This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/jsVSRtJd2CDXuEExXGRqUMz5PZw.roa File: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (raw, json) Hash identifier: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY= Subject key identifier: 8E:C5:52:46:D2:5D:D8:20:D7:B8:41:31:5C:64:6A:50:CC:F9:3D:9C Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b Certificate serial: 019B7C13669187409E36837F6F37763B0A45 Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/jsVSRtJd2CDXuEExXGRqUMz5PZw.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213226 IP address blocks: 79.110.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:66:91:87:40:9e:36:83:7f:6f:37:76:3b:0a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec55246d25dd820d7b841315c646a50ccf93d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:20:9b:46:0c:b8:64:e6:f6:20:3f:be:81: 19:2d:b3:7b:48:f6:4a:aa:96:2f:05:03:63:a4:62: 79:5b:e2:ff:15:3e:0f:8e:0a:f3:7b:e9:33:38:32: 34:ae:88:ab:b5:6f:c9:72:2a:3c:d6:d2:17:08:fb: c2:7d:85:7c:40:cf:d9:6d:90:4a:61:1a:e5:f3:f4: 66:96:5e:7b:07:14:6a:fb:a2:f5:e0:85:35:4f:79: 5e:d7:60:c2:0b:50:3b:7c:22:7c:d9:29:5f:ce:57: b4:af:9e:3b:4c:cd:4b:19:1d:c6:15:ba:73:dc:2b: e2:33:23:74:2b:30:bd:a5:29:34:ee:3f:91:6c:11: 27:29:2b:b3:f5:3d:e4:a6:b8:72:ab:98:94:27:4a: 84:b6:e3:64:69:73:40:b8:62:60:8c:e3:df:44:48: 8d:6d:df:48:28:66:66:7b:47:20:f7:cc:fe:3a:06: 89:dc:c7:04:7e:90:d4:49:66:ec:68:c9:1d:ad:8d: 7c:59:e0:d4:65:72:ab:9e:d7:7d:51:02:66:6e:bd: c6:30:94:34:d4:f9:41:ec:4d:23:fe:0b:6c:45:27: 1d:74:76:7e:71:5e:0d:81:b3:3a:28:59:78:13:80: d7:22:8a:ee:9b:5e:a5:53:e5:84:05:e2:4a:0a:fc: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:52:46:D2:5D:D8:20:D7:B8:41:31:5C:64:6A:50:CC:F9:3D:9C X509v3 Authority Key Identifier: keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/jsVSRtJd2CDXuEExXGRqUMz5PZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.137.0/24 Signature Algorithm: sha256WithRSAEncryption 24:3e:11:d9:b5:28:fc:39:78:5d:9a:89:54:5d:c3:07:74:8b: 1c:e0:d2:f0:2e:3e:95:ef:15:ae:d4:5f:3a:a7:38:c7:b5:b8: ea:18:08:9e:a8:4e:16:51:6b:1c:d9:67:e8:7f:df:15:a9:3c: 0a:64:82:67:5c:b1:6f:58:49:ad:5e:6b:ad:3b:4f:01:f7:98: 2c:19:7d:87:68:50:19:a1:bd:c0:e6:6b:84:1c:66:d7:d1:ab: 00:fc:0c:f1:ad:03:72:ae:dd:96:be:0a:08:bc:62:5b:2c:cd: 92:f2:3e:33:21:82:da:68:06:26:46:d5:50:0f:64:ff:86:77: a3:87:71:de:98:bd:01:5a:58:ea:ef:f6:1b:ad:cb:4e:dd:fe: fb:73:ec:48:9e:50:7f:ec:84:cd:20:6e:1b:46:f2:2a:9c:63: d1:fd:20:4e:b5:69:1d:7e:a0:05:b7:77:66:7c:e1:7a:84:0e: c7:b1:75:07:f0:ef:53:41:a1:4c:4c:f7:a2:36:60:44:76:f2: 9a:b8:f4:ab:9b:c6:1c:7e:74:9e:63:3a:cc:3b:30:a0:ba:c0: dd:e2:5c:a3:a3:2a:32:ac:ce:00:98:42:e4:03:70:7d:c4:b4: 32:36:3d:15:49:22:33:00:f9:69:57:17:c9:80:2c:79:c1:9a: e7:65:fe:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2aRh0CeNoN/bzd2OwpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5 N2IxNWIwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWM1NTI0NmQyNWRkODIwZDdiODQxMzE1YzY0NmE1MGNjZjkzZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMEgm0YMuGTm9iA/voEZLbN7SPZK qpYvBQNjpGJ5W+L/FT4Pjgrze+kzODI0roirtW/Jcio81tIXCPvCfYV8QM/ZbZBK YRrl8/Rmll57BxRq+6L14IU1T3le12DCC1A7fCJ82Slfzle0r547TM1LGR3GFbpz 3CviMyN0KzC9pSk07j+RbBEnKSuz9T3kprhyq5iUJ0qEtuNkaXNAuGJgjOPfREiN bd9IKGZme0cg98z+OgaJ3McEfpDUSWbsaMkdrY18WeDUZXKrntd9UQJmbr3GMJQ0 1PlB7E0j/gtsRScddHZ+cV4NgbM6KFl4E4DXIorum16lU+WEBeJKCvwJhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI7FUkbSXdgg17hBMVxkalDM+T2cMB8GA1UdIwQY MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt NjE4MTljNDgwY2JlLzEvanNWU1J0SmQyQ0RYdUVFeFhHUnFVTXo1UFp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26JMA0G CSqGSIb3DQEBCwUAA4IBAQAkPhHZtSj8OXhdmolUXcMHdIsc4NLwLj6V7xWu1F86 pzjHtbjqGAieqE4WUWsc2Wfof98VqTwKZIJnXLFvWEmtXmutO08B95gsGX2HaFAZ ob3A5muEHGbX0asA/AzxrQNyrt2WvgoIvGJbLM2S8j4zIYLaaAYmRtVQD2T/hnej h3HemL0BWljq7/YbrctO3f77c+xInlB/7ITNIG4bRvIqnGPR/SBOtWkdfqAFt3dm fOF6hA7HsXUH8O9TQaFMTPeiNmBEdvKauPSrm8YcfnSeYzrMOzCgusDd4lyjoyoy rM4AmELkA3B9xLQyNj0VSSIzAPlpVxfJgCx5wZrnZf5v -----END CERTIFICATE-----Generated at Mon Jan 26 03:15:01 2026 by rpki-client