This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa File: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (raw, json) Hash identifier: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA= Subject key identifier: 8E:CF:31:73:51:C4:53:55:D4:23:4B:01:65:F1:74:6E:5E:4D:B6:C7 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F835F1C7DB08AC0CB88CA715C9F5CE0 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48761 IP address blocks: 185.172.48.0/24 maxlen: 24 185.172.49.0/24 maxlen: 24 2a03:2100:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5f:1c:7d:b0:8a:c0:cb:88:ca:71:5c:9f:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ecf317351c45355d4234b0165f1746e5e4db6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:e2:fb:53:e8:c3:09:91:a3:3e:53:19:68: a7:7c:1b:19:58:70:a5:43:50:23:93:0c:6b:68:d2: 47:ec:fc:49:68:93:9e:6f:94:e3:e7:c8:eb:79:e7: 6a:07:53:fb:8e:9f:40:28:0c:e0:fc:f6:85:89:49: 62:bc:b5:ca:72:5f:a8:0b:cd:06:1b:2e:db:c3:d6: 9e:ca:fc:9b:93:b3:85:1c:03:cb:52:b6:25:14:59: 2d:08:ba:61:d7:29:1d:79:cc:0f:54:00:cc:32:25: 13:2c:1a:1b:ad:da:9e:d0:d9:a4:ce:38:d8:6c:ae: b3:1e:67:68:a4:09:d5:c9:0d:cf:17:86:8d:40:ab: ab:93:1e:5b:66:62:b1:8d:e2:74:fb:0e:11:7f:9b: e6:14:d7:83:e9:1f:1d:f1:51:dd:24:6f:e3:8e:08: f9:97:51:20:21:d1:92:9d:1a:0d:87:80:c3:4d:fa: 69:dd:17:2a:52:31:33:d7:72:27:75:d8:17:94:97: aa:cf:0f:da:50:ac:87:ed:cc:46:63:64:63:c0:41: 1e:f3:b9:70:fb:34:35:4f:e6:78:d1:19:64:26:be: 1d:c2:31:20:fb:5f:a0:7a:17:1f:f3:f8:cb:e5:a8: 78:21:b3:a8:74:a7:3f:ae:8d:2e:ab:6a:d0:ce:a8: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CF:31:73:51:C4:53:55:D4:23:4B:01:65:F1:74:6E:5E:4D:B6:C7 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.48.0/23 IPv6: 2a03:2100:45::/48 Signature Algorithm: sha256WithRSAEncryption 11:13:e3:a3:88:35:5d:04:3b:3c:db:a9:44:63:38:db:02:99: 1f:9f:0a:63:f4:9b:a0:ec:d8:db:5a:f6:04:7c:da:72:03:2f: ca:f7:47:2e:ba:07:77:d6:14:d9:85:d1:55:37:9e:49:09:88: 65:4e:9d:f6:b3:89:c7:41:8a:45:1c:c0:50:b6:57:4a:1d:75: e2:76:fd:6a:d1:bf:e7:05:b2:a6:51:47:2d:4c:4b:13:c9:74: b0:b8:41:41:9e:2f:eb:4c:a3:dd:2d:5d:9c:82:04:13:e8:ef: 3c:2d:64:9c:7e:7f:46:c7:27:80:d7:48:92:b1:66:3f:6e:89: ec:3e:e4:98:9e:00:20:91:ef:f2:66:51:4b:ba:88:99:32:28: 08:85:ab:ee:1d:02:89:f7:6e:e6:1a:7c:1b:a1:2f:7c:a9:0c: 20:4f:93:65:b6:67:8a:26:e6:f9:dc:a3:85:f4:30:1c:26:1f: f7:46:db:ff:f2:59:6b:b1:66:57:53:05:34:b6:de:91:6e:49: 96:d6:d4:f3:ab:4e:d2:28:d0:43:41:3d:10:d0:30:14:57:da: 4e:06:cf:50:bf:98:56:7b:a2:d6:fe:08:65:42:81:90:e0:88: 42:cc:93:f3:c2:e9:d1:e0:eb:0b:ae:bb:64:08:e1:64:fb:bd: 49:f1:77:76 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g18cfbCKwMuIynFcn1zgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWNmMzE3MzUxYzQ1MzU1ZDQyMzRiMDE2NWYxNzQ2ZTVlNGRiNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilLi+1PowwmRoz5TGWinfBsZWHCl Q1AjkwxraNJH7PxJaJOeb5Tj58jreedqB1P7jp9AKAzg/PaFiUlivLXKcl+oC80G Gy7bw9aeyvybk7OFHAPLUrYlFFktCLph1ykdecwPVADMMiUTLBobrdqe0NmkzjjY bK6zHmdopAnVyQ3PF4aNQKurkx5bZmKxjeJ0+w4Rf5vmFNeD6R8d8VHdJG/jjgj5 l1EgIdGSnRoNh4DDTfpp3RcqUjEz13InddgXlJeqzw/aUKyH7cxGY2RjwEEe87lw +zQ1T+Z40RlkJr4dwjEg+1+gehcf8/jL5ah4IbOodKc/ro0uq2rQzqgE5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI7PMXNRxFNV1CNLAWXxdG5eTbbHMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvanM4eGMxSEVVMVhVSTBzQlpmRjBibDVOdHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuawwMA8E AgACMAkDBwAqAyEAAEUwDQYJKoZIhvcNAQELBQADggEBABET46OINV0EOzzbqURj ONsCmR+fCmP0m6Ds2Nta9gR82nIDL8r3Ry66B3fWFNmF0VU3nkkJiGVOnfazicdB ikUcwFC2V0oddeJ2/WrRv+cFsqZRRy1MSxPJdLC4QUGeL+tMo90tXZyCBBPo7zwt ZJx+f0bHJ4DXSJKxZj9uiew+5JieACCR7/JmUUu6iJkyKAiFq+4dAon3buYafBuh L3ypDCBPk2W2Z4om5vnco4X0MBwmH/dG2//yWWuxZldTBTS23pFuSZbW1POrTtIo 0ENBPRDQMBRX2k4Gz1C/mFZ7otb+CGVCgZDgiELMk/PC6dHg6wuuu2QI4WT7vUnx d3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:43 2026 by rpki-client