This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/j_x8-xq1Cd2KgNHm4nfR-icwAI0.roa File: j_x8-xq1Cd2KgNHm4nfR-icwAI0.roa (raw, json) Hash identifier: iJitYLX0aghD6k8WGrVcB21UJwxiN0hlpWyOTUTC2Oc= Subject key identifier: 8F:FC:7C:FB:1A:B5:09:DD:8A:80:D1:E6:E2:77:D1:FA:27:30:00:8D Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019B36343459D6C2D17ECAB0C42640148D81 Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/j_x8-xq1Cd2KgNHm4nfR-icwAI0.roa Signing time: Fri 19 Dec 2025 10:42:29 +0000 ROA not before: Fri 19 Dec 2025 10:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39591 IP address blocks: 185.181.140.0/22 maxlen: 24 2a12:dfc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:34:34:59:d6:c2:d1:7e:ca:b0:c4:26:40:14:8d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Dec 19 10:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8ffc7cfb1ab509dd8a80d1e6e277d1fa2730008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:74:36:fb:8c:43:f7:da:2a:b0:a7:dd:e5: 45:fa:11:4e:6b:60:39:ca:68:4c:37:c3:06:a1:a6: 5e:23:b2:47:8a:af:aa:5a:9c:b9:d1:52:8d:a6:4c: 4f:22:84:dc:f1:01:fc:9e:53:36:c4:5b:d2:15:48: 5d:56:21:87:0e:4b:61:5e:ae:50:26:15:65:67:c5: 82:78:eb:43:04:37:41:b1:8f:34:6a:01:08:9b:69: c9:2d:03:a3:f2:5c:e7:c4:2e:76:a9:9c:c1:d0:ff: b5:83:a1:24:25:06:a3:9c:28:b4:29:e2:07:d8:9d: a9:71:91:0c:75:ac:e4:dd:bf:51:92:f9:bd:eb:40: 4d:c4:19:8d:9f:88:79:b1:d6:05:94:26:55:98:51: 8e:a2:2e:6f:bd:58:0e:d1:c0:d1:ee:54:66:e8:a1: 89:4a:35:84:14:e2:00:ad:17:d8:2d:a9:3c:49:5a: 22:e1:bd:fd:79:41:46:10:ae:a4:93:6b:56:59:c7: 42:56:bd:20:33:79:97:54:08:c5:57:a8:2d:80:78: 21:bd:85:4c:9d:f5:fb:22:de:d1:73:41:3b:36:b2: 13:84:78:99:87:39:06:28:4e:ad:14:20:09:1e:b3: 4f:90:49:c7:1f:e5:29:06:f1:5b:d0:53:f9:2d:52: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FC:7C:FB:1A:B5:09:DD:8A:80:D1:E6:E2:77:D1:FA:27:30:00:8D X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/j_x8-xq1Cd2KgNHm4nfR-icwAI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.140.0/22 IPv6: 2a12:dfc0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:96:89:c6:c8:04:8a:64:12:24:9c:26:62:e0:98:fe:6f:9b: be:b1:37:c6:a4:94:a9:7f:eb:0a:82:33:a0:f6:09:7c:b8:06: 9d:58:4f:79:e7:99:fa:8c:87:8a:a7:78:34:df:84:ff:12:80: 5f:dd:4c:35:cb:ef:a0:37:40:00:57:7c:12:08:8c:56:69:57: 86:a7:f5:1f:65:e7:db:e4:b7:09:59:08:dd:bb:e8:9a:87:da: 9f:ca:bc:9b:ff:54:7b:58:9a:c8:6a:41:50:1d:a1:4a:00:97: 35:21:f4:d8:00:67:95:2c:19:13:4e:6d:80:23:27:4a:e8:ed: 1f:fb:f0:86:82:fa:b6:bd:92:9b:99:13:34:32:22:0a:07:b9: c9:fb:9b:d1:15:f4:6f:de:11:1b:fb:e6:b3:01:ef:59:b8:95: 92:dc:03:95:e5:23:c3:fe:f6:3d:87:9e:64:7f:66:ee:b3:84: 37:e2:2d:a0:25:07:d8:fc:77:f3:5c:28:b6:d6:6f:f0:ea:91: c6:68:26:36:9f:d7:12:ea:65:81:f6:9a:8a:df:46:20:ae:13: ac:21:5d:6f:2d:8e:3d:df:e4:fc:61:9f:d7:c2:6f:82:98:cb: df:af:13:d5:69:ea:5d:aa:f0:c9:f7:c4:db:27:74:e1:35:ce: 6d:c6:a2:5b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZs2NDRZ1sLRfsqwxCZAFI2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjUxMjE5MTA0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmZjN2NmYjFhYjUwOWRkOGE4MGQxZTZlMjc3ZDFmYTI3MzAwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ah0NvuMQ/faKrCn3eVF+hFOa2A5 ymhMN8MGoaZeI7JHiq+qWpy50VKNpkxPIoTc8QH8nlM2xFvSFUhdViGHDkthXq5Q JhVlZ8WCeOtDBDdBsY80agEIm2nJLQOj8lznxC52qZzB0P+1g6EkJQajnCi0KeIH 2J2pcZEMdazk3b9Rkvm960BNxBmNn4h5sdYFlCZVmFGOoi5vvVgO0cDR7lRm6KGJ SjWEFOIArRfYLak8SVoi4b39eUFGEK6kk2tWWcdCVr0gM3mXVAjFV6gtgHghvYVM nfX7It7Rc0E7NrIThHiZhzkGKE6tFCAJHrNPkEnHH+UpBvFb0FP5LVI24wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI/8fPsatQndioDR5uJ30fonMACNMB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEval94OC14cTFDZDJLZ05IbTRuZlItaWN3QUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubWMMA0E AgACMAcDBQMqEt/AMA0GCSqGSIb3DQEBCwUAA4IBAQAclonGyASKZBIknCZi4Jj+ b5u+sTfGpJSpf+sKgjOg9gl8uAadWE9555n6jIeKp3g034T/EoBf3Uw1y++gN0AA V3wSCIxWaVeGp/UfZefb5LcJWQjdu+iah9qfyryb/1R7WJrIakFQHaFKAJc1IfTY AGeVLBkTTm2AIydK6O0f+/CGgvq2vZKbmRM0MiIKB7nJ+5vRFfRv3hEb++azAe9Z uJWS3AOV5SPD/vY9h55kf2bus4Q34i2gJQfY/HfzXCi21m/w6pHGaCY2n9cS6mWB 9pqK30YgrhOsIV1vLY493+T8YZ/Xwm+CmMvfrxPVaepdqvDJ98TbJ3ThNc5txqJb -----END CERTIFICATE-----Generated at Sat Dec 20 00:57:26 2025 by rpki-client