This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/JBraeIgnuA6e6r7UQt_AjcfpK9E.roa File: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (raw, json) Hash identifier: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk= Subject key identifier: 24:1A:DA:78:88:27:B8:0E:9E:EA:BE:D4:42:DF:C0:8D:C7:E9:2B:D1 Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Certificate serial: 019B7C11E87CA147D2261C87A49B1D3650D8 Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/JBraeIgnuA6e6r7UQt_AjcfpK9E.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2830 IP address blocks: 185.106.226.0/24 maxlen: 24 194.126.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e8:7c:a1:47:d2:26:1c:87:a4:9b:1d:36:50:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241ada788827b80e9eeabed442dfc08dc7e92bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:bc:06:28:cb:42:b2:a1:79:9c:ed:d7:ea: fc:1b:0b:69:88:d7:e1:fa:e1:75:98:0e:d7:ac:ee: b5:59:55:43:ea:aa:52:14:90:0b:ae:ad:ef:dd:27: d9:b0:d9:48:d4:07:ee:0f:e8:2a:3a:d7:db:61:5b: 97:c7:38:05:7a:12:88:73:cc:08:b2:fa:67:b2:dd: 39:83:60:4c:cc:25:27:0d:22:d2:01:49:73:7a:67: e3:6b:7f:7c:9a:cd:6c:ca:1d:77:5e:6b:49:e8:c4: 93:b4:b4:2f:f5:27:67:55:16:62:26:1c:d1:80:03: 24:bc:27:55:99:28:be:2c:83:c2:fa:22:2d:b8:19: 3f:0d:40:98:cb:60:a8:18:f6:58:e8:16:53:b3:d0: a8:28:8e:b8:0e:44:ed:f7:d1:2e:f9:13:5a:62:3c: 33:3c:25:a5:1e:7e:ab:04:66:49:d0:8d:39:c7:73: fc:ed:9a:b6:af:71:e6:78:38:21:0d:b1:ba:7e:7d: 73:1d:ff:16:7b:c2:25:6c:65:6a:be:be:69:ac:c4: 5b:f7:f1:5f:64:1a:c1:f7:8e:61:11:61:f5:00:b5: b0:4b:3a:67:db:19:b7:44:7a:78:2b:56:97:32:13: 74:dc:b0:02:00:47:d4:a3:eb:22:ce:d9:c2:18:23: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:DA:78:88:27:B8:0E:9E:EA:BE:D4:42:DF:C0:8D:C7:E9:2B:D1 X509v3 Authority Key Identifier: keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/JBraeIgnuA6e6r7UQt_AjcfpK9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.226.0/24 194.126.130.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:30:ec:b4:43:aa:82:8a:d6:19:cf:7d:0b:09:5e:c6:03:29: 9c:ea:69:45:9c:2e:30:6c:37:9e:c0:41:2b:60:c0:42:df:84: 48:58:3e:32:70:34:29:65:11:55:dc:88:d9:8b:05:56:40:c3: 67:e4:a7:3a:7d:71:05:c2:be:b3:f0:0b:0e:34:74:73:ba:bc: aa:23:aa:af:9e:55:47:b4:86:43:53:06:18:94:7a:22:0e:f3: 59:e3:58:95:15:e8:c2:3e:43:3c:f2:9b:b4:5e:fa:26:81:e4: 7a:a1:15:9b:2e:e8:26:1a:6a:f0:30:6e:ea:9c:32:de:a1:7b: fc:2e:a4:cb:9d:1e:c3:ce:23:fe:2e:14:e3:56:cb:e7:02:30: c1:fa:77:d3:20:ec:d4:e0:63:36:b9:b4:79:a7:5e:7a:a1:aa: 55:12:42:65:96:df:01:fc:0f:1a:bc:6d:81:e4:21:9f:a6:bc: 43:9c:9a:83:33:d5:97:ae:90:56:5b:75:88:00:c1:6f:fc:7d: b5:e9:5e:be:9b:fd:ab:78:19:6b:d2:f8:1a:f8:81:70:82:33: a6:36:ea:51:66:34:6a:12:45:bb:72:ac:fc:19:46:17:7b:c7: f4:31:e3:b4:fb:15:d4:f5:74:9e:3d:ba:a7:ed:81:08:3b:14: c2:6f:fb:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eeh8oUfSJhyHpJsdNlDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx NjhjZTEwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFhZGE3ODg4MjdiODBlOWVlYWJlZDQ0MmRmYzA4ZGM3ZTkyYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDi8BijLQrKheZzt1+r8GwtpiNfh +uF1mA7XrO61WVVD6qpSFJALrq3v3SfZsNlI1AfuD+gqOtfbYVuXxzgFehKIc8wI svpnst05g2BMzCUnDSLSAUlzemfja398ms1syh13XmtJ6MSTtLQv9SdnVRZiJhzR gAMkvCdVmSi+LIPC+iItuBk/DUCYy2CoGPZY6BZTs9CoKI64DkTt99Eu+RNaYjwz PCWlHn6rBGZJ0I05x3P87Zq2r3HmeDghDbG6fn1zHf8We8IlbGVqvr5prMRb9/Ff ZBrB945hEWH1ALWwSzpn2xm3RHp4K1aXMhN03LACAEfUo+siztnCGCPe4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQa2niIJ7gOnuq+1ELfwI3H6SvRMB8GA1UdIwQY MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt N2E1YThkMDk2N2M4LzEvSkJyYWVJZ251QTZlNnI3VVF0X0FqY2ZwSzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4 LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWriAwQA wn6CMA0GCSqGSIb3DQEBCwUAA4IBAQAdMOy0Q6qCitYZz30LCV7GAymc6mlFnC4w bDeewEErYMBC34RIWD4ycDQpZRFV3IjZiwVWQMNn5Kc6fXEFwr6z8AsONHRzuryq I6qvnlVHtIZDUwYYlHoiDvNZ41iVFejCPkM88pu0XvomgeR6oRWbLugmGmrwMG7q nDLeoXv8LqTLnR7DziP+LhTjVsvnAjDB+nfTIOzU4GM2ubR5p156oapVEkJllt8B /A8avG2B5CGfprxDnJqDM9WXrpBWW3WIAMFv/H216V6+m/2reBlr0vga+IFwgjOm NupRZjRqEkW7cqz8GUYXe8f0MeO0+xXU9XSePbqn7YEIOxTCb/tR -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:40 2026 by rpki-client