This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jNeaSkiirJkhrCXWmeVGgjllTVg.roa File: jNeaSkiirJkhrCXWmeVGgjllTVg.roa (raw, json) Hash identifier: 8bu7JwJEL7tDWyis7ct+tSnDSKGQH656MZIuSgoimqI= Subject key identifier: 8C:D7:9A:4A:48:A2:AC:99:21:AC:25:D6:99:E5:46:82:39:65:4D:58 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B2CD75B579154BB4FDA405B7E9B57CE63 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jNeaSkiirJkhrCXWmeVGgjllTVg.roa Signing time: Wed 17 Dec 2025 15:04:29 +0000 ROA not before: Wed 17 Dec 2025 15:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215163 IP address blocks: 94.247.43.0/24 maxlen: 24 2a00:f826:8::/48 maxlen: 48 2a09:e1c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d7:5b:57:91:54:bb:4f:da:40:5b:7e:9b:57:ce:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Dec 17 15:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8cd79a4a48a2ac9921ac25d699e5468239654d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5a:ee:ca:ec:15:be:3a:2f:db:99:9f:f3:67: b7:77:04:8e:39:38:a1:89:42:1f:55:d2:44:60:71: 53:5b:4a:2d:1d:b0:69:de:fa:6b:d5:94:71:60:38: 7d:19:b4:89:10:99:6b:e5:dc:af:c8:6e:9c:f3:af: c8:00:1e:05:b9:5d:7e:a5:71:cd:3c:7e:92:52:82: c0:c9:56:68:22:f8:03:25:8f:45:88:60:03:b7:15: 98:d9:32:3c:69:68:27:79:3d:c8:76:d6:d1:cf:94: c4:0a:71:ec:af:d1:4d:68:c0:7f:fc:7a:5d:72:62: 8d:d5:a6:77:1c:3f:a1:8c:67:13:23:77:13:39:a5: 68:68:97:e2:74:a1:0d:51:20:cb:84:73:6f:8d:3b: d9:d4:05:43:06:e1:4c:5e:19:f2:2d:b5:44:26:49: 37:00:ee:b3:9d:0f:2f:df:1c:af:e9:1e:89:4d:0d: c4:f7:a5:fa:66:a3:f1:aa:55:7b:e9:92:32:ee:c4: f6:f4:03:6d:dc:15:8c:bb:28:42:91:cc:cc:44:e6: 8a:42:3c:d5:b0:0b:d7:5f:2b:4c:3a:c2:a1:17:a7: 06:6c:41:60:cd:eb:c7:01:c8:fd:19:0e:90:e0:c3: 25:ab:eb:35:b6:53:20:c0:9e:96:d4:09:2d:cc:86: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:9A:4A:48:A2:AC:99:21:AC:25:D6:99:E5:46:82:39:65:4D:58 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jNeaSkiirJkhrCXWmeVGgjllTVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.43.0/24 IPv6: 2a00:f826:8::/48 2a09:e1c2::/32 Signature Algorithm: sha256WithRSAEncryption 74:f2:23:a6:1e:93:cb:06:15:69:44:22:4d:49:85:c7:aa:ad: 79:82:4b:6a:1d:6f:04:ee:c8:27:e9:29:1f:ee:e3:19:21:c3: d3:c0:75:af:d4:06:7f:11:70:f4:a8:8f:8b:71:c7:62:43:7d: 6e:1e:ae:c3:67:86:aa:7a:0f:96:f0:72:10:4a:be:47:35:03: 78:d6:d3:f7:75:18:7f:a0:df:c6:65:96:9e:0f:49:c8:33:c8: ad:f2:4f:fc:b1:13:d1:c7:b5:e3:5f:2e:23:a1:48:bf:1a:0d: bf:70:a0:0c:2a:2a:25:67:72:c9:ac:e8:ce:9c:c9:1b:c3:8b: a5:9b:6a:ff:27:04:b8:4a:de:5c:dd:35:e1:ff:22:20:d8:1e: 90:61:65:e4:d2:9e:f7:fd:e1:95:df:6f:9d:f8:4e:05:d8:a2: 25:21:2e:5b:d9:3a:be:dc:61:91:c5:35:d5:ee:6e:ec:2b:cd: 87:97:c4:d9:56:bf:57:7e:9f:94:53:8b:bf:a6:70:a9:5d:53: ae:ec:2c:e8:61:34:e3:90:d3:3e:e3:46:d9:c7:88:c5:e7:f9: a1:ed:87:1c:6b:c4:69:8a:bd:4a:ef:92:b1:77:89:dd:11:e6: 45:04:9e:04:3a:71:4b:65:aa:54:57:7d:3f:25:a6:b1:c4:99: b2:14:44:20 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZss11tXkVS7T9pAW36bV85jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjUxMjE3MTUwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Q3OWE0YTQ4YTJhYzk5MjFhYzI1ZDY5OWU1NDY4MjM5NjU0ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVruyuwVvjov25mf82e3dwSOOTih iUIfVdJEYHFTW0otHbBp3vpr1ZRxYDh9GbSJEJlr5dyvyG6c86/IAB4FuV1+pXHN PH6SUoLAyVZoIvgDJY9FiGADtxWY2TI8aWgneT3IdtbRz5TECnHsr9FNaMB//Hpd cmKN1aZ3HD+hjGcTI3cTOaVoaJfidKENUSDLhHNvjTvZ1AVDBuFMXhnyLbVEJkk3 AO6znQ8v3xyv6R6JTQ3E96X6ZqPxqlV76ZIy7sT29ANt3BWMuyhCkczMROaKQjzV sAvXXytMOsKhF6cGbEFgzevHAcj9GQ6Q4MMlq+s1tlMgwJ6W1AktzIacZQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIzXmkpIoqyZIawl1pnlRoI5ZU1YMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvak5lYVNraWlySmtockNYV21lVkdnamxsVFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAXvcrMBYE AgACMBADBwAqAPgmAAgDBQAqCeHCMA0GCSqGSIb3DQEBCwUAA4IBAQB08iOmHpPL BhVpRCJNSYXHqq15gktqHW8E7sgn6Skf7uMZIcPTwHWv1AZ/EXD0qI+LccdiQ31u Hq7DZ4aqeg+W8HIQSr5HNQN41tP3dRh/oN/GZZaeD0nIM8it8k/8sRPRx7XjXy4j oUi/Gg2/cKAMKiolZ3LJrOjOnMkbw4ulm2r/JwS4St5c3TXh/yIg2B6QYWXk0p73 /eGV32+d+E4F2KIlIS5b2Tq+3GGRxTXV7m7sK82Hl8TZVr9Xfp+UU4u/pnCpXVOu 7CzoYTTjkNM+40bZx4jF5/mh7Ycca8Rpir1K75Kxd4ndEeZFBJ4EOnFLZapUV30/ JaaxxJmyFEQg -----END CERTIFICATE-----Generated at Wed Dec 17 23:14:31 2025 by rpki-client