This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/JtuzEoibTpBy4VP_5pdDBTm01cA.roa File: JtuzEoibTpBy4VP_5pdDBTm01cA.roa (raw, json) Hash identifier: PxqgUpTMrXrjso4OB5Bd91JHetdr9TKOxgOgOgF4tY8= Subject key identifier: 26:DB:B3:12:88:9B:4E:90:72:E1:53:FF:E6:97:43:05:39:B4:D5:C0 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B2C63FFE2E80AF78A32A79E810CCB001A Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/JtuzEoibTpBy4VP_5pdDBTm01cA.roa Signing time: Wed 17 Dec 2025 12:58:29 +0000 ROA not before: Wed 17 Dec 2025 12:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200017 IP address blocks: 45.130.77.0/24 maxlen: 24 45.130.78.0/24 maxlen: 24 185.124.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:63:ff:e2:e8:0a:f7:8a:32:a7:9e:81:0c:cb:00:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 17 12:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26dbb312889b4e9072e153ffe697430539b4d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:66:17:cf:b3:be:54:88:f9:48:5c:66:86: 1e:ca:9f:91:9c:d0:70:a7:9d:ae:95:45:f2:2e:dd: ae:73:6e:3a:b7:8f:ae:50:38:61:a2:be:e1:b8:82: ae:f1:fb:4f:39:0f:f0:68:ac:ed:22:89:00:fb:78: 25:87:e7:c0:96:e1:df:3d:f0:22:70:7c:80:8c:d2: ed:17:ba:88:2c:cb:32:57:46:e0:71:63:07:d4:60: ee:a3:a7:52:e4:7b:e0:7e:63:5a:74:f9:ed:ca:dc: 41:3c:a4:f2:c8:8c:70:77:73:61:a3:f2:df:91:21: 72:de:6c:14:17:07:7e:cc:e5:3b:c8:f4:69:15:a0: 6b:cd:e1:de:20:4d:c5:a7:45:ba:47:ad:85:dc:b1: 20:f9:b8:ac:a0:74:d4:da:8d:2e:53:82:98:6d:4e: 18:77:66:6e:3e:cf:ca:e2:75:ee:dc:01:6c:ca:1c: e8:5f:53:1e:10:5c:0e:d9:9c:04:2e:0d:4d:30:5a: 02:11:c4:07:ea:bc:ee:ab:dd:ae:e4:76:a0:1c:84: 93:b2:a9:f5:a0:3b:d7:a7:47:b6:f0:eb:be:a8:69: d6:cb:cc:60:6a:ec:be:23:cd:21:ba:c5:d0:8d:db: f9:c8:3d:22:4a:8c:e3:77:a4:8d:3a:81:5f:86:b3: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:B3:12:88:9B:4E:90:72:E1:53:FF:E6:97:43:05:39:B4:D5:C0 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/JtuzEoibTpBy4VP_5pdDBTm01cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.77.0-45.130.78.255 185.124.241.0/24 Signature Algorithm: sha256WithRSAEncryption 09:bf:37:d8:0b:4b:f8:87:be:f7:3b:8a:c4:49:d6:e7:d2:e0: 93:d4:21:8a:df:37:89:79:ce:b2:12:93:3c:9e:60:84:48:fe: 6c:3c:81:41:07:8b:8d:33:c4:f2:17:09:16:8e:fc:c7:43:d5: 2a:57:3c:0c:ca:a9:28:3a:15:53:e9:47:49:8f:d2:4e:bb:d5: 5a:40:0e:2e:d1:94:f1:8b:8c:36:cb:a8:f2:01:9e:6d:9e:02: 81:34:7e:16:ce:eb:a2:06:0c:a4:e6:a2:7b:c8:e3:57:3b:1a: d1:07:06:bb:62:e2:cc:a0:a0:a3:fa:08:0d:b3:3f:70:c2:98: 1e:e1:74:9b:b6:67:10:a9:c4:6f:9b:96:b8:b7:b8:0f:af:8e: 37:3d:2f:75:22:9e:b0:61:11:16:db:61:eb:84:53:e5:e2:1a: 31:90:fa:df:d3:5c:63:51:cf:83:df:22:dd:a9:0d:82:d4:fa: bd:94:0a:b8:fa:db:56:8b:d7:9f:e6:b5:16:46:90:e2:2e:65: de:cb:dd:9b:e5:18:ce:15:4c:0a:d0:80:c6:cc:0e:0e:c2:ef: 56:d6:75:af:11:f8:ec:26:99:fc:a4:63:dd:40:83:05:10:ae: a6:3f:3e:41:ef:eb:c7:a3:4e:4d:29:61:66:52:da:08:35:da: 8f:54:b8:30 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZssY//i6Ar3ijKnnoEMywAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjE3MTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmRiYjMxMjg4OWI0ZTkwNzJlMTUzZmZlNjk3NDMwNTM5YjRkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprhmF8+zvlSI+UhcZoYeyp+RnNBw p52ulUXyLt2uc246t4+uUDhhor7huIKu8ftPOQ/waKztIokA+3glh+fAluHfPfAi cHyAjNLtF7qILMsyV0bgcWMH1GDuo6dS5HvgfmNadPntytxBPKTyyIxwd3Nho/Lf kSFy3mwUFwd+zOU7yPRpFaBrzeHeIE3Fp0W6R62F3LEg+bisoHTU2o0uU4KYbU4Y d2ZuPs/K4nXu3AFsyhzoX1MeEFwO2ZwELg1NMFoCEcQH6rzuq92u5HagHISTsqn1 oDvXp0e28Ou+qGnWy8xgauy+I80husXQjdv5yD0iSozjd6SNOoFfhrPhnwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCbbsxKIm06QcuFT/+aXQwU5tNXAMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvSnR1ekVvaWJUcEJ5NFZQXzVwZERCVG0wMWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtgk0D BAAtgk4DBAC5fPEwDQYJKoZIhvcNAQELBQADggEBAAm/N9gLS/iHvvc7isRJ1ufS 4JPUIYrfN4l5zrISkzyeYIRI/mw8gUEHi40zxPIXCRaO/MdD1SpXPAzKqSg6FVPp R0mP0k671VpADi7RlPGLjDbLqPIBnm2eAoE0fhbO66IGDKTmonvI41c7GtEHBrti 4sygoKP6CA2zP3DCmB7hdJu2ZxCpxG+blri3uA+vjjc9L3UinrBhERbbYeuEU+Xi GjGQ+t/TXGNRz4PfIt2pDYLU+r2UCrj621aL15/mtRZGkOIuZd7L3ZvlGM4VTArQ gMbMDg7C71bWda8R+OwmmfykY91AgwUQrqY/PkHv68ejTk0pYWZS2gg12o9UuDA= -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:15 2025 by rpki-client