM+G/ANx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTlhYjBmNjRjOTA1OGQ1YzFjMzBmM2E5MWIxYjA2Y2Y3ZDcxNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznYoKogqlZiGtQ3+AWlM4mKj9bcE 4p5DGcyVmOsjBumcLhs2u9cLOX49mW29ZC6AklNlKL1jArUCh/9dsiHoMzqfOrx8 +rJwTiqvvTXROD7LRyXw3/hWWphGKlXyoou/Zm9DrrafmYHee3O6Kd0vPVFJXiww 4BJNLO3IN7+qzYkDZ29UPti7KiPIpefcC/vs+nqYZBZgMVJaF1FhFdOly3siztlu COH9ACnZn8FVh1jXatfaboIUs2z+zP6yW/T7MY/OJq6FOgg8sbxnuwdy7yzue/kq FGqTvWcSpnQb0IgbzEcs+SgkOewehqn+muZeeETFKuRtKcYiEx57dk2a3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI6asPZMkFjVwcMPOpGxsGz31xYCMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvanBxdzlreVFXTlhCd3c4NmtiR3diUGZYRmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXIIAwQC Z/C0MA0GCSqGSIb3DQEBCwUAA4IBAQCEgsjejHTsvt3DyKRjqdrvjx4HLMKvU8TC lqHCdDh5Ft2nwlF5DSsY7VlykdLfjHCyEp2scGizpjNRHLxd3Pjx5RcNLUAL67dN 0EZKshT5N18d2AJDb9QtQSnXxpXy1fr/e7nSBEE8iUxodStezRChJW07cxL19nl1 WYIGtov/04Ts26YSBRiHH9sAMKl1g/YWEhA4i/PbuYA2LdlS4FDJYjF0nHW5vA6s th2vMkq801EYBqzHVIZa/C6gY6YMC7QlLxH0nUiL15bDXE5AOyPn/OjxZtposTIN jhik0wRE2nYXSvP9zZKJbzx54+xkeY3xQLT8ceBNF50sSlHqhcOi -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:57 2026 by rpki-client