This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JaP4jgAUmEDlCA18oQKQK36xKss.roa File: JaP4jgAUmEDlCA18oQKQK36xKss.roa (raw, json) Hash identifier: lpJ2K+IVor8Ce3db9fIk4C14cXfWtyUlQ9SdaY9opS0= Subject key identifier: 25:A3:F8:8E:00:14:98:40:E5:08:0D:7C:A1:02:90:2B:7E:B1:2A:CB Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5AC2003AA66A969BBCB1BD840A8D Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JaP4jgAUmEDlCA18oQKQK36xKss.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49857 IP address blocks: 87.229.101.0/24 maxlen: 24 87.229.119.0/24 maxlen: 24 178.238.216.0/24 maxlen: 24 178.238.217.0/24 maxlen: 24 2a02:730:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5a:c2:00:3a:a6:6a:96:9b:bc:b1:bd:84:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a3f88e00149840e5080d7ca102902b7eb12acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:55:4f:d7:b1:f4:63:01:ae:e0:79:75:e3: 92:5c:a2:44:7d:eb:49:b5:df:12:26:3c:dc:1f:39: a9:07:fc:22:37:b9:0e:d6:de:43:96:4f:60:47:45: 9d:be:74:1c:c1:37:04:c2:e4:25:f6:6e:0f:df:c2: e1:ec:77:ae:ea:67:35:e0:8e:63:64:1e:45:e5:f4: 20:0c:08:ac:9e:0d:02:13:5f:d7:26:f0:49:ed:f5: 86:75:02:e8:79:bd:22:89:1b:92:c6:0a:e9:bb:23: 41:fc:83:72:4b:52:0c:a8:a1:60:54:d5:b1:aa:e1: 4c:1a:20:8d:3b:33:9a:66:c5:81:9e:3c:bf:39:a4: 01:fd:1e:2b:bc:b4:68:77:09:d1:87:e7:bf:05:c0: ad:88:9e:9a:6f:36:17:4c:84:a9:78:7e:6b:c9:34: 10:75:07:d8:f3:f9:ee:ca:7c:bc:ba:8c:ac:8c:29: f5:89:f9:94:ba:8f:ad:9d:ac:c2:ac:a5:8f:d2:b3: e7:3e:53:28:f2:19:19:24:e6:59:60:7f:8f:c6:fa: bb:6d:4c:18:58:29:c7:7c:59:27:3e:b5:80:9b:08: 05:a8:3e:f3:77:60:94:e8:5f:1d:19:fe:d5:f6:4f: 50:53:00:7c:af:4b:a9:9a:e4:0e:34:8f:6e:4b:24: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:F8:8E:00:14:98:40:E5:08:0D:7C:A1:02:90:2B:7E:B1:2A:CB X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JaP4jgAUmEDlCA18oQKQK36xKss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.101.0/24 87.229.119.0/24 178.238.216.0/23 IPv6: 2a02:730:5000::/48 Signature Algorithm: sha256WithRSAEncryption 6e:18:ae:a4:6a:0e:1d:e7:89:0c:38:a7:c8:26:29:9d:10:f9: 8f:97:a3:0b:11:67:73:f0:80:32:b4:c4:71:7f:95:53:9b:82: d2:f2:b0:9d:3c:01:ea:ef:71:e5:2d:d7:b7:6c:1e:d3:94:d4: c7:8e:1c:88:22:60:93:33:c0:01:9c:2c:b6:10:00:11:18:ee: ce:dc:03:d5:2c:95:ea:de:9c:02:d9:10:f4:d2:45:f7:86:98: b6:47:07:09:d7:42:d1:32:07:84:9f:ea:6c:6b:5c:80:64:db: 8a:2a:1a:51:ae:05:98:be:e7:99:b8:e5:47:5d:d7:54:57:7c: bc:f5:5f:1c:57:f9:c6:e1:8d:e5:f2:6a:60:02:c0:da:24:3b: e4:94:ba:48:28:8d:c1:1a:9a:06:b2:8d:71:d5:3c:9f:0e:21: 3a:fe:46:b7:9c:40:0a:db:37:0f:28:ad:8d:f4:21:a9:f2:1e: bf:b8:33:07:f8:d6:12:76:fd:33:ed:ad:82:11:e1:e5:76:6d: 58:be:6d:72:b6:57:25:e3:8d:b8:85:10:bf:4a:ed:52:24:36: b0:b2:48:53:71:12:1a:03:11:b5:d1:1a:38:30:a2:22:6e:d3: 13:d3:42:00:f4:f9:9c:ba:54:be:94:2a:76:c5:50:03:b4:61: 40:e7:fa:9e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87lrCADqmapabvLG9hAqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWEzZjg4ZTAwMTQ5ODQwZTUwODBkN2NhMTAyOTAyYjdlYjEyYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt5VT9ex9GMBruB5deOSXKJEfetJ td8SJjzcHzmpB/wiN7kO1t5Dlk9gR0WdvnQcwTcEwuQl9m4P38Lh7Heu6mc14I5j ZB5F5fQgDAisng0CE1/XJvBJ7fWGdQLoeb0iiRuSxgrpuyNB/INyS1IMqKFgVNWx quFMGiCNOzOaZsWBnjy/OaQB/R4rvLRodwnRh+e/BcCtiJ6abzYXTISpeH5ryTQQ dQfY8/nuyny8uoysjCn1ifmUuo+tnazCrKWP0rPnPlMo8hkZJOZZYH+Pxvq7bUwY WCnHfFknPrWAmwgFqD7zd2CU6F8dGf7V9k9QUwB8r0upmuQONI9uSyRJqwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCWj+I4AFJhA5QgNfKECkCt+sSrLMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvSmFQNGpnQVVtRURsQ0ExOG9RS1FLMzZ4S3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAV+VlAwQA V+V3AwQBsu7YMA8EAgACMAkDBwAqAgcwUAAwDQYJKoZIhvcNAQELBQADggEBAG4Y rqRqDh3niQw4p8gmKZ0Q+Y+XowsRZ3PwgDK0xHF/lVObgtLysJ08AervceUt17ds HtOU1MeOHIgiYJMzwAGcLLYQABEY7s7cA9UslerenALZEPTSRfeGmLZHBwnXQtEy B4Sf6mxrXIBk24oqGlGuBZi+55m45Udd11RXfLz1XxxX+cbhjeXyamACwNokO+SU ukgojcEamgayjXHVPJ8OITr+RrecQArbNw8orY30IanyHr+4Mwf41hJ2/TPtrYIR 4eV2bVi+bXK2VyXjjbiFEL9K7VIkNrCySFNxEhoDEbXRGjgwoiJu0xPTQgD0+Zy6 VL6UKnbFUAO0YUDn+p4= -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:22 2026 by rpki-client