This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa File: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (raw, json) Hash identifier: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs= Subject key identifier: 26:C5:59:B9:02:0A:34:81:F3:A3:7A:8A:53:F6:86:68:DF:53:1B:2D Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B8CB20E2E0CD4B065D0AB9C2A542D0073 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa Signing time: Mon 05 Jan 2026 05:47:17 +0000 ROA not before: Mon 05 Jan 2026 05:47:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208555 IP address blocks: 5.56.132.0/24 maxlen: 24 79.143.84.0/24 maxlen: 24 87.236.209.0/24 maxlen: 24 87.236.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:b2:0e:2e:0c:d4:b0:65:d0:ab:9c:2a:54:2d:00:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 5 05:47:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26c559b9020a3481f3a37a8a53f68668df531b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:01:80:f5:ee:8f:31:f7:a5:c9:e6:33:4b: 07:0c:bd:d0:ef:92:a3:6c:71:49:5e:aa:ed:45:20: 6a:77:3b:76:98:ec:4a:2a:eb:0a:3e:bb:41:8e:f5: 31:4f:cc:4f:f0:39:25:1b:52:f3:d3:97:5e:7f:13: 31:43:21:42:62:55:f4:e6:93:b3:eb:26:5e:7d:74: da:39:c3:8f:38:96:cc:53:6b:fc:4d:50:90:42:0e: 3e:bb:b0:a2:b6:c4:df:0d:6f:3c:bf:b6:9d:32:d8: 88:8f:3c:2c:1d:96:89:ab:d8:37:24:be:a2:21:0d: be:8a:2d:54:f1:fd:5e:7c:a1:1b:1e:02:72:77:4a: f1:df:16:c0:77:8a:e3:13:80:1f:50:69:c1:8e:23: d8:93:59:69:9e:ce:6f:bd:8e:04:a3:ef:54:cd:9b: 33:8e:9f:4b:26:b3:d9:de:50:86:a2:16:fa:e8:b6: fd:d4:22:38:e0:98:80:1a:c8:0c:b2:c1:bf:29:95: c2:bc:a7:a4:ee:7b:cd:53:5d:6f:8e:6b:10:aa:7a: 6c:04:ba:6d:d1:ab:f5:0d:e5:d4:b6:e5:b4:02:7a: ca:ae:bf:2e:87:ec:77:b0:78:ad:78:6b:fd:03:6c: 8e:de:03:9b:34:6a:a3:cb:e6:89:87:19:32:e6:5f: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C5:59:B9:02:0A:34:81:F3:A3:7A:8A:53:F6:86:68:DF:53:1B:2D X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.132.0/24 79.143.84.0/24 87.236.209.0/24 87.236.212.0/24 Signature Algorithm: sha256WithRSAEncryption 68:d5:62:8f:61:78:71:b0:f9:70:63:fd:39:6f:f1:57:12:04: 8a:55:c5:58:19:0b:b0:b1:33:33:b2:3b:fa:5a:99:97:95:ee: 3c:37:fe:a2:40:81:e6:75:89:ff:f0:87:0d:98:4e:81:51:09: 52:bd:86:f2:a5:6b:32:02:97:92:54:3e:c2:8d:39:5a:6d:5d: 36:63:5c:be:1f:d3:db:fd:6c:2e:f2:d1:95:7b:45:c0:df:90: 9b:b8:d9:7b:30:b5:e9:b6:35:3b:f4:56:27:48:ce:fb:57:35: 19:dd:e7:c2:c5:d2:1a:77:46:b2:c6:ba:e3:a7:19:cf:ee:65: 27:8b:29:33:a9:76:01:35:a7:db:cc:53:32:01:56:02:30:ba: f6:71:45:2a:28:30:18:36:22:76:ba:bc:35:16:f8:5a:e0:47: b2:91:e2:2c:8a:51:75:46:a0:23:12:13:83:45:1e:84:c8:6b: 89:29:44:e1:c4:01:e4:3f:60:30:40:d1:da:29:10:fd:4d:21: 31:c7:8d:b4:79:01:3d:ee:ee:91:60:5e:4f:d0:e2:d9:57:ac: 0e:41:c4:6d:38:db:ab:96:11:e3:70:ec:32:2d:55:64:c3:27: d3:ed:33:80:ed:62:5d:a7:51:b1:1d:81:ed:20:74:00:f3:c6: 93:5a:38:5c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuMsg4uDNSwZdCrnCpULQBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTA1MDU0NzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmM1NTliOTAyMGEzNDgxZjNhMzdhOGE1M2Y2ODY2OGRmNTMxYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2cBgPXujzH3pcnmM0sHDL3Q75Kj bHFJXqrtRSBqdzt2mOxKKusKPrtBjvUxT8xP8DklG1Lz05defxMxQyFCYlX05pOz 6yZefXTaOcOPOJbMU2v8TVCQQg4+u7CitsTfDW88v7adMtiIjzwsHZaJq9g3JL6i IQ2+ii1U8f1efKEbHgJyd0rx3xbAd4rjE4AfUGnBjiPYk1lpns5vvY4Eo+9UzZsz jp9LJrPZ3lCGohb66Lb91CI44JiAGsgMssG/KZXCvKek7nvNU11vjmsQqnpsBLpt 0av1DeXUtuW0AnrKrr8uh+x3sHiteGv9A2yO3gObNGqjy+aJhxky5l/YHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCbFWbkCCjSB86N6ilP2hmjfUxstMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvSnNWWnVRSUtOSUh6bzNxS1VfYUdhTjlUR3kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTiEAwQA T49UAwQAV+zRAwQAV+zUMA0GCSqGSIb3DQEBCwUAA4IBAQBo1WKPYXhxsPlwY/05 b/FXEgSKVcVYGQuwsTMzsjv6WpmXle48N/6iQIHmdYn/8IcNmE6BUQlSvYbypWsy ApeSVD7CjTlabV02Y1y+H9Pb/Wwu8tGVe0XA35CbuNl7MLXptjU79FYnSM77VzUZ 3efCxdIad0ayxrrjpxnP7mUniykzqXYBNafbzFMyAVYCMLr2cUUqKDAYNiJ2urw1 Fvha4EeykeIsilF1RqAjEhODRR6EyGuJKUThxAHkP2AwQNHaKRD9TSExx420eQE9 7u6RYF5P0OLZV6wOQcRtONurlhHjcOwyLVVkwyfT7TOA7WJdp1GxHYHtIHQA88aT Wjhc -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:42 2026 by rpki-client