This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/JgAnCeNDpTLcRHgLzRkMzF025K0.roa File: JgAnCeNDpTLcRHgLzRkMzF025K0.roa (raw, json) Hash identifier: Ove/nj1pY736un6NN+0QVHsa6jfrCM9fia6JOsT8LGE= Subject key identifier: 26:00:27:09:E3:43:A5:32:DC:44:78:0B:CD:19:0C:CC:5D:36:E4:AD Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B797DF1EF18F0F00D07AF6A6B7B4901D5 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/JgAnCeNDpTLcRHgLzRkMzF025K0.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 91.199.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f1:ef:18:f0:f0:0d:07:af:6a:6b:7b:49:01:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26002709e343a532dc44780bcd190ccc5d36e4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:c9:32:f4:c0:fc:ee:d1:07:60:62:e2:36: 2b:70:ac:f2:bf:41:61:cc:01:bd:fd:5c:28:7b:bc: d4:ad:f5:2b:80:27:8e:4d:8d:13:2a:d4:c4:cf:07: 1f:4e:c1:ad:c7:92:75:57:f9:d0:64:ef:d2:92:eb: 6f:ef:d1:c4:8f:e2:af:0d:1a:4b:18:91:ba:99:bf: 7d:fb:78:a7:f7:f5:77:69:f4:a2:12:81:e8:d0:e2: db:37:b8:90:eb:0f:a5:22:1f:ae:f5:31:7c:5c:6e: bc:e5:36:54:26:b7:c8:7e:58:4f:1b:44:25:a9:49: 26:9e:27:78:07:b1:33:0d:92:e7:77:19:8a:bd:e5: 64:db:1b:6c:57:08:22:ea:51:67:0c:09:9d:da:d7: 0b:70:7d:84:4d:67:a8:77:10:46:09:af:11:3d:40: 07:79:18:f6:2a:d1:9c:c2:ec:33:c0:eb:9e:a9:8a: f8:26:44:79:26:e9:93:cd:7e:33:97:77:2b:bd:ca: 42:d5:4e:de:09:1f:86:fa:54:22:62:1f:5b:f0:8c: f7:cb:aa:75:8c:32:1b:b9:8c:1a:50:75:5b:ec:8e: 7b:c8:6e:29:cb:9b:78:bb:a4:79:62:25:ea:5c:f9: 9f:aa:db:58:90:27:3e:b1:c5:34:e1:63:d0:0e:25: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:00:27:09:E3:43:A5:32:DC:44:78:0B:CD:19:0C:CC:5D:36:E4:AD X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/JgAnCeNDpTLcRHgLzRkMzF025K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.42.0/24 Signature Algorithm: sha256WithRSAEncryption 70:51:f5:26:95:d4:5e:66:94:04:9a:4c:f2:e7:74:70:17:f9: 17:cb:4b:24:80:58:05:b7:a8:56:bf:63:db:23:00:22:64:0b: b4:4e:1e:6f:11:e0:e5:8a:e6:06:48:1d:c9:19:25:69:d6:18: bd:be:18:d8:46:db:26:f6:9e:64:b3:26:1e:53:20:fb:8d:12: 6a:64:8a:e2:0f:33:ab:00:ed:90:9f:f4:2c:fe:56:4b:fa:84: 41:7b:a1:4d:32:44:2d:33:5c:93:03:0f:49:a5:65:61:5c:35: 12:59:cc:ca:38:46:a9:38:fb:f1:25:e1:c8:66:ec:17:fa:c1: 37:66:fa:cd:19:ea:25:13:3b:a3:57:53:3a:1c:f0:4f:5e:17: 83:ba:f9:b3:99:4a:50:7c:e5:c9:d7:a2:8d:8f:0b:8a:a5:19: d4:4d:c0:4c:a5:d8:b1:51:9a:62:48:ce:9e:8f:7d:70:37:6b: e6:12:a4:59:8d:50:79:f1:e3:1c:0f:9c:cd:dd:b9:78:02:ae: a9:b0:20:08:cd:df:4d:f2:c0:ef:c0:7f:67:57:d7:7c:17:6c: 84:d6:03:05:58:c4:4f:de:00:9d:b2:6c:56:9e:4e:b5:96:89: d5:9f:b1:61:00:18:86:c0:fc:2a:d9:a1:f2:60:53:60:ee:cd: 2c:df:cd:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffHvGPDwDQevamt7SQHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjAwMjcwOWUzNDNhNTMyZGM0NDc4MGJjZDE5MGNjYzVkMzZlNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PnJMvTA/O7RB2Bi4jYrcKzyv0Fh zAG9/Vwoe7zUrfUrgCeOTY0TKtTEzwcfTsGtx5J1V/nQZO/Skutv79HEj+KvDRpL GJG6mb99+3in9/V3afSiEoHo0OLbN7iQ6w+lIh+u9TF8XG685TZUJrfIflhPG0Ql qUkmnid4B7EzDZLndxmKveVk2xtsVwgi6lFnDAmd2tcLcH2ETWeodxBGCa8RPUAH eRj2KtGcwuwzwOueqYr4JkR5JumTzX4zl3crvcpC1U7eCR+G+lQiYh9b8Iz3y6p1 jDIbuYwaUHVb7I57yG4py5t4u6R5YiXqXPmfqttYkCc+scU04WPQDiWCuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYAJwnjQ6Uy3ER4C80ZDMxdNuStMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvSmdBbkNlTkRwVExjUkhnTHpSa016RjAyNUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cqMA0G CSqGSIb3DQEBCwUAA4IBAQBwUfUmldReZpQEmkzy53RwF/kXy0skgFgFt6hWv2Pb IwAiZAu0Th5vEeDliuYGSB3JGSVp1hi9vhjYRtsm9p5ksyYeUyD7jRJqZIriDzOr AO2Qn/Qs/lZL+oRBe6FNMkQtM1yTAw9JpWVhXDUSWczKOEapOPvxJeHIZuwX+sE3 ZvrNGeolEzujV1M6HPBPXheDuvmzmUpQfOXJ16KNjwuKpRnUTcBMpdixUZpiSM6e j31wN2vmEqRZjVB58eMcD5zN3bl4Aq6psCAIzd9N8sDvwH9nV9d8F2yE1gMFWMRP 3gCdsmxWnk61lonVn7FhABiGwPwq2aHyYFNg7s0s380T -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:16 2026 by rpki-client