This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/J_dwoac2_h9_W-5D3aMWAkrgLHg.roa File: J_dwoac2_h9_W-5D3aMWAkrgLHg.roa (raw, json) Hash identifier: SCIAKzIm+vtezURZIxJ2QGlLa7UQxEem2JdisgUb7+M= Subject key identifier: 27:F7:70:A1:A7:36:FE:1F:7F:5B:EE:43:DD:A3:16:02:4A:E0:2C:78 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B94C4B83BE46CC281D3A90AF4CCDACA8C Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/J_dwoac2_h9_W-5D3aMWAkrgLHg.roa Signing time: Tue 06 Jan 2026 19:24:38 +0000 ROA not before: Tue 06 Jan 2026 19:24:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 188.209.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:c4:b8:3b:e4:6c:c2:81:d3:a9:0a:f4:cc:da:ca:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 6 19:24:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f770a1a736fe1f7f5bee43dda316024ae02c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:10:9b:a9:a8:81:e8:c4:fa:02:aa:e7:98: e9:22:75:65:72:51:be:81:87:41:6d:ab:b2:24:84: 0b:21:90:73:48:2f:6b:e0:2a:9a:8d:73:49:89:18: af:64:ab:7c:87:e0:04:90:4a:5e:cb:a8:a7:30:15: 7d:b3:94:63:8f:8f:ab:fd:d7:e5:b7:66:4a:95:51: db:66:e1:58:30:1a:df:35:05:b9:a0:94:ea:8a:cc: 6e:19:83:ea:0a:90:e5:5a:36:9b:e2:4b:39:37:0d: b8:49:1a:fa:ed:75:93:31:af:42:87:68:11:6a:c6: 46:db:6e:d3:ee:30:26:1e:34:d5:ea:dc:1f:9e:9a: 5a:00:cd:0c:e5:1e:d1:e2:56:85:3d:f5:a8:0e:b6: 81:ba:cf:bf:6a:9e:54:3a:ed:2b:53:17:c4:42:a4: 36:ba:68:93:14:18:55:b9:07:cc:0b:85:d9:5c:59: 56:73:f5:b7:ad:d3:63:16:a2:dc:33:16:af:1d:d5: 2d:af:fb:3c:d0:f9:c2:b8:a3:90:6d:04:88:d1:96: 1d:59:6a:98:4e:e4:5c:69:b0:c0:c3:21:bc:73:f7: 74:90:39:c9:51:1a:96:0d:17:a6:ff:7e:96:a6:86: 52:32:cd:8e:99:6c:f3:e1:85:fd:e1:3b:21:46:e1: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F7:70:A1:A7:36:FE:1F:7F:5B:EE:43:DD:A3:16:02:4A:E0:2C:78 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/J_dwoac2_h9_W-5D3aMWAkrgLHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.137.0/24 Signature Algorithm: sha256WithRSAEncryption b9:09:4a:b4:fe:a8:6e:13:bf:bb:be:3c:5d:d4:98:a2:a7:3d: fe:a0:c5:e1:d3:69:b6:41:ff:c9:0b:8d:c6:05:69:1a:d3:b8: cd:35:b3:1c:85:d1:dd:01:91:5b:4e:e3:57:6f:80:17:af:3c: f3:46:ec:87:e2:03:35:16:7f:b2:4b:21:97:31:e0:f2:7d:cf: 89:83:fb:ca:3c:13:99:91:bd:c2:73:f7:6a:e6:b8:4a:96:60: ac:76:12:b0:3b:0f:2c:5a:d2:4d:d0:1f:af:60:a0:ee:07:e7: cb:02:90:29:f4:71:66:cb:53:f0:89:a5:d2:e0:95:d8:e2:14: 08:4a:ef:4a:b8:7a:92:5c:41:39:46:2b:5c:0e:df:00:43:6e: 2a:aa:2b:80:58:f9:9e:74:5c:1f:82:e5:6b:78:17:16:4e:8f: 56:f3:24:79:ef:06:be:2b:7d:6a:cb:5c:d9:3d:dd:dd:e8:ee: 1f:54:f2:f0:e0:2c:f8:af:50:b7:ad:a0:28:8a:20:4c:e7:54: 62:f8:6f:c5:ab:18:b8:a5:82:65:5f:4c:cd:c7:ed:c1:d5:03: 2e:a7:7a:6c:42:ad:89:42:c6:0c:c5:43:79:12:f9:00:f7:16: e4:fc:cf:c4:9d:3e:7e:b5:ad:84:f3:2f:fe:6e:3c:4d:45:9d: c0:bc:6d:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuUxLg75GzCgdOpCvTM2sqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTA2MTkyNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Y3NzBhMWE3MzZmZTFmN2Y1YmVlNDNkZGEzMTYwMjRhZTAyYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMkQm6mogejE+gKq55jpInVlclG+ gYdBbauyJIQLIZBzSC9r4CqajXNJiRivZKt8h+AEkEpey6inMBV9s5Rjj4+r/dfl t2ZKlVHbZuFYMBrfNQW5oJTqisxuGYPqCpDlWjab4ks5Nw24SRr67XWTMa9Ch2gR asZG227T7jAmHjTV6twfnppaAM0M5R7R4laFPfWoDraBus+/ap5UOu0rUxfEQqQ2 umiTFBhVuQfMC4XZXFlWc/W3rdNjFqLcMxavHdUtr/s80PnCuKOQbQSI0ZYdWWqY TuRcabDAwyG8c/d0kDnJURqWDRem/36WpoZSMs2OmWzz4YX94TshRuGb5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCf3cKGnNv4ff1vuQ92jFgJK4Cx4MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvSl9kd29hYzJfaDlfVy01RDNhTVdBa3JnTEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGJMA0G CSqGSIb3DQEBCwUAA4IBAQC5CUq0/qhuE7+7vjxd1Jiipz3+oMXh02m2Qf/JC43G BWka07jNNbMchdHdAZFbTuNXb4AXrzzzRuyH4gM1Fn+ySyGXMeDyfc+Jg/vKPBOZ kb3Cc/dq5rhKlmCsdhKwOw8sWtJN0B+vYKDuB+fLApAp9HFmy1PwiaXS4JXY4hQI Su9KuHqSXEE5RitcDt8AQ24qqiuAWPmedFwfguVreBcWTo9W8yR57wa+K31qy1zZ Pd3d6O4fVPLw4Cz4r1C3raAoiiBM51Ri+G/Fqxi4pYJlX0zNx+3B1QMup3psQq2J QsYMxUN5EvkA9xbk/M/EnT5+ta2E8y/+bjxNRZ3AvG08 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:05 2026 by rpki-client