This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/JJJqBn2vrMXP7kngEan0imFBrIE.roa File: JJJqBn2vrMXP7kngEan0imFBrIE.roa (raw, json) Hash identifier: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4= Subject key identifier: 24:92:6A:06:7D:AF:AC:C5:CF:EE:49:E0:11:A9:F4:8A:61:41:AC:81 Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784 Certificate serial: 019B7B35495A6A2BE7F35D7B47E46E100085 Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/JJJqBn2vrMXP7kngEan0imFBrIE.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56347 IP address blocks: 89.21.72.0/22 maxlen: 22 89.21.72.0/23 maxlen: 23 89.21.74.0/23 maxlen: 23 185.95.64.0/24 maxlen: 24 2a10:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:5a:6a:2b:e7:f3:5d:7b:47:e4:6e:10:00:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24926a067dafacc5cfee49e011a9f48a6141ac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:31:66:43:65:50:18:ce:47:70:09:cc:e6: c2:7e:a4:32:6f:0c:b2:24:ef:b0:1c:29:9c:44:56: a0:ed:a9:3c:7d:bb:52:e8:66:95:9d:5d:5e:29:0f: ee:a2:0d:4e:9e:2c:73:5e:4a:af:c4:2f:ba:0f:6a: c6:ed:21:44:70:d0:48:2a:8c:fe:34:79:ba:13:e1: 59:ec:80:0a:ac:18:3e:a6:db:46:ed:9c:4e:e6:88: 08:69:de:29:93:24:75:bd:a4:e1:8f:b1:c0:f7:14: 2c:66:d5:b0:af:d5:0f:bd:64:6c:6e:71:82:56:3a: ef:80:bb:6e:49:79:45:d9:47:91:fd:d0:30:2a:75: fe:55:79:a8:74:8b:03:70:f2:7e:9c:ed:bc:86:48: 9d:09:93:45:15:8f:8d:58:2b:32:cf:7d:a5:f6:27: 88:4d:15:ce:55:4d:f1:db:65:26:9a:0b:fe:93:59: 96:1a:97:f3:03:dc:ba:84:1b:4d:03:f2:6c:fa:53: 46:b1:f2:3f:bf:c9:a4:72:7b:bb:a8:dc:41:92:d6: 53:1a:f2:a4:da:bd:0f:28:e6:4e:31:f4:67:03:19: be:ee:90:cc:5f:60:a3:03:f7:54:2a:fa:6b:f2:11: 2b:fb:de:f7:7c:db:6d:34:f3:9e:85:81:14:45:28: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:6A:06:7D:AF:AC:C5:CF:EE:49:E0:11:A9:F4:8A:61:41:AC:81 X509v3 Authority Key Identifier: keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/JJJqBn2vrMXP7kngEan0imFBrIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.72.0/22 185.95.64.0/24 IPv6: 2a10:b200::/32 Signature Algorithm: sha256WithRSAEncryption 20:6e:8c:5e:7a:90:cf:ad:01:e1:ca:c8:e0:4e:17:62:31:6f: 2e:38:6a:6c:55:a2:6f:a6:c5:98:b0:e9:c1:a6:a1:8c:b2:3d: 1f:5a:87:4c:90:6f:43:3c:bc:d6:b1:85:74:3a:00:95:b1:ab: ff:60:46:69:4d:84:75:85:ac:11:4c:39:b7:de:99:2a:8d:78: fc:24:2b:55:17:bd:0d:79:dd:8f:c9:ca:a0:b8:01:f6:a5:78: d4:e8:b6:7e:fa:11:aa:9a:78:ea:ae:12:a2:d5:67:db:7e:e4: 9d:a1:6a:c5:f0:07:4d:c5:ce:df:a6:12:3e:2e:af:79:65:ce: 42:7d:1a:27:9c:85:ac:ee:eb:27:7d:87:5b:8e:fc:b6:95:50: 8d:bd:4f:68:7c:57:3e:b9:47:39:7b:ac:83:d7:c3:54:c7:3f: 37:53:60:97:c1:e2:4b:1a:07:0f:68:ee:57:cc:ab:66:dc:da: 96:8f:f4:70:64:72:9c:ce:3f:b4:ee:4a:88:bc:84:73:45:12: 8f:11:67:1d:a0:2c:2a:16:6e:7d:38:ed:77:b0:eb:f8:22:f0: d5:7d:49:f5:02:55:d7:9a:12:5a:f1:ec:27:79:91:31:fa:6a: a0:e1:fb:9f:99:5c:0b:ab:19:39:06:d7:83:3f:30:29:54:35: 7c:70:93:16 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NUlaaivn8117R+RuEACFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2 NDE3ODQwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkyNmEwNjdkYWZhY2M1Y2ZlZTQ5ZTAxMWE5ZjQ4YTYxNDFhYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLIxZkNlUBjOR3AJzObCfqQybwyy JO+wHCmcRFag7ak8fbtS6GaVnV1eKQ/uog1OnixzXkqvxC+6D2rG7SFEcNBIKoz+ NHm6E+FZ7IAKrBg+pttG7ZxO5ogIad4pkyR1vaThj7HA9xQsZtWwr9UPvWRsbnGC VjrvgLtuSXlF2UeR/dAwKnX+VXmodIsDcPJ+nO28hkidCZNFFY+NWCsyz32l9ieI TRXOVU3x22Ummgv+k1mWGpfzA9y6hBtNA/Js+lNGsfI/v8mkcnu7qNxBktZTGvKk 2r0PKOZOMfRnAxm+7pDMX2CjA/dUKvpr8hEr+973fNttNPOehYEURSgQpQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCSSagZ9r6zFz+5J4BGp9IphQayBMB8GA1UdIwQY MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt NDkwNjFmZmZkMDJhLzEvSkpKcUJuMnZyTVhQN2tuZ0VhbjBpbUZCcklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWRVIAwQA uV9AMA0EAgACMAcDBQAqELIAMA0GCSqGSIb3DQEBCwUAA4IBAQAgboxeepDPrQHh ysjgThdiMW8uOGpsVaJvpsWYsOnBpqGMsj0fWodMkG9DPLzWsYV0OgCVsav/YEZp TYR1hawRTDm33pkqjXj8JCtVF70Ned2PycqguAH2pXjU6LZ++hGqmnjqrhKi1Wfb fuSdoWrF8AdNxc7fphI+Lq95Zc5CfRonnIWs7usnfYdbjvy2lVCNvU9ofFc+uUc5 e6yD18NUxz83U2CXweJLGgcPaO5XzKtm3NqWj/RwZHKczj+07kqIvIRzRRKPEWcd oCwqFm59OO13sOv4IvDVfUn1AlXXmhJa8ewneZEx+mqg4fufmVwLqxk5BteDPzAp VDV8cJMW -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:32 2026 by rpki-client