This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/J0-ksWlOwS4VhcDNypkLf6r80js.roa File: J0-ksWlOwS4VhcDNypkLf6r80js.roa (raw, json) Hash identifier: s3k/AMUOv/daPeObJ+uaRC8+83NMlgcUejkDs+RsAHg= Subject key identifier: 27:4F:A4:B1:69:4E:C1:2E:15:85:C0:CD:CA:99:0B:7F:AA:FC:D2:3B Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019A9C4F5B235235803D7D0DB91AA7EC3D75 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/J0-ksWlOwS4VhcDNypkLf6r80js.roa Signing time: Wed 19 Nov 2025 13:30:37 +0000 ROA not before: Wed 19 Nov 2025 13:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397081 IP address blocks: 94.26.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:4f:5b:23:52:35:80:3d:7d:0d:b9:1a:a7:ec:3d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Nov 19 13:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=274fa4b1694ec12e1585c0cdca990b7faafcd23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:77:63:97:b9:fb:9f:29:ef:e7:8c:98:4b: 44:0f:b1:14:a2:f8:37:91:21:f6:c5:96:cd:39:5c: 12:e6:1d:df:dd:23:46:c9:4f:99:ed:76:9f:87:3f: 2d:5e:6c:07:6b:b5:6e:71:c3:71:f6:a2:a6:ce:26: 86:14:a4:00:84:f3:9a:8e:db:4c:de:1c:be:5f:bc: f3:5e:c7:4f:d2:01:a1:8c:9f:90:81:fe:c0:e8:6c: 5e:55:06:71:8a:ba:dd:a5:32:90:61:31:e1:4b:bc: 3e:4e:89:c8:19:ff:50:ef:ab:05:20:e0:fe:7b:9d: fb:27:a2:05:47:48:2e:8c:08:10:29:e7:81:6d:24: e2:62:e3:3b:a9:64:a5:ea:67:b4:29:1b:14:62:ca: 88:03:61:1a:4e:85:94:29:b8:bf:e2:d8:a6:fc:6a: 8b:f5:cd:f0:11:e9:45:4e:cc:d8:57:12:94:f0:c6: 51:c4:d6:15:3b:e5:16:7d:16:ff:25:6a:51:85:41: db:ab:e9:16:58:86:4d:a6:ee:42:61:ef:4a:2d:cd: 27:d5:a3:3a:f0:d5:6c:3b:c1:8e:7a:8f:79:c1:c7: 72:7c:82:2a:7b:ca:ce:8e:aa:1d:7d:90:97:70:fe: ae:57:e5:1d:a8:ff:26:85:a5:2a:55:65:6f:e2:ae: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:A4:B1:69:4E:C1:2E:15:85:C0:CD:CA:99:0B:7F:AA:FC:D2:3B X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/J0-ksWlOwS4VhcDNypkLf6r80js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.68.0/24 Signature Algorithm: sha256WithRSAEncryption 44:b1:6a:68:67:a3:a5:29:be:59:3c:93:74:f4:b4:bf:ac:70: 1c:b4:0b:02:48:15:89:20:95:fa:55:f1:fd:da:b3:1e:82:91: ec:d1:27:0e:c7:7c:35:d1:92:1e:c6:bf:a5:6a:2f:55:be:a8: e3:55:3f:7b:32:9c:a7:5f:1d:eb:6b:90:91:99:b7:e1:e5:78: ef:5d:1c:04:be:a7:8a:cf:79:7b:59:52:60:23:e3:bb:fe:5c: f9:ae:99:96:2c:9f:62:08:8f:a0:2a:ff:54:16:63:e5:73:97: ed:18:91:c8:a6:b9:3a:02:a7:1c:f6:66:c0:a5:85:0e:4a:50: ff:b0:63:0f:37:1d:2c:0f:e5:0f:ae:61:f5:9c:e3:71:cc:ab: 66:75:d8:e4:f6:6f:00:c1:a1:d8:3b:25:3c:75:45:d2:d6:8d: f1:9c:b8:a6:ca:6e:41:5c:9e:10:7c:08:f9:05:2f:55:4f:97: 04:d4:5f:b7:5a:cc:0a:52:bd:8e:c6:84:70:a5:ae:de:8d:f8: 7a:db:96:7f:68:9e:df:21:d6:52:61:64:1a:41:b2:f0:fa:0b: 34:2f:1a:6c:1b:0f:a1:1f:a6:a6:ce:db:34:39:0d:0c:39:18: 59:98:d7:ce:25:69:c5:98:0e:30:a4:83:61:3d:3d:59:b9:fc: aa:0b:5d:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcT1sjUjWAPX0NuRqn7D11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMTE5MTMzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzRmYTRiMTY5NGVjMTJlMTU4NWMwY2RjYTk5MGI3ZmFhZmNkMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nV3Y5e5+58p7+eMmEtED7EUovg3 kSH2xZbNOVwS5h3f3SNGyU+Z7Xafhz8tXmwHa7VuccNx9qKmziaGFKQAhPOajttM 3hy+X7zzXsdP0gGhjJ+Qgf7A6GxeVQZxirrdpTKQYTHhS7w+TonIGf9Q76sFIOD+ e537J6IFR0gujAgQKeeBbSTiYuM7qWSl6me0KRsUYsqIA2EaToWUKbi/4tim/GqL 9c3wEelFTszYVxKU8MZRxNYVO+UWfRb/JWpRhUHbq+kWWIZNpu5CYe9KLc0n1aM6 8NVsO8GOeo95wcdyfIIqe8rOjqodfZCXcP6uV+UdqP8mhaUqVWVv4q5oKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdPpLFpTsEuFYXAzcqZC3+q/NI7MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvSjAta3NXbE93UzRWaGNETnlwa0xmNnI4MGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhpEMA0G CSqGSIb3DQEBCwUAA4IBAQBEsWpoZ6OlKb5ZPJN09LS/rHActAsCSBWJIJX6VfH9 2rMegpHs0ScOx3w10ZIexr+lai9VvqjjVT97MpynXx3ra5CRmbfh5XjvXRwEvqeK z3l7WVJgI+O7/lz5rpmWLJ9iCI+gKv9UFmPlc5ftGJHIprk6Aqcc9mbApYUOSlD/ sGMPNx0sD+UPrmH1nONxzKtmddjk9m8AwaHYOyU8dUXS1o3xnLimym5BXJ4QfAj5 BS9VT5cE1F+3WswKUr2OxoRwpa7ejfh625Z/aJ7fIdZSYWQaQbLw+gs0LxpsGw+h H6amzts0OQ0MORhZmNfOJWnFmA4wpINhPT1ZufyqC12o -----END CERTIFICATE-----Generated at Tue Dec 9 01:18:56 2025 by rpki-client