This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/IJzDJMKQrDSFOma5CwKl8uxXTqo.roa File: IJzDJMKQrDSFOma5CwKl8uxXTqo.roa (raw, json) Hash identifier: V2aFB6UZe3j/NdvVLAJuxg0UUE+g4rg9V7BQiyDC62Q= Subject key identifier: 20:9C:C3:24:C2:90:AC:34:85:3A:66:B9:0B:02:A5:F2:EC:57:4E:AA Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B76EB0E2E925D476D2047416E85976DB5 Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/IJzDJMKQrDSFOma5CwKl8uxXTqo.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 37.153.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:2e:92:5d:47:6d:20:47:41:6e:85:97:6d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=209cc324c290ac34853a66b90b02a5f2ec574eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:e8:7f:c8:99:b3:69:06:16:97:73:d1:f5: 80:2a:32:8c:5e:42:38:db:f4:b1:1c:3c:1d:7d:7e: f0:99:7a:d8:6d:f3:d2:9a:4d:3b:14:4b:55:de:e7: 6f:05:74:2c:e6:81:e2:01:42:6c:bb:23:fe:92:a8: aa:d3:9c:fd:05:b2:84:35:9a:70:99:9a:e1:27:4a: 69:87:9a:a3:a5:24:2d:c5:15:20:4a:20:17:61:be: 01:39:84:e4:8b:3e:90:23:4f:07:ee:96:85:bc:bb: 22:c5:fc:55:66:b7:ac:9e:78:ef:8a:eb:a7:ea:b7: 29:f3:54:22:a8:2e:76:37:6a:31:a5:6e:17:51:f6: 68:be:de:b1:95:41:b0:40:09:ed:c5:4c:97:10:9c: 2e:fc:0c:1a:40:95:79:ac:9b:4c:a8:32:63:ba:f6: c6:78:1d:3d:21:4c:53:27:59:7a:ec:db:e6:f4:4a: 9e:73:91:4d:70:47:df:f5:28:d1:0b:70:00:24:50: 3f:b4:f4:16:0a:95:45:8b:ff:7d:fc:e7:2d:71:f4: e6:4f:ff:66:54:7e:fc:65:27:42:70:60:04:5e:2a: fc:0c:dd:a1:a9:a7:46:4f:80:71:0f:04:ad:8a:5c: b1:c9:df:f3:26:a6:2e:01:95:a9:b6:aa:13:67:db: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:C3:24:C2:90:AC:34:85:3A:66:B9:0B:02:A5:F2:EC:57:4E:AA X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/IJzDJMKQrDSFOma5CwKl8uxXTqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.153.0/24 Signature Algorithm: sha256WithRSAEncryption 47:86:31:d9:04:55:fe:8b:4e:3f:e2:a6:44:38:03:91:4b:60: 7d:b9:e1:c3:37:c6:c2:84:13:1c:aa:21:01:9a:01:bd:7d:6d: 37:c4:ec:cb:0e:14:cd:db:ec:d2:9f:33:b7:1a:18:68:32:77: 46:9c:41:01:92:b7:63:9d:1b:38:d1:00:79:54:d4:27:eb:91: 88:60:0d:8a:bc:01:a5:4b:d9:1f:ed:f2:25:3e:1d:c8:57:5b: ee:9b:7c:91:af:f6:42:15:ad:d8:f8:6b:3c:3e:e1:7c:42:72: 35:f4:9f:e9:42:d3:bd:1f:ec:bf:cb:87:82:8f:bc:34:4e:c8: a5:09:00:bd:ae:20:7a:3b:a1:43:a3:aa:6f:10:6e:f9:81:d9: 4b:8d:04:34:96:4f:44:92:5b:a6:22:28:dc:02:f4:35:d2:56: 61:a7:a5:1f:12:4a:3e:e1:68:2b:4a:1a:1e:f6:34:f2:ce:18: 99:59:fd:3a:40:46:df:d7:0b:5e:27:7b:a4:07:6d:9a:c8:5e: dc:97:f5:e3:8b:9d:5d:cd:96:02:c7:a6:2e:f5:bd:6c:39:3d: 1c:09:f5:c5:90:e6:14:29:fe:7a:90:a2:1d:2f:e1:32:19:3f: 83:38:b7:ec:0c:0e:96:3a:43:e4:2d:12:a7:81:f2:a3:6a:4b: 3b:76:37:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26w4ukl1HbSBHQW6Fl221MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDljYzMyNGMyOTBhYzM0ODUzYTY2YjkwYjAyYTVmMmVjNTc0ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyynof8iZs2kGFpdz0fWAKjKMXkI4 2/SxHDwdfX7wmXrYbfPSmk07FEtV3udvBXQs5oHiAUJsuyP+kqiq05z9BbKENZpw mZrhJ0pph5qjpSQtxRUgSiAXYb4BOYTkiz6QI08H7paFvLsixfxVZresnnjviuun 6rcp81QiqC52N2oxpW4XUfZovt6xlUGwQAntxUyXEJwu/AwaQJV5rJtMqDJjuvbG eB09IUxTJ1l67Nvm9Eqec5FNcEff9SjRC3AAJFA/tPQWCpVFi/99/OctcfTmT/9m VH78ZSdCcGAEXir8DN2hqadGT4BxDwStilyxyd/zJqYuAZWptqoTZ9vNpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCcwyTCkKw0hTpmuQsCpfLsV06qMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvSUp6REpNS1FyRFNGT21hNUN3S2w4dXhYVHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmZMA0G CSqGSIb3DQEBCwUAA4IBAQBHhjHZBFX+i04/4qZEOAORS2B9ueHDN8bChBMcqiEB mgG9fW03xOzLDhTN2+zSnzO3GhhoMndGnEEBkrdjnRs40QB5VNQn65GIYA2KvAGl S9kf7fIlPh3IV1vum3yRr/ZCFa3Y+Gs8PuF8QnI19J/pQtO9H+y/y4eCj7w0Tsil CQC9riB6O6FDo6pvEG75gdlLjQQ0lk9EklumIijcAvQ10lZhp6UfEko+4WgrShoe 9jTyzhiZWf06QEbf1wteJ3ukB22ayF7cl/Xji51dzZYCx6Yu9b1sOT0cCfXFkOYU Kf56kKIdL+EyGT+DOLfsDA6WOkPkLRKngfKjaks7djew -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:15 2026 by rpki-client