This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/J8WfogeIpk1UKcHSO8WrjdEFqSM.roa File: J8WfogeIpk1UKcHSO8WrjdEFqSM.roa (raw, json) Hash identifier: PzzkgqrS9E4dkHoOcT2At52JZ2wJfpowp9BIjzEgVJE= Subject key identifier: 27:C5:9F:A2:07:88:A6:4D:54:29:C1:D2:3B:C5:AB:8D:D1:05:A9:23 Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Certificate serial: 019B7F8340C852554332B30C58D03F6F0EB6 Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/J8WfogeIpk1UKcHSO8WrjdEFqSM.roa Signing time: Fri 02 Jan 2026 16:21:06 +0000 ROA not before: Fri 02 Jan 2026 16:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9180 IP address blocks: 195.214.224.0/24 maxlen: 24 195.214.225.0/24 maxlen: 24 195.214.226.0/24 maxlen: 24 195.214.227.0/24 maxlen: 24 195.214.228.0/24 maxlen: 24 195.214.229.0/24 maxlen: 24 195.214.230.0/24 maxlen: 24 195.214.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:40:c8:52:55:43:32:b3:0c:58:d0:3f:6f:0e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27c59fa20788a64d5429c1d23bc5ab8dd105a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:60:c5:31:09:29:94:0f:2d:c8:12:35:3c: 16:06:55:dc:92:a4:f7:50:38:26:1c:20:0a:06:8e: 65:f2:0b:a5:0f:44:e5:d9:a7:77:fb:f6:d1:bf:d0: be:a3:0f:a6:03:bd:e4:22:5d:93:0d:f3:aa:d2:67: 10:72:11:31:61:00:9d:22:1d:17:32:74:10:19:e6: 45:fe:05:68:a9:a5:80:ea:ef:cf:72:dd:44:96:5d: 80:39:af:0b:17:a9:50:ca:f9:61:56:19:0f:cf:5c: 40:fb:fa:ac:dd:5e:89:cb:92:40:b4:26:d7:12:5b: 59:27:2d:a2:a8:fe:af:66:83:11:e7:97:01:dc:50: 5b:41:47:cb:98:e4:38:3f:9f:18:2b:f4:e0:e8:e6: dc:f3:45:1f:07:b1:11:bd:e6:75:60:49:92:02:a0: ae:ed:0f:06:01:66:c5:e8:55:d2:c4:42:1c:da:b8: 2e:5a:fb:95:39:18:ee:8c:d0:52:4a:67:78:31:f8: 00:ae:6d:b2:de:49:84:bc:66:ce:a7:4f:d0:d6:5d: a1:9e:42:49:d2:9b:43:e5:8c:91:c7:8a:ca:75:8f: 48:fe:c4:a4:51:9e:68:7c:9e:c7:ba:30:44:01:21: 9b:28:81:fb:29:cf:63:2a:16:a1:03:50:e8:f5:f6: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C5:9F:A2:07:88:A6:4D:54:29:C1:D2:3B:C5:AB:8D:D1:05:A9:23 X509v3 Authority Key Identifier: keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/J8WfogeIpk1UKcHSO8WrjdEFqSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.224.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:e5:32:7b:76:47:85:e0:c5:84:97:9f:45:0a:93:7b:a1:0e: 92:8c:60:be:ca:cd:3b:db:d4:52:3f:4e:dc:83:3a:3a:fa:ca: ca:09:f2:4d:35:c2:25:00:d2:12:cb:0c:99:5f:50:42:6d:5f: 49:cf:53:1e:4b:36:54:47:15:b3:ff:dc:0d:16:28:73:3b:22: 21:51:07:de:c1:1d:70:47:0d:40:08:a6:d4:03:f0:1e:db:48: b0:fb:84:44:70:a3:62:28:20:e4:77:8c:36:8f:5f:31:ed:e2: 44:df:40:5f:a1:74:ad:f4:9c:93:4b:0e:a4:59:30:42:38:fc: 34:ee:38:0c:dc:90:d2:1b:c7:12:95:05:c7:d9:11:ba:32:72: ff:52:28:42:54:30:9a:9c:e1:61:b2:e7:e1:f9:ff:94:65:29: e7:84:22:e2:a9:10:f8:bc:e0:f6:be:f4:ec:26:3a:1f:03:a7: 99:0c:c6:03:d8:d3:64:a1:47:b9:a4:43:59:4e:b1:21:a0:b5: 87:99:3f:02:29:15:98:af:ea:0b:7a:f2:ed:de:a9:65:eb:1e: 4d:25:60:54:90:90:5f:13:85:90:a8:53:fb:6d:aa:73:8f:6c: 31:59:71:64:89:6a:31:be:0e:8d:7b:1e:59:7e:31:d6:b6:26: 7b:a7:a6:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g0DIUlVDMrMMWNA/bw62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1 MDQxZDYwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2M1OWZhMjA3ODhhNjRkNTQyOWMxZDIzYmM1YWI4ZGQxMDVhOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37BgxTEJKZQPLcgSNTwWBlXckqT3 UDgmHCAKBo5l8gulD0Tl2ad3+/bRv9C+ow+mA73kIl2TDfOq0mcQchExYQCdIh0X MnQQGeZF/gVoqaWA6u/Pct1Ell2AOa8LF6lQyvlhVhkPz1xA+/qs3V6Jy5JAtCbX EltZJy2iqP6vZoMR55cB3FBbQUfLmOQ4P58YK/Tg6Obc80UfB7ERveZ1YEmSAqCu 7Q8GAWbF6FXSxEIc2rguWvuVORjujNBSSmd4MfgArm2y3kmEvGbOp0/Q1l2hnkJJ 0ptD5YyRx4rKdY9I/sSkUZ5ofJ7HujBEASGbKIH7Kc9jKhahA1Do9fa+ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfFn6IHiKZNVCnB0jvFq43RBakjMB8GA1UdIwQY MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt OGFkZjBkYTIyNTQ1LzEvSjhXZm9nZUlwazFVS2NIU084V3JqZEVGcVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1 LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw9bgMA0G CSqGSIb3DQEBCwUAA4IBAQBa5TJ7dkeF4MWEl59FCpN7oQ6SjGC+ys0729RSP07c gzo6+srKCfJNNcIlANISywyZX1BCbV9Jz1MeSzZURxWz/9wNFihzOyIhUQfewR1w Rw1ACKbUA/Ae20iw+4REcKNiKCDkd4w2j18x7eJE30BfoXSt9JyTSw6kWTBCOPw0 7jgM3JDSG8cSlQXH2RG6MnL/UihCVDCanOFhsufh+f+UZSnnhCLiqRD4vOD2vvTs JjofA6eZDMYD2NNkoUe5pENZTrEhoLWHmT8CKRWYr+oLevLt3qll6x5NJWBUkJBf E4WQqFP7bapzj2wxWXFkiWoxvg6Nex5ZfjHWtiZ7p6YB -----END CERTIFICATE-----Generated at Wed Jan 21 21:02:16 2026 by rpki-client