This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa File: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (raw, json) Hash identifier: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k= Subject key identifier: 8D:B0:16:49:70:E7:4B:34:94:6C:60:C4:5D:3E:7A:0A:3F:C7:ED:F5 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE43DF058BDF22859BEEFFB2F0CA1 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208482 IP address blocks: 45.84.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e4:3d:f0:58:bd:f2:28:59:be:ef:fb:2f:0c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8db0164970e74b34946c60c45d3e7a0a3fc7edf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:b9:6d:0c:39:3e:0f:3e:6a:46:1d:26:60: 23:ac:38:5c:91:93:25:f7:cb:32:b4:6d:a7:fc:a4: 33:5e:30:08:06:24:37:ad:37:98:c6:92:4f:b0:c8: d0:0c:cd:6a:67:bc:ed:30:26:10:60:f2:06:a2:6b: fd:57:1d:0c:0a:5b:04:19:e2:b4:f6:89:f7:ba:f9: 6f:1f:e4:eb:1e:02:67:84:e2:fe:96:9f:b9:f0:cf: 20:59:b8:7a:64:00:5e:df:64:a5:38:b3:a8:a6:ae: 54:6d:cb:db:30:c0:fb:cd:ed:3b:54:c1:66:6b:f5: 1c:e9:53:2e:c8:3e:de:6d:34:5f:e8:8d:97:5b:db: 9f:29:22:1c:92:70:ca:e0:51:20:b0:bb:e7:93:5a: 74:70:18:84:f1:61:d2:72:59:dd:a1:84:f9:4c:dc: dc:50:94:dd:9b:54:88:37:e4:bc:2b:82:5f:91:10: 56:f7:ba:52:ef:b6:5f:09:b9:7f:d6:98:40:96:6d: 54:38:51:a7:4e:63:5c:7a:70:0f:19:90:bd:41:97: 03:60:c7:ed:41:55:f5:06:c1:d3:ae:5b:2d:86:3e: f4:ed:a5:6e:22:5d:e0:f7:8c:94:95:90:d1:23:b5: 6b:3f:0b:e9:47:d1:30:65:81:de:14:47:cc:da:7d: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B0:16:49:70:E7:4B:34:94:6C:60:C4:5D:3E:7A:0A:3F:C7:ED:F5 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.98.0/23 Signature Algorithm: sha256WithRSAEncryption 66:3a:4c:fd:a1:3a:59:6d:f6:ae:b1:7a:48:3c:b1:fe:ca:64: b6:a6:a4:39:b4:88:c1:66:fc:fa:e0:63:34:9d:a4:b1:d2:96: 2a:95:29:f3:3f:02:93:60:0a:f7:d4:17:b7:c6:4b:51:4a:9b: e7:44:e2:3f:e9:03:13:0f:2d:ba:d1:70:0c:3d:94:cc:49:15: 2c:dd:30:d5:2f:1b:2f:96:72:80:fa:d2:cf:e5:20:3a:7d:c6: 41:a8:aa:0b:bb:ee:db:63:66:c4:41:fd:65:be:dd:06:55:ea: 5f:22:f6:03:e1:47:de:1a:40:57:85:f8:d0:12:90:de:2a:62: ec:d6:1e:9a:e7:61:19:d2:ea:f7:28:f3:4e:73:ec:78:be:55: c1:74:31:14:86:5d:5e:85:dc:86:c8:98:81:76:ec:2b:55:2a: 2e:62:dd:d8:5a:6e:6c:70:8c:47:04:a4:c7:af:c4:f9:8b:a9: 7c:82:2e:03:31:93:0b:27:e2:7a:3a:a6:9d:8d:95:b2:65:92: b7:3f:9e:10:06:63:35:3d:94:82:31:ba:ae:f8:2b:61:75:50: 61:3c:b9:01:f4:5f:bd:62:7c:24:4d:4e:7c:de:8a:e1:66:26: ad:12:1b:e8:e4:f0:a2:94:d4:e0:24:82:9c:be:bb:a9:a3:e5: c4:23:7c:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuQ98Fi98ihZvu/7LwyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGIwMTY0OTcwZTc0YjM0OTQ2YzYwYzQ1ZDNlN2EwYTNmYzdlZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+5bQw5Pg8+akYdJmAjrDhckZMl 98sytG2n/KQzXjAIBiQ3rTeYxpJPsMjQDM1qZ7ztMCYQYPIGomv9Vx0MClsEGeK0 9on3uvlvH+TrHgJnhOL+lp+58M8gWbh6ZABe32SlOLOopq5UbcvbMMD7ze07VMFm a/Uc6VMuyD7ebTRf6I2XW9ufKSIcknDK4FEgsLvnk1p0cBiE8WHSclndoYT5TNzc UJTdm1SIN+S8K4JfkRBW97pS77ZfCbl/1phAlm1UOFGnTmNcenAPGZC9QZcDYMft QVX1BsHTrlsthj707aVuIl3g94yUlZDRI7VrPwvpR9EwZYHeFEfM2n3hWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2wFklw50s0lGxgxF0+ego/x+31MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvamJBV1NYRG5TelNVYkdERVhUNTZDal9IN2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVRiMA0G CSqGSIb3DQEBCwUAA4IBAQBmOkz9oTpZbfausXpIPLH+ymS2pqQ5tIjBZvz64GM0 naSx0pYqlSnzPwKTYAr31Be3xktRSpvnROI/6QMTDy260XAMPZTMSRUs3TDVLxsv lnKA+tLP5SA6fcZBqKoLu+7bY2bEQf1lvt0GVepfIvYD4UfeGkBXhfjQEpDeKmLs 1h6a52EZ0ur3KPNOc+x4vlXBdDEUhl1ehdyGyJiBduwrVSouYt3YWm5scIxHBKTH r8T5i6l8gi4DMZMLJ+J6OqadjZWyZZK3P54QBmM1PZSCMbqu+CthdVBhPLkB9F+9 YnwkTU583orhZiatEhvo5PCilNTgJIKcvrupo+XEI3x9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:18 2026 by rpki-client