This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa
File: J3iD4VDZ8-aXeeShiHXSPMED-RU.roa (raw, json)
Hash identifier: RKIJqaCSpUiu7efuOwtfCD5ZdIggIAU78C+Ketk53I8=
Subject key identifier: 27:78:83:E1:50:D9:F3:E6:97:79:E4:A1:88:75:D2:3C:C1:03:F9:15
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019BFF3D2579C185FBF58C4FA5A52F8593C7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa
Signing time: Tue 27 Jan 2026 11:35:55 +0000
ROA not before: Tue 27 Jan 2026 11:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.21.84.0/24 maxlen: 24
89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:3d:25:79:c1:85:fb:f5:8c:4f:a5:a5:2f:85:93:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 27 11:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277883e150d9f3e69779e4a18875d23cc103f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:71:8c:9f:23:69:55:c8:8a:61:6e:13:43:
b3:e7:62:e2:34:83:94:f9:23:0e:55:0e:5b:4b:20:
72:5e:e0:a3:c8:92:61:aa:90:39:56:50:08:28:e8:
b5:e3:eb:04:ec:c7:b1:fc:6f:ce:3a:25:04:ba:e6:
9a:58:3d:2e:65:e0:62:e3:00:77:de:59:6f:63:87:
30:c7:cb:50:a1:09:10:de:84:9f:fe:54:25:e5:b6:
52:7e:92:f1:0f:0d:a7:24:6a:8a:2e:29:ee:9d:fd:
97:2e:a5:9d:9f:0b:14:6f:84:e4:8a:c9:35:eb:76:
59:48:2c:cc:25:72:74:3c:54:45:77:09:42:6f:97:
39:4d:66:1b:88:9c:6c:c0:6c:ac:3c:4f:72:fc:7c:
da:ed:d4:e2:e9:ad:21:b4:e2:d8:24:1e:33:d5:78:
99:02:7d:71:d7:26:3e:2b:e8:8f:f6:31:cf:bc:65:
39:00:55:d3:b8:59:17:aa:b5:a2:76:e5:35:d5:b1:
f0:11:69:02:ea:d0:b1:8d:61:44:a2:65:09:2e:ac:
6a:51:c1:23:d3:f1:89:dc:92:03:82:ca:63:62:e0:
ca:c0:98:d4:53:6a:e1:22:f3:56:17:31:7e:f2:e2:
88:2b:1b:dd:4b:23:11:7e:6d:6f:e9:df:33:b9:12:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:83:E1:50:D9:F3:E6:97:79:E4:A1:88:75:D2:3C:C1:03:F9:15
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/J3iD4VDZ8-aXeeShiHXSPMED-RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c0:cc:e7:24:0a:68:f5:76:73:64:28:28:33:fb:22:f2:c3:
03:d8:7d:db:a7:e1:49:52:b9:31:6d:27:e1:98:31:20:14:0e:
a2:a4:96:fb:96:c9:7c:5a:3c:9b:a5:7e:aa:94:4b:83:ed:8e:
93:8d:08:13:76:a8:50:a4:87:4b:ba:b4:a2:19:a9:bf:b8:f7:
a2:3a:38:d0:5f:c6:68:8d:c2:da:bf:7d:84:1e:8d:b8:f1:b4:
fb:2a:e9:d7:79:62:4c:e4:14:dc:35:f7:d2:a4:68:bd:e3:ed:
5d:0c:78:21:3e:50:da:e6:84:ee:22:cb:82:0e:2f:50:bc:06:
9f:be:26:0d:02:93:90:83:b3:f5:ea:51:d7:96:73:32:d8:fc:
33:c9:ec:4e:b3:e2:85:49:82:d6:1c:28:61:4e:40:4d:93:35:
e5:a3:16:d8:f8:c0:0f:57:ab:3f:a5:c2:39:1e:1f:2c:42:0c:
63:79:db:98:37:b0:0a:df:f8:49:c8:e6:0b:12:32:3f:ea:2b:
6a:63:10:44:f0:11:7c:08:8c:e6:f1:0d:95:d8:cf:a1:f5:c8:
9b:2b:80:71:cb:c7:24:d0:45:ec:c8:cd:49:1e:af:95:a5:66:
84:c0:09:e6:62:4d:9a:8f:b4:a6:75:0a:aa:f5:e1:54:2f:73:
97:c3:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 04:53:51 2026 by rpki-client