This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/J9YAUFwPteiNE41P-B9PZesABw4.roa File: J9YAUFwPteiNE41P-B9PZesABw4.roa (raw, json) Hash identifier: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU= Subject key identifier: 27:D6:00:50:5C:0F:B5:E8:8D:13:8D:4F:F8:1F:4F:65:EB:00:07:0E Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac Certificate serial: 019B7B360A3973D930C29A0DEBCF841A58FB Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/J9YAUFwPteiNE41P-B9PZesABw4.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 195.66.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0a:39:73:d9:30:c2:9a:0d:eb:cf:84:1a:58:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d600505c0fb5e88d138d4ff81f4f65eb00070e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:0b:31:39:88:ef:5f:42:56:db:9c:34:37: 18:c7:c4:39:d9:e1:90:9a:92:ff:10:07:a7:83:1c: 5a:da:ff:08:ee:10:1b:79:6a:8b:80:31:3c:7b:93: 2a:53:8d:8d:d4:f9:91:67:a1:c3:42:2e:4b:95:13: 0c:00:e6:8c:82:a2:3d:75:ae:cc:ca:84:6f:a2:4f: ac:09:4c:9b:5f:f2:3d:7c:21:bb:6f:f7:e4:39:3e: 58:ae:b1:b1:63:94:9d:39:33:b6:38:5f:b7:cc:cb: 60:4e:57:d3:92:7b:bf:dc:64:29:c1:ab:a4:e3:30: 16:25:55:49:5f:bc:86:f9:7e:5b:7d:da:6c:e0:41: db:b7:8e:f5:d2:1f:86:d4:ab:cc:de:b6:b3:5d:3b: df:dc:af:17:70:8d:0e:d4:33:1a:51:2c:f1:ad:fc: 01:f6:79:02:32:8c:99:dc:f7:42:a6:f3:15:07:fb: 83:f3:19:27:69:76:68:8a:18:b0:98:aa:52:ae:9c: 47:8a:03:0c:0a:02:ab:6a:e7:c3:ed:cb:5e:ab:8b: 13:3f:18:a7:28:4a:01:fa:4d:31:c7:eb:bf:b2:5a: ff:1b:c5:35:82:d4:76:18:21:cb:5c:59:18:a2:1c: 39:22:42:17:4c:d6:17:13:77:cf:29:03:49:de:eb: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:00:50:5C:0F:B5:E8:8D:13:8D:4F:F8:1F:4F:65:EB:00:07:0E X509v3 Authority Key Identifier: keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/J9YAUFwPteiNE41P-B9PZesABw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.74.0/24 Signature Algorithm: sha256WithRSAEncryption bd:17:09:4b:cc:5b:f3:d5:1b:17:62:e7:20:ef:cc:c1:88:b5: ad:d3:0d:5c:d1:cf:cb:84:7e:2e:fd:51:b7:61:25:ac:c7:a3: de:4d:14:e8:bc:6d:41:b4:bd:fd:2d:24:45:f1:a4:48:3d:1e: 6c:b1:b4:8a:ff:fa:43:1c:65:72:93:e4:0c:7c:10:ca:95:36: d1:3d:54:4a:36:5c:c6:d7:3c:0f:49:ea:9e:f0:b1:5a:c1:6b: dc:0b:7c:d8:1c:be:aa:05:4d:7c:9d:fc:df:bc:73:69:b1:1d: 37:74:f5:ca:63:ee:f3:04:40:bc:09:0a:57:ac:ec:2a:83:5d: b6:53:fe:f9:89:da:55:2b:48:c2:17:f9:7e:c7:d6:c0:0f:98: d8:fe:a7:25:3a:3f:74:18:32:36:fb:a7:ed:f8:0c:a0:b9:3c: 1c:01:0f:93:41:a2:be:79:db:bc:7f:b7:73:70:3f:5a:97:10: 5c:2c:ef:cc:5c:25:39:f0:87:3c:73:e6:7b:8b:ac:2f:11:2e: 1b:c2:3d:f4:4b:29:13:c8:04:e6:3d:84:b3:d4:30:38:69:3c: 63:af:33:88:b1:fe:0c:88:8f:1a:e2:eb:b2:b1:2a:c3:ca:3c: d2:78:87:99:0d:f6:28:a1:49:75:e2:4e:ee:26:34:24:43:1f: 29:af:b2:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ngo5c9kwwpoN68+EGlj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNzIyYTk5NzMyYzljM2NiYzIwYjBhNDcyOTJhODIzNzgy NjAzYWMwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Q2MDA1MDVjMGZiNWU4OGQxMzhkNGZmODFmNGY2NWViMDAwNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjYLMTmI719CVtucNDcYx8Q52eGQ mpL/EAengxxa2v8I7hAbeWqLgDE8e5MqU42N1PmRZ6HDQi5LlRMMAOaMgqI9da7M yoRvok+sCUybX/I9fCG7b/fkOT5YrrGxY5SdOTO2OF+3zMtgTlfTknu/3GQpwauk 4zAWJVVJX7yG+X5bfdps4EHbt4710h+G1KvM3razXTvf3K8XcI0O1DMaUSzxrfwB 9nkCMoyZ3PdCpvMVB/uD8xknaXZoihiwmKpSrpxHigMMCgKraufD7cteq4sTPxin KEoB+k0xx+u/slr/G8U1gtR2GCHLXFkYohw5IkIXTNYXE3fPKQNJ3utE9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfWAFBcD7XojRONT/gfT2XrAAcOMB8GA1UdIwQY MBaAFL5yKplzLJw8vCCwpHKSqCN4JgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODct MjliOTdhMTg3N2ZiLzEvSjlZQVVGd1B0ZWlORTQxUC1COVBaZXNBQnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODctMjliOTdhMTg3N2Zi LzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JKMA0G CSqGSIb3DQEBCwUAA4IBAQC9FwlLzFvz1RsXYucg78zBiLWt0w1c0c/LhH4u/VG3 YSWsx6PeTRTovG1BtL39LSRF8aRIPR5ssbSK//pDHGVyk+QMfBDKlTbRPVRKNlzG 1zwPSeqe8LFawWvcC3zYHL6qBU18nfzfvHNpsR03dPXKY+7zBEC8CQpXrOwqg122 U/75idpVK0jCF/l+x9bAD5jY/qclOj90GDI2+6ft+AyguTwcAQ+TQaK+edu8f7dz cD9alxBcLO/MXCU58Ic8c+Z7i6wvES4bwj30SykTyATmPYSz1DA4aTxjrzOIsf4M iI8a4uuysSrDyjzSeIeZDfYooUl14k7uJjQkQx8pr7Ip -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:24 2026 by rpki-client