This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/JnPAv8lx_qgiyt8IZcz38a1HdUk.roa File: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (raw, json) Hash identifier: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ= Subject key identifier: 26:73:C0:BF:C9:71:FE:A8:22:CA:DF:08:65:CC:F7:F1:AD:47:75:49 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC066B8916D18289EB693165CF573 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/JnPAv8lx_qgiyt8IZcz38a1HdUk.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199238 IP address blocks: 94.240.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c0:66:b8:91:6d:18:28:9e:b6:93:16:5c:f5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2673c0bfc971fea822cadf0865ccf7f1ad477549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:81:13:0f:b1:46:81:33:f1:e6:62:85:5d: 36:b2:73:ab:5d:cb:0a:2a:68:41:27:e1:26:0e:02: a7:69:8f:a1:02:5d:ea:1b:19:70:f1:2a:f0:85:de: b1:ac:10:65:fd:a6:ae:11:f9:32:01:d9:12:59:85: 9d:0c:9d:86:cf:60:14:ce:72:86:68:a2:9a:3c:26: 64:b7:f1:47:77:91:f1:f4:f5:99:f5:a6:43:c0:d4: 15:4c:98:fe:93:a8:90:0f:c8:dd:ba:bc:7a:46:67: eb:1a:5f:eb:e1:03:da:f3:89:33:5d:51:d7:c9:94: f1:c5:df:46:8f:93:09:42:bc:dd:05:67:c3:c9:c8: bc:e9:06:be:b4:70:e1:c1:88:74:f6:c9:97:62:37: 2c:86:f3:7d:61:5b:1e:fe:e9:7a:58:45:42:3f:87: 4e:ab:ac:11:49:4a:37:2d:fa:7f:e2:78:a6:97:c6: 9d:d7:47:ff:43:5e:e7:08:51:0b:5b:aa:51:79:67: 64:20:3e:99:7d:a4:c3:9e:35:fd:bf:a6:9f:e2:26: 3e:9a:41:24:4b:0e:31:fc:ed:57:31:6c:6d:2c:37: 48:53:ad:2f:30:da:9d:9a:05:bd:d9:11:11:29:44: d1:ac:cc:5b:aa:bd:9b:8f:ff:af:85:e6:4f:fd:93: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:73:C0:BF:C9:71:FE:A8:22:CA:DF:08:65:CC:F7:F1:AD:47:75:49 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/JnPAv8lx_qgiyt8IZcz38a1HdUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.22.0/24 Signature Algorithm: sha256WithRSAEncryption 27:85:d4:d7:20:c4:50:de:b8:f6:85:11:77:10:de:92:07:79: ba:8d:b3:4c:db:eb:fd:09:2a:3d:b8:98:6c:be:ba:66:17:bf: 1a:a7:1d:39:e5:bb:69:74:9a:e9:80:92:d4:8a:99:3c:f9:93: 74:f9:59:cf:f7:24:0e:c4:02:45:dc:2f:e6:7d:46:e5:80:73: 57:13:7c:5e:96:c5:dd:1e:dc:19:b8:aa:7d:73:e7:6b:88:39: 7c:c4:86:14:aa:6c:95:03:28:00:10:15:8a:88:0c:a4:30:94: 86:fa:fa:82:b1:4c:7b:d4:d4:b4:db:88:fe:3a:95:b0:6b:81: 22:95:66:88:bd:86:f5:65:18:b5:a6:1b:f8:5a:4b:94:41:02: 4d:c5:9a:ff:91:ab:08:e2:a4:02:d8:0f:8a:b4:cb:0e:f0:e9: f7:56:97:2a:09:c2:ec:6e:52:df:72:23:be:cf:95:a0:2c:b5: 54:5a:28:93:67:18:8f:19:44:cd:a5:19:6b:03:20:c3:30:a8: 59:d3:4c:84:ce:33:47:29:ac:c5:f3:7e:6d:da:c0:ba:2a:08: 51:d8:9c:e0:f7:d9:3f:66:8e:d2:e9:9d:71:19:a6:85:a1:6d: 28:15:16:6a:f3:35:bd:0f:a3:29:db:d1:6e:94:38:db:e8:04: 1a:98:c0:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MBmuJFtGCietpMWXPVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjczYzBiZmM5NzFmZWE4MjJjYWRmMDg2NWNjZjdmMWFkNDc3NTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3CBEw+xRoEz8eZihV02snOrXcsK KmhBJ+EmDgKnaY+hAl3qGxlw8Srwhd6xrBBl/aauEfkyAdkSWYWdDJ2Gz2AUznKG aKKaPCZkt/FHd5Hx9PWZ9aZDwNQVTJj+k6iQD8jdurx6RmfrGl/r4QPa84kzXVHX yZTxxd9Gj5MJQrzdBWfDyci86Qa+tHDhwYh09smXYjcshvN9YVse/ul6WEVCP4dO q6wRSUo3Lfp/4niml8ad10f/Q17nCFELW6pReWdkID6ZfaTDnjX9v6af4iY+mkEk Sw4x/O1XMWxtLDdIU60vMNqdmgW92RERKUTRrMxbqr2bj/+vheZP/ZMdmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZzwL/Jcf6oIsrfCGXM9/GtR3VJMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvSm5QQXY4bHhfcWdpeXQ4SVpjejM4YTFIZFVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvAWMA0G CSqGSIb3DQEBCwUAA4IBAQAnhdTXIMRQ3rj2hRF3EN6SB3m6jbNM2+v9CSo9uJhs vrpmF78apx055btpdJrpgJLUipk8+ZN0+VnP9yQOxAJF3C/mfUblgHNXE3xelsXd HtwZuKp9c+driDl8xIYUqmyVAygAEBWKiAykMJSG+vqCsUx71NS024j+OpWwa4Ei lWaIvYb1ZRi1phv4WkuUQQJNxZr/kasI4qQC2A+KtMsO8On3VpcqCcLsblLfciO+ z5WgLLVUWiiTZxiPGUTNpRlrAyDDMKhZ00yEzjNHKazF835t2sC6KghR2Jzg99k/ Zo7S6Z1xGaaFoW0oFRZq8zW9D6Mp29FulDjb6AQamMBw -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:50 2026 by rpki-client