This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/JXD9OGEgFf3Wk4sh84udKIfqooU.roa File: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (raw, json) Hash identifier: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I= Subject key identifier: 25:70:FD:38:61:20:15:FD:D6:93:8B:21:F3:8B:9D:28:87:EA:A2:85 Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f Certificate serial: 019B7FF062549BBEE06814FC2136E929EF7B Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/JXD9OGEgFf3Wk4sh84udKIfqooU.roa Signing time: Fri 02 Jan 2026 18:20:18 +0000 ROA not before: Fri 02 Jan 2026 18:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4323 IP address blocks: 89.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:62:54:9b:be:e0:68:14:fc:21:36:e9:29:ef:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f Validity Not Before: Jan 2 18:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2570fd38612015fdd6938b21f38b9d2887eaa285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:1f:43:8d:5d:09:b7:ef:1d:ce:3d:a2:24: 64:d6:a3:6c:0f:97:7c:9d:71:d1:f9:88:cc:37:5f: 1a:cf:a2:2d:fa:7b:10:b4:72:e7:62:33:09:47:61: 27:52:81:51:ab:27:0b:3a:c1:68:39:dc:20:70:52: cb:cb:63:f0:c6:7a:7f:e5:62:89:cd:83:08:83:0b: ae:cb:29:78:26:71:6e:0f:33:af:de:11:0a:5d:ed: ee:5e:ea:15:8d:6e:30:a5:51:94:ae:42:8d:6b:5b: c7:3a:54:24:d2:7c:04:62:23:62:26:79:5d:ee:f6: 13:7a:3b:92:00:d3:40:0e:43:73:8b:2b:55:53:85: 72:f3:99:83:ab:34:e6:88:77:09:35:47:99:bf:93: 65:d2:49:6c:28:f9:f1:a0:ce:d7:fa:ca:f9:f6:63: e7:c9:7b:12:02:ad:b2:6f:7d:d1:4c:2b:ba:29:e6: c6:9f:95:12:74:a3:78:0d:fb:c7:4b:48:07:43:d7: 95:bb:2e:b7:2b:0d:64:ab:21:b5:a4:7f:67:d3:2a: ca:f4:15:9c:ca:dc:6f:f9:9b:c9:19:00:67:3b:55: 6f:47:66:9f:b3:0d:cb:6a:e3:0b:d9:0d:b8:6a:f9: a0:ee:ce:48:e7:dd:60:ca:69:db:a9:4d:6f:4c:6a: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:FD:38:61:20:15:FD:D6:93:8B:21:F3:8B:9D:28:87:EA:A2:85 X509v3 Authority Key Identifier: keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/JXD9OGEgFf3Wk4sh84udKIfqooU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.191.65.0/24 Signature Algorithm: sha256WithRSAEncryption b3:22:9b:04:d6:2a:1c:26:86:77:9e:76:10:3d:dd:b3:5f:7d: 93:92:fe:28:fb:9e:60:08:fb:31:60:6e:92:35:81:ba:0b:79: 53:e5:b6:7e:ee:89:7c:e5:a3:fc:ee:b4:88:cd:84:af:df:c0: 6c:34:55:67:b3:1b:de:4b:af:be:37:36:ac:e7:9b:d3:1a:2c: 6e:5e:77:82:aa:d7:c7:45:ed:0b:50:82:65:2c:27:cf:c6:d5: b3:2e:85:84:29:44:a5:2f:51:2a:a3:fe:35:69:59:8c:de:09: a6:26:1f:63:7b:bd:96:e5:d2:78:1f:c5:01:47:99:c7:c4:b5: 3a:ee:4c:27:04:0a:53:81:9f:80:e3:20:c9:6c:be:bf:82:cc: 1d:68:50:8d:02:60:d7:50:3e:36:dc:71:53:29:e2:54:0c:ef: 1b:5b:b0:a2:32:41:78:70:5e:b8:ed:17:fe:fb:49:cb:8f:a2: 9a:39:81:57:af:bb:f5:73:60:04:34:bc:86:67:7d:6b:1e:35: 0d:c5:5f:24:5c:a0:bd:b9:8e:55:a3:a0:f7:01:58:ac:ff:f2: 88:36:43:49:1e:72:3a:f8:d3:d8:94:d1:ab:40:87:e4:ce:8e: e4:c2:15:10:b7:4c:e8:e1:0f:36:25:99:56:f0:00:12:0f:89: aa:9b:8a:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8GJUm77gaBT8ITbpKe97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh NDFlNWYwHhcNMjYwMTAyMTgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTcwZmQzODYxMjAxNWZkZDY5MzhiMjFmMzhiOWQyODg3ZWFhMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l4fQ41dCbfvHc49oiRk1qNsD5d8 nXHR+YjMN18az6It+nsQtHLnYjMJR2EnUoFRqycLOsFoOdwgcFLLy2Pwxnp/5WKJ zYMIgwuuyyl4JnFuDzOv3hEKXe3uXuoVjW4wpVGUrkKNa1vHOlQk0nwEYiNiJnld 7vYTejuSANNADkNziytVU4Vy85mDqzTmiHcJNUeZv5Nl0klsKPnxoM7X+sr59mPn yXsSAq2yb33RTCu6KebGn5USdKN4DfvHS0gHQ9eVuy63Kw1kqyG1pH9n0yrK9BWc ytxv+ZvJGQBnO1VvR2afsw3LauML2Q24avmg7s5I591gymnbqU1vTGodLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVw/ThhIBX91pOLIfOLnSiH6qKFMB8GA1UdIwQY MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt ZjEzNGU1MWNjMDViLzEvSlhEOU9HRWdGZjNXazRzaDg0dWRLSWZxb29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWb9BMA0G CSqGSIb3DQEBCwUAA4IBAQCzIpsE1iocJoZ3nnYQPd2zX32Tkv4o+55gCPsxYG6S NYG6C3lT5bZ+7ol85aP87rSIzYSv38BsNFVnsxveS6++Nzas55vTGixuXneCqtfH Re0LUIJlLCfPxtWzLoWEKUSlL1Eqo/41aVmM3gmmJh9je72W5dJ4H8UBR5nHxLU6 7kwnBApTgZ+A4yDJbL6/gswdaFCNAmDXUD423HFTKeJUDO8bW7CiMkF4cF647Rf+ +0nLj6KaOYFXr7v1c2AENLyGZ31rHjUNxV8kXKC9uY5Vo6D3AVis//KINkNJHnI6 +NPYlNGrQIfkzo7kwhUQt0zo4Q82JZlW8AASD4mqm4o/ -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:11 2026 by rpki-client