This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/JPBii3Hqcq30q25CjK9-h-C44rw.roa File: JPBii3Hqcq30q25CjK9-h-C44rw.roa (raw, json) Hash identifier: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U= Subject key identifier: 24:F0:62:8B:71:EA:72:AD:F4:AB:6E:42:8C:AF:7E:87:E0:B8:E2:BC Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019B78346CB289EE134E2B70A8C3282DABE8 Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/JPBii3Hqcq30q25CjK9-h-C44rw.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209993 IP address blocks: 45.90.192.0/22 maxlen: 22 2a0e:240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6c:b2:89:ee:13:4e:2b:70:a8:c3:28:2d:ab:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f0628b71ea72adf4ab6e428caf7e87e0b8e2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:c0:89:eb:52:87:bf:c1:76:fe:30:0e:eb: af:53:af:82:f2:a1:1f:c2:46:18:59:a5:9f:79:fe: 74:e8:3c:66:56:d7:4a:bb:ff:1c:4c:74:a5:3e:75: 55:1c:e2:cc:62:10:53:a0:e7:a4:0f:62:44:c1:04: 60:35:e5:11:fc:45:f1:b9:9a:df:73:6f:63:72:0f: 07:89:f9:78:fc:7a:23:a0:6b:6e:05:a2:52:0e:f5: a3:c4:b0:56:3a:a9:e7:83:0c:40:fc:4e:80:22:a9: 48:c0:0d:4e:79:63:a8:15:83:24:f3:bf:57:b8:4a: 4e:a6:04:a2:65:16:ef:20:d0:93:d8:17:30:7a:73: 63:52:be:39:ca:27:e4:ff:b9:53:ff:0c:42:3d:58: 6e:dc:20:ce:d5:5a:1e:a5:da:0a:79:79:9e:71:97: 50:2c:55:d8:38:d7:bc:29:0c:06:4a:4f:35:b9:a2: 8a:ea:aa:a0:e8:d9:12:da:ae:7b:89:e4:9d:55:0c: dd:1b:08:b4:ad:6c:79:8a:0b:10:00:14:f8:84:be: 47:3d:e3:f5:e3:47:2b:80:b8:c0:82:dd:a4:1d:fb: 7f:a0:40:ca:54:2f:a3:98:a0:87:25:75:9f:30:78: e9:0f:a6:9e:bd:9b:4b:90:e0:77:27:c6:f6:2c:49: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:62:8B:71:EA:72:AD:F4:AB:6E:42:8C:AF:7E:87:E0:B8:E2:BC X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/JPBii3Hqcq30q25CjK9-h-C44rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.192.0/22 IPv6: 2a0e:240::/29 Signature Algorithm: sha256WithRSAEncryption 37:b7:db:ee:76:59:76:f4:97:10:36:ca:9b:65:7c:68:b3:08: d1:ee:03:be:9e:bb:65:4b:96:05:e8:59:b9:a0:fa:08:a9:ad: 43:9f:72:6f:63:09:bc:e3:5a:d7:3f:a5:c7:0b:2a:87:47:ba: ff:b2:6c:b0:eb:32:2e:6e:54:66:29:68:9a:45:8d:d6:12:a8: 54:3f:c2:4d:e3:0e:dd:23:51:b5:03:e5:d1:95:21:d0:aa:46: ad:18:33:ea:6f:49:ea:9d:76:63:02:95:30:09:8f:97:50:fd: 9a:ce:14:96:16:cf:4f:75:a4:17:9d:85:65:f8:67:d2:8f:2b: 37:21:43:18:59:27:83:3b:71:14:a6:28:1f:7d:36:d3:ec:a4: 77:cc:13:64:af:41:8f:f7:01:1d:01:a0:f4:b6:9f:af:84:87: 32:b4:01:6b:a8:21:06:4e:fe:c2:22:6b:10:d2:9a:b7:80:9e: 1f:9b:85:5f:cc:de:30:6a:96:64:be:22:b6:3b:39:4c:ff:89: 5b:d1:a1:d0:fb:d7:b2:c3:ed:fc:e8:c3:66:32:5f:15:55:20: 0d:c9:55:6f:a2:02:e9:d7:b0:a2:55:c7:26:9e:e2:85:55:1b: b9:cb:ec:37:dd:8a:46:86:26:7c:41:a3:70:f5:75:0f:0d:0d: 9b:2e:76:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NGyyie4TTitwqMMoLavoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGYwNjI4YjcxZWE3MmFkZjRhYjZlNDI4Y2FmN2U4N2UwYjhlMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycPAietSh7/Bdv4wDuuvU6+C8qEf wkYYWaWfef506DxmVtdKu/8cTHSlPnVVHOLMYhBToOekD2JEwQRgNeUR/EXxuZrf c29jcg8Hifl4/HojoGtuBaJSDvWjxLBWOqnngwxA/E6AIqlIwA1OeWOoFYMk879X uEpOpgSiZRbvINCT2BcwenNjUr45yifk/7lT/wxCPVhu3CDO1VoepdoKeXmecZdQ LFXYONe8KQwGSk81uaKK6qqg6NkS2q57ieSdVQzdGwi0rWx5igsQABT4hL5HPeP1 40crgLjAgt2kHft/oEDKVC+jmKCHJXWfMHjpD6aevZtLkOB3J8b2LEk71QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCTwYotx6nKt9KtuQoyvfofguOK8MB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvSlBCaWkzSHFjcTMwcTI1Q2pLOS1oLUM0NHJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVrAMA0E AgACMAcDBQMqDgJAMA0GCSqGSIb3DQEBCwUAA4IBAQA3t9vudll29JcQNsqbZXxo swjR7gO+nrtlS5YF6Fm5oPoIqa1Dn3JvYwm841rXP6XHCyqHR7r/smyw6zIublRm KWiaRY3WEqhUP8JN4w7dI1G1A+XRlSHQqkatGDPqb0nqnXZjApUwCY+XUP2azhSW Fs9PdaQXnYVl+GfSjys3IUMYWSeDO3EUpigffTbT7KR3zBNkr0GP9wEdAaD0tp+v hIcytAFrqCEGTv7CImsQ0pq3gJ4fm4VfzN4wapZkviK2OzlM/4lb0aHQ+9eyw+38 6MNmMl8VVSANyVVvogLp17CiVccmnuKFVRu5y+w33YpGhiZ8QaNw9XUPDQ2bLna2 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:56 2026 by rpki-client