This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa File: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (raw, json) Hash identifier: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA= Subject key identifier: 26:B3:1D:AB:C5:BF:26:CE:BD:7B:B3:DD:23:E0:AD:FB:9C:82:A4:3A Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Certificate serial: 019B7BA364DEB621324D8F5451A0A192CF95 Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51746 IP address blocks: 91.220.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:64:de:b6:21:32:4d:8f:54:51:a0:a1:92:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635 Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26b31dabc5bf26cebd7bb3dd23e0adfb9c82a43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:57:c1:52:15:d9:bf:20:0e:67:a5:71:81: 1e:32:a6:04:67:ef:8e:2c:95:be:28:a4:0e:68:41: 0b:bc:c9:40:df:55:0e:da:c8:cb:ba:86:79:96:13: 71:7e:71:67:d8:90:13:19:0a:2b:01:bf:9a:75:73: d9:a6:f7:f8:21:0c:66:f5:cd:8d:55:0c:8b:5e:a2: 19:cc:e8:34:af:e6:53:71:5a:46:4a:a9:38:59:c5: a3:05:54:e9:7e:51:6a:0e:ee:47:b7:19:bb:28:1b: 2f:ea:92:36:97:c2:6d:4f:68:d6:1a:16:6e:73:8c: 14:f6:b4:98:96:ba:08:7b:79:4e:42:f8:69:94:e2: c2:3d:c6:02:4a:9c:71:09:87:03:e9:5b:10:d6:42: 70:52:3a:5f:68:b5:7b:56:0a:63:61:7e:d6:7c:d5: 5a:a4:54:eb:2d:3a:a8:0f:c6:89:b5:96:0a:d2:3e: 88:56:8a:8d:f6:fb:48:6c:2f:d4:93:a5:42:be:66: f8:1c:36:6f:63:19:5d:fc:e3:90:96:d9:12:dc:db: 84:14:55:41:20:8e:90:08:d7:f2:80:1b:1a:a1:44: 21:c9:3b:ea:f8:63:08:66:08:60:26:3d:7a:0c:cb: a0:5a:f6:03:b3:2d:93:d0:28:b9:3a:67:44:16:c4: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B3:1D:AB:C5:BF:26:CE:BD:7B:B3:DD:23:E0:AD:FB:9C:82:A4:3A X509v3 Authority Key Identifier: keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.86.0/24 Signature Algorithm: sha256WithRSAEncryption 01:47:1c:7e:c0:21:3d:d2:3e:7a:be:a9:8a:b3:8e:63:ae:2a: d2:94:82:7a:60:82:3e:ff:fc:5c:53:e5:b4:1c:38:2b:9a:74: 4d:6c:b0:c3:0b:70:e1:26:ff:a3:62:af:5b:bb:e6:e6:f4:b5: c2:5c:5c:63:ca:4b:4c:6f:27:47:38:01:1b:0f:44:0b:e4:8b: 59:ab:5e:e9:9e:7b:db:8b:25:05:01:aa:9b:24:7e:a2:33:14: d1:49:18:cb:75:11:35:cf:18:76:fd:1e:61:d4:36:76:1c:a1: 66:aa:3f:6d:a2:e9:ed:93:3f:95:dc:e6:90:32:8f:43:96:8b: 56:f5:d9:1d:4c:e4:93:b3:45:88:18:6c:2c:4e:96:91:05:d6: d9:33:48:a2:28:58:d2:70:83:4e:8e:6a:30:17:67:1d:a4:d7: e4:64:4d:aa:c3:1a:2d:7d:e2:cf:30:d2:b3:94:99:65:32:f1: 3b:38:ef:cc:6f:ee:7c:de:bb:53:d6:a7:9b:f1:18:eb:af:74: 92:52:8d:e7:01:16:e6:76:bd:df:43:f6:79:c4:8d:ad:eb:22: 34:f1:1b:a7:e4:3f:32:d2:90:4d:72:c7:cd:95:97:7b:9c:27: cd:ce:f2:97:e9:40:06:f9:37:82:f5:91:cc:d7:ff:f1:fe:04: 60:c2:f4:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2TetiEyTY9UUaChks+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh NGQ2MzUwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmIzMWRhYmM1YmYyNmNlYmQ3YmIzZGQyM2UwYWRmYjljODJhNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jhXwVIV2b8gDmelcYEeMqYEZ++O LJW+KKQOaEELvMlA31UO2sjLuoZ5lhNxfnFn2JATGQorAb+adXPZpvf4IQxm9c2N VQyLXqIZzOg0r+ZTcVpGSqk4WcWjBVTpflFqDu5Htxm7KBsv6pI2l8JtT2jWGhZu c4wU9rSYlroIe3lOQvhplOLCPcYCSpxxCYcD6VsQ1kJwUjpfaLV7VgpjYX7WfNVa pFTrLTqoD8aJtZYK0j6IVoqN9vtIbC/Uk6VCvmb4HDZvYxld/OOQltkS3NuEFFVB II6QCNfygBsaoUQhyTvq+GMIZghgJj16DMugWvYDsy2T0Ci5OmdEFsSD2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCazHavFvybOvXuz3SPgrfucgqQ6MB8GA1UdIwQY MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt ZmMwMTQ4MTE5NjM4LzEvSnJNZHE4V19KczY5ZTdQZEktQ3QtNXlDcERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4 LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xWMA0G CSqGSIb3DQEBCwUAA4IBAQABRxx+wCE90j56vqmKs45jrirSlIJ6YII+//xcU+W0 HDgrmnRNbLDDC3DhJv+jYq9bu+bm9LXCXFxjyktMbydHOAEbD0QL5ItZq17pnnvb iyUFAaqbJH6iMxTRSRjLdRE1zxh2/R5h1DZ2HKFmqj9tountkz+V3OaQMo9DlotW 9dkdTOSTs0WIGGwsTpaRBdbZM0iiKFjScINOjmowF2cdpNfkZE2qwxotfeLPMNKz lJllMvE7OO/Mb+583rtT1qeb8Rjrr3SSUo3nARbmdr3fQ/Z5xI2t6yI08Run5D8y 0pBNcsfNlZd7nCfNzvKX6UAG+TeC9ZHM1//x/gRgwvTo -----END CERTIFICATE-----Generated at Sun Jan 11 23:32:00 2026 by rpki-client