This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jj1QCdoz6DIRBrESW5B-wlAqOc8.roa File: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (raw, json) Hash identifier: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI= Subject key identifier: 8E:3D:50:09:DA:33:E8:32:11:06:B1:12:5B:90:7E:C2:50:2A:39:CF Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Certificate serial: 019B77C73F18BC10434F649B27E799AE5C9E Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jj1QCdoz6DIRBrESW5B-wlAqOc8.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199718 IP address blocks: 91.221.50.0/23 maxlen: 23 91.221.50.0/24 maxlen: 24 91.221.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3f:18:bc:10:43:4f:64:9b:27:e7:99:ae:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e3d5009da33e8321106b1125b907ec2502a39cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:16:dc:66:84:ce:6e:78:3c:d1:a1:be:75: c0:44:c0:0f:de:83:2a:bc:11:a4:e2:10:94:4a:51: e2:c8:3f:6e:90:b5:4a:d3:db:bf:7e:0c:46:2a:84: 0c:e1:98:da:95:88:c3:50:17:62:0f:43:66:a1:a1: 99:75:68:f4:1f:ee:74:ad:af:5e:1d:e0:bc:97:f6: b2:c9:8e:b7:ac:71:78:8f:7b:7a:ea:d5:72:75:0f: f2:08:1b:6c:d5:b6:0c:0c:de:a5:76:16:84:1d:90: b8:38:25:5b:ed:12:4a:2d:31:25:7a:00:d1:37:63: 6c:04:61:f6:36:61:5b:07:f1:73:c2:98:a0:5a:15: 6d:30:08:26:75:71:88:2d:f1:6b:34:96:a1:3e:53: a8:bc:d2:17:25:58:30:52:0d:09:0f:6d:f8:c6:1a: fa:c6:a7:8f:75:85:8c:52:e9:91:26:57:86:70:2d: 1b:80:4f:91:97:b5:15:3b:f8:b9:3b:9c:40:11:02: 94:21:ad:91:16:1b:c3:15:cf:3b:45:f0:5d:d7:8d: 44:62:d3:0c:de:df:6f:e3:34:f4:42:ad:c0:47:03: 9a:fa:ca:53:21:e9:6e:1b:24:37:d2:09:f2:cf:7a: 13:5a:59:6d:bf:2a:6e:fa:36:b7:03:61:2a:c0:40: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3D:50:09:DA:33:E8:32:11:06:B1:12:5B:90:7E:C2:50:2A:39:CF X509v3 Authority Key Identifier: keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jj1QCdoz6DIRBrESW5B-wlAqOc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.50.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:4c:07:ef:f4:a8:47:8d:92:02:c9:4e:1e:43:1a:db:e2:13: 1d:71:88:16:ec:71:9e:c7:a7:41:3c:70:0d:47:40:25:70:4e: 68:97:a6:f8:4b:05:d3:47:f3:9e:45:a1:69:33:b8:95:12:d2: 31:3b:4e:15:cf:d6:e0:0f:6c:b8:5e:3b:e4:94:d2:69:6f:69: 00:28:e8:a1:a2:70:27:de:87:d8:fa:39:50:e1:db:88:86:be: 23:ab:5e:a7:15:c4:b0:c9:d6:9f:d9:77:ed:88:b6:e2:9a:f1: a2:b1:40:38:17:e3:57:77:2a:2a:89:76:90:fa:75:b0:9f:71: cb:75:ea:97:ad:00:a0:4c:72:7b:8a:50:c4:9d:c1:75:9e:b6: 94:05:66:a8:16:f0:e9:c6:8e:f2:63:21:2c:ac:a9:2d:cb:30: 18:b3:0a:85:c5:b4:cf:06:af:1d:1f:50:74:dc:69:0c:75:25: e6:18:58:d9:fc:26:ba:43:68:48:c3:88:fe:be:eb:a5:b6:02: e8:6f:5a:fc:e1:4a:42:20:aa:dc:11:cc:22:1c:e2:ce:31:99: a2:3d:81:04:0b:aa:48:69:1a:61:94:68:3e:4c:2c:45:3d:84: c5:11:27:52:f7:c1:43:51:96:eb:f8:0c:e0:e8:a0:d3:d7:31: 58:5d:e5:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz8YvBBDT2SbJ+eZrlyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi ODlkNWYwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTNkNTAwOWRhMzNlODMyMTEwNmIxMTI1YjkwN2VjMjUwMmEzOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYW3GaEzm54PNGhvnXARMAP3oMq vBGk4hCUSlHiyD9ukLVK09u/fgxGKoQM4ZjalYjDUBdiD0NmoaGZdWj0H+50ra9e HeC8l/ayyY63rHF4j3t66tVydQ/yCBts1bYMDN6ldhaEHZC4OCVb7RJKLTElegDR N2NsBGH2NmFbB/FzwpigWhVtMAgmdXGILfFrNJahPlOovNIXJVgwUg0JD234xhr6 xqePdYWMUumRJleGcC0bgE+Rl7UVO/i5O5xAEQKUIa2RFhvDFc87RfBd141EYtMM 3t9v4zT0Qq3ARwOa+spTIeluGyQ30gnyz3oTWlltvypu+ja3A2EqwECnOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI49UAnaM+gyEQaxEluQfsJQKjnPMB8GA1UdIwQY MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt NGE5ZTI5NjE1YzA1LzEvamoxUUNkb3o2RElSQnJFU1c1Qi13bEFxT2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1 LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW90yMA0G CSqGSIb3DQEBCwUAA4IBAQBfTAfv9KhHjZICyU4eQxrb4hMdcYgW7HGex6dBPHAN R0AlcE5ol6b4SwXTR/OeRaFpM7iVEtIxO04Vz9bgD2y4XjvklNJpb2kAKOihonAn 3ofY+jlQ4duIhr4jq16nFcSwydaf2XftiLbimvGisUA4F+NXdyoqiXaQ+nWwn3HL deqXrQCgTHJ7ilDEncF1nraUBWaoFvDpxo7yYyEsrKktyzAYswqFxbTPBq8dH1B0 3GkMdSXmGFjZ/Ca6Q2hIw4j+vuultgLob1r84UpCIKrcEcwiHOLOMZmiPYEEC6pI aRphlGg+TCxFPYTFESdS98FDUZbr+Azg6KDT1zFYXeWn -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:28 2026 by rpki-client