This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_JStqxohmn4P46Jzv1xfqnIG_sQ.roa File: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (raw, json) Hash identifier: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo= Subject key identifier: FC:94:AD:AB:1A:21:9A:7E:0F:E3:A2:73:BF:5C:5F:AA:72:06:FE:C4 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019B7C7FC303BCA5064906C29F4856CC402F Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_JStqxohmn4P46Jzv1xfqnIG_sQ.roa Signing time: Fri 02 Jan 2026 02:18:26 +0000 ROA not before: Fri 02 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197706 IP address blocks: 45.67.0.0/22 maxlen: 32 80.246.28.0/24 maxlen: 24 188.68.0.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c3:03:bc:a5:06:49:06:c2:9f:48:56:cc:40:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc94adab1a219a7e0fe3a273bf5c5faa7206fec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:8a:29:d3:3b:4a:ad:fc:c5:b2:9d:88:17: 13:87:f0:42:1e:75:0e:8a:5a:7b:60:02:9d:77:e9: d0:bb:00:58:af:99:fb:bf:6a:23:d5:ee:f4:8c:b7: 6e:1c:2a:ae:ae:20:0c:e2:b1:39:4c:2a:77:de:a1: 57:d8:5f:ab:61:db:0a:51:0a:f5:d6:30:e3:61:19: c4:3a:4f:e7:e2:84:e6:b8:71:48:98:6c:ff:c3:5e: 87:fe:38:28:82:e5:d7:8f:d4:ba:16:88:66:8a:61: cc:1c:d5:0f:77:a8:66:72:9d:14:92:0e:c4:e8:6c: 00:4c:bc:19:ae:47:eb:13:0e:a4:c3:28:71:3c:0e: 9a:f0:99:50:29:f7:3a:92:fd:8b:fc:24:da:9c:04: 43:44:d0:ae:90:1b:1b:27:d3:bc:4c:51:71:3d:b3: d3:31:6a:79:fb:de:e9:03:c6:53:a5:de:46:2a:85: 4e:0c:df:94:de:bb:8e:5e:dc:98:15:da:b9:5a:d6: 21:00:9d:8b:b6:50:2c:9d:25:3e:61:2e:65:45:bd: 71:a4:04:7d:83:f3:b3:d4:34:4e:30:8e:12:c8:5b: ec:a2:a0:35:4c:48:01:2e:1b:0e:7a:78:0d:0b:5e: c7:23:d5:93:1b:06:0c:e4:d4:b4:7d:55:b0:9c:ab: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:AD:AB:1A:21:9A:7E:0F:E3:A2:73:BF:5C:5F:AA:72:06:FE:C4 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_JStqxohmn4P46Jzv1xfqnIG_sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.0.0/22 80.246.28.0/24 188.68.0.0/23 Signature Algorithm: sha256WithRSAEncryption 58:ab:30:06:62:59:d3:d3:ba:1c:42:2f:ef:d0:85:57:81:01: b2:4a:79:2f:3e:16:0c:c5:d2:19:b1:18:e6:40:d9:53:bd:17: bb:5b:60:d8:9f:4a:35:8d:a5:89:63:13:c8:ce:0a:12:fb:7b: ff:ea:e5:15:2e:f2:5c:18:12:13:13:ab:28:ad:e2:c4:4e:df: 7d:93:cb:89:8a:63:33:26:76:11:5d:5a:08:65:c9:75:33:c0: 01:67:ad:ac:7f:82:b9:ab:e3:c0:43:50:ec:ef:9e:ca:08:50: 26:3f:ff:63:29:28:a8:de:53:3c:52:33:89:01:f7:45:01:15: e0:7e:ab:9f:58:50:e4:3b:b0:5e:64:25:e7:11:5e:9c:a2:0e: 70:9a:01:6a:3f:d6:17:99:7f:c3:f8:2f:b2:22:c7:73:27:68: a8:dd:cc:d0:f8:bf:cb:25:42:b3:d2:54:30:fd:1f:19:60:99: ce:c6:bf:19:93:ec:a1:c8:0f:14:a8:0e:ef:28:6a:2f:ef:46: 29:8f:6b:07:5a:e0:b9:34:6a:b3:14:ea:b1:af:7f:c5:f2:b6: 26:2e:00:84:10:10:62:ff:8a:d4:5a:c9:0b:2d:c8:fc:8a:09: 1d:f4:56:91:06:fc:98:f0:bd:54:7b:aa:83:70:1b:67:56:fe: f1:e6:a7:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f8MDvKUGSQbCn0hWzEAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzk0YWRhYjFhMjE5YTdlMGZlM2EyNzNiZjVjNWZhYTcyMDZmZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6KKdM7Sq38xbKdiBcTh/BCHnUO ilp7YAKdd+nQuwBYr5n7v2oj1e70jLduHCquriAM4rE5TCp33qFX2F+rYdsKUQr1 1jDjYRnEOk/n4oTmuHFImGz/w16H/jgoguXXj9S6FohmimHMHNUPd6hmcp0Ukg7E 6GwATLwZrkfrEw6kwyhxPA6a8JlQKfc6kv2L/CTanARDRNCukBsbJ9O8TFFxPbPT MWp5+97pA8ZTpd5GKoVODN+U3ruOXtyYFdq5WtYhAJ2LtlAsnSU+YS5lRb1xpAR9 g/Oz1DROMI4SyFvsoqA1TEgBLhsOengNC17HI9WTGwYM5NS0fVWwnKsGFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPyUrasaIZp+D+Oic79cX6pyBv7EMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvX0pTdHF4b2htbjRQNDZKenYxeGZxbklHX3NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLUMAAwQA UPYcAwQBvEQAMA0GCSqGSIb3DQEBCwUAA4IBAQBYqzAGYlnT07ocQi/v0IVXgQGy SnkvPhYMxdIZsRjmQNlTvRe7W2DYn0o1jaWJYxPIzgoS+3v/6uUVLvJcGBITE6so reLETt99k8uJimMzJnYRXVoIZcl1M8ABZ62sf4K5q+PAQ1Ds757KCFAmP/9jKSio 3lM8UjOJAfdFARXgfqufWFDkO7BeZCXnEV6cog5wmgFqP9YXmX/D+C+yIsdzJ2io 3czQ+L/LJUKz0lQw/R8ZYJnOxr8Zk+yhyA8UqA7vKGov70Ypj2sHWuC5NGqzFOqx r3/F8rYmLgCEEBBi/4rUWskLLcj8igkd9FaRBvyY8L1Ue6qDcBtnVv7x5qcG -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:37 2026 by rpki-client