This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa File: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (raw, json) Hash identifier: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg= Subject key identifier: 24:69:F6:18:AA:17:27:C8:CD:3B:DA:CC:69:96:F9:8F:A3:01:62:DF Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4789AA26E0EFC060E81919CFDBCE Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200420 IP address blocks: 91.232.117.0/24 maxlen: 24 185.76.82.0/24 maxlen: 24 192.109.248.0/24 maxlen: 24 195.49.205.0/24 maxlen: 24 212.110.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:47:89:aa:26:e0:ef:c0:60:e8:19:19:cf:db:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2469f618aa1727c8cd3bdacc6996f98fa30162df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:5c:a2:39:a0:2e:e7:4c:5a:a5:15:40:55: 1e:20:5c:06:32:52:da:ac:2a:67:5f:ce:b9:5f:fd: 54:fe:a4:09:57:ae:cb:10:c1:4a:40:ca:05:e4:c7: 3b:97:bd:b9:a4:09:a3:a1:59:38:e3:a7:9e:24:c0: ac:fe:b0:3a:59:99:32:76:de:6c:b6:87:80:81:26: 35:f8:9f:82:ea:bf:65:f7:a4:1f:23:55:0a:0e:53: 9d:85:a7:07:c4:51:df:d8:78:a8:27:41:a8:e0:ca: a4:01:68:90:47:c4:7f:34:da:52:b5:a3:ad:39:a6: 79:2f:a5:20:d5:2e:04:d1:3e:81:3c:2f:35:e6:c5: 87:1a:33:85:e8:30:6f:f2:30:22:0d:62:75:8c:42: 87:2c:4a:37:07:79:61:9a:37:23:48:50:2a:22:0c: 4e:4c:27:71:15:96:45:79:df:c9:4b:89:14:8b:0e: e5:90:df:6a:51:7e:0d:8e:b2:d1:b9:7b:df:1c:2e: 8a:82:36:95:9b:8c:2a:8b:7e:dc:10:54:05:d6:de: 2c:5e:57:d2:2a:4f:db:fe:8b:b5:4c:84:dd:82:2a: 12:a1:18:6a:92:f9:16:0c:e5:b7:31:2b:86:da:d6: eb:c2:9f:a7:ef:6d:f9:37:e4:bb:88:20:4c:16:c6: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:F6:18:AA:17:27:C8:CD:3B:DA:CC:69:96:F9:8F:A3:01:62:DF X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.117.0/24 185.76.82.0/24 192.109.248.0/24 195.49.205.0/24 212.110.157.0/24 Signature Algorithm: sha256WithRSAEncryption a7:fa:97:08:e4:14:c9:5f:18:0e:42:cf:8f:2e:1d:e9:10:16: d6:39:0e:c7:87:2e:e5:c5:ce:a0:e5:ef:b0:51:2e:f4:50:9a: e4:4f:9b:3f:c6:cb:02:6b:23:a4:72:c6:ec:29:c4:0b:06:b1: fa:54:40:e0:65:f4:37:62:fe:a6:88:d2:b0:b2:bd:bb:17:1d: ed:ab:f6:55:da:d6:c5:53:fb:00:65:95:d8:a6:cb:ba:36:c9: 53:41:df:99:2f:fc:d6:88:02:bf:99:7a:ff:f2:55:cc:40:49: 11:d4:22:07:ae:6c:28:11:53:3b:fe:0b:2a:fd:1a:18:64:34: 49:eb:d3:09:63:39:00:73:5c:a5:db:3a:2a:c0:ed:39:db:75: 07:db:2c:61:c7:21:13:f4:01:da:af:a5:d2:de:a2:db:3c:6b: 97:c7:e3:6d:50:a8:8e:df:d9:36:16:a6:fb:0e:f6:38:7d:94: 1e:62:87:a0:7b:bb:ab:ec:76:b5:d0:b2:b8:29:be:3e:82:11: 02:33:e6:42:68:ff:ce:82:30:d3:66:4e:8f:9f:2f:e1:36:c3: a8:88:2b:85:a4:5b:c7:0f:fd:2b:d5:71:a2:6b:2e:77:8f:2d: 6c:6c:af:9a:5b:df:8f:95:9f:ba:4b:92:a2:6a:5d:de:22:4e: aa:7e:11:70 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57EeJqibg78Bg6BkZz9vOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDY5ZjYxOGFhMTcyN2M4Y2QzYmRhY2M2OTk2Zjk4ZmEzMDE2MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweBcojmgLudMWqUVQFUeIFwGMlLa rCpnX865X/1U/qQJV67LEMFKQMoF5Mc7l725pAmjoVk446eeJMCs/rA6WZkydt5s toeAgSY1+J+C6r9l96QfI1UKDlOdhacHxFHf2HioJ0Go4MqkAWiQR8R/NNpStaOt OaZ5L6Ug1S4E0T6BPC815sWHGjOF6DBv8jAiDWJ1jEKHLEo3B3lhmjcjSFAqIgxO TCdxFZZFed/JS4kUiw7lkN9qUX4NjrLRuXvfHC6KgjaVm4wqi37cEFQF1t4sXlfS Kk/b/ou1TITdgioSoRhqkvkWDOW3MSuG2tbrwp+n7235N+S7iCBMFsaszQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCRp9hiqFyfIzTvazGmW+Y+jAWLfMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvSkduMkdLb1hKOGpOTzlyTWFaYjVqNk1CWXQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW+h1AwQA uUxSAwQAwG34AwQAwzHNAwQA1G6dMA0GCSqGSIb3DQEBCwUAA4IBAQCn+pcI5BTJ XxgOQs+PLh3pEBbWOQ7Hhy7lxc6g5e+wUS70UJrkT5s/xssCayOkcsbsKcQLBrH6 VEDgZfQ3Yv6miNKwsr27Fx3tq/ZV2tbFU/sAZZXYpsu6NslTQd+ZL/zWiAK/mXr/ 8lXMQEkR1CIHrmwoEVM7/gsq/RoYZDRJ69MJYzkAc1yl2zoqwO0523UH2yxhxyET 9AHar6XS3qLbPGuXx+NtUKiO39k2Fqb7DvY4fZQeYoege7ur7Ha10LK4Kb4+ghEC M+ZCaP/OgjDTZk6Pny/hNsOoiCuFpFvHD/0r1XGiay53jy1sbK+aW9+PlZ+6S5Ki al3eIk6qfhFw -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:15 2026 by rpki-client