This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa File: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (raw, json) Hash identifier: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek= Subject key identifier: 8F:F0:D4:31:D0:27:67:D2:F6:E5:3F:C3:2D:91:2D:0D:23:AD:EC:98 Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437 Certificate serial: 019B7C7FA8989512DAB5276836B98C6D19D1 Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa Signing time: Fri 02 Jan 2026 02:18:19 +0000 ROA not before: Fri 02 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197380 IP address blocks: 91.220.128.0/24 maxlen: 24 185.127.112.0/24 maxlen: 24 185.127.113.0/24 maxlen: 24 185.127.114.0/24 maxlen: 24 185.127.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a8:98:95:12:da:b5:27:68:36:b9:8c:6d:19:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437 Validity Not Before: Jan 2 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ff0d431d02767d2f6e53fc32d912d0d23adec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:7f:81:02:4b:09:13:13:a2:35:e5:77:99: 5a:22:de:e6:09:f5:87:66:61:79:35:82:f0:24:b6: b0:3a:70:a6:13:6a:e2:01:00:16:82:a5:2a:ba:f9: 4f:45:2f:04:fe:97:b8:8e:63:5e:e3:f3:fd:01:b2: ae:58:8d:06:5a:00:58:bc:d4:b8:dc:0e:94:81:20: 49:da:ed:51:67:d2:f6:04:b2:44:9d:34:49:7e:80: 21:b6:c2:9e:87:15:be:c1:58:68:e6:81:b4:60:c3: ee:b7:f2:75:09:89:82:7e:38:60:b9:bb:38:92:75: 63:b1:24:f7:32:e0:ff:6c:f0:b9:c8:38:f2:af:5d: 03:59:7d:bf:fa:a5:fd:4a:c2:6a:f8:ab:29:5c:de: e0:d6:a7:c6:89:cf:2c:38:bf:ef:50:06:22:b3:a5: 6d:e1:ec:be:0b:03:de:f2:59:3c:1d:d0:d7:e9:91: fe:4f:3e:03:3f:a5:aa:da:14:0d:21:04:cc:f3:e3: ea:59:2e:aa:d6:98:ec:9a:17:98:7c:72:44:80:f6: 9f:3e:f1:a9:5a:7f:80:7f:81:0f:61:a6:65:3a:c8: fd:7a:f7:65:89:88:0e:04:16:4d:65:7f:ca:49:dd: 0c:bb:51:38:ce:e2:2d:7b:3b:32:d9:ea:b2:7c:58: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F0:D4:31:D0:27:67:D2:F6:E5:3F:C3:2D:91:2D:0D:23:AD:EC:98 X509v3 Authority Key Identifier: keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.128.0/24 185.127.112.0/22 Signature Algorithm: sha256WithRSAEncryption 77:56:38:a1:44:b2:a1:15:d2:2c:49:57:10:66:35:d4:5b:46: 1f:9c:cd:a3:20:46:b9:5d:5a:c5:ba:ff:2b:70:36:8b:c1:98: de:a9:8b:2c:f2:18:81:09:01:24:22:e1:8d:d4:0f:d3:f3:aa: a0:aa:22:1a:76:1c:5d:5b:f2:29:f7:43:d5:59:65:9b:7a:28: 70:fd:82:15:47:54:f4:f8:37:f3:a4:3d:d9:59:c1:26:c6:b3: 6d:99:d4:b7:d1:bf:51:52:41:3c:53:18:35:16:99:1f:61:2d: 84:b4:7c:72:ad:e7:f5:9f:5b:c4:14:cb:96:08:97:5e:17:16: 11:f4:07:e7:fd:2d:d1:88:3a:a4:1a:53:98:ee:05:6d:c2:93: 1e:86:df:9f:36:79:08:68:6d:2f:5b:27:07:a4:a1:cc:ea:66: f3:8a:61:e7:53:1d:3d:a4:81:69:8f:8d:7d:94:69:08:41:1b: 98:b7:b3:20:03:62:57:cc:d1:4b:e2:0f:73:1a:85:21:a6:91: 48:c0:58:e4:ec:6e:14:77:e1:3b:f9:f9:67:45:3f:27:82:13: 39:b6:56:d6:7c:d1:e8:af:9d:ed:23:b9:59:6c:94:fd:08:54: 48:83:22:08:1a:f7:60:b8:1e:19:31:2f:2a:2c:c6:81:97:33: 41:00:ef:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f6iYlRLatSdoNrmMbRnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4 OTI0MzcwHhcNMjYwMTAyMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmYwZDQzMWQwMjc2N2QyZjZlNTNmYzMyZDkxMmQwZDIzYWRlYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbJ/gQJLCRMTojXld5laIt7mCfWH ZmF5NYLwJLawOnCmE2riAQAWgqUquvlPRS8E/pe4jmNe4/P9AbKuWI0GWgBYvNS4 3A6UgSBJ2u1RZ9L2BLJEnTRJfoAhtsKehxW+wVho5oG0YMPut/J1CYmCfjhgubs4 knVjsST3MuD/bPC5yDjyr10DWX2/+qX9SsJq+KspXN7g1qfGic8sOL/vUAYis6Vt 4ey+CwPe8lk8HdDX6ZH+Tz4DP6Wq2hQNIQTM8+PqWS6q1pjsmheYfHJEgPafPvGp Wn+Af4EPYaZlOsj9evdliYgOBBZNZX/KSd0Mu1E4zuItezsy2eqyfFiNlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/w1DHQJ2fS9uU/wy2RLQ0jreyYMB8GA1UdIwQY MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt NjM3OTljMDI2YTU3LzEval9EVU1kQW5aOUwyNVRfRExaRXREU090N0pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3 LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9yAAwQC uX9wMA0GCSqGSIb3DQEBCwUAA4IBAQB3VjihRLKhFdIsSVcQZjXUW0YfnM2jIEa5 XVrFuv8rcDaLwZjeqYss8hiBCQEkIuGN1A/T86qgqiIadhxdW/Ip90PVWWWbeihw /YIVR1T0+DfzpD3ZWcEmxrNtmdS30b9RUkE8Uxg1FpkfYS2EtHxyref1n1vEFMuW CJdeFxYR9Afn/S3RiDqkGlOY7gVtwpMeht+fNnkIaG0vWycHpKHM6mbzimHnUx09 pIFpj419lGkIQRuYt7MgA2JXzNFL4g9zGoUhppFIwFjk7G4Ud+E7+flnRT8nghM5 tlbWfNHor53tI7lZbJT9CFRIgyIIGvdguB4ZMS8qLMaBlzNBAO8P -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:27 2026 by rpki-client