This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/JovM9qLDTSF0r7lJzUPHMrQ0xao.roa File: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (raw, json) Hash identifier: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8= Subject key identifier: 26:8B:CC:F6:A2:C3:4D:21:74:AF:B9:49:CD:43:C7:32:B4:34:C5:AA Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019B78A2473FFDE82F291C91C73C67761446 Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/JovM9qLDTSF0r7lJzUPHMrQ0xao.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47344 IP address blocks: 91.202.248.0/22 maxlen: 22 91.202.248.0/24 maxlen: 24 91.202.249.0/24 maxlen: 24 91.202.250.0/24 maxlen: 24 91.202.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:47:3f:fd:e8:2f:29:1c:91:c7:3c:67:76:14:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268bccf6a2c34d2174afb949cd43c732b434c5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:4f:39:6d:54:db:15:a0:a1:63:e7:19:6f: 00:86:d0:a8:5b:5a:38:f9:7a:e7:e3:eb:8c:9a:1e: de:0f:98:99:12:6f:32:95:b3:91:42:9b:14:99:e8: f4:cb:aa:68:47:2e:af:6c:bf:f9:d0:0d:d4:2e:6a: 4e:fc:88:0e:d8:1f:e5:5d:34:39:a1:5e:ca:73:32: b0:49:dc:b8:67:f6:12:50:4e:6c:0e:9a:e6:0b:35: 99:98:ac:d9:33:1a:97:62:3b:c8:03:59:d7:20:35: 21:ef:17:a0:8f:74:3b:c1:c2:b4:88:c7:5c:67:5c: 22:d6:7a:54:54:15:db:82:ac:d9:3f:07:0c:bf:5f: 47:05:b4:9c:56:05:f6:93:ce:80:7e:a0:ea:e4:05: c8:e1:ac:d6:14:aa:91:ba:a5:56:6d:1b:f3:14:3b: c8:c7:19:d6:a8:0c:11:53:2c:1e:2b:91:4f:58:cf: 4c:bf:3e:f5:76:f0:38:1d:03:ea:a4:54:fc:5e:5c: 2e:69:60:a8:60:1a:e0:0b:f8:f7:12:94:5c:f7:72: c5:03:35:af:0f:75:fe:a4:f2:d9:84:b3:00:ae:dd: 78:de:b2:aa:c5:22:90:f0:35:95:42:2f:a1:75:b3: b9:28:28:f2:c2:da:f8:17:56:d3:45:f2:b3:bd:74: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:CC:F6:A2:C3:4D:21:74:AF:B9:49:CD:43:C7:32:B4:34:C5:AA X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/JovM9qLDTSF0r7lJzUPHMrQ0xao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.248.0/22 Signature Algorithm: sha256WithRSAEncryption 68:9b:a4:60:26:2b:38:03:1f:ed:0f:d7:6e:0a:f7:2f:ce:94: 0c:d0:9c:e7:61:de:63:e6:2d:0a:c7:b7:e5:66:43:9f:6f:33: c9:e4:27:3c:10:f8:00:ea:56:a5:bd:b4:86:2c:1e:21:58:76: e8:cd:04:1a:11:e6:70:7c:8a:91:ea:46:75:29:aa:44:ae:41: 6b:e2:60:51:b4:e2:c5:a6:cb:b3:a6:d4:3c:f0:52:db:21:51: 87:32:37:5d:39:85:29:12:37:5b:48:ee:6d:60:9d:f1:ea:00: 05:6d:3c:08:6e:72:3d:cb:6c:30:74:8a:74:ea:23:28:fa:2a: 75:8e:57:9d:43:e6:fe:3e:f9:e5:cf:e2:2f:c2:76:ae:cd:7a: 7c:fc:0d:76:65:2b:42:36:1c:2a:f2:61:21:10:c8:11:55:0e: a7:62:0c:7a:03:21:62:99:a9:4f:41:09:12:c1:8a:cf:95:67: cd:14:b3:82:39:16:17:dc:d1:b7:aa:5a:90:62:43:9f:53:c2: 0a:80:c2:1f:1c:bd:f9:cc:d6:3f:4b:ae:05:4b:67:c1:05:50: 3f:64:99:77:72:4c:d2:1c:a3:22:fb:da:cf:b6:a0:f8:a7:ec: b7:ec:16:70:64:34:fd:7b:f8:ea:ec:e8:2a:7b:c2:54:fc:65: a0:3a:fd:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okc//egvKRyRxzxndhRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjhiY2NmNmEyYzM0ZDIxNzRhZmI5NDljZDQzYzczMmI0MzRjNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6hPOW1U2xWgoWPnGW8AhtCoW1o4 +Xrn4+uMmh7eD5iZEm8ylbORQpsUmej0y6poRy6vbL/50A3ULmpO/IgO2B/lXTQ5 oV7KczKwSdy4Z/YSUE5sDprmCzWZmKzZMxqXYjvIA1nXIDUh7xegj3Q7wcK0iMdc Z1wi1npUVBXbgqzZPwcMv19HBbScVgX2k86AfqDq5AXI4azWFKqRuqVWbRvzFDvI xxnWqAwRUyweK5FPWM9Mvz71dvA4HQPqpFT8XlwuaWCoYBrgC/j3EpRc93LFAzWv D3X+pPLZhLMArt143rKqxSKQ8DWVQi+hdbO5KCjywtr4F1bTRfKzvXQj7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCaLzPaiw00hdK+5Sc1DxzK0NMWqMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvSm92TTlxTERUU0YwcjdsSnpVUEhNclEweGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8r4MA0G CSqGSIb3DQEBCwUAA4IBAQBom6RgJis4Ax/tD9duCvcvzpQM0JznYd5j5i0Kx7fl ZkOfbzPJ5Cc8EPgA6lalvbSGLB4hWHbozQQaEeZwfIqR6kZ1KapErkFr4mBRtOLF psuzptQ88FLbIVGHMjddOYUpEjdbSO5tYJ3x6gAFbTwIbnI9y2wwdIp06iMo+ip1 jledQ+b+Pvnlz+IvwnauzXp8/A12ZStCNhwq8mEhEMgRVQ6nYgx6AyFimalPQQkS wYrPlWfNFLOCORYX3NG3qlqQYkOfU8IKgMIfHL35zNY/S64FS2fBBVA/ZJl3ckzS HKMi+9rPtqD4p+y37BZwZDT9e/jq7Ogqe8JU/GWgOv1V -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:43 2026 by rpki-client