This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/J1GYT5rRj5L_N6tZy2ntpItqAlo.roa File: J1GYT5rRj5L_N6tZy2ntpItqAlo.roa (raw, json) Hash identifier: LsALbZjhGHRQ6Sb9UqH1fb/SrgtXCL5+zJg+18cqSLM= Subject key identifier: 27:51:98:4F:9A:D1:8F:92:FF:37:AB:59:CB:69:ED:A4:8B:6A:02:5A Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11 Certificate serial: 019B7C7F0FC4338A06D0D38F24BF147B99FF Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/J1GYT5rRj5L_N6tZy2ntpItqAlo.roa Signing time: Fri 02 Jan 2026 02:17:40 +0000 ROA not before: Fri 02 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47869 IP address blocks: 185.165.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0f:c4:33:8a:06:d0:d3:8f:24:bf:14:7b:99:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2751984f9ad18f92ff37ab59cb69eda48b6a025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:26:ad:13:8a:48:8b:45:db:51:2b:f2:55: b3:65:25:80:f6:80:7c:76:18:ad:50:ae:fc:78:31: 6c:04:d3:dc:16:a9:b9:70:35:74:01:bd:8a:84:05: 38:ed:b1:81:2d:fc:b2:ba:e9:24:61:e2:37:92:95: 89:ca:f5:90:86:24:09:04:a5:31:a6:7e:6b:db:12: 44:ec:85:5b:9d:6b:ee:0b:90:95:24:c2:b0:df:c9: 0f:ac:8a:6a:21:26:18:10:42:dc:b3:31:b6:fe:69: c5:3e:9b:e3:d4:aa:45:96:18:06:21:0b:fc:e5:89: 07:04:49:af:d9:25:76:98:ca:e1:42:25:01:81:b1: 02:b0:e2:3c:10:be:da:61:b5:e9:3f:71:6e:93:c7: c5:09:f7:7f:df:f6:b3:8d:ce:36:2f:f6:e2:ea:72: f0:69:7e:62:a1:67:52:57:e4:5d:f6:7a:10:b6:c8: 14:50:5b:39:f3:82:a4:76:b4:c3:08:9d:13:53:96: b4:8d:9b:17:3a:f5:36:4c:e7:b8:e7:05:d6:7f:ee: db:4e:1d:c2:fe:7e:7c:65:0a:34:0e:23:25:b8:e4: b2:bc:c7:93:98:95:fb:7c:0d:ce:1e:14:02:08:54: 86:61:a4:94:45:6b:b5:d4:f5:0a:0c:3a:1d:83:52: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:98:4F:9A:D1:8F:92:FF:37:AB:59:CB:69:ED:A4:8B:6A:02:5A X509v3 Authority Key Identifier: keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/J1GYT5rRj5L_N6tZy2ntpItqAlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.237.0/24 Signature Algorithm: sha256WithRSAEncryption b1:d3:59:9a:d2:cd:67:a8:15:97:0f:63:30:2e:22:2c:2d:d4: 4f:f1:64:22:e8:31:f8:51:3a:cd:23:1e:5a:30:9e:e4:e7:c5: 77:ec:56:ac:ab:a9:3c:03:6d:c0:d3:27:20:08:e8:4c:f9:db: e3:59:d1:4c:34:8c:aa:a8:05:43:63:02:8e:5c:fe:a1:86:18: ec:0e:08:db:e0:40:93:01:32:44:62:61:ec:a3:35:36:f1:af: e3:b2:d9:09:bd:eb:ff:e0:6a:c9:ef:32:51:57:51:0c:22:45: d8:a1:52:21:eb:98:0c:87:10:18:26:67:33:b6:8b:91:f6:69: 84:b9:c5:34:6a:e1:7d:d6:52:4d:94:80:29:3a:d6:3c:66:ad: dc:24:f5:01:ed:cf:2b:a4:80:b3:ca:47:36:eb:8c:bf:86:52: 53:f9:56:24:d9:37:66:2a:7f:5c:ed:15:dd:ef:a3:61:b4:81: bc:68:d4:50:b8:0d:48:0b:9b:b9:25:b6:4f:5d:b1:5a:82:8a: 24:a1:4b:b3:90:e5:0e:5c:74:93:33:70:e3:e3:7a:b9:c9:61: 4e:c4:63:87:93:06:91:69:b4:2e:23:07:53:79:9e:80:74:c5: ba:37:69:fc:d0:dc:9d:1f:d6:07:91:eb:59:93:e3:eb:cc:f4: 78:40:bd:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fw/EM4oG0NOPJL8Ue5n/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZjODA5Yjc2MDVmNmQ1Y2UxMjdiZDJkOGI3Njc0MzUw YjhiMTEwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzUxOTg0ZjlhZDE4ZjkyZmYzN2FiNTljYjY5ZWRhNDhiNmEwMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjMmrROKSItF21Er8lWzZSWA9oB8 dhitUK78eDFsBNPcFqm5cDV0Ab2KhAU47bGBLfyyuukkYeI3kpWJyvWQhiQJBKUx pn5r2xJE7IVbnWvuC5CVJMKw38kPrIpqISYYEELcszG2/mnFPpvj1KpFlhgGIQv8 5YkHBEmv2SV2mMrhQiUBgbECsOI8EL7aYbXpP3Fuk8fFCfd/3/azjc42L/bi6nLw aX5ioWdSV+Rd9noQtsgUUFs584KkdrTDCJ0TU5a0jZsXOvU2TOe45wXWf+7bTh3C /n58ZQo0DiMluOSyvMeTmJX7fA3OHhQCCFSGYaSURWu11PUKDDodg1I6mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdRmE+a0Y+S/zerWctp7aSLagJaMB8GA1UdIwQY MBaAFFgGyAm3YF9tXOEnvS2LdnQ1C4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjct YzMwNjY0YWVlYzE0LzEvSjFHWVQ1clJqNUxfTjZ0WnkybnRwSXRxQWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjctYzMwNjY0YWVlYzE0 LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaXtMA0G CSqGSIb3DQEBCwUAA4IBAQCx01ma0s1nqBWXD2MwLiIsLdRP8WQi6DH4UTrNIx5a MJ7k58V37Fasq6k8A23A0ycgCOhM+dvjWdFMNIyqqAVDYwKOXP6hhhjsDgjb4ECT ATJEYmHsozU28a/jstkJvev/4GrJ7zJRV1EMIkXYoVIh65gMhxAYJmcztouR9mmE ucU0auF91lJNlIApOtY8Zq3cJPUB7c8rpICzykc264y/hlJT+VYk2TdmKn9c7RXd 76NhtIG8aNRQuA1IC5u5JbZPXbFagookoUuzkOUOXHSTM3Dj43q5yWFOxGOHkwaR abQuIwdTeZ6AdMW6N2n80NydH9YHketZk+PrzPR4QL3X -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:37 2026 by rpki-client