This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/j3xXGYb4PKoDDYCrcF76WEHOC38.roa File: j3xXGYb4PKoDDYCrcF76WEHOC38.roa (raw, json) Hash identifier: 8wsnvUlocmLbAkNNUfUfE61W6nMq6uvyq9AfFEArZZk= Subject key identifier: 8F:7C:57:19:86:F8:3C:AA:03:0D:80:AB:70:5E:FA:58:41:CE:0B:7F Certificate issuer: /CN=79259102c16993ce5e13b08cba60eedad7f92773 Certificate serial: 019B797EC72AA639F06C30FF56189CDF7AB1 Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/j3xXGYb4PKoDDYCrcF76WEHOC38.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40509 IP address blocks: 77.83.140.0/22 maxlen: 24 213.188.192.0/19 maxlen: 24 2a09:8280::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c7:2a:a6:39:f0:6c:30:ff:56:18:9c:df:7a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f7c571986f83caa030d80ab705efa5841ce0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:67:01:ed:91:42:f2:6b:d3:78:da:23:9a: 6d:c8:69:99:ad:4f:75:1e:0a:d1:ff:96:0c:7f:3e: 1d:a3:6d:bf:79:5f:44:c4:e8:70:e6:d8:1d:04:a3: 9f:18:a9:7b:72:e2:3c:9d:8d:19:69:63:73:90:75: b9:06:ef:43:1e:25:c1:2d:76:d2:db:53:70:cf:a9: 53:15:b1:42:f3:35:59:ad:38:60:6b:91:a9:fa:51: d8:ce:3c:d3:ad:c0:06:c9:d4:29:91:4c:15:91:52: bf:4c:89:ac:65:ea:4b:6a:df:b4:83:84:69:33:71: 5e:6f:fc:e1:71:b9:76:9e:94:81:07:83:ff:76:3b: 83:3c:37:db:8c:7b:d7:fa:17:b5:ee:08:66:5d:16: 40:d5:39:11:9e:d9:e7:8b:9f:d2:ae:29:b9:c1:71: a0:80:89:5f:fc:ef:bd:8b:4e:92:df:62:98:c2:9a: 96:ab:c1:4f:24:e0:ee:55:a2:0a:06:bf:f7:90:eb: 68:bc:9a:33:67:02:d1:55:e1:83:99:56:be:fe:c8: 1f:b7:3d:12:c9:8f:04:db:84:12:79:88:2e:d8:4c: eb:4a:18:8e:17:a8:73:aa:28:09:0c:e9:b4:2a:aa: 59:e5:03:b2:25:15:8b:5f:cf:a6:f5:73:ce:c1:9e: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:57:19:86:F8:3C:AA:03:0D:80:AB:70:5E:FA:58:41:CE:0B:7F X509v3 Authority Key Identifier: keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/j3xXGYb4PKoDDYCrcF76WEHOC38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.140.0/22 213.188.192.0/19 IPv6: 2a09:8280::/29 Signature Algorithm: sha256WithRSAEncryption 42:e8:db:d1:5e:6c:8f:6f:b5:9d:b0:2f:68:82:3d:5f:16:00: 27:66:a9:79:35:00:0f:8e:48:00:bd:46:21:df:45:df:dd:50: 86:ac:32:d2:9e:c0:6d:23:60:3c:50:42:47:8c:7b:1c:b9:ca: a4:59:44:be:1d:2f:41:60:de:1a:d9:f2:59:ac:bb:32:04:af: 6c:2f:20:8a:b8:58:97:19:da:ff:88:23:b5:ca:d2:67:55:93: 3a:0d:c8:a9:89:f5:9c:12:72:d4:90:eb:6d:99:71:13:de:01: 68:a9:34:2b:89:bc:38:0b:2b:23:e4:05:b6:d9:9f:8b:6c:e1: 2f:87:d1:e3:bc:8e:88:69:81:a2:3b:15:93:33:85:4d:df:b5: 4b:04:79:fa:83:e8:7f:8f:fb:c1:4e:c0:9e:4f:f9:b6:32:a6: 10:ca:3a:98:d3:3b:c9:d6:6a:96:12:dc:c1:f6:9c:2a:ff:9b: 3d:dd:96:2f:db:8f:ff:b8:da:73:c7:b0:e2:e9:40:50:48:09: 4a:f9:96:1e:0c:7c:6a:72:1c:ef:c9:44:af:d9:4c:c8:a3:71: 5c:c6:e8:0c:e7:9e:95:c0:20:68:f5:26:b2:dd:d2:29:f1:38: b9:a3:12:13:34:66:07:7b:55:57:f2:5b:5f:2e:00:be:5a:16: 9e:1e:31:c1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fscqpjnwbDD/Vhic33qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MjU5MTAyYzE2OTkzY2U1ZTEzYjA4Y2JhNjBlZWRhZDdm OTI3NzMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjdjNTcxOTg2ZjgzY2FhMDMwZDgwYWI3MDVlZmE1ODQxY2UwYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w9nAe2RQvJr03jaI5ptyGmZrU91 HgrR/5YMfz4do22/eV9ExOhw5tgdBKOfGKl7cuI8nY0ZaWNzkHW5Bu9DHiXBLXbS 21Nwz6lTFbFC8zVZrThga5Gp+lHYzjzTrcAGydQpkUwVkVK/TImsZepLat+0g4Rp M3Feb/zhcbl2npSBB4P/djuDPDfbjHvX+he17ghmXRZA1TkRntnni5/Srim5wXGg gIlf/O+9i06S32KYwpqWq8FPJODuVaIKBr/3kOtovJozZwLRVeGDmVa+/sgftz0S yY8E24QSeYgu2EzrShiOF6hzqigJDOm0KqpZ5QOyJRWLX8+m9XPOwZ7LswIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI98VxmG+DyqAw2Aq3Be+lhBzgt/MB8GA1UdIwQY MBaAFHklkQLBaZPOXhOwjLpg7trX+SdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVNXUkFzRnBrODVlRTdDTXVtRHUydGY1SjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NWQ2ZTItYzdiYS00NzhkLTg3OWUt MjVmNGY3NDMwYmRhLzEvajN4WEdZYjRQS29ERFlDcmNGNzZXRUhPQzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NWQ2ZTItYzdiYS00NzhkLTg3OWUtMjVmNGY3NDMwYmRh LzEvZVNXUkFzRnBrODVlRTdDTXVtRHUydGY1SjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTVOMAwQF 1bzAMA0EAgACMAcDBQMqCYKAMA0GCSqGSIb3DQEBCwUAA4IBAQBC6NvRXmyPb7Wd sC9ogj1fFgAnZql5NQAPjkgAvUYh30Xf3VCGrDLSnsBtI2A8UEJHjHscucqkWUS+ HS9BYN4a2fJZrLsyBK9sLyCKuFiXGdr/iCO1ytJnVZM6DcipifWcEnLUkOttmXET 3gFoqTQribw4Cysj5AW22Z+LbOEvh9HjvI6IaYGiOxWTM4VN37VLBHn6g+h/j/vB TsCeT/m2MqYQyjqY0zvJ1mqWEtzB9pwq/5s93ZYv24//uNpzx7Di6UBQSAlK+ZYe DHxqchzvyUSv2UzIo3FcxugM556VwCBo9Say3dIp8Ti5oxITNGYHe1VX8ltfLgC+ WhaeHjHB -----END CERTIFICATE-----Generated at Mon Jan 12 01:03:53 2026 by rpki-client