This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/j7x8fbkRwMKStj5ClhgwLaeQkVs.roa File: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (raw, json) Hash identifier: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E= Subject key identifier: 8F:BC:7C:7D:B9:11:C0:C2:92:B6:3E:42:96:18:30:2D:A7:90:91:5B Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF44C3F8C7D1A8BF09F8C4F6CF42B Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/j7x8fbkRwMKStj5ClhgwLaeQkVs.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 185.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:4c:3f:8c:7d:1a:8b:f0:9f:8c:4f:6c:f4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fbc7c7db911c0c292b63e429618302da790915b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:3e:dd:0f:bd:8e:4f:67:f6:c3:48:17:29: 41:c5:af:25:99:46:d7:4f:b7:c0:b2:af:82:5a:34: c9:3f:a5:6f:2f:c1:f8:a6:55:8e:2a:30:9b:c1:9d: 30:18:68:0b:66:15:91:e5:ac:10:07:50:4f:ee:2d: dd:d2:fb:43:45:f2:04:70:5a:20:75:cc:7d:eb:5e: 95:82:c1:88:ba:02:5d:f9:a9:5a:97:5f:93:6f:5b: d2:e6:22:58:cb:34:65:10:06:0e:8c:f7:4c:c4:d3: 76:02:90:0a:b6:7f:f0:d5:1e:2c:09:59:01:b1:12: e6:eb:d0:2b:3c:8f:fe:27:ea:a5:05:e8:21:6c:7c: 4f:09:a2:19:0b:84:31:d8:3c:36:80:d6:5e:4b:07: 45:7a:1e:00:32:5c:26:da:b7:86:e1:b9:6c:d4:16: 1c:77:57:2c:ba:4f:f2:87:b5:0b:47:96:d0:ec:01: 33:f6:66:f0:8c:96:d6:97:c2:b4:27:43:2c:36:81: df:7e:c2:a2:59:22:79:5e:f7:15:92:87:3a:6e:62: e0:cc:d9:b0:5f:34:7f:fb:26:d1:d9:69:be:03:d3: 68:0d:f9:45:67:0c:55:d5:3b:70:b1:c4:d7:88:dc: d2:c6:5d:d8:2f:df:ef:90:d5:6d:56:03:cb:3a:18: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BC:7C:7D:B9:11:C0:C2:92:B6:3E:42:96:18:30:2D:A7:90:91:5B X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/j7x8fbkRwMKStj5ClhgwLaeQkVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.253.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6d:06:e3:62:47:e7:d8:a5:c4:8c:20:bb:49:b0:c0:3d:8e: ed:8f:29:4d:4c:18:c1:78:12:99:4f:76:46:0d:b7:46:ac:1c: e0:a6:06:b7:a1:6f:32:b3:85:10:f3:6c:8b:26:69:b9:fb:c9: 2e:09:88:e2:57:5e:b2:ca:ba:34:76:4c:aa:52:0b:ae:56:7c: 80:d8:e4:1f:a3:9c:11:12:f1:aa:45:e8:13:1d:e8:fe:2c:0d: c0:c7:12:85:89:3d:44:c3:4c:47:2a:3e:7b:f3:4b:73:10:e9: 22:3d:b1:4d:4a:24:2a:1a:4a:38:a8:ac:c2:19:6f:56:f0:82: 71:cd:3b:11:2e:62:66:47:61:86:57:74:a5:a7:13:9a:fd:d6: 1a:10:fa:99:35:c5:86:95:5a:d8:59:b0:16:3b:2e:bb:db:a2: 44:90:47:0c:27:a7:e2:b0:91:83:20:cb:03:9f:2e:89:8b:8b: 87:17:71:c1:13:8b:7d:90:6f:74:55:7c:b3:63:01:3d:28:1c: b3:72:f1:1c:55:39:70:80:8a:0b:67:a9:0e:80:72:5c:23:8e: 3e:82:c2:06:8c:09:75:2e:ad:29:53:42:88:0d:11:f6:58:61: 33:21:50:59:a0:65:ca:c5:7a:68:ed:9c:3f:f3:a7:38:92:14: 71:90:10:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvRMP4x9Govwn4xPbPQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmJjN2M3ZGI5MTFjMGMyOTJiNjNlNDI5NjE4MzAyZGE3OTA5MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDo+3Q+9jk9n9sNIFylBxa8lmUbX T7fAsq+CWjTJP6VvL8H4plWOKjCbwZ0wGGgLZhWR5awQB1BP7i3d0vtDRfIEcFog dcx9616VgsGIugJd+alal1+Tb1vS5iJYyzRlEAYOjPdMxNN2ApAKtn/w1R4sCVkB sRLm69ArPI/+J+qlBeghbHxPCaIZC4Qx2Dw2gNZeSwdFeh4AMlwm2reG4bls1BYc d1csuk/yh7ULR5bQ7AEz9mbwjJbWl8K0J0MsNoHffsKiWSJ5XvcVkoc6bmLgzNmw XzR/+ybR2Wm+A9NoDflFZwxV1TtwscTXiNzSxl3YL9/vkNVtVgPLOhhXewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI+8fH25EcDCkrY+QpYYMC2nkJFbMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvajd4OGZia1J3TUtTdGo1Q2xoZ3dMYWVRa1ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRX9MA0G CSqGSIb3DQEBCwUAA4IBAQAXbQbjYkfn2KXEjCC7SbDAPY7tjylNTBjBeBKZT3ZG DbdGrBzgpga3oW8ys4UQ82yLJmm5+8kuCYjiV16yyro0dkyqUguuVnyA2OQfo5wR EvGqRegTHej+LA3AxxKFiT1Ew0xHKj5780tzEOkiPbFNSiQqGko4qKzCGW9W8IJx zTsRLmJmR2GGV3SlpxOa/dYaEPqZNcWGlVrYWbAWOy6726JEkEcMJ6fisJGDIMsD ny6Ji4uHF3HBE4t9kG90VXyzYwE9KByzcvEcVTlwgIoLZ6kOgHJcI44+gsIGjAl1 Lq0pU0KIDRH2WGEzIVBZoGXKxXpo7Zw/86c4khRxkBAz -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:17 2026 by rpki-client