This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/J1a1Sf8sCSoFu29heJeSu7Y_gBg.roa File: J1a1Sf8sCSoFu29heJeSu7Y_gBg.roa (raw, json) Hash identifier: QVYHX56w9P4lNMlTgCpotmWMy2RCR/bz3vm88VxlYRk= Subject key identifier: 27:56:B5:49:FF:2C:09:2A:05:BB:6F:61:78:97:92:BB:B6:3F:80:18 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7350B9D5774BCAC75CB0AD2C7E617 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/J1a1Sf8sCSoFu29heJeSu7Y_gBg.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 138.124.186.0/24 maxlen: 24 212.18.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:35:0b:9d:57:74:bc:ac:75:cb:0a:d2:c7:e6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2756b549ff2c092a05bb6f61789792bbb63f8018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:bb:5d:54:be:1a:04:de:ac:be:b9:7c:4b: 4a:f5:e6:fd:6e:81:13:a0:25:20:6f:04:08:aa:1c: 56:88:45:7e:4e:9c:2c:61:3b:dc:07:0e:be:d1:7d: bd:82:e1:05:66:cd:75:93:f6:fa:0b:f6:16:17:75: c6:c5:4f:da:ca:14:c4:db:11:3b:b7:e4:48:32:97: ee:6a:1f:3b:78:d3:c7:5f:e9:ae:73:d4:d7:0d:aa: 5f:c9:d0:da:d1:f0:a0:05:16:85:5f:00:5d:d9:2d: 7e:5b:49:d1:f7:3d:7d:4e:f2:ff:ef:c7:a7:9a:6b: 0d:b3:14:f4:17:58:39:92:3e:bd:53:94:66:bf:0b: 76:f0:a0:ab:66:eb:34:bc:3d:96:4d:6f:80:1f:06: 31:df:da:1b:fa:bd:82:c5:d4:61:fa:ab:62:41:26: 98:54:cf:d5:75:70:e8:88:a9:ab:f0:96:49:f7:bd: 62:af:e4:8d:9b:0d:bc:76:ce:e2:e1:6b:2c:f6:c8: b2:fd:05:53:a5:dd:e4:a7:73:d8:c1:e6:a5:42:cc: 5b:a0:f0:c0:40:b7:40:e4:85:bf:70:ba:a3:f4:1e: 1b:75:8f:e6:f3:07:38:9b:6a:b6:bd:d9:ef:11:08: 3c:2e:78:51:20:84:33:d5:6d:2b:c1:9b:07:fc:53: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:B5:49:FF:2C:09:2A:05:BB:6F:61:78:97:92:BB:B6:3F:80:18 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/J1a1Sf8sCSoFu29heJeSu7Y_gBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.186.0/24 212.18.104.0/24 Signature Algorithm: sha256WithRSAEncryption 82:2f:51:75:c0:a6:ea:e5:e9:2b:4d:bb:dc:68:c4:07:84:25: e3:46:d8:30:f8:87:63:13:58:ab:70:0b:4f:d9:d8:66:6f:e3: f6:7d:fe:06:ce:da:1e:77:d3:60:e8:11:b0:d8:85:d2:90:c6: 97:d6:ac:23:09:91:30:be:c7:80:29:85:0d:f6:d1:e3:c5:1b: 87:46:5d:50:c4:88:c6:59:32:9a:e2:35:6b:50:2e:a1:10:04: b5:fd:6b:02:c9:f6:be:0a:5d:a3:fd:01:43:24:39:10:87:4e: 2c:fa:91:37:91:27:57:81:5d:e8:3e:4a:2a:15:5d:87:a5:a7: 6b:a6:8b:2f:1b:03:c8:5f:1b:ac:b3:f9:26:b0:5f:0d:6f:e6: 4d:9b:ec:e2:b5:73:93:9b:8c:4b:fe:a2:f6:fe:40:75:97:87: f7:c6:d2:53:42:26:8c:87:ae:c6:35:e6:26:28:d4:03:b9:77: 30:c5:2f:b6:cc:ef:17:49:f6:41:ca:62:61:b0:0d:1d:c3:b7: 9c:78:30:d6:b6:0f:b3:a5:ec:46:3f:94:ae:d1:65:a0:89:8f: 46:ad:c3:34:bf:45:7e:81:a7:ea:da:6a:49:b7:0b:c5:86:5f: 0f:62:95:90:74:4a:fa:79:37:6e:f5:74:3c:da:29:37:92:66: 10:4e:ea:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xzULnVd0vKx1ywrSx+YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzU2YjU0OWZmMmMwOTJhMDViYjZmNjE3ODk3OTJiYmI2M2Y4MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeu7XVS+GgTerL65fEtK9eb9boET oCUgbwQIqhxWiEV+TpwsYTvcBw6+0X29guEFZs11k/b6C/YWF3XGxU/ayhTE2xE7 t+RIMpfuah87eNPHX+muc9TXDapfydDa0fCgBRaFXwBd2S1+W0nR9z19TvL/78en mmsNsxT0F1g5kj69U5Rmvwt28KCrZus0vD2WTW+AHwYx39ob+r2CxdRh+qtiQSaY VM/VdXDoiKmr8JZJ971ir+SNmw28ds7i4Wss9siy/QVTpd3kp3PYwealQsxboPDA QLdA5IW/cLqj9B4bdY/m8wc4m2q2vdnvEQg8LnhRIIQz1W0rwZsH/FPhywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCdWtUn/LAkqBbtvYXiXkru2P4AYMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvSjFhMVNmOHNDU29GdTI5aGVKZVN1N1lfZ0JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiny6AwQA 1BJoMA0GCSqGSIb3DQEBCwUAA4IBAQCCL1F1wKbq5ekrTbvcaMQHhCXjRtgw+Idj E1ircAtP2dhmb+P2ff4Gztoed9Ng6BGw2IXSkMaX1qwjCZEwvseAKYUN9tHjxRuH Rl1QxIjGWTKa4jVrUC6hEAS1/WsCyfa+Cl2j/QFDJDkQh04s+pE3kSdXgV3oPkoq FV2HpadrposvGwPIXxuss/kmsF8Nb+ZNm+zitXOTm4xL/qL2/kB1l4f3xtJTQiaM h67GNeYmKNQDuXcwxS+2zO8XSfZBymJhsA0dw7eceDDWtg+zpexGP5Su0WWgiY9G rcM0v0V+gafq2mpJtwvFhl8PYpWQdEr6eTdu9XQ82ik3kmYQTupr -----END CERTIFICATE-----Generated at Wed Jan 21 06:46:59 2026 by rpki-client