This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l3qguqmVZ2UoLq5AHExDEruTcDE.roa File: l3qguqmVZ2UoLq5AHExDEruTcDE.roa (raw, json) Hash identifier: jrjZWHrJ8kVGfJQal33KDq7JBU5IWLXl85r9GuIXtdY= Subject key identifier: 97:7A:A0:BA:A9:95:67:65:28:2E:AE:40:1C:4C:43:12:BB:93:70:31 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A583ED0F79F10B416D37878509CA Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l3qguqmVZ2UoLq5AHExDEruTcDE.roa Signing time: Fri 02 Jan 2026 14:20:18 +0000 ROA not before: Fri 02 Jan 2026 14:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 92.71.18.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a5:83:ed:0f:79:f1:0b:41:6d:37:87:85:09:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=977aa0baa9956765282eae401c4c4312bb937031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:96:c7:cf:cf:6f:b4:30:32:1d:15:3a:ab: eb:66:0f:b6:80:f6:2b:4b:b6:59:85:f4:4d:bf:27: 8e:b7:b6:e0:9e:4c:aa:c0:0c:dd:ac:36:90:74:ab: 03:c5:9b:fd:57:82:ea:7e:be:bb:ee:93:d2:eb:a5: 25:30:68:a3:e0:95:29:b7:98:ac:b6:dd:6e:5d:d3: 76:40:81:3e:c8:3c:e0:3e:0d:73:42:a8:66:35:d8: eb:9c:b2:6b:6a:68:c3:19:ba:32:af:1e:d3:3a:70: b5:5c:16:01:de:fb:8d:09:e6:e0:4f:09:5e:0a:7d: 53:ed:9c:d1:60:e7:a4:b0:cb:cc:e7:48:c0:64:65: 76:59:81:35:d3:62:28:da:7a:e7:3d:bf:4b:5b:57: a0:0a:bb:5c:4c:15:ca:56:07:90:0b:bf:8a:87:92: 7a:78:e9:62:97:da:6a:1c:5e:3f:c9:11:05:d7:a7: fe:ce:33:1e:fd:ec:21:3a:3e:89:2f:ff:0d:17:b2: 86:0d:54:38:04:18:df:8b:ac:f2:83:cd:0e:22:b7: 5a:47:af:1c:a1:27:f5:32:fd:c3:67:c6:3a:51:dc: e9:3a:89:47:be:57:2c:bf:8a:3b:ee:05:cb:d5:f6: ec:51:98:05:17:55:f4:65:d2:14:3c:10:cc:72:d3: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:A0:BA:A9:95:67:65:28:2E:AE:40:1C:4C:43:12:BB:93:70:31 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l3qguqmVZ2UoLq5AHExDEruTcDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.71.18.64/27 Signature Algorithm: sha256WithRSAEncryption 96:65:ae:5d:a4:74:1e:19:7a:a2:2e:04:70:02:04:b8:f6:fe: 73:f5:01:62:f4:d2:f4:84:47:30:4d:0e:53:57:a7:48:03:ba: da:4a:47:a1:a5:b2:47:8f:59:2c:b0:bc:ce:c8:76:ad:53:c5: 91:dc:8a:9c:1a:0c:f2:95:5d:79:f1:7e:c4:f4:37:1d:9c:a6: d0:81:fa:da:cf:bd:0a:27:3d:9c:1b:ae:9b:de:4f:90:57:4e: 80:85:bb:cb:2b:14:56:66:e5:3e:03:7e:cc:cb:17:a7:c5:e9: cb:87:80:38:ff:81:3e:26:61:18:72:e6:5c:a3:4d:27:89:ad: b8:ba:97:82:b3:26:41:04:b6:95:2d:62:f7:ba:17:f8:b4:94: e1:46:cd:69:86:6d:18:1a:de:22:b8:20:44:bb:97:fc:bd:5d: 42:19:f9:49:76:ec:9e:4a:13:1c:ca:bd:6c:10:0a:71:17:5c: e2:da:de:b7:b8:42:20:a1:20:a0:b6:d9:b4:60:61:c0:81:38: 2a:6b:dd:d0:63:24:b2:5b:ea:f2:1a:e5:c6:4b:e5:95:fe:a3: 12:0d:c9:19:60:11:d7:e1:8e:6b:c4:36:89:e2:be:77:3e:7d: 39:dc:73:bc:2e:36:db:c7:ab:22:63:49:e3:f1:d2:73:a0:a4: d3:c4:63:00 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FKWD7Q958QtBbTeHhQnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzdhYTBiYWE5OTU2NzY1MjgyZWFlNDAxYzRjNDMxMmJiOTM3MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsuWx8/Pb7QwMh0VOqvrZg+2gPYr S7ZZhfRNvyeOt7bgnkyqwAzdrDaQdKsDxZv9V4Lqfr677pPS66UlMGij4JUpt5is tt1uXdN2QIE+yDzgPg1zQqhmNdjrnLJramjDGboyrx7TOnC1XBYB3vuNCebgTwle Cn1T7ZzRYOeksMvM50jAZGV2WYE102Io2nrnPb9LW1egCrtcTBXKVgeQC7+Kh5J6 eOlil9pqHF4/yREF16f+zjMe/ewhOj6JL/8NF7KGDVQ4BBjfi6zyg80OIrdaR68c oSf1Mv3DZ8Y6UdzpOolHvlcsv4o77gXL1fbsUZgFF1X0ZdIUPBDMctNZ+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJd6oLqplWdlKC6uQBxMQxK7k3AxMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvbDNxZ3VxbVZaMlVvTHE1QUhFeERFcnVUY0RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFXEcSQDAN BgkqhkiG9w0BAQsFAAOCAQEAlmWuXaR0Hhl6oi4EcAIEuPb+c/UBYvTS9IRHME0O U1enSAO62kpHoaWyR49ZLLC8zsh2rVPFkdyKnBoM8pVdefF+xPQ3HZym0IH62s+9 Cic9nBuum95PkFdOgIW7yysUVmblPgN+zMsXp8Xpy4eAOP+BPiZhGHLmXKNNJ4mt uLqXgrMmQQS2lS1i97oX+LSU4UbNaYZtGBreIrggRLuX/L1dQhn5SXbsnkoTHMq9 bBAKcRdc4tret7hCIKEgoLbZtGBhwIE4Kmvd0GMkslvq8hrlxkvllf6jEg3JGWAR 1+GOa8Q2ieK+dz59OdxzvC4228erImNJ4/HSc6Ck08RjAA== -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:09 2026 by rpki-client