This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/JGFsu11gMw9F7k2pf3aoCr2qqgc.roa File: JGFsu11gMw9F7k2pf3aoCr2qqgc.roa (raw, json) Hash identifier: /VEyQYusggRI1neKRiaRdt+JnQjrF2mEYj/mhbapZW4= Subject key identifier: 24:61:6C:BB:5D:60:33:0F:45:EE:4D:A9:7F:76:A8:0A:BD:AA:AA:07 Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Certificate serial: 019B7FF2998DC70090FEA68B1F3B9BFF4D52 Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/JGFsu11gMw9F7k2pf3aoCr2qqgc.roa Signing time: Fri 02 Jan 2026 18:22:44 +0000 ROA not before: Fri 02 Jan 2026 18:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51431 IP address blocks: 77.237.66.0/24 maxlen: 24 77.237.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:99:8d:c7:00:90:fe:a6:8b:1f:3b:9b:ff:4d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24616cbb5d60330f45ee4da97f76a80abdaaaa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:d5:76:3a:39:0e:8b:c0:8c:f9:34:72:1e: 04:04:08:e6:c7:b4:45:26:62:4f:26:1b:e3:da:6b: 1f:6a:01:2f:47:06:68:db:16:93:2a:b0:57:50:a8: 3c:b8:19:10:f3:01:26:e4:c7:35:45:b8:8e:6c:fd: ae:59:03:00:71:f9:59:73:e2:5d:1c:09:f2:93:f0: c3:5d:75:6f:3e:46:c6:b4:c8:ef:33:42:82:ff:67: 7e:26:22:42:e1:2c:09:ee:3c:74:3f:c0:b1:bc:22: 11:20:92:07:1b:f1:f0:c3:04:e9:fe:5e:1b:03:0f: 6a:1c:26:e9:cc:ab:be:aa:ca:de:e7:1f:5b:e8:10: fb:cd:87:be:58:77:7e:25:93:4c:ac:94:a2:a0:2b: b7:d6:54:9e:67:4c:e4:78:79:a4:39:a4:37:b5:39: ed:5e:30:dc:13:83:92:a2:f1:b1:53:90:6c:8d:c3: 84:bf:83:55:62:4f:f9:00:36:c0:0c:d2:6c:11:f5: 21:9c:6f:60:e0:f5:8b:61:d6:59:84:fb:34:78:8d: 3b:aa:69:1e:02:48:40:d5:74:2d:f9:b6:5c:d5:02: 6d:45:46:9b:d6:e3:6e:5a:fa:cd:96:08:f8:6e:ff: 78:15:d0:4c:ec:a7:3e:8e:37:32:9c:2c:36:22:55: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:61:6C:BB:5D:60:33:0F:45:EE:4D:A9:7F:76:A8:0A:BD:AA:AA:07 X509v3 Authority Key Identifier: keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/JGFsu11gMw9F7k2pf3aoCr2qqgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.66.0/23 Signature Algorithm: sha256WithRSAEncryption 30:3a:ea:21:ac:0f:30:85:80:49:ba:1d:9c:af:d4:20:2d:43: b2:0a:47:6e:66:8d:e8:5a:c1:94:c5:43:4d:c1:2a:49:6f:d8: 2f:c6:69:94:56:44:f1:89:4b:55:4a:a1:2e:8d:15:a9:3c:7a: 26:a7:bf:b4:de:66:73:e0:4f:46:41:2e:db:2f:64:9c:71:51: 47:17:de:de:83:35:79:8c:4e:dc:b4:7e:1b:fd:c5:9a:e9:d2: 98:b3:cf:34:38:04:3a:3d:4c:bd:0b:65:52:87:ac:ed:fa:fa: 61:b4:f9:51:f2:ae:c3:65:b1:f3:1b:9d:72:88:07:af:2c:08: d1:2c:8e:5b:6e:6b:3a:3d:03:cc:e8:93:49:b6:a8:f2:0d:8b: cf:e3:20:30:c0:b4:f7:c8:1e:ac:9a:42:cd:41:ec:14:9f:7c: 80:ce:cc:09:75:79:48:2c:5a:cf:df:72:a2:e7:32:13:83:3a: c2:0b:a5:19:eb:66:75:13:0c:c7:92:74:6f:df:58:fa:51:51: 77:f0:39:7f:bb:b4:c2:19:64:4a:7b:be:bc:90:0d:25:ff:61: 30:ca:96:45:50:34:1a:66:a1:a3:8a:d0:a5:76:32:82:b2:b5: b1:33:75:d0:d9:9c:0a:56:74:3a:3c:0d:26:a0:f3:35:39:4d: 99:04:f8:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8pmNxwCQ/qaLHzub/01SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2 Y2JjMTQwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDYxNmNiYjVkNjAzMzBmNDVlZTRkYTk3Zjc2YTgwYWJkYWFhYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26HVdjo5DovAjPk0ch4EBAjmx7RF JmJPJhvj2msfagEvRwZo2xaTKrBXUKg8uBkQ8wEm5Mc1RbiObP2uWQMAcflZc+Jd HAnyk/DDXXVvPkbGtMjvM0KC/2d+JiJC4SwJ7jx0P8CxvCIRIJIHG/HwwwTp/l4b Aw9qHCbpzKu+qsre5x9b6BD7zYe+WHd+JZNMrJSioCu31lSeZ0zkeHmkOaQ3tTnt XjDcE4OSovGxU5BsjcOEv4NVYk/5ADbADNJsEfUhnG9g4PWLYdZZhPs0eI07qmke AkhA1XQt+bZc1QJtRUab1uNuWvrNlgj4bv94FdBM7Kc+jjcynCw2IlU65QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCRhbLtdYDMPRe5NqX92qAq9qqoHMB8GA1UdIwQY MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt ZmY2ODUxNzc3MGU0LzEvSkdGc3UxMWdNdzlGN2sycGYzYW9DcjJxcWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0 LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTe1CMA0G CSqGSIb3DQEBCwUAA4IBAQAwOuohrA8whYBJuh2cr9QgLUOyCkduZo3oWsGUxUNN wSpJb9gvxmmUVkTxiUtVSqEujRWpPHomp7+03mZz4E9GQS7bL2SccVFHF97egzV5 jE7ctH4b/cWa6dKYs880OAQ6PUy9C2VSh6zt+vphtPlR8q7DZbHzG51yiAevLAjR LI5bbms6PQPM6JNJtqjyDYvP4yAwwLT3yB6smkLNQewUn3yAzswJdXlILFrP33Ki 5zITgzrCC6UZ62Z1EwzHknRv31j6UVF38Dl/u7TCGWRKe768kA0l/2EwypZFUDQa ZqGjitCldjKCsrWxM3XQ2ZwKVnQ6PA0moPM1OU2ZBPhR -----END CERTIFICATE-----Generated at Mon Jan 26 01:24:58 2026 by rpki-client