This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jxc_SyAoNnkhZBaR6c83dy5MFXY.roa File: jxc_SyAoNnkhZBaR6c83dy5MFXY.roa (raw, json) Hash identifier: RWGPICJIQcnxe0a/hnWqHixxnw7m7QJ3Dtp5AuJQphY= Subject key identifier: 8F:17:3F:4B:20:28:36:79:21:64:16:91:E9:CF:37:77:2E:4C:15:76 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B2A7CF19989598AE1656645D0C9E3B39C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jxc_SyAoNnkhZBaR6c83dy5MFXY.roa Signing time: Wed 17 Dec 2025 04:06:29 +0000 ROA not before: Wed 17 Dec 2025 04:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 89.34.106.0/24 maxlen: 24 89.125.126.0/24 maxlen: 24 93.114.183.0/24 maxlen: 24 93.115.106.0/24 maxlen: 24 194.58.47.0/24 maxlen: 24 206.245.158.0/24 maxlen: 24 212.192.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:7c:f1:99:89:59:8a:e1:65:66:45:d0:c9:e3:b3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 17 04:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f173f4b2028367921641691e9cf37772e4c1576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:67:63:9c:ac:0f:81:f0:1c:a3:e9:a5:7f: 0c:27:42:91:5e:9c:e1:7a:a8:f7:2b:c3:0a:ce:8f: 78:7f:91:5b:e8:c8:21:17:d1:15:e3:38:cd:22:51: a9:a7:45:83:19:6f:86:e4:94:63:67:ec:6b:19:24: 93:a6:68:e2:3f:8b:9d:19:df:04:7d:ab:86:c7:3f: 8e:03:22:b7:8c:a0:8a:1e:f6:c4:52:07:d6:76:78: 36:22:a9:ed:64:cc:95:e6:02:ce:f0:d0:b8:48:f9: 07:ca:d1:23:44:ec:48:50:95:e9:3b:cb:ed:78:3c: a4:a7:6b:06:a8:13:4a:60:d8:c1:62:15:f4:db:52: 33:89:ac:25:3f:c8:54:fe:d5:29:5d:55:96:f4:f2: c2:84:25:79:8b:c3:f6:a4:11:f1:a0:02:18:cd:aa: b8:77:8e:a0:95:65:5c:7a:2e:97:0d:f5:2f:72:02: 5d:12:b4:97:26:90:56:14:92:8c:b4:7e:6c:68:f4: 27:88:60:5e:59:0d:12:85:25:43:83:6b:94:fd:f9: 4b:de:93:91:33:39:ef:8c:32:f3:9b:4a:82:c0:0b: 82:e9:9c:fd:b9:24:60:bb:8f:c9:4c:a1:c2:1e:38: 93:f5:bc:b6:16:c5:62:28:22:4f:7e:a4:40:e5:6a: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:3F:4B:20:28:36:79:21:64:16:91:E9:CF:37:77:2E:4C:15:76 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jxc_SyAoNnkhZBaR6c83dy5MFXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.106.0/24 89.125.126.0/24 93.114.183.0/24 93.115.106.0/24 194.58.47.0/24 206.245.158.0/24 212.192.8.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f0:64:41:73:5f:d6:c9:59:b8:f2:ea:78:88:7e:df:a9:5a: bf:9e:b2:46:0b:54:8e:68:b4:c3:3e:07:86:ec:8b:34:e9:12: 82:40:c9:95:f8:11:8b:15:9d:49:da:0c:b7:88:95:1f:d1:1e: 59:db:0c:f1:78:9f:24:f5:b0:09:0b:d5:ba:7e:d7:cf:fe:a0: 37:29:fd:0b:b0:f1:12:dc:86:e5:6c:d1:47:7a:98:c3:9f:d8: c9:cd:89:79:f0:31:70:1e:65:d7:0f:5d:48:e3:9e:92:68:c9: fa:ed:77:cb:86:7f:78:16:62:e9:b4:f0:ce:0c:a7:80:8b:df: fb:1f:20:97:9b:e1:ff:85:48:6c:a9:74:63:15:bd:53:4c:a9: 56:0f:9d:80:62:14:24:34:c3:e6:93:77:88:69:51:71:ea:da: ad:64:bf:32:18:83:5d:61:a6:93:9e:8f:eb:51:77:13:1b:84: 3d:02:68:de:4c:fe:fe:00:11:3a:dd:52:bf:bb:93:26:cd:e6: 1a:98:b3:0b:f4:cf:c9:b6:8d:01:43:57:5b:83:91:26:96:6d: 86:d4:44:59:90:4f:12:58:e7:65:0e:ef:bd:01:9b:3d:5f:24: d2:d6:c1:31:93:9a:a3:42:51:55:53:77:9e:3d:37:9a:90:63: d0:83:80:66 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsqfPGZiVmK4WVmRdDJ47OcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE3MDQwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjE3M2Y0YjIwMjgzNjc5MjE2NDE2OTFlOWNmMzc3NzJlNGMxNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy81nY5ysD4HwHKPppX8MJ0KRXpzh eqj3K8MKzo94f5Fb6MghF9EV4zjNIlGpp0WDGW+G5JRjZ+xrGSSTpmjiP4udGd8E fauGxz+OAyK3jKCKHvbEUgfWdng2IqntZMyV5gLO8NC4SPkHytEjROxIUJXpO8vt eDykp2sGqBNKYNjBYhX021IziawlP8hU/tUpXVWW9PLChCV5i8P2pBHxoAIYzaq4 d46glWVcei6XDfUvcgJdErSXJpBWFJKMtH5saPQniGBeWQ0ShSVDg2uU/flL3pOR MznvjDLzm0qCwAuC6Zz9uSRgu4/JTKHCHjiT9by2FsViKCJPfqRA5WqEcQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFI8XP0sgKDZ5IWQWkenPN3cuTBV2MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvanhjX1N5QW9ObmtoWkJhUjZjODNkeTVNRlhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSJqAwQA WX1+AwQAXXK3AwQAXXNqAwQAwjovAwQAzvWeAwQA1MAIMA0GCSqGSIb3DQEBCwUA A4IBAQA38GRBc1/WyVm48up4iH7fqVq/nrJGC1SOaLTDPgeG7Is06RKCQMmV+BGL FZ1J2gy3iJUf0R5Z2wzxeJ8k9bAJC9W6ftfP/qA3Kf0LsPES3IblbNFHepjDn9jJ zYl58DFwHmXXD11I456SaMn67XfLhn94FmLptPDODKeAi9/7HyCXm+H/hUhsqXRj Fb1TTKlWD52AYhQkNMPmk3eIaVFx6tqtZL8yGINdYaaTno/rUXcTG4Q9AmjeTP7+ ABE63VK/u5MmzeYamLML9M/Jto0BQ1dbg5Emlm2G1ERZkE8SWOdlDu+9AZs9XyTS 1sExk5qjQlFVU3eePTeakGPQg4Bm -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:36 2025 by rpki-client