This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/Jx3uNY79zTtUVcXRajdPyL_4JyY.roa File: Jx3uNY79zTtUVcXRajdPyL_4JyY.roa (raw, json) Hash identifier: m3WDx8L8pFUiyy4V1JFsQgTuaeqJTjIlJ56rCgC/IOc= Subject key identifier: 27:1D:EE:35:8E:FD:CD:3B:54:55:C5:D1:6A:37:4F:C8:BF:F8:27:26 Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Certificate serial: 019B7E3795AB8E91F49743851DB3C23C2580 Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/Jx3uNY79zTtUVcXRajdPyL_4JyY.roa Signing time: Fri 02 Jan 2026 10:18:50 +0000 ROA not before: Fri 02 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 5.180.200.0/22 maxlen: 22 2a0b:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:95:ab:8e:91:f4:97:43:85:1d:b3:c2:3c:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=271dee358efdcd3b5455c5d16a374fc8bff82726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:ce:0b:65:2b:a8:04:87:b4:92:b0:bf:cd: 73:0c:18:df:62:9e:d4:96:cc:0d:e1:e0:17:65:a5: db:b7:86:47:54:de:53:a1:a3:2c:ce:da:fd:e8:3f: 57:8b:4b:9c:92:ff:e6:cc:73:61:7a:29:d3:36:0a: ca:c8:4c:36:63:cf:07:dd:c6:ff:db:24:b1:e6:15: 74:22:94:b4:c5:1f:3f:f7:88:b6:ef:02:28:12:15: cf:f1:42:8b:a2:a0:42:93:70:48:fe:6b:e8:ef:27: 33:2e:82:b9:11:e5:dd:6d:a9:f4:59:5a:b3:28:0a: 61:b9:ff:86:b7:85:57:59:ff:29:42:38:2f:f0:22: 26:e5:d6:ab:a0:45:61:74:f6:fd:14:ce:c9:08:0d: 20:89:59:bd:cd:22:cf:40:47:fb:71:d3:68:c9:46: d0:73:c5:c6:be:0d:fa:8c:df:24:56:5a:6d:b0:73: 5c:af:17:b1:fc:eb:cb:47:8d:28:c0:d2:71:97:42: 75:14:81:5b:61:7f:82:47:2b:3a:02:f2:80:5a:6f: 02:3d:c3:3a:de:08:43:13:29:4a:e6:9d:e4:f0:f1: 66:d1:4b:39:fc:c8:b6:5e:fe:6c:e5:a1:30:b9:2f: 81:aa:1a:69:55:48:74:12:a7:b1:6e:6d:6e:49:b6: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:EE:35:8E:FD:CD:3B:54:55:C5:D1:6A:37:4F:C8:BF:F8:27:26 X509v3 Authority Key Identifier: keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/Jx3uNY79zTtUVcXRajdPyL_4JyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.200.0/22 IPv6: 2a0b:3240::/32 Signature Algorithm: sha256WithRSAEncryption 92:bc:c9:82:5b:4c:d5:97:55:29:23:16:d5:64:d9:18:e7:81: 9c:75:80:88:02:a8:1e:e0:35:d8:29:a2:6b:9e:79:77:4f:cf: 32:4a:7e:6f:ea:a4:ea:5e:f8:7d:d8:0d:35:9d:86:0f:d3:d3: 9c:6f:c1:44:41:05:dd:67:d0:5c:f0:6a:c1:6d:9a:ab:36:db: 0f:03:98:13:cd:33:91:6a:be:3b:16:08:52:4d:1c:5f:09:46: 63:90:1c:a2:b7:ad:7a:01:c9:97:82:aa:f5:df:59:1e:fe:42: a2:7b:cc:b2:ec:85:8b:c5:b9:7f:b3:89:86:80:7e:20:a9:9e: de:82:cd:10:e9:6c:18:c3:db:c8:24:04:9a:0d:96:8d:09:2e: 57:5a:5e:21:e8:cd:19:4f:5d:77:cf:f8:ed:43:ab:f0:d7:56: dc:e7:fa:5c:01:df:b8:f5:b8:f4:2d:3a:e0:73:c6:38:90:87: 7d:39:ce:6b:7e:02:35:b6:bf:ed:bd:fa:b3:31:df:8f:0f:b4: 47:6d:42:68:ee:35:20:ce:89:d8:c9:ae:56:30:53:bb:dc:f5: 19:83:ef:98:55:09:2c:4e:54:a2:ff:f4:80:ea:4b:bc:b1:90: ae:6b:68:39:ed:d4:43:d1:32:a3:98:b2:34:ce:a7:2b:61:82: 9c:d1:61:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N5WrjpH0l0OFHbPCPCWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3 YWUxMDgwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzFkZWUzNThlZmRjZDNiNTQ1NWM1ZDE2YTM3NGZjOGJmZjgyNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv63OC2UrqASHtJKwv81zDBjfYp7U lswN4eAXZaXbt4ZHVN5ToaMsztr96D9Xi0uckv/mzHNheinTNgrKyEw2Y88H3cb/ 2ySx5hV0IpS0xR8/94i27wIoEhXP8UKLoqBCk3BI/mvo7yczLoK5EeXdban0WVqz KAphuf+Gt4VXWf8pQjgv8CIm5daroEVhdPb9FM7JCA0giVm9zSLPQEf7cdNoyUbQ c8XGvg36jN8kVlptsHNcrxex/OvLR40owNJxl0J1FIFbYX+CRys6AvKAWm8CPcM6 3ghDEylK5p3k8PFm0Us5/Mi2Xv5s5aEwuS+BqhppVUh0Eqexbm1uSba/VQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCcd7jWO/c07VFXF0Wo3T8i/+CcmMB8GA1UdIwQY MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt YjRiZmMyOWU3MWEzLzEvSngzdU5ZNzl6VHRVVmNYUmFqZFB5TF80SnlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbTIMA0E AgACMAcDBQAqCzJAMA0GCSqGSIb3DQEBCwUAA4IBAQCSvMmCW0zVl1UpIxbVZNkY 54GcdYCIAqge4DXYKaJrnnl3T88ySn5v6qTqXvh92A01nYYP09Ocb8FEQQXdZ9Bc 8GrBbZqrNtsPA5gTzTORar47FghSTRxfCUZjkByit616AcmXgqr131ke/kKie8yy 7IWLxbl/s4mGgH4gqZ7egs0Q6WwYw9vIJASaDZaNCS5XWl4h6M0ZT113z/jtQ6vw 11bc5/pcAd+49bj0LTrgc8Y4kId9Oc5rfgI1tr/tvfqzMd+PD7RHbUJo7jUgzonY ya5WMFO73PUZg++YVQksTlSi//SA6ku8sZCua2g57dRD0TKjmLI0zqcrYYKc0WEl -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:11 2026 by rpki-client