This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/JZoFu5TMtgO6GAifQLMq6mNbzQk.roa File: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (raw, json) Hash identifier: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE= Subject key identifier: 25:9A:05:BB:94:CC:B6:03:BA:18:08:9F:40:B3:2A:EA:63:5B:CD:09 Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Certificate serial: 019B77C68557126E6FAFCBE969A7D5680630 Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/JZoFu5TMtgO6GAifQLMq6mNbzQk.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16322 IP address blocks: 46.167.128.0/19 maxlen: 19 77.77.64.0/18 maxlen: 18 77.77.64.0/19 maxlen: 19 77.77.77.0/24 maxlen: 24 77.77.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:57:12:6e:6f:af:cb:e9:69:a7:d5:68:06:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=259a05bb94ccb603ba18089f40b32aea635bcd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:db:0b:5e:e9:cf:92:09:0b:f8:fe:73:0b: 9d:f8:ba:f7:20:7f:7e:5e:3c:78:2c:4b:9b:36:03: c7:ce:48:e1:a9:fb:a9:09:31:fc:65:1b:47:a0:5b: 70:62:b0:e4:0d:5a:12:0e:4e:fb:c5:e6:9a:59:93: 35:57:61:0a:aa:9c:35:f2:47:46:fb:c7:fa:03:ec: ce:4b:75:56:02:1c:99:17:0b:ba:6d:25:06:ca:8b: 81:9b:2d:00:76:10:a6:71:4f:8a:77:2a:b6:31:8c: ea:c5:4d:2d:f0:71:3d:29:7a:60:95:a0:50:59:db: 8f:41:b0:20:45:92:3f:61:53:37:31:9f:f5:77:e6: 3a:18:a4:ce:f4:a5:2e:93:3c:29:58:e1:ce:76:2a: 39:30:5c:5c:f6:27:fa:18:c9:cc:95:99:50:de:47: 33:f4:da:ca:79:55:59:33:ac:34:b5:3e:99:d7:90: 32:de:e3:34:9f:11:39:e3:26:73:4d:76:5b:25:7d: a2:fe:2a:21:5d:4b:9f:b4:ad:1f:e8:0c:b1:d1:41: b4:38:d4:63:9c:03:4e:01:52:56:3f:e1:67:60:51: b6:d7:f8:66:3f:c0:6f:5a:46:7f:b7:5b:ca:87:55: e5:4b:6f:62:f9:89:3b:af:a6:b8:8c:45:25:95:dc: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9A:05:BB:94:CC:B6:03:BA:18:08:9F:40:B3:2A:EA:63:5B:CD:09 X509v3 Authority Key Identifier: keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/JZoFu5TMtgO6GAifQLMq6mNbzQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.128.0/19 77.77.64.0/18 Signature Algorithm: sha256WithRSAEncryption 82:68:db:e8:88:75:fd:2a:1a:a7:aa:cf:32:14:91:43:89:06: 41:4b:65:64:bf:ad:cc:c5:ba:42:00:28:69:b7:77:6d:b5:70: 4f:15:56:dc:c4:88:6b:c5:d1:f7:c7:da:0b:01:aa:8e:1a:81: e1:17:f2:aa:1f:d4:c1:43:03:49:0a:b7:60:8d:14:60:58:f3: 07:c1:9c:63:44:f1:5d:89:12:3c:5a:e1:c9:df:09:6c:ad:f5: 8c:0f:d9:5b:03:df:12:64:28:b4:91:ec:e2:e3:08:5b:6b:88: 9f:e4:f1:1b:ad:aa:1c:22:0f:1a:cb:3b:88:de:e8:b1:64:d6: 2b:80:41:61:c7:cf:10:df:b5:df:fb:57:78:5e:c2:9b:97:37: e3:02:e9:57:1d:19:d4:ff:e1:f3:7c:17:6d:97:cf:f9:0a:41: b3:3b:76:5f:65:f8:a1:42:ee:24:16:55:83:13:71:e2:d7:93: 4a:1e:9e:d0:78:a5:48:32:77:59:05:65:80:23:6c:f8:cd:9b: 9f:84:e0:86:56:84:4c:44:08:a4:25:fd:80:4b:c1:3e:e0:80: de:4b:46:dc:32:af:9e:0b:2e:c9:16:36:07:8d:9c:4b:e9:96: 81:dc:aa:73:1d:de:a1:48:2c:ad:61:b4:4f:cd:2e:a3:6a:6d: 32:d6:d6:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xoVXEm5vr8vpaafVaAYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm MmNjMDcwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTlhMDViYjk0Y2NiNjAzYmExODA4OWY0MGIzMmFlYTYzNWJjZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCnbC17pz5IJC/j+cwud+Lr3IH9+ Xjx4LEubNgPHzkjhqfupCTH8ZRtHoFtwYrDkDVoSDk77xeaaWZM1V2EKqpw18kdG +8f6A+zOS3VWAhyZFwu6bSUGyouBmy0AdhCmcU+Kdyq2MYzqxU0t8HE9KXpglaBQ WduPQbAgRZI/YVM3MZ/1d+Y6GKTO9KUukzwpWOHOdio5MFxc9if6GMnMlZlQ3kcz 9NrKeVVZM6w0tT6Z15Ay3uM0nxE54yZzTXZbJX2i/iohXUuftK0f6Ayx0UG0ONRj nANOAVJWP+FnYFG21/hmP8BvWkZ/t1vKh1XlS29i+Yk7r6a4jEUlldydhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCWaBbuUzLYDuhgIn0CzKupjW80JMB8GA1UdIwQY MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt NTkyYzBkY2RhZjc5LzEvSlpvRnU1VE10Z082R0FpZlFMTXE2bU5ielFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5 LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLqeAAwQG TU1AMA0GCSqGSIb3DQEBCwUAA4IBAQCCaNvoiHX9Khqnqs8yFJFDiQZBS2Vkv63M xbpCAChpt3dttXBPFVbcxIhrxdH3x9oLAaqOGoHhF/KqH9TBQwNJCrdgjRRgWPMH wZxjRPFdiRI8WuHJ3wlsrfWMD9lbA98SZCi0kezi4whba4if5PEbraocIg8ayzuI 3uixZNYrgEFhx88Q37Xf+1d4XsKblzfjAulXHRnU/+HzfBdtl8/5CkGzO3ZfZfih Qu4kFlWDE3Hi15NKHp7QeKVIMndZBWWAI2z4zZufhOCGVoRMRAikJf2AS8E+4IDe S0bcMq+eCy7JFjYHjZxL6ZaB3KpzHd6hSCytYbRPzS6jam0y1tbH -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:08 2026 by rpki-client