This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/j0P_cGlQZQy3YF4RlXCRZteA6S8.roa File: j0P_cGlQZQy3YF4RlXCRZteA6S8.roa (raw, json) Hash identifier: kT8irSc09jAZGU8OrTBiKMRPHDxtPWszWFRDREVEqCY= Subject key identifier: 8F:43:FF:70:69:50:65:0C:B7:60:5E:11:95:70:91:66:D7:80:E9:2F Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3 Certificate serial: 019B7CECDC033B288F27C91D657B409F3337 Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/j0P_cGlQZQy3YF4RlXCRZteA6S8.roa Signing time: Fri 02 Jan 2026 04:17:36 +0000 ROA not before: Fri 02 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199904 IP address blocks: 45.141.192.0/22 maxlen: 24 91.193.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:dc:03:3b:28:8f:27:c9:1d:65:7b:40:9f:33:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3 Validity Not Before: Jan 2 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f43ff706950650cb7605e1195709166d780e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:04:d6:c9:fd:94:b2:f6:86:f1:84:3b:35: b5:71:df:9a:d8:5e:57:fb:af:61:39:c0:b6:0a:b0: 29:4f:5f:da:eb:6a:2d:fc:db:cd:0b:6a:6e:26:f9: 03:2d:2b:62:9e:f5:ce:bc:0a:e5:e1:e1:53:e5:22: 69:36:79:ae:14:c1:96:ae:6b:10:f3:24:2a:07:7a: 4e:c8:1f:1b:99:34:fa:a4:69:b0:d3:a6:4a:3f:41: 1c:cc:33:d5:d6:32:7e:b4:21:5c:85:36:3a:a8:cc: d3:52:1f:1a:59:6b:f8:21:d2:11:d4:aa:c5:16:f6: c8:4f:72:3b:40:dd:96:7e:86:fd:70:00:fc:ab:26: 11:20:b9:9f:a6:89:5b:ae:b7:ed:10:f3:25:e8:16: 7a:9e:4b:1b:0d:d8:a0:5e:a2:3c:50:98:42:d9:9d: 8a:36:cd:80:5f:4d:15:8a:d0:79:20:d7:84:b3:16: 29:70:92:c2:b1:26:af:2c:5f:81:b6:1d:e3:1d:61: c9:8e:4a:ad:0c:1e:c6:06:5b:5b:c1:95:17:17:79: 7c:b7:4e:fb:fa:f3:60:5b:73:f7:15:6d:f3:b9:fb: b0:31:10:10:49:17:36:32:8a:64:bb:a4:43:db:0e: 0e:f5:b3:70:4c:60:39:5f:25:76:c1:55:e0:c6:35: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:43:FF:70:69:50:65:0C:B7:60:5E:11:95:70:91:66:D7:80:E9:2F X509v3 Authority Key Identifier: keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/j0P_cGlQZQy3YF4RlXCRZteA6S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.192.0/22 91.193.52.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:0e:34:6f:84:dd:2f:c1:47:21:55:fb:bd:42:d6:3a:24:42: 93:0f:7e:b9:2a:9a:74:3a:e1:de:0b:f3:12:b9:c0:4f:48:70: 55:f3:2b:b0:c6:05:1b:6b:71:0b:c5:8e:b6:56:75:06:d0:be: 41:88:7a:3b:54:b5:ab:51:82:6f:02:c1:18:e8:68:a1:63:d3: fb:c3:c1:c4:ab:5e:ae:ee:5f:ca:59:8e:60:16:7e:dd:33:6d: 47:ce:30:35:45:4c:96:12:33:89:86:5b:c2:f5:d0:ef:c8:f8: 51:4c:59:91:75:0d:69:8f:7c:a1:70:44:2d:17:06:9f:fa:8f: 55:ba:30:a0:30:60:ed:5f:06:26:f7:1b:a3:e8:f0:76:40:84: bd:27:4f:11:d8:f4:ec:04:42:e4:32:ce:53:17:0d:2c:8c:e3: fd:e9:0c:c9:89:a5:37:6c:dd:41:04:7a:ed:ec:33:6d:0c:fb: ae:78:26:77:c3:a3:50:b0:54:2c:ae:2f:6d:fb:f9:56:3c:07: d5:cb:bd:30:28:e0:e5:d0:69:e7:33:5a:98:48:d7:16:dd:49: 8a:96:83:6a:b5:d4:f5:73:32:c0:cb:7b:aa:b1:66:bd:85:44: 7f:78:2c:98:7a:1a:3f:25:7d:3d:0b:c1:13:74:ec:e4:cd:e5: ff:d1:43:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87NwDOyiPJ8kdZXtAnzM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1 ZmM4YzMwHhcNMjYwMTAyMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQzZmY3MDY5NTA2NTBjYjc2MDVlMTE5NTcwOTE2NmQ3ODBlOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b4E1sn9lLL2hvGEOzW1cd+a2F5X +69hOcC2CrApT1/a62ot/NvNC2puJvkDLStinvXOvArl4eFT5SJpNnmuFMGWrmsQ 8yQqB3pOyB8bmTT6pGmw06ZKP0EczDPV1jJ+tCFchTY6qMzTUh8aWWv4IdIR1KrF FvbIT3I7QN2Wfob9cAD8qyYRILmfpolbrrftEPMl6BZ6nksbDdigXqI8UJhC2Z2K Ns2AX00VitB5INeEsxYpcJLCsSavLF+Bth3jHWHJjkqtDB7GBltbwZUXF3l8t077 +vNgW3P3FW3zufuwMRAQSRc2Mopku6RD2w4O9bNwTGA5XyV2wVXgxjXCmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI9D/3BpUGUMt2BeEZVwkWbXgOkvMB8GA1UdIwQY MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt Yzg2YzJmYzZjNjFiLzEvajBQX2NHbFFaUXkzWUY0UmxYQ1JadGVBNlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY3AAwQA W8E0MA0GCSqGSIb3DQEBCwUAA4IBAQAsDjRvhN0vwUchVfu9QtY6JEKTD365Kpp0 OuHeC/MSucBPSHBV8yuwxgUba3ELxY62VnUG0L5BiHo7VLWrUYJvAsEY6GihY9P7 w8HEq16u7l/KWY5gFn7dM21HzjA1RUyWEjOJhlvC9dDvyPhRTFmRdQ1pj3yhcEQt Fwaf+o9VujCgMGDtXwYm9xuj6PB2QIS9J08R2PTsBELkMs5TFw0sjOP96QzJiaU3 bN1BBHrt7DNtDPuueCZ3w6NQsFQsri9t+/lWPAfVy70wKODl0GnnM1qYSNcW3UmK loNqtdT1czLAy3uqsWa9hUR/eCyYeho/JX09C8ETdOzkzeX/0UN9 -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:42 2026 by rpki-client