This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa File: JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa (raw, json) Hash identifier: nIevIWHZnn6qTnX7U1mI+h/VSclaleHMr0m3T9yMnkk= Subject key identifier: 24:95:AD:A5:75:89:42:58:10:7F:68:8D:99:12:10:FA:89:48:6E:65 Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Certificate serial: 019B7EA569AAF39A62BB5930A74B2CE49685 Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6282 IP address blocks: 185.168.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:69:aa:f3:9a:62:bb:59:30:a7:4b:2c:e4:96:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2495ada575894258107f688d991210fa89486e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:2d:c9:c3:fe:93:52:b5:4e:7d:52:02:73: 26:04:0a:40:b0:50:98:8c:27:0a:5f:68:97:2d:6b: 9d:cb:dc:35:30:8e:1b:cf:73:fd:ac:78:c9:d2:61: 08:8c:be:84:2d:84:a5:65:6e:3f:4c:ff:63:0a:eb: e0:66:5c:d7:3f:6b:94:b5:2c:29:c7:4a:0b:5e:53: e6:64:e0:b3:7c:9d:0c:2c:eb:49:6d:f3:2a:eb:70: 80:ab:e5:3f:ce:1c:bf:b2:8b:57:59:a1:c5:dc:d9: 3a:87:23:74:b7:35:4b:a5:ad:98:d4:01:dc:1a:44: 5d:1b:1f:c9:76:cd:84:34:70:95:4f:1e:a4:1e:0c: 38:da:a8:1f:8d:c0:60:31:3a:86:d9:ea:3d:c6:ff: 85:bf:e7:c4:a0:b8:1d:fa:ef:f9:50:15:0a:47:18: 4b:9f:2f:60:aa:07:21:45:d3:0e:ea:05:b9:71:31: 2c:87:18:1b:b7:40:04:1f:6b:d3:f2:80:f6:ca:e6: 4c:ef:9c:f0:84:7f:40:36:9a:2c:02:90:0e:be:17: cc:bc:37:16:9c:6a:e3:b1:ae:ba:7f:fd:13:d0:50: 23:17:b1:79:9d:40:01:dd:40:11:95:48:52:0c:0a: 90:92:d6:44:60:4e:cf:a0:aa:09:81:6e:02:cd:be: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:AD:A5:75:89:42:58:10:7F:68:8D:99:12:10:FA:89:48:6E:65 X509v3 Authority Key Identifier: keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.157.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a5:3e:ba:28:26:2c:0b:d3:d5:11:e7:b5:5c:c6:dc:40:c9: f8:01:98:30:6a:91:c3:5e:39:ff:31:27:87:d7:46:13:12:7c: c4:d7:c8:36:75:f4:7b:e8:ec:99:dc:54:04:65:15:e2:c9:27: 15:cb:0b:80:03:5c:8a:ab:b9:af:4e:18:33:0a:ef:6c:0a:d3: 7e:0a:60:8d:aa:da:ec:98:53:d0:e0:c7:52:52:1c:f7:df:0e: ee:3b:f1:f6:50:f5:05:d4:44:42:c2:f2:0f:15:29:73:5d:dc: c6:48:f7:19:60:3a:f2:41:9c:bb:8f:8f:43:b1:66:30:42:ce: d0:af:b0:ad:3c:ad:f8:e1:81:1d:46:15:2f:be:7d:48:0c:5d: 15:f4:05:52:3d:be:d0:d2:d2:a4:6a:14:cc:84:f1:0a:02:3e: b7:10:af:7f:3e:b2:b7:20:3f:83:4c:ba:00:7c:28:fd:25:95: ff:71:a1:9b:e0:fc:47:ee:6b:a7:99:50:76:9b:d8:eb:bb:47: 28:7c:85:c3:95:28:40:00:db:7b:b1:3d:71:e4:48:19:8d:88: 0e:7d:cf:ed:4a:ea:a1:ac:28:1a:c8:9f:a8:1c:9e:da:3a:a3: c7:5f:4a:2f:46:44:da:fb:50:b8:ba:8e:04:6b:08:75:ff:d5: 18:1e:f1:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pWmq85piu1kwp0ss5JaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx MThiODUwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDk1YWRhNTc1ODk0MjU4MTA3ZjY4OGQ5OTEyMTBmYTg5NDg2ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttktycP+k1K1Tn1SAnMmBApAsFCY jCcKX2iXLWudy9w1MI4bz3P9rHjJ0mEIjL6ELYSlZW4/TP9jCuvgZlzXP2uUtSwp x0oLXlPmZOCzfJ0MLOtJbfMq63CAq+U/zhy/sotXWaHF3Nk6hyN0tzVLpa2Y1AHc GkRdGx/Jds2ENHCVTx6kHgw42qgfjcBgMTqG2eo9xv+Fv+fEoLgd+u/5UBUKRxhL ny9gqgchRdMO6gW5cTEshxgbt0AEH2vT8oD2yuZM75zwhH9ANposApAOvhfMvDcW nGrjsa66f/0T0FAjF7F5nUAB3UARlUhSDAqQktZEYE7PoKoJgW4Czb7GOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSVraV1iUJYEH9ojZkSEPqJSG5lMB8GA1UdIwQY MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt MGRiYjNiOGRiMTVmLzEvSkpXdHBYV0pRbGdRZjJpTm1SSVEtb2xJYm1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaidMA0G CSqGSIb3DQEBCwUAA4IBAQA+pT66KCYsC9PVEee1XMbcQMn4AZgwapHDXjn/MSeH 10YTEnzE18g2dfR76OyZ3FQEZRXiyScVywuAA1yKq7mvThgzCu9sCtN+CmCNqtrs mFPQ4MdSUhz33w7uO/H2UPUF1ERCwvIPFSlzXdzGSPcZYDryQZy7j49DsWYwQs7Q r7CtPK344YEdRhUvvn1IDF0V9AVSPb7Q0tKkahTMhPEKAj63EK9/PrK3ID+DTLoA fCj9JZX/caGb4PxH7munmVB2m9jru0cofIXDlShAANt7sT1x5EgZjYgOfc/tSuqh rCgayJ+oHJ7aOqPHX0ovRkTa+1C4uo4Eawh1/9UYHvFo -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:26 2026 by rpki-client