This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/ja6QsZo8G4SIR-DSVuqNt9DUl8s.roa File: ja6QsZo8G4SIR-DSVuqNt9DUl8s.roa (raw, json) Hash identifier: 4SebM2+i/WgcNMUOS4jWmYeei2fHyS3VDo3N7Z/ZBvw= Subject key identifier: 8D:AE:90:B1:9A:3C:1B:84:88:47:E0:D2:56:EA:8D:B7:D0:D4:97:CB Certificate issuer: /CN=95348ff7b08ea3f9fe222d7f7ba13da27dcb6895 Certificate serial: 019B331F0521D3F114F51B7328AF26B47888 Authority key identifier: 95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/ja6QsZo8G4SIR-DSVuqNt9DUl8s.roa Signing time: Thu 18 Dec 2025 20:20:29 +0000 ROA not before: Thu 18 Dec 2025 20:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56523 IP address blocks: 91.224.224.0/23 maxlen: 23 185.38.221.0/24 maxlen: 24 2a04:7840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:1f:05:21:d3:f1:14:f5:1b:73:28:af:26:b4:78:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95348ff7b08ea3f9fe222d7f7ba13da27dcb6895 Validity Not Before: Dec 18 20:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8dae90b19a3c1b848847e0d256ea8db7d0d497cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:77:7e:0f:32:f1:b2:a7:b2:9d:32:a2:bf: 1a:82:51:c5:a1:42:ef:0b:6c:b9:ac:d9:e8:18:95: 26:33:6a:a4:9e:cb:a5:1f:d6:aa:45:9f:12:02:7e: cc:69:f3:a2:db:e8:e8:f0:c6:81:e8:cc:12:90:84: 89:a4:d8:12:72:9d:88:23:d0:51:b2:25:df:41:47: ce:5d:5c:f0:5a:6b:5e:12:da:89:81:29:78:9e:d8: ff:8a:70:f8:75:ea:78:99:20:0f:ef:73:e1:46:c3: d2:d9:1e:1d:41:5a:83:26:35:7d:f2:9b:9f:10:31: dd:98:db:83:18:0c:e3:84:88:e7:af:d6:09:d4:c6: 90:77:8a:25:e5:12:dc:25:1a:18:e0:b6:b5:2d:f5: 56:48:4b:bb:14:0f:77:0a:fa:d4:a6:af:43:c5:6d: c0:43:09:6a:8d:48:83:2f:79:90:4f:15:0b:ae:d6: ba:c7:87:a0:c3:8e:d1:14:33:a7:8c:e2:bc:34:8f: 6b:85:28:0a:ba:37:09:10:ab:cb:8d:9c:52:c8:18: 53:a8:e7:25:5d:76:8d:d2:21:26:7c:91:4f:1d:fa: ec:32:12:f1:0d:39:83:58:de:fc:17:69:d9:58:ca: 34:ec:3e:5e:d8:a4:08:b1:3e:e0:a0:c0:16:87:26: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:90:B1:9A:3C:1B:84:88:47:E0:D2:56:EA:8D:B7:D0:D4:97:CB X509v3 Authority Key Identifier: keyid:95:34:8F:F7:B0:8E:A3:F9:FE:22:2D:7F:7B:A1:3D:A2:7D:CB:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTSP97COo_n-Ii1_e6E9on3LaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/ja6QsZo8G4SIR-DSVuqNt9DUl8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b41e9d-afbb-45fe-bc62-fd5f3f3b395e/1/lTSP97COo_n-Ii1_e6E9on3LaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.224.0/23 185.38.221.0/24 IPv6: 2a04:7840::/32 Signature Algorithm: sha256WithRSAEncryption 