This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/jHd0BQzN011_cMoKuI7iRsLMJu8.roa File: jHd0BQzN011_cMoKuI7iRsLMJu8.roa (raw, json) Hash identifier: JjmkBCaZsliO1zFW0zpJ5sroTsscOQWZvCVDg8ArSY8= Subject key identifier: 8C:77:74:05:0C:CD:D3:5D:7F:70:CA:0A:B8:8E:E2:46:C2:CC:26:EF Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db Certificate serial: 019AE41A20C68BEE94FFCC6272BC33397D5A Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/jHd0BQzN011_cMoKuI7iRsLMJu8.roa Signing time: Wed 03 Dec 2025 12:05:08 +0000 ROA not before: Wed 03 Dec 2025 12:05:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25577 IP address blocks: 77.73.9.0/24 maxlen: 24 77.73.12.0/24 maxlen: 24 82.197.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:1a:20:c6:8b:ee:94:ff:cc:62:72:bc:33:39:7d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db Validity Not Before: Dec 3 12:05:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c7774050ccdd35d7f70ca0ab88ee246c2cc26ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:ef:15:b6:64:27:35:91:8c:d6:a5:87:0b: c1:01:2c:01:f9:cd:f0:00:b6:74:55:71:fb:54:ca: 40:fc:f7:98:98:ec:ff:e1:d4:aa:7b:72:aa:8c:c4: 6d:d6:c7:3f:8c:75:ed:82:e3:d0:5f:50:a7:f6:1d: 14:36:70:07:1b:7d:7c:e0:6d:d2:c7:6c:88:e6:37: eb:62:29:49:9e:72:0d:57:2b:3c:87:3a:b4:41:96: 35:c3:38:d1:a2:97:c5:9b:3b:c7:b7:6e:ae:b0:a8: a7:ef:92:7b:cd:86:03:09:0c:58:ee:7a:56:ec:65: a5:ba:02:d3:5a:c1:a4:49:3e:1a:85:1c:d6:a1:17: 82:5c:42:a4:1d:bd:35:c0:8d:84:1c:2a:bb:2c:c1: 87:c1:50:e4:c7:2b:07:50:5b:68:50:fb:b4:de:1a: 8d:55:31:d6:b2:92:25:9b:97:c3:a2:18:09:24:71: 8e:27:7e:b5:a1:4e:42:1e:76:19:47:e2:07:dd:4e: 10:ee:3a:1e:79:3c:00:2a:86:e0:d0:9e:db:d7:36: cc:d6:f1:26:a3:ea:ad:51:c7:d0:f7:a7:54:05:bc: c5:ff:c1:69:da:d8:b1:81:c7:2a:1c:9c:d0:5c:03: 83:a1:47:ad:54:01:df:29:40:b0:40:36:16:49:3d: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:74:05:0C:CD:D3:5D:7F:70:CA:0A:B8:8E:E2:46:C2:CC:26:EF X509v3 Authority Key Identifier: keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/jHd0BQzN011_cMoKuI7iRsLMJu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.9.0/24 77.73.12.0/24 82.197.74.0/24 Signature Algorithm: sha256WithRSAEncryption 17:29:bc:31:4c:2b:3f:93:ff:d3:1a:11:55:8d:af:d6:f5:1b: 4f:b8:37:06:34:20:12:63:12:34:98:d4:47:90:f9:94:ef:a3: b1:f9:6e:44:86:91:56:49:db:12:f2:18:4d:27:05:f6:3f:c5: 66:f6:d9:09:d2:2c:fb:43:ea:3b:bd:ad:91:cf:da:a1:69:c9: 50:0d:29:b0:37:a4:6d:97:11:ce:d1:f0:11:73:bd:5c:a8:da: 20:e0:e1:eb:a8:45:2e:23:cc:e1:d1:6e:16:ff:4d:b7:ab:1b: 79:2e:4a:c4:d8:b6:73:b5:1b:51:d9:ff:6d:99:b9:55:e8:24: 74:ba:6d:53:ed:13:3c:09:0a:2c:54:39:60:3f:aa:d6:36:ba: e5:db:bc:ce:73:fe:8b:e8:48:36:25:12:5d:51:e9:ad:f5:c8: 89:8e:8f:f6:b5:78:70:3b:4e:8e:a4:68:74:b8:d4:3e:91:f0: fd:ce:42:23:3e:f5:77:56:e0:5c:45:b1:18:b9:2c:bd:a4:52: 64:1b:cb:67:16:33:8b:b5:db:e9:c2:3a:b8:a1:4f:89:62:11: 46:0a:08:67:89:c4:c1:e4:8a:b2:8a:3d:8c:17:85:69:25:9d: 0e:25:f8:19:0e:b9:eb:f1:1a:75:fc:66:7c:97:07:01:75:e3: 9b:22:db:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrkGiDGi+6U/8xicrwzOX1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx OTk1ZGIwHhcNMjUxMjAzMTIwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzc3NzQwNTBjY2RkMzVkN2Y3MGNhMGFiODhlZTI0NmMyY2MyNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiojvFbZkJzWRjNalhwvBASwB+c3w ALZ0VXH7VMpA/PeYmOz/4dSqe3KqjMRt1sc/jHXtguPQX1Cn9h0UNnAHG3184G3S x2yI5jfrYilJnnINVys8hzq0QZY1wzjRopfFmzvHt26usKin75J7zYYDCQxY7npW 7GWlugLTWsGkST4ahRzWoReCXEKkHb01wI2EHCq7LMGHwVDkxysHUFtoUPu03hqN VTHWspIlm5fDohgJJHGOJ361oU5CHnYZR+IH3U4Q7joeeTwAKobg0J7b1zbM1vEm o+qtUcfQ96dUBbzF/8Fp2tixgccqHJzQXAODoUetVAHfKUCwQDYWST147wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIx3dAUMzdNdf3DKCriO4kbCzCbvMB8GA1UdIwQY MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt NDgwYzMyZjQwMGUxLzEvakhkMEJRek4wMTFfY01vS3VJN2lSc0xNSnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATUkJAwQA TUkMAwQAUsVKMA0GCSqGSIb3DQEBCwUAA4IBAQAXKbwxTCs/k//TGhFVja/W9RtP uDcGNCASYxI0mNRHkPmU76Ox+W5EhpFWSdsS8hhNJwX2P8Vm9tkJ0iz7Q+o7va2R z9qhaclQDSmwN6RtlxHO0fARc71cqNog4OHrqEUuI8zh0W4W/023qxt5LkrE2LZz tRtR2f9tmblV6CR0um1T7RM8CQosVDlgP6rWNrrl27zOc/6L6Eg2JRJdUemt9ciJ jo/2tXhwO06OpGh0uNQ+kfD9zkIjPvV3VuBcRbEYuSy9pFJkG8tnFjOLtdvpwjq4 oU+JYhFGCghnicTB5Iqyij2MF4VpJZ0OJfgZDrnr8Rp1/GZ8lwcBdeObIttA -----END CERTIFICATE-----Generated at Sat Dec 6 17:48:00 2025 by rpki-client