This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/J-GnCjEevLnsSylTNN_DRQKgLxU.roa File: J-GnCjEevLnsSylTNN_DRQKgLxU.roa (raw, json) Hash identifier: Ih+rPEkL3JjpnefkXhpQxgVK3VfQEJZ/zybpvC3KpeM= Subject key identifier: 27:E1:A7:0A:31:1E:BC:B9:EC:4B:29:53:34:DF:C3:45:02:A0:2F:15 Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Certificate serial: 019B783554B517C70A61A77BBB4FA35126BF Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/J-GnCjEevLnsSylTNN_DRQKgLxU.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.75.152.0/22 maxlen: 22 193.104.116.0/24 maxlen: 24 2a03:4ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:b5:17:c7:0a:61:a7:7b:bb:4f:a3:51:26:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27e1a70a311ebcb9ec4b295334dfc34502a02f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:c6:06:85:9f:39:ff:c9:31:61:50:eb:f0: 6b:10:d9:63:c9:0e:e2:29:10:0d:32:18:51:49:21: e0:1a:37:d6:86:29:cd:ae:1b:19:f7:2c:39:36:70: 5b:1b:cc:ef:f8:19:75:c3:cb:df:f0:62:3f:ca:e6: 12:98:14:93:d5:7d:ec:12:4d:94:cc:55:97:78:fb: 84:06:2d:58:dc:aa:a0:98:30:d2:61:16:58:ed:74: da:b4:83:23:db:72:88:b3:8e:34:3b:6f:9a:ed:a9: 51:b5:49:f7:f8:13:69:18:56:53:f3:78:b3:84:c4: 67:b9:44:59:0e:6d:8d:e6:56:7f:eb:60:df:e6:d0: 89:7a:91:cb:e1:e1:11:30:de:fe:cc:89:8d:a6:03: f2:84:2f:7b:86:cf:3a:75:e4:54:63:12:4e:a9:c3: 6f:77:13:12:79:59:85:1e:b8:0b:de:cf:e8:4f:a7: 98:53:4b:af:60:b1:d9:75:32:ff:8c:13:d8:62:ff: 2d:96:e9:da:b5:ff:b8:cb:f3:a0:2d:76:c0:87:c2: bb:dc:61:33:25:05:a3:40:8a:bb:3f:8f:ee:46:38: 9a:6d:1a:82:3f:cc:d2:88:97:f0:24:03:76:b7:b0: 6f:e0:65:4e:3b:34:f4:c1:4d:05:5f:76:48:ac:7a: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:A7:0A:31:1E:BC:B9:EC:4B:29:53:34:DF:C3:45:02:A0:2F:15 X509v3 Authority Key Identifier: keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/J-GnCjEevLnsSylTNN_DRQKgLxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.152.0/22 193.104.116.0/24 IPv6: 2a03:4ae0::/32 Signature Algorithm: sha256WithRSAEncryption 96:2f:1d:bb:03:87:26:4f:70:a6:e6:e2:0c:2d:55:c0:29:17: 32:7f:15:dc:c4:cc:29:7b:24:40:85:ae:a1:98:1f:82:4c:6e: ba:47:7e:ea:81:13:59:05:65:7a:08:7f:ed:0b:36:24:01:bf: 5a:6c:90:c5:00:48:d1:e3:0d:71:86:af:62:47:cb:f3:bf:68: 99:69:d1:77:54:06:0e:2d:fb:84:bf:1e:8f:8b:51:84:f1:ff: 16:be:d8:0c:84:22:c6:32:39:e6:45:17:22:e6:f3:74:ed:d9: 08:e4:ed:96:5b:bb:e8:07:31:bc:17:1e:ae:30:bc:70:24:87: 0c:08:9e:59:7a:33:57:bf:b2:12:9a:bf:d5:f3:5d:df:a2:92: 18:83:88:a1:48:c2:84:27:b1:9e:f4:98:c2:0d:b8:96:87:bd: 6c:d4:5f:36:74:cb:0b:50:72:dc:37:e1:4a:f7:a0:d2:e6:df: 00:6f:e8:08:2e:e9:1f:c6:47:78:89:32:6a:39:dc:9c:50:a7: 3e:4b:d0:ab:b4:31:cb:e4:c5:1b:0d:af:d1:a6:fb:4a:27:d4: 17:9b:a1:39:8b:48:74:02:d0:1e:4b:d4:fd:cf:33:8a:e2:28: a0:e6:09:a8:f4:f5:ed:82:17:52:a6:30:ac:e1:33:42:09:a8: 40:5a:c4:9c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NVS1F8cKYad7u0+jUSa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk YTI5ZmUwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2UxYTcwYTMxMWViY2I5ZWM0YjI5NTMzNGRmYzM0NTAyYTAyZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/GBoWfOf/JMWFQ6/BrENljyQ7i KRANMhhRSSHgGjfWhinNrhsZ9yw5NnBbG8zv+Bl1w8vf8GI/yuYSmBST1X3sEk2U zFWXePuEBi1Y3KqgmDDSYRZY7XTatIMj23KIs440O2+a7alRtUn3+BNpGFZT83iz hMRnuURZDm2N5lZ/62Df5tCJepHL4eERMN7+zImNpgPyhC97hs86deRUYxJOqcNv dxMSeVmFHrgL3s/oT6eYU0uvYLHZdTL/jBPYYv8tlunatf+4y/OgLXbAh8K73GEz JQWjQIq7P4/uRjiabRqCP8zSiJfwJAN2t7Bv4GVOOzT0wU0FX3ZIrHpCcwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCfhpwoxHry57EspUzTfw0UCoC8VMB8GA1UdIwQY MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt NmVhOTRhOTYxZDRjLzEvSi1HbkNqRWV2TG5zU3lsVE5OX0RSUUtnTHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTItNmVhOTRhOTYxZDRj LzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUuYAwQA wWh0MA0EAgACMAcDBQAqA0rgMA0GCSqGSIb3DQEBCwUAA4IBAQCWLx27A4cmT3Cm 5uIMLVXAKRcyfxXcxMwpeyRAha6hmB+CTG66R37qgRNZBWV6CH/tCzYkAb9abJDF AEjR4w1xhq9iR8vzv2iZadF3VAYOLfuEvx6Pi1GE8f8WvtgMhCLGMjnmRRci5vN0 7dkI5O2WW7voBzG8Fx6uMLxwJIcMCJ5ZejNXv7ISmr/V813fopIYg4ihSMKEJ7Ge 9JjCDbiWh71s1F82dMsLUHLcN+FK96DS5t8Ab+gILukfxkd4iTJqOdycUKc+S9Cr tDHL5MUbDa/RpvtKJ9QXm6E5i0h0AtAeS9T9zzOK4iig5gmo9PXtghdSpjCs4TNC CahAWsSc -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:03 2026 by rpki-client