This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/JdmDASsiVF3OIVzqa3C7Cim1k98.roa File: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (raw, json) Hash identifier: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o= Subject key identifier: 25:D9:83:01:2B:22:54:5D:CE:21:5C:EA:6B:70:BB:0A:29:B5:93:DF Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Certificate serial: 019B7D5CDD1FC0D0F93A664C67E1857E78BA Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/JdmDASsiVF3OIVzqa3C7Cim1k98.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 37.77.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dd:1f:c0:d0:f9:3a:66:4c:67:e1:85:7e:78:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25d983012b22545dce215cea6b70bb0a29b593df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:8d:89:25:08:e0:fc:1e:47:9a:2f:80:c5: b7:48:29:13:48:a6:02:fa:5e:ad:ab:5f:89:5d:f4: c0:07:68:f5:16:be:a1:0a:30:62:ce:c2:61:2a:a6: a8:b6:34:0d:dd:4a:71:89:9a:86:4c:f1:a1:5f:c7: 81:c5:61:5c:ca:c0:85:47:83:33:3f:66:f3:02:82: 38:5f:22:dd:b9:a8:20:56:6c:b2:97:ff:06:bb:21: d8:22:7f:d6:1e:d7:95:55:98:f7:46:01:bf:d4:b1: 96:61:a5:cc:27:3b:c3:b7:e2:83:97:a9:26:6f:fc: 43:7d:8c:95:94:52:f4:82:bb:d5:2f:08:22:9a:38: 8a:9d:48:2e:43:ce:8a:0f:a9:72:d1:a8:87:5f:bd: 2a:32:b3:c5:39:5f:e1:09:7b:b9:15:2c:71:5b:ba: 09:80:c1:9b:a5:e6:a5:2a:c5:02:5e:68:d0:d1:79: ba:81:21:bb:d8:df:36:31:21:08:ee:17:38:c4:5a: 7a:e3:be:47:ba:e6:53:2d:81:5b:0f:dc:10:01:2d: 56:e9:da:9c:ec:c5:6b:a7:eb:f5:07:cb:b0:6e:c7: cf:ff:f5:93:84:09:2e:65:ea:86:6d:ac:66:10:44: 64:fc:57:80:79:88:a6:4d:32:12:0a:45:25:64:4f: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:83:01:2B:22:54:5D:CE:21:5C:EA:6B:70:BB:0A:29:B5:93:DF X509v3 Authority Key Identifier: keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/JdmDASsiVF3OIVzqa3C7Cim1k98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.31.0/24 Signature Algorithm: sha256WithRSAEncryption 15:c1:ae:0c:63:a5:be:22:4b:8c:6a:96:85:9d:69:15:e1:15: 40:08:2b:3f:97:5b:62:9a:87:39:44:64:8d:2c:a8:e8:6e:68: d8:1f:9c:a1:57:ae:9f:55:5c:a6:c8:95:64:be:a3:56:2e:90: 7e:66:3d:c3:c0:76:62:4f:7b:2d:0a:f7:1a:f4:91:79:26:5b: 2a:79:66:7e:12:e8:51:9f:bc:6e:5a:4a:df:b3:57:c4:f3:eb: d6:58:3c:86:c7:f8:51:7b:af:4e:ab:fa:91:16:f8:ee:35:28: a6:69:f8:15:3e:fb:6b:1b:a5:93:68:f9:4b:86:ed:53:70:86: bd:35:43:c4:21:17:f7:36:ba:b2:54:9b:34:ac:94:57:ed:e1: 94:66:62:e8:d0:12:2f:74:03:5f:1c:44:e3:c6:2b:2f:61:c4: 60:c9:c8:7b:05:14:c7:98:86:69:ae:7a:d0:82:6c:21:f3:34: 13:8a:55:8b:50:03:f9:01:64:fe:9c:c6:dd:9d:4e:2e:41:39: 18:3b:b7:9a:39:b9:5c:90:5d:11:51:65:1b:71:2c:3a:5e:7d: 4c:70:86:13:ef:66:e8:3b:39:75:b2:09:68:84:d4:1c:0d:52: 13:d3:a9:79:60:f5:a1:31:f3:ea:35:13:f8:90:fe:92:8e:74: ba:7c:c8:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XN0fwND5OmZMZ+GFfni6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh NTI2ZDgwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWQ5ODMwMTJiMjI1NDVkY2UyMTVjZWE2YjcwYmIwYTI5YjU5M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMSNiSUI4PweR5ovgMW3SCkTSKYC +l6tq1+JXfTAB2j1Fr6hCjBizsJhKqaotjQN3UpxiZqGTPGhX8eBxWFcysCFR4Mz P2bzAoI4XyLduaggVmyyl/8GuyHYIn/WHteVVZj3RgG/1LGWYaXMJzvDt+KDl6km b/xDfYyVlFL0grvVLwgimjiKnUguQ86KD6ly0aiHX70qMrPFOV/hCXu5FSxxW7oJ gMGbpealKsUCXmjQ0Xm6gSG72N82MSEI7hc4xFp6475HuuZTLYFbD9wQAS1W6dqc 7MVrp+v1B8uwbsfP//WThAkuZeqGbaxmEERk/FeAeYimTTISCkUlZE9m/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXZgwErIlRdziFc6mtwuwoptZPfMB8GA1UdIwQY MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt MWU4MjlmZmExYzNhLzEvSmRtREFTc2lWRjNPSVZ6cWEzQzdDaW0xazk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU0fMA0G CSqGSIb3DQEBCwUAA4IBAQAVwa4MY6W+IkuMapaFnWkV4RVACCs/l1timoc5RGSN LKjobmjYH5yhV66fVVymyJVkvqNWLpB+Zj3DwHZiT3stCvca9JF5JlsqeWZ+EuhR n7xuWkrfs1fE8+vWWDyGx/hRe69Oq/qRFvjuNSimafgVPvtrG6WTaPlLhu1TcIa9 NUPEIRf3NrqyVJs0rJRX7eGUZmLo0BIvdANfHETjxisvYcRgych7BRTHmIZprnrQ gmwh8zQTilWLUAP5AWT+nMbdnU4uQTkYO7eaOblckF0RUWUbcSw6Xn1McIYT72bo Ozl1sglohNQcDVIT06l5YPWhMfPqNRP4kP6SjnS6fMjm -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:30 2026 by rpki-client