This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7JO_Gj9jZP4dJ9CMa4Kq_YD3Dg.roa File: J7JO_Gj9jZP4dJ9CMa4Kq_YD3Dg.roa (raw, json) Hash identifier: ByrELLrU8eVl1ISnUwESJlUdikQgu3iTGMApkDlyvEk= Subject key identifier: 27:B2:4E:FC:68:FD:8D:93:F8:74:9F:42:31:AE:0A:AB:F6:03:DC:38 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33A2015978CA58EF4C5837064F446 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7JO_Gj9jZP4dJ9CMa4Kq_YD3Dg.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210058 IP address blocks: 45.91.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:20:15:97:8c:a5:8e:f4:c5:83:70:64:f4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b24efc68fd8d93f8749f4231ae0aabf603dc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:cc:67:ed:ed:99:36:e6:ed:3f:ad:13:e9: ab:4f:02:33:18:01:55:28:01:6b:3e:f2:48:2b:f1: 66:14:9a:a7:05:86:1d:c5:d0:f8:39:7f:3b:1d:9c: cc:d1:3e:66:bb:14:59:36:91:98:93:20:7e:95:06: 63:08:de:34:24:37:f0:c2:c6:58:b9:f0:a9:ff:42: cb:07:94:e1:3c:a3:0d:ff:fe:60:94:51:65:9c:bf: 13:21:de:9f:78:9f:18:da:3f:2f:e6:1a:c6:06:c0: 55:f3:88:3c:fa:9b:0e:15:a2:2e:63:43:c4:05:4a: f1:2d:48:0b:8f:97:4a:a2:fe:20:ee:f1:88:16:2c: 97:70:8d:42:d2:92:4f:a1:68:85:36:f6:0c:8b:4f: e5:dd:d3:fa:54:9e:b5:17:4a:af:ee:6e:57:64:e4: d0:bb:1d:03:2c:ae:ef:5e:fe:21:5b:17:1e:4d:8e: 5a:12:65:47:2e:a2:74:fa:74:87:5c:ab:e6:f3:ec: c0:47:68:29:6e:f9:0c:6e:30:90:be:04:49:ab:2f: 79:60:d6:7c:1c:7d:37:24:4c:91:c8:81:2e:15:7d: fa:1f:07:6b:3a:ae:ff:20:19:f7:32:dc:28:c0:6c: bd:07:b5:14:0b:7d:4c:8a:db:3a:4c:13:a1:7d:e8: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B2:4E:FC:68:FD:8D:93:F8:74:9F:42:31:AE:0A:AB:F6:03:DC:38 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7JO_Gj9jZP4dJ9CMa4Kq_YD3Dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.192.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f5:eb:17:73:3b:2d:16:c4:ee:7f:e5:28:9d:a5:fb:ac:3a: 2c:a0:9c:7d:56:96:17:72:b2:17:d5:14:57:ff:46:ed:46:eb: eb:81:be:c2:b5:75:43:0c:99:c7:18:89:3b:dd:37:2a:53:61: 9d:5e:13:da:08:d3:40:ae:2f:15:bf:74:2d:4e:b6:5a:94:01: 45:58:70:f1:97:ea:c5:46:6e:5f:2a:12:4d:1e:ac:6f:db:ff: 60:1a:7e:d8:88:72:8a:2c:ca:d9:74:c4:8d:a2:fd:e7:2a:ef: c4:cf:5c:ce:a6:05:af:4b:3f:19:97:63:aa:fe:60:f7:73:c0: 73:0b:ae:f4:05:15:96:69:fe:12:6c:75:53:92:02:51:2a:13: fb:12:3f:64:48:de:64:af:a0:60:ae:f1:85:5a:42:ec:70:22: 5b:a4:db:1f:0f:17:d2:35:b9:ab:84:c7:f8:73:6d:01:d0:fd: 0c:47:0c:5b:d4:36:1d:bc:9b:22:4d:69:76:f1:a4:94:48:6e: df:a0:19:31:a0:e0:3a:56:f7:ab:58:84:aa:4d:5b:47:6d:b8: dc:bd:d1:1f:5d:6a:53:8e:fd:c9:50:31:60:cf:5f:81:d8:da: 37:05:c2:1d:59:f8:dc:8a:d5:f6:16:50:a8:59:43:cb:11:a8: f8:c2:29:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozogFZeMpY70xYNwZPRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2IyNGVmYzY4ZmQ4ZDkzZjg3NDlmNDIzMWFlMGFhYmY2MDNkYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzfMZ+3tmTbm7T+tE+mrTwIzGAFV KAFrPvJIK/FmFJqnBYYdxdD4OX87HZzM0T5muxRZNpGYkyB+lQZjCN40JDfwwsZY ufCp/0LLB5ThPKMN//5glFFlnL8TId6feJ8Y2j8v5hrGBsBV84g8+psOFaIuY0PE BUrxLUgLj5dKov4g7vGIFiyXcI1C0pJPoWiFNvYMi0/l3dP6VJ61F0qv7m5XZOTQ ux0DLK7vXv4hWxceTY5aEmVHLqJ0+nSHXKvm8+zAR2gpbvkMbjCQvgRJqy95YNZ8 HH03JEyRyIEuFX36HwdrOq7/IBn3MtwowGy9B7UUC31Mits6TBOhfej7TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeyTvxo/Y2T+HSfQjGuCqv2A9w4MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSjdKT19HajlqWlA0ZEo5Q01hNEtxX1lEM0RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVvAMA0G CSqGSIb3DQEBCwUAA4IBAQB29esXczstFsTuf+UonaX7rDosoJx9VpYXcrIX1RRX /0btRuvrgb7CtXVDDJnHGIk73TcqU2GdXhPaCNNAri8Vv3QtTrZalAFFWHDxl+rF Rm5fKhJNHqxv2/9gGn7YiHKKLMrZdMSNov3nKu/Ez1zOpgWvSz8Zl2Oq/mD3c8Bz C670BRWWaf4SbHVTkgJRKhP7Ej9kSN5kr6BgrvGFWkLscCJbpNsfDxfSNbmrhMf4 c20B0P0MRwxb1DYdvJsiTWl28aSUSG7foBkxoOA6VverWISqTVtHbbjcvdEfXWpT jv3JUDFgz1+B2No3BcIdWfjcitX2FlCoWUPLEaj4wikl -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:42 2026 by rpki-client