This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/J-77ZlXsX9U2N93n4AsioUY-n30.roa File: J-77ZlXsX9U2N93n4AsioUY-n30.roa (raw, json) Hash identifier: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY= Subject key identifier: 27:EE:FB:66:55:EC:5F:D5:36:37:DD:E7:E0:0B:22:A1:46:3E:9F:7D Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1505C315D74C84649F38C4DD7A75E4 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/J-77ZlXsX9U2N93n4AsioUY-n30.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 185.81.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:05:c3:15:d7:4c:84:64:9f:38:c4:dd:7a:75:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27eefb6655ec5fd53637dde7e00b22a1463e9f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:f2:80:22:12:35:41:70:cd:71:9b:80:12: 51:b7:77:a0:e1:33:82:9a:ad:9b:0d:09:56:e0:62: 05:a6:ba:db:d4:d8:9f:4c:57:52:a2:20:1a:96:26: ac:57:17:90:4e:ac:76:9c:e4:e8:bc:17:6a:25:64: d5:0c:29:fe:2d:7f:3a:38:d2:d5:39:5d:40:d1:3f: 53:d4:29:71:58:cb:46:9b:ba:3f:fc:89:77:98:3f: 57:46:ab:98:f9:7c:00:b6:e8:60:fc:59:3c:ce:af: 9f:d8:38:15:3b:fb:f0:98:08:15:7c:4e:b9:da:c1: 20:8a:a1:43:3c:05:4f:a5:64:0f:e2:02:6e:bd:14: 77:3e:3c:4d:61:f3:03:48:8f:e7:bc:2d:44:fc:96: 02:f5:b6:4f:a2:77:c7:65:d5:af:b8:30:ba:30:3b: 0b:2f:43:d9:ce:5a:b4:c9:9a:d9:fa:78:ff:43:18: 8d:aa:4c:8f:9b:ad:da:5a:7c:d0:70:6b:be:91:cb: c5:2e:57:58:59:6c:e9:d1:04:bc:b3:71:68:f1:de: 84:07:39:58:5e:a3:b8:18:31:93:1d:d8:42:c8:42: 8d:d3:79:ce:a9:a7:0a:77:8a:e9:e4:10:5c:ea:b2: 57:9c:3d:3e:32:50:78:d8:0f:7c:07:64:41:be:e4: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EE:FB:66:55:EC:5F:D5:36:37:DD:E7:E0:0B:22:A1:46:3E:9F:7D X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/J-77ZlXsX9U2N93n4AsioUY-n30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.28.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:13:71:2f:a3:7a:5f:15:bc:39:34:b3:33:88:e5:5b:9f:1d: d0:81:c1:b5:e5:54:42:39:41:5c:8a:1b:15:20:58:2f:98:7c: 6a:10:1e:a9:7f:b8:44:4e:07:64:4c:5a:c7:84:f3:3e:d4:93: e4:d1:08:02:ba:71:7b:ca:fb:f5:33:8d:59:bf:39:12:b4:43: bd:b2:cd:da:f6:f5:3c:77:46:c3:09:ba:5f:87:13:1a:12:ea: 3e:dd:04:49:da:10:c1:f9:43:6a:bb:46:9c:86:da:71:77:95: d6:cf:96:3c:eb:1d:27:3a:71:44:7c:3a:4e:0a:ea:8c:43:e6: 7b:e6:41:1c:2d:4a:ed:88:cb:e5:3d:4e:02:5a:e3:37:86:a6: e0:39:89:c3:32:3c:b1:fc:d6:c8:5d:e0:2a:bf:d4:d5:e0:f1: 28:ab:63:ed:4d:88:6b:23:00:b8:c4:a2:76:4c:a6:42:6b:f3: 55:5d:4d:68:e0:eb:a2:d2:dd:1c:19:b7:7f:3a:68:06:d1:f1: 0a:58:a1:29:00:20:1b:29:29:43:fd:ad:d4:2e:9e:f6:6e:cc: 88:59:68:b7:4b:a8:31:73:f2:8f:26:53:d2:ed:b5:9e:74:46: 22:16:1b:87:ca:e2:a7:32:3b:4a:66:e3:73:be:7e:42:e8:cd: f9:9e:4d:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQXDFddMhGSfOMTdenXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2VlZmI2NjU1ZWM1ZmQ1MzYzN2RkZTdlMDBiMjJhMTQ2M2U5ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xrygCISNUFwzXGbgBJRt3eg4TOC mq2bDQlW4GIFprrb1NifTFdSoiAaliasVxeQTqx2nOTovBdqJWTVDCn+LX86ONLV OV1A0T9T1ClxWMtGm7o//Il3mD9XRquY+XwAtuhg/Fk8zq+f2DgVO/vwmAgVfE65 2sEgiqFDPAVPpWQP4gJuvRR3PjxNYfMDSI/nvC1E/JYC9bZPonfHZdWvuDC6MDsL L0PZzlq0yZrZ+nj/QxiNqkyPm63aWnzQcGu+kcvFLldYWWzp0QS8s3Fo8d6EBzlY XqO4GDGTHdhCyEKN03nOqacKd4rp5BBc6rJXnD0+MlB42A98B2RBvuTnNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfu+2ZV7F/VNjfd5+ALIqFGPp99MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvSi03N1psWHNYOVUyTjkzbjRBc2lvVVktbjMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVEcMA0G CSqGSIb3DQEBCwUAA4IBAQA/E3Evo3pfFbw5NLMziOVbnx3QgcG15VRCOUFcihsV IFgvmHxqEB6pf7hETgdkTFrHhPM+1JPk0QgCunF7yvv1M41ZvzkStEO9ss3a9vU8 d0bDCbpfhxMaEuo+3QRJ2hDB+UNqu0achtpxd5XWz5Y86x0nOnFEfDpOCuqMQ+Z7 5kEcLUrtiMvlPU4CWuM3hqbgOYnDMjyx/NbIXeAqv9TV4PEoq2PtTYhrIwC4xKJ2 TKZCa/NVXU1o4Oui0t0cGbd/OmgG0fEKWKEpACAbKSlD/a3ULp72bsyIWWi3S6gx c/KPJlPS7bWedEYiFhuHyuKnMjtKZuNzvn5C6M35nk2s -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:47 2026 by rpki-client