This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JrDTVIncDSR3-NJysbELxGXyWqA.roa File: JrDTVIncDSR3-NJysbELxGXyWqA.roa (raw, json) Hash identifier: dASfO+9KayYVpMiWmi+rsW9RfJx8vDVDiPs2D+DigBU= Subject key identifier: 26:B0:D3:54:89:DC:0D:24:77:F8:D2:72:B1:B1:0B:C4:65:F2:5A:A0 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BEBD0878E4AF19E6F039B8A25EECD5D7D Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JrDTVIncDSR3-NJysbELxGXyWqA.roa Signing time: Fri 23 Jan 2026 17:04:30 +0000 ROA not before: Fri 23 Jan 2026 17:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 222.167.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:d0:87:8e:4a:f1:9e:6f:03:9b:8a:25:ee:cd:5d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 23 17:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26b0d35489dc0d2477f8d272b1b10bc465f25aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:53:c0:72:ff:93:0c:f6:4c:ba:f3:e8:c2: 62:2f:63:4b:92:2b:94:5a:cf:26:07:ab:59:43:6b: c4:85:4b:eb:bc:46:16:6e:f4:29:7b:f0:24:ee:ff: 0d:7c:59:e8:ae:10:90:72:45:35:fb:1d:a7:8f:51: 39:03:53:46:dc:40:25:c2:cf:f7:42:67:ee:2a:c6: 92:77:5b:50:5b:b4:9f:50:7f:e8:a3:9b:a5:c4:26: 34:3a:70:2d:bd:18:98:7f:c5:ce:79:1f:4b:47:fd: 2d:a6:50:fc:ba:61:c6:70:86:87:68:e1:fb:6c:cc: c8:5e:45:87:4e:fb:59:77:66:a5:f9:cd:af:8b:51: 8b:d5:fc:95:dc:fe:93:03:48:6e:b8:72:c5:0c:51: 43:d2:73:2e:12:4e:97:51:a4:db:d4:41:a1:b2:82: 80:08:af:ae:e6:23:88:c8:41:fb:a7:62:28:84:c9: 7f:6f:5e:05:20:68:fa:a3:13:8a:f9:c8:be:e8:04: ec:cd:f5:8e:2a:59:17:3e:8c:7f:34:f1:41:44:67: f0:cd:ec:05:a7:c2:1d:fd:22:b6:55:13:99:06:4b: 75:4f:84:55:40:a4:d9:3b:f6:0b:dc:92:81:6f:2f: 22:5f:8d:92:2c:fe:a8:b1:63:25:0e:84:9a:01:91: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B0:D3:54:89:DC:0D:24:77:F8:D2:72:B1:B1:0B:C4:65:F2:5A:A0 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JrDTVIncDSR3-NJysbELxGXyWqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.239.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1d:ca:b3:0a:0d:8a:ef:77:2b:32:e0:ba:33:a5:ad:b7:0a: 03:94:b9:f1:67:b6:85:2e:6d:52:ed:36:1b:9c:1b:cd:a6:44: f9:81:bf:f5:fc:ae:68:82:b6:82:9f:28:e8:0b:f7:2e:e7:24: 4c:dd:22:62:7d:16:e2:4c:f6:7f:bf:18:07:bd:51:17:e9:c3: d5:14:c2:73:2d:58:df:eb:8a:98:31:28:3c:34:83:13:5a:87: ea:f6:7b:f6:81:c2:71:1e:33:10:b0:7f:60:3c:a8:03:32:c2: c3:85:c9:80:53:83:4c:b8:74:7a:89:b6:47:21:63:0e:4c:23: 2c:63:df:85:e6:7d:f9:56:28:90:b0:71:3f:42:77:f2:ca:03: c7:e5:aa:c5:49:59:2d:d8:28:f2:31:87:ec:6e:df:2a:ad:f7: a9:02:78:e5:af:13:9d:ae:9e:c8:00:47:53:9e:48:c8:e8:c2: 65:66:2d:88:13:4e:6c:df:c0:9f:2f:54:b8:29:10:b3:e0:af: 8e:cf:03:c6:0e:1c:2c:80:1b:d1:71:61:15:37:9c:a4:5a:c1: 87:4a:75:1f:86:56:9b:4f:97:f5:ce:68:8a:b8:cd:7c:0f:76: 2e:7b:f9:85:41:24:0c:1f:94:ae:e4:73:29:20:29:6e:fb:7e: 6b:4b:37:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvr0IeOSvGebwObiiXuzV19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTIzMTcwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmIwZDM1NDg5ZGMwZDI0NzdmOGQyNzJiMWIxMGJjNDY1ZjI1YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhpTwHL/kwz2TLrz6MJiL2NLkiuU Ws8mB6tZQ2vEhUvrvEYWbvQpe/Ak7v8NfFnorhCQckU1+x2nj1E5A1NG3EAlws/3 QmfuKsaSd1tQW7SfUH/oo5ulxCY0OnAtvRiYf8XOeR9LR/0tplD8umHGcIaHaOH7 bMzIXkWHTvtZd2al+c2vi1GL1fyV3P6TA0huuHLFDFFD0nMuEk6XUaTb1EGhsoKA CK+u5iOIyEH7p2IohMl/b14FIGj6oxOK+ci+6ATszfWOKlkXPox/NPFBRGfwzewF p8Id/SK2VROZBkt1T4RVQKTZO/YL3JKBby8iX42SLP6osWMlDoSaAZEEtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaw01SJ3A0kd/jScrGxC8Rl8lqgMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvSnJEVFZJbmNEU1IzLU5KeXNiRUx4R1h5V3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfvMA0G CSqGSIb3DQEBCwUAA4IBAQA0HcqzCg2K73crMuC6M6WttwoDlLnxZ7aFLm1S7TYb nBvNpkT5gb/1/K5ograCnyjoC/cu5yRM3SJifRbiTPZ/vxgHvVEX6cPVFMJzLVjf 64qYMSg8NIMTWofq9nv2gcJxHjMQsH9gPKgDMsLDhcmAU4NMuHR6ibZHIWMOTCMs Y9+F5n35ViiQsHE/QnfyygPH5arFSVkt2CjyMYfsbt8qrfepAnjlrxOdrp7IAEdT nkjI6MJlZi2IE05s38CfL1S4KRCz4K+OzwPGDhwsgBvRcWEVN5ykWsGHSnUfhlab T5f1zmiKuM18D3Yue/mFQSQMH5Su5HMpIClu+35rSzfT -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:18 2026 by rpki-client