97:21:8b:70:49:ee:e3:17:6e:14:c2:fc:95:d6:5e:1f:a9:a4: 92:8e:d8:04:bc:82:9c:ab:45:6c:44:0f:cc:91:1b:fc:f0:d4: c5:97:a1:bd:f7:47:7e:49:46:dc:a6:a9:a9:83:72:c3:93:42: 41:b8:b5:ec:35:7b:de:56:9d:f4:98:6f:dc:e7:07:e6:55:23: 2e:1b:03:6f:01:ef:5a:87:5f:3f:20:c4:7a:20:d0:94:66:c8: a1:05:27:f5:8d:27:e7:8a:d0:d5:20:3d:8e:f7:3e:8e:43:20: 46:ea:9d:3d:72:c7:71:db:81:7e:e0:14:18:64:e9:b6:53:4a: 29:8f:2e:f3:cb:62:45:18:9d:87:62:89:9a:ca:17:6f:c7:b7: 27:77:ec:1b:23:33:a0:9c:28:2b:ec:52:76:18:2b:98:30:cc: b9:b9:c0:2e:2f:c5:b9:a6:ac:5a:4c:b2:eb:5e:65:6f:cd:f3: 16:9c:07:4d:40:a7:4d:4d:26:52:8b:a1:9a:16:55:51:98:dd: 23:6e:39:1f:72:8b:87:6f:55:ae:72:0c:93:70:ed:3e:0d:b0: 0e:97:be:ac:dd:4d:f1:d0:76:4d:29:a6:85:a0:74:13:45:67: 8d:4f:56:c0:d0:b3:7e:30:f7:22:1f:e5:61:12:01:b9:93:22: 33:40:39:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZszHwUh0/EU9RtzKK8mtHiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzQ4ZmY3YjA4ZWEzZjlmZTIyMmQ3ZjdiYTEzZGEyN2Rj YjY4OTUwHhcNMjUxMjE4MjAyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGFlOTBiMTlhM2MxYjg0ODg0N2UwZDI1NmVhOGRiN2QwZDQ5N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztp3fg8y8bKnsp0yor8aglHFoULv C2y5rNnoGJUmM2qknsulH9aqRZ8SAn7MafOi2+jo8MaB6MwSkISJpNgScp2II9BR siXfQUfOXVzwWmteEtqJgSl4ntj/inD4dep4mSAP73PhRsPS2R4dQVqDJjV98puf EDHdmNuDGAzjhIjnr9YJ1MaQd4ol5RLcJRoY4La1LfVWSEu7FA93CvrUpq9DxW3A QwlqjUiDL3mQTxULrta6x4egw47RFDOnjOK8NI9rhSgKujcJEKvLjZxSyBhTqOcl XXaN0iEmfJFPHfrsMhLxDTmDWN78F2nZWMo07D5e2KQIsT7goMAWhyba1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI2ukLGaPBuEiEfg0lbqjbfQ1JfLMB8GA1UdIwQY MBaAFJU0j/ewjqP5/iItf3uhPaJ9y2iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRTUDk3Q09vX24tSWkxX2U2RTlvbjNMYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iNDFlOWQtYWZiYi00NWZlLWJjNjIt ZmQ1ZjNmM2IzOTVlLzEvamE2UXNabzhHNFNJUi1EU1Z1cU50OURVbDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9iNDFlOWQtYWZiYi00NWZlLWJjNjItZmQ1ZjNmM2IzOTVl LzEvbFRTUDk3Q09vX24tSWkxX2U2RTlvbjNMYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+DgAwQA uSbdMA0EAgACMAcDBQAqBHhAMA0GCSqGSIb3DQEBCwUAA4IBAQCXIYtwSe7jF24U wvyV1l4fqaSSjtgEvIKcq0VsRA/MkRv88NTFl6G990d+SUbcpqmpg3LDk0JBuLXs NXveVp30mG/c5wfmVSMuGwNvAe9ah18/IMR6INCUZsihBSf1jSfnitDVID2O9z6O QyBG6p09csdx24F+4BQYZOm2U0opjy7zy2JFGJ2HYomayhdvx7cnd+wbIzOgnCgr 7FJ2GCuYMMy5ucAuL8W5pqxaTLLrXmVvzfMWnAdNQKdNTSZSi6GaFlVRmN0jbjkf couHb1WucgyTcO0+DbAOl76s3U3x0HZNKaaFoHQTRWeNT1bA0LN+MPciH+VhEgG5 kyIzQDl3 -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:32 2025 by rpki-client