This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/J3qhVDm59tgGij8FSKNvb_obrQQ.roa File: J3qhVDm59tgGij8FSKNvb_obrQQ.roa (raw, json) Hash identifier: Xmn0IdQ3k4dgxv6WEWS+sFmXZWMyOMaCwrNw7xwruBM= Subject key identifier: 27:7A:A1:54:39:B9:F6:D8:06:8A:3F:05:48:A3:6F:6F:FA:1B:AD:04 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22FADF0AB44139D89E987500A66D7 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/J3qhVDm59tgGij8FSKNvb_obrQQ.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 5.10.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2f:ad:f0:ab:44:13:9d:89:e9:87:50:0a:66:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=277aa15439b9f6d8068a3f0548a36f6ffa1bad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:ad:b0:64:c0:80:1a:74:a4:36:c1:d5:77: da:80:e6:ea:c4:d2:29:45:04:d4:c5:c9:5d:7a:10: 66:7d:fa:da:3e:94:ec:6a:9e:f7:0d:41:71:5d:7b: 91:bc:0c:97:22:0e:28:54:70:d5:e8:1a:a5:f9:99: 30:52:e4:54:f6:09:39:5f:85:6f:5d:d5:35:9b:74: 97:69:6d:e8:de:ce:08:fd:5e:6f:db:7f:88:3c:41: 64:48:aa:90:2e:73:04:df:69:20:59:23:a0:12:7e: 4f:de:96:b8:9f:24:28:02:f8:c1:cd:8e:84:6c:be: fa:96:cc:53:1d:02:cf:bc:0e:60:fa:1e:2c:f1:67: fa:bd:e0:77:a9:b4:87:2a:db:c4:82:88:57:73:27: a1:35:00:47:ea:a4:03:47:13:70:ba:db:4a:44:e3: e5:e4:76:b4:fd:33:57:30:03:ee:80:75:d1:a4:c2: b6:15:e0:80:c9:00:14:39:16:e4:97:ad:dc:25:a6: 82:f8:1b:83:6c:8a:31:9e:79:62:9d:e1:d5:88:20: a6:67:3d:5a:83:64:38:12:a8:45:b1:d9:7d:23:18: 09:5f:09:20:49:e7:0c:a7:73:2c:09:1d:55:44:cd: fd:d3:4a:df:aa:40:c0:2b:5d:92:79:78:d6:de:ba: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:A1:54:39:B9:F6:D8:06:8A:3F:05:48:A3:6F:6F:FA:1B:AD:04 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/J3qhVDm59tgGij8FSKNvb_obrQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.208.0/22 Signature Algorithm: sha256WithRSAEncryption 51:b3:5c:87:dc:95:0e:9f:97:d9:57:58:51:9a:60:20:e4:5b: ab:db:a6:47:24:9e:e9:21:ec:e4:14:a0:e6:9f:97:9c:28:e6: 1a:69:51:27:4d:dd:a4:08:74:e3:97:10:52:09:6d:be:42:65: 58:79:96:81:d1:1c:8e:4b:23:51:d8:6c:9c:e2:9b:fb:4b:56: a9:45:40:24:6d:1d:5b:62:29:73:d4:4f:10:ff:76:a9:c6:05: 38:d7:6f:fe:79:47:e3:50:08:53:69:67:cb:90:f8:01:cd:38: 66:e0:f5:b2:d9:48:07:75:3c:ff:9a:bc:05:f3:32:db:62:ab: 74:13:60:05:e4:e3:b0:46:46:a5:2f:3c:0e:b0:ed:4b:df:1f: 87:99:2f:d7:21:57:67:d8:ec:a1:d7:ad:b5:08:81:2f:cb:51: 37:31:7e:39:ee:13:ce:1e:4b:42:04:3d:9d:0a:6b:f9:d4:3c: 23:8b:f6:f6:52:be:c2:0f:77:41:3e:32:4e:18:dc:77:20:c8: 50:8b:c3:5c:0a:82:e3:ec:41:4c:ab:dc:b2:fd:85:68:69:b8: c3:62:74:de:7b:50:3c:3c:4b:8b:d6:01:53:56:80:45:7d:19: 70:b7:ea:fe:79:1d:c3:db:ac:fb:6f:b3:36:54:30:41:2f:1d: 10:a4:17:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi+t8KtEE52J6YdQCmbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdhYTE1NDM5YjlmNmQ4MDY4YTNmMDU0OGEzNmY2ZmZhMWJhZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2+tsGTAgBp0pDbB1XfagObqxNIp RQTUxcldehBmffraPpTsap73DUFxXXuRvAyXIg4oVHDV6Bql+ZkwUuRU9gk5X4Vv XdU1m3SXaW3o3s4I/V5v23+IPEFkSKqQLnME32kgWSOgEn5P3pa4nyQoAvjBzY6E bL76lsxTHQLPvA5g+h4s8Wf6veB3qbSHKtvEgohXcyehNQBH6qQDRxNwuttKROPl 5Ha0/TNXMAPugHXRpMK2FeCAyQAUORbkl63cJaaC+BuDbIoxnnlineHViCCmZz1a g2Q4EqhFsdl9IxgJXwkgSecMp3MsCR1VRM3900rfqkDAK12SeXjW3rqEQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCd6oVQ5ufbYBoo/BUijb2/6G60EMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvSjNxaFZEbTU5dGdHaWo4RlNLTnZiX29iclFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBQrQMA0G CSqGSIb3DQEBCwUAA4IBAQBRs1yH3JUOn5fZV1hRmmAg5Fur26ZHJJ7pIezkFKDm n5ecKOYaaVEnTd2kCHTjlxBSCW2+QmVYeZaB0RyOSyNR2Gyc4pv7S1apRUAkbR1b Yilz1E8Q/3apxgU412/+eUfjUAhTaWfLkPgBzThm4PWy2UgHdTz/mrwF8zLbYqt0 E2AF5OOwRkalLzwOsO1L3x+HmS/XIVdn2Oyh1621CIEvy1E3MX457hPOHktCBD2d Cmv51Dwji/b2Ur7CD3dBPjJOGNx3IMhQi8NcCoLj7EFMq9yy/YVoabjDYnTee1A8 PEuL1gFTVoBFfRlwt+r+eR3D26z7b7M2VDBBLx0QpBff -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:04 2026 by rpki-client