This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JBfbrLzwSBJvppRvXFG4ErpCfJA.roa File: JBfbrLzwSBJvppRvXFG4ErpCfJA.roa (raw, json) Hash identifier: q9JLnmNhlIvFsJvF9QPo2FJDKZW3/0wLxRHxly5ZocU= Subject key identifier: 24:17:DB:AC:BC:F0:48:12:6F:A6:94:6F:5C:51:B8:12:BA:42:7C:90 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AFC97100E6839D7A9C06169D4AF823E68 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JBfbrLzwSBJvppRvXFG4ErpCfJA.roa Signing time: Mon 08 Dec 2025 06:12:29 +0000 ROA not before: Mon 08 Dec 2025 06:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48300 IP address blocks: 158.173.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:97:10:0e:68:39:d7:a9:c0:61:69:d4:af:82:3e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 8 06:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2417dbacbcf048126fa6946f5c51b812ba427c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:6d:4e:e4:1b:2e:aa:1f:5c:2f:f0:a3:ac: 5b:10:ac:0a:16:3f:2a:76:eb:4b:e3:98:48:20:af: 14:5a:48:09:e2:00:64:f6:b9:77:a1:1d:93:35:08: 3e:28:a7:51:d6:03:23:26:35:85:53:a3:5f:77:61: 3d:36:a7:68:30:ce:e7:be:85:13:06:a8:ba:90:5f: 78:16:94:09:d1:4c:23:e2:3d:48:1d:73:27:ca:74: 15:16:45:43:e8:72:c0:61:82:d7:6a:9b:ec:f3:cb: 59:e6:2b:ab:93:60:02:c8:86:b1:c6:2a:1d:c2:20: 50:54:86:11:75:97:44:9e:aa:d7:1f:ba:51:2b:67: 55:41:2f:e3:7f:34:17:3d:5b:de:ed:4c:17:fe:27: a9:ec:aa:45:4c:e9:89:8b:10:8a:21:62:9f:73:f8: ae:8b:4e:73:b5:9e:28:65:43:21:c2:6b:eb:fb:0e: f6:72:e0:28:d1:86:c6:0c:9a:8c:d1:e6:38:f1:5b: 19:c4:65:a5:37:15:42:ec:b4:55:df:3f:75:e2:46: 0b:d7:fb:47:95:6c:a9:be:ac:31:37:e6:d8:70:b4: 28:aa:2e:ac:24:fc:60:df:be:07:f6:91:9a:5b:b9: 8d:ea:03:72:6c:1a:cd:e1:c6:ab:1a:54:ce:27:ab: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:17:DB:AC:BC:F0:48:12:6F:A6:94:6F:5C:51:B8:12:BA:42:7C:90 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JBfbrLzwSBJvppRvXFG4ErpCfJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.184.0/21 Signature Algorithm: sha256WithRSAEncryption 36:1c:26:70:d4:83:73:2a:ca:40:03:7d:a4:59:8f:26:78:66: 0e:88:fc:c6:ef:4c:07:be:84:40:ee:e7:09:6e:ae:78:f5:e1: 74:78:ef:25:e7:c0:8e:66:2f:4d:14:5d:fc:50:3d:96:38:12: b1:29:71:e3:96:b8:4c:6a:ee:f6:13:0c:a5:46:37:fa:c2:89: 0f:31:03:ed:0b:2e:27:7b:e2:1c:9f:94:c7:9d:01:c6:80:0b: 8b:db:fa:d4:56:5a:f3:2a:13:22:81:d1:de:d7:bf:1b:82:da: 08:1a:a2:73:5a:3e:b1:e2:89:03:fd:13:e1:e8:ed:4d:95:2f: c8:88:27:3a:db:82:f1:d4:12:1c:80:3d:16:58:9c:36:e7:e9: 24:54:70:7c:80:d7:2f:0f:24:2d:f5:00:8b:27:18:c5:0d:e9: 54:2b:33:54:40:fe:98:e6:b2:29:47:84:a9:78:bb:24:69:e4: 21:31:28:00:ad:51:7f:e7:e5:7c:15:64:e9:70:7f:2d:20:38: d1:54:4b:ec:15:e4:7f:df:55:be:8e:8b:51:49:9c:8d:de:dd: 6c:fc:ec:af:f3:a5:68:58:76:be:d1:7f:fe:aa:36:80:a1:2f: 31:57:1b:fe:61:46:fd:c6:4d:ef:f4:17:25:e5:e6:81:33:c6: 23:43:84:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr8lxAOaDnXqcBhadSvgj5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjA4MDYxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDE3ZGJhY2JjZjA0ODEyNmZhNjk0NmY1YzUxYjgxMmJhNDI3YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA5tTuQbLqofXC/wo6xbEKwKFj8q dutL45hIIK8UWkgJ4gBk9rl3oR2TNQg+KKdR1gMjJjWFU6Nfd2E9NqdoMM7nvoUT Bqi6kF94FpQJ0Uwj4j1IHXMnynQVFkVD6HLAYYLXapvs88tZ5iurk2ACyIaxxiod wiBQVIYRdZdEnqrXH7pRK2dVQS/jfzQXPVve7UwX/iep7KpFTOmJixCKIWKfc/iu i05ztZ4oZUMhwmvr+w72cuAo0YbGDJqM0eY48VsZxGWlNxVC7LRV3z914kYL1/tH lWypvqwxN+bYcLQoqi6sJPxg374H9pGaW7mN6gNybBrN4carGlTOJ6vZSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQX26y88EgSb6aUb1xRuBK6QnyQMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvSkJmYnJMendTQkp2cHBSdlhGRzRFcnBDZkpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnq24MA0G CSqGSIb3DQEBCwUAA4IBAQA2HCZw1INzKspAA32kWY8meGYOiPzG70wHvoRA7ucJ bq549eF0eO8l58COZi9NFF38UD2WOBKxKXHjlrhMau72EwylRjf6wokPMQPtCy4n e+Icn5THnQHGgAuL2/rUVlrzKhMigdHe178bgtoIGqJzWj6x4okD/RPh6O1NlS/I iCc624Lx1BIcgD0WWJw25+kkVHB8gNcvDyQt9QCLJxjFDelUKzNUQP6Y5rIpR4Sp eLskaeQhMSgArVF/5+V8FWTpcH8tIDjRVEvsFeR/31W+jotRSZyN3t1s/Oyv86Vo WHa+0X/+qjaAoS8xVxv+YUb9xk3v9Bcl5eaBM8YjQ4RX -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:36 2025 by rpki-client