This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa File: J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa (raw, json) Hash identifier: fA4gjnSI4d76aMPIiYbqAlxasjqqD9PxHceAqm4716Q= Subject key identifier: 27:F0:A3:BA:8C:F8:0E:D2:E6:06:2D:16:7C:28:09:81:1A:B6:D7:09 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D22C05FC8E2D133FCC9A1A5F0500E Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 45.89.55.0/24 maxlen: 24 193.57.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:c0:5f:c8:e2:d1:33:fc:c9:a1:a5:f0:50:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f0a3ba8cf80ed2e6062d167c2809811ab6d709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:cc:e6:cd:74:6e:c6:4f:49:a5:a0:86:5c: a1:73:ea:59:dc:85:14:b5:dd:44:f8:81:df:2d:17: a9:dc:7b:17:a9:21:ef:95:f4:8c:51:11:bf:7e:da: e5:1a:31:58:65:09:20:b1:fc:8b:b2:65:d7:33:2e: 56:4f:5c:67:75:21:5a:a8:cf:1a:57:30:36:24:6f: 49:65:ec:e9:aa:4e:6c:b9:b4:59:ac:4a:9f:ef:51: bd:24:ee:a1:68:e6:47:0e:b9:3b:95:91:16:ca:95: 9d:cb:d8:d4:34:15:5f:63:17:df:dd:35:1b:14:75: b9:0b:41:61:04:db:be:da:7f:85:31:1e:0b:a8:b0: 70:d6:c7:7d:88:fc:22:90:47:83:50:a2:1e:60:eb: 40:04:df:83:48:16:e0:c2:e3:c9:a2:dc:ea:da:0c: 48:51:b7:69:b7:3b:18:ff:fe:70:27:3e:dd:46:3b: 3f:6c:df:93:f5:91:2c:f3:8e:f0:e0:9a:09:77:f6: 98:f7:1a:04:27:e0:4e:e7:28:e5:a1:f9:0a:5a:a1: f6:d3:0d:b8:51:d0:dd:e3:00:d3:32:7b:2f:a6:04: a4:0c:21:f4:e9:73:14:bf:45:15:a6:70:cb:4b:11: 62:fb:b7:2b:b0:f1:62:86:b2:6d:3f:7f:ad:83:6e: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F0:A3:BA:8C:F8:0E:D2:E6:06:2D:16:7C:28:09:81:1A:B6:D7:09 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.55.0/24 193.57.139.0/24 Signature Algorithm: sha256WithRSAEncryption 90:84:00:05:0d:91:c8:9e:5f:62:a2:cd:ee:e0:8a:20:a2:70: be:ca:ea:e6:c9:8c:f3:74:dc:f6:c0:06:57:f9:90:e9:d8:e0: f5:82:f5:50:36:99:70:9e:87:bd:cd:27:2a:46:84:ac:95:d7: d0:91:b2:3b:48:8a:b7:b7:1b:f2:78:93:4d:4c:63:03:df:bd: 77:64:9c:3e:be:52:3c:27:d5:bf:b1:fc:86:f5:64:30:c1:c4: b7:87:5f:e6:ea:14:50:a7:f1:5e:78:74:94:ae:fe:6f:65:e1: bd:03:b8:d1:bb:7f:4e:ad:f3:13:c0:e7:46:91:bc:6d:a1:94: 14:a2:51:7b:d7:87:13:98:ed:2c:15:a4:14:88:0e:88:52:1d: 7c:e1:d7:68:1a:82:f6:18:58:ad:c3:25:e8:59:49:4d:08:33: 7a:dc:61:f0:82:ec:4d:31:28:0c:4f:29:ba:a2:2d:34:bf:3c: e6:22:33:4f:e6:bf:45:9b:34:66:51:19:0d:82:70:09:4a:86: ab:3c:53:4e:dc:23:50:95:a2:fa:10:16:3c:65:e0:52:57:29: 96:5a:15:b0:1e:55:3e:87:59:47:f4:b3:0b:00:6b:d6:ec:f4: 86:74:ff:eb:5e:cf:a5:75:92:ce:10:95:2a:65:09:e9:01:ee: 26:70:c0:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSLAX8ji0TP8yaGl8FAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2YwYTNiYThjZjgwZWQyZTYwNjJkMTY3YzI4MDk4MTFhYjZkNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJDM5s10bsZPSaWghlyhc+pZ3IUU td1E+IHfLRep3HsXqSHvlfSMURG/ftrlGjFYZQkgsfyLsmXXMy5WT1xndSFaqM8a VzA2JG9JZezpqk5subRZrEqf71G9JO6haOZHDrk7lZEWypWdy9jUNBVfYxff3TUb FHW5C0FhBNu+2n+FMR4LqLBw1sd9iPwikEeDUKIeYOtABN+DSBbgwuPJotzq2gxI UbdptzsY//5wJz7dRjs/bN+T9ZEs847w4JoJd/aY9xoEJ+BO5yjlofkKWqH20w24 UdDd4wDTMnsvpgSkDCH06XMUv0UVpnDLSxFi+7crsPFihrJtP3+tg25smwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCfwo7qM+A7S5gYtFnwoCYEattcJMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvSl9DanVvejREdExtQmkwV2ZDZ0pnUnEyMXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVk3AwQA wTmLMA0GCSqGSIb3DQEBCwUAA4IBAQCQhAAFDZHInl9ios3u4IogonC+yurmyYzz dNz2wAZX+ZDp2OD1gvVQNplwnoe9zScqRoSsldfQkbI7SIq3txvyeJNNTGMD3713 ZJw+vlI8J9W/sfyG9WQwwcS3h1/m6hRQp/FeeHSUrv5vZeG9A7jRu39OrfMTwOdG kbxtoZQUolF714cTmO0sFaQUiA6IUh184ddoGoL2GFitwyXoWUlNCDN63GHwguxN MSgMTym6oi00vzzmIjNP5r9FmzRmURkNgnAJSoarPFNO3CNQlaL6EBY8ZeBSVymW WhWwHlU+h1lH9LMLAGvW7PSGdP/rXs+ldZLOEJUqZQnpAe4mcMD5 -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:31 2026 by rpki-client