This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j3OU63A4BT5wN5V-1WSyjn5zu5M.roa File: j3OU63A4BT5wN5V-1WSyjn5zu5M.roa (raw, json) Hash identifier: 6Zss0WZ6W9baN9YX78KT1id7jpWg8E4+L+hXflfJs6U= Subject key identifier: 8F:73:94:EB:70:38:05:3E:70:37:95:7E:D5:64:B2:8E:7E:73:BB:93 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25255E80A2B858FFB3D03432071BA Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j3OU63A4BT5wN5V-1WSyjn5zu5M.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 217.79.104.0/22 maxlen: 24 217.79.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:52:55:e8:0a:2b:85:8f:fb:3d:03:43:20:71:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f7394eb7038053e7037957ed564b28e7e73bb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dc:95:88:f1:b9:c7:f0:6a:ef:17:df:45:c5: ac:35:eb:20:d3:dd:8c:26:13:ea:16:be:b8:0c:c0: 63:8f:e2:5c:24:86:41:3e:97:2c:87:71:9f:29:7a: 17:06:25:ac:dc:c3:93:b8:a8:b0:fc:e2:3b:e8:1d: 37:b5:b8:f7:26:f4:95:d3:d7:ac:90:70:2d:33:62: 00:70:3a:0e:94:c4:4c:4d:dd:d5:31:26:4f:54:d8: ae:54:28:4f:6f:d6:af:bc:f0:11:5f:ba:c3:74:b9: bb:21:22:71:03:8c:52:58:e3:51:ba:3a:fe:8c:3d: 41:a6:a6:d4:55:2a:1b:30:6f:8f:b9:b2:cb:79:d5: 8c:50:69:8c:c6:37:7b:52:bb:49:e8:dd:aa:49:34: 19:d8:10:4a:50:ed:c8:b7:e2:9a:06:6a:11:d8:b5: 7f:e2:d9:b0:20:d3:3d:4c:e3:df:14:b1:15:67:71: 88:c4:0a:4a:63:9a:07:88:5b:2d:3f:71:a1:ef:fa: 2d:22:43:b3:40:15:fd:b5:a5:42:49:ea:5f:f1:6b: d4:73:ca:fa:18:fb:10:20:a0:db:b7:20:8e:5f:98: a6:fe:32:f5:75:68:09:e1:58:e1:61:7a:6f:29:02: 32:06:05:84:86:2a:93:9d:a4:45:a9:d6:3f:01:a1: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:73:94:EB:70:38:05:3E:70:37:95:7E:D5:64:B2:8E:7E:73:BB:93 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j3OU63A4BT5wN5V-1WSyjn5zu5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.104.0/22 217.79.116.0/22 Signature Algorithm: sha256WithRSAEncryption 27:9c:ec:c3:cd:de:6c:b3:5d:b7:cb:02:d3:fe:45:9b:94:9d: 8d:71:e8:9f:a3:09:45:84:80:1a:7d:54:bd:52:4b:bb:ad:58: 7a:59:85:e6:3a:09:10:22:a1:b5:b5:d2:49:80:86:1f:8a:cb: 23:56:0b:0c:3f:06:fc:5b:f2:bd:1b:7c:ce:06:e0:fb:f8:36: 31:f1:6f:7f:e9:86:53:a7:95:6f:a9:a5:50:0c:ec:af:3c:83: 00:4c:9d:9e:22:e3:7b:92:89:a6:92:82:51:56:6c:d9:c2:19: 62:57:a0:6a:d6:11:c6:eb:35:9f:81:ac:77:91:6e:f0:5a:a9: 7f:10:66:4e:1f:29:e6:73:b6:b4:3f:2b:59:5c:16:46:a7:5b: ba:66:e3:69:df:84:81:42:a0:b4:07:4c:2c:01:12:0e:d3:7d: 66:11:a8:4a:c1:ca:ff:e0:eb:a4:b6:01:38:93:a7:01:90:e1: 41:dd:2a:bb:8a:61:b3:40:3c:3a:63:cb:bf:40:01:39:95:d9: 6e:c2:36:61:5e:03:bd:dc:14:8a:34:41:df:20:8f:e2:68:fa: e5:f1:1b:a7:8f:a8:0f:62:f9:5f:80:ba:c3:cb:13:22:d8:5e: 1c:73:1a:22:d5:08:75:a0:52:43:6f:57:96:7a:e8:85:24:96: 4c:37:16:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4olJV6AorhY/7PQNDIHG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjczOTRlYjcwMzgwNTNlNzAzNzk1N2VkNTY0YjI4ZTdlNzNiYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NyViPG5x/Bq7xffRcWsNesg092M JhPqFr64DMBjj+JcJIZBPpcsh3GfKXoXBiWs3MOTuKiw/OI76B03tbj3JvSV09es kHAtM2IAcDoOlMRMTd3VMSZPVNiuVChPb9avvPARX7rDdLm7ISJxA4xSWONRujr+ jD1BpqbUVSobMG+PubLLedWMUGmMxjd7UrtJ6N2qSTQZ2BBKUO3It+KaBmoR2LV/ 4tmwINM9TOPfFLEVZ3GIxApKY5oHiFstP3Gh7/otIkOzQBX9taVCSepf8WvUc8r6 GPsQIKDbtyCOX5im/jL1dWgJ4VjhYXpvKQIyBgWEhiqTnaRFqdY/AaHeNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI9zlOtwOAU+cDeVftVkso5+c7uTMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvajNPVTYzQTRCVDV3TjVWLTFXU3lqbjV6dTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2U9oAwQC 2U90MA0GCSqGSIb3DQEBCwUAA4IBAQAnnOzDzd5ss123ywLT/kWblJ2NceifowlF hIAafVS9Uku7rVh6WYXmOgkQIqG1tdJJgIYfissjVgsMPwb8W/K9G3zOBuD7+DYx 8W9/6YZTp5VvqaVQDOyvPIMATJ2eIuN7kommkoJRVmzZwhliV6Bq1hHG6zWfgax3 kW7wWql/EGZOHynmc7a0PytZXBZGp1u6ZuNp34SBQqC0B0wsARIO031mEahKwcr/ 4OuktgE4k6cBkOFB3Sq7imGzQDw6Y8u/QAE5ldluwjZhXgO93BSKNEHfII/iaPrl 8Runj6gPYvlfgLrDyxMi2F4ccxoi1Qh1oFJDb1eWeuiFJJZMNxY3 -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:51 2026 by rpki-client