This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa File: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (raw, json) Hash identifier: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw= Subject key identifier: 8D:6A:11:61:1F:6F:CA:8A:3C:C1:41:D5:59:97:E3:D6:D6:1B:43:47 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9FAB9FF635C87671467CCC272C89 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207591 IP address blocks: 147.234.78.0/24 maxlen: 24 147.234.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9f:ab:9f:f6:35:c8:76:71:46:7c:cc:27:2c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6a11611f6fca8a3cc141d55997e3d6d61b4347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:b2:0a:b0:51:22:5b:cd:07:95:ba:f1:b6: 85:82:6c:49:cc:e6:11:b1:de:ea:23:66:70:44:9f: e2:04:32:c2:00:ba:ff:66:08:96:1e:ac:a6:15:49: 06:4a:fd:e6:82:6f:81:2d:20:19:a4:f3:65:ff:df: c5:e4:33:4b:46:64:1e:78:75:27:2d:67:3e:22:c7: d0:71:d9:fc:93:f4:4d:50:19:07:c7:b2:f7:93:9f: 47:8d:49:95:3f:33:03:61:25:46:27:d1:4b:82:af: b2:e4:37:af:58:57:3f:64:46:a6:4b:60:0a:50:15: d0:69:13:4d:52:dc:c4:86:19:a2:2c:ed:27:77:9f: 8c:77:3a:d6:b6:6b:47:62:5f:ba:33:09:f4:91:3f: f0:2a:c7:14:f5:8e:3a:89:e6:ca:ec:b8:a8:71:0c: 25:55:99:24:59:65:f9:15:28:6b:69:53:92:8a:a2: c1:a8:0d:09:69:c6:7d:b1:6e:ed:98:dc:57:08:e6: c9:54:0c:fc:75:cb:7d:86:21:2e:e4:ba:fd:1d:12: 32:8b:6e:90:05:43:7c:c7:03:ce:16:2d:fc:5a:7d: 96:6f:e0:0d:4c:6f:ec:a3:19:4e:1c:36:af:72:db: f2:df:c3:21:7c:8f:1b:15:61:f8:7a:cb:84:1c:bd: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:11:61:1F:6F:CA:8A:3C:C1:41:D5:59:97:E3:D6:D6:1B:43:47 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.78.0/23 Signature Algorithm: sha256WithRSAEncryption 07:7b:3d:a1:47:11:15:5b:16:2f:01:0f:5f:91:65:09:c2:1a: 32:1f:11:4e:5c:6a:f2:07:04:1f:9e:7d:bb:0f:22:f4:fa:f9: df:3f:af:d4:18:bc:70:74:f9:b7:37:f2:e5:12:6f:13:73:c2: 53:c2:2c:58:4d:40:7d:c5:1f:79:eb:4d:ef:ab:50:a8:eb:83: 6e:5d:e1:0d:a8:23:b3:ea:2d:2d:f1:af:80:55:ec:16:1d:1d: 98:70:05:ef:7e:cb:0b:a4:3e:d2:8b:00:35:af:64:3d:7c:6b: 60:3f:4e:4d:5e:ac:41:5c:c4:16:4c:d5:83:7b:d2:d1:9f:bb: 04:0c:df:24:fa:48:51:de:41:58:0d:ec:7d:18:8a:2b:6e:c5: c4:b0:dd:cb:6d:59:0e:94:d5:8f:24:08:32:19:cd:b1:ef:f6: e8:8c:b9:b6:7d:f1:b8:08:65:1c:53:9b:48:40:50:a9:d6:f6: d2:62:1d:5d:98:40:75:3b:4a:a4:9b:54:ed:9d:9b:28:a7:86: 96:a5:67:a6:e6:4c:f8:c2:60:4a:92:b1:e8:b0:7f:56:53:90: 6f:42:a4:ef:b5:fd:83:7e:60:ef:ce:24:e2:e3:7b:51:cb:fc: 90:50:db:78:01:53:45:8b:c9:71:fd:9c:85:41:44:21:6d:a4: 1e:35:b3:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z+rn/Y1yHZxRnzMJyyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZhMTE2MTFmNmZjYThhM2NjMTQxZDU1OTk3ZTNkNmQ2MWI0MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSeyCrBRIlvNB5W68baFgmxJzOYR sd7qI2ZwRJ/iBDLCALr/ZgiWHqymFUkGSv3mgm+BLSAZpPNl/9/F5DNLRmQeeHUn LWc+IsfQcdn8k/RNUBkHx7L3k59HjUmVPzMDYSVGJ9FLgq+y5DevWFc/ZEamS2AK UBXQaRNNUtzEhhmiLO0nd5+MdzrWtmtHYl+6Mwn0kT/wKscU9Y46iebK7LiocQwl VZkkWWX5FShraVOSiqLBqA0JacZ9sW7tmNxXCObJVAz8dct9hiEu5Lr9HRIyi26Q BUN8xwPOFi38Wn2Wb+ANTG/soxlOHDavctvy38MhfI8bFWH4esuEHL05aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1qEWEfb8qKPMFB1VmX49bWG0NHMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvaldvUllSOXZ5b284d1VIVldaZmoxdFliUTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk+pOMA0G CSqGSIb3DQEBCwUAA4IBAQAHez2hRxEVWxYvAQ9fkWUJwhoyHxFOXGryBwQfnn27 DyL0+vnfP6/UGLxwdPm3N/LlEm8Tc8JTwixYTUB9xR95603vq1Co64NuXeENqCOz 6i0t8a+AVewWHR2YcAXvfssLpD7SiwA1r2Q9fGtgP05NXqxBXMQWTNWDe9LRn7sE DN8k+khR3kFYDex9GIorbsXEsN3LbVkOlNWPJAgyGc2x7/bojLm2ffG4CGUcU5tI QFCp1vbSYh1dmEB1O0qkm1TtnZsop4aWpWem5kz4wmBKkrHosH9WU5BvQqTvtf2D fmDvziTi43tRy/yQUNt4AVNFi8lx/ZyFQUQhbaQeNbO5 -----END CERTIFICATE-----Generated at Mon Jan 26 23:45:46 2026 by rpki-client