This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J-1MaHzZDZoG1Mvh8j0OgqpBQqY.roa File: J-1MaHzZDZoG1Mvh8j0OgqpBQqY.roa (raw, json) Hash identifier: C55nU0WIMrf8fTJL/K9qgU/kYRkdTkkeeW3HjGlvUys= Subject key identifier: 27:ED:4C:68:7C:D9:0D:9A:06:D4:CB:E1:F2:3D:0E:82:AA:41:42:A6 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF54BC3F58D8D4BDD3601EEA30A70 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J-1MaHzZDZoG1Mvh8j0OgqpBQqY.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 89.42.85.0/24 maxlen: 24 93.113.177.0/24 maxlen: 24 93.113.178.0/24 maxlen: 24 93.114.90.0/24 maxlen: 24 93.114.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f5:4b:c3:f5:8d:8d:4b:dd:36:01:ee:a3:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27ed4c687cd90d9a06d4cbe1f23d0e82aa4142a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:7c:02:eb:de:df:46:45:2b:12:0f:5c:13: 3f:65:5c:c9:c0:89:d3:5b:33:63:3a:21:ac:72:0f: 41:9b:e3:11:d7:0b:28:9b:7d:82:00:52:62:5a:d6: 4d:ba:d1:33:de:ba:ff:d5:55:71:cf:b0:db:0a:b2: 0f:a5:21:08:67:b7:33:c9:c0:ce:a6:20:2e:f3:9b: 65:1d:30:a0:5d:28:2b:5b:01:5e:1f:fd:07:08:02: 46:77:ec:73:ed:0d:41:53:0e:d2:5e:40:fc:31:b7: aa:3c:98:d7:a2:31:0e:43:95:30:11:74:6b:27:5c: 32:3d:37:df:77:4a:13:4a:53:9c:f1:93:2b:5e:24: 3b:79:4d:26:57:44:13:c2:ef:17:53:b6:de:cb:9c: cd:1b:dc:18:ab:6b:92:c7:99:72:30:e0:d0:ea:50: 72:b8:a5:0d:f1:f0:ff:b7:4d:00:8c:f6:35:ca:b4: 56:68:d2:cb:b6:0e:00:ec:87:dd:ac:98:f0:58:8d: 72:c2:05:9b:cc:4a:07:f9:4a:b9:08:e3:fe:d2:c3: fd:2c:76:1b:44:c8:08:53:71:23:2c:d1:15:47:c4: b6:c0:6c:a7:73:ed:7a:51:6f:7b:20:ca:6b:94:19: c2:84:c3:fa:82:d0:ac:1f:91:5a:34:c8:f1:cd:a6: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:ED:4C:68:7C:D9:0D:9A:06:D4:CB:E1:F2:3D:0E:82:AA:41:42:A6 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J-1MaHzZDZoG1Mvh8j0OgqpBQqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.85.0/24 93.113.177.0-93.113.178.255 93.114.90.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:18:b2:4f:76:a4:d5:4c:20:10:81:6b:cd:7b:bc:48:0c:28: 93:31:a1:6c:3f:b9:0b:c6:4b:82:24:1d:f9:1e:03:ae:8e:94: c2:38:a0:bc:09:f5:f0:7d:86:2d:19:d9:60:b8:68:bc:c0:9e: fd:66:b8:b6:d1:6f:a7:d1:4b:7e:5f:b6:f9:53:7c:42:7c:95: 12:f6:6d:d1:84:79:a7:c7:28:0c:bb:eb:d6:c9:5e:fd:da:ac: 66:9d:6c:cc:5c:4b:cc:88:ae:0c:a3:83:85:7f:3d:85:73:e7: 55:a2:73:cd:41:0d:32:e5:49:4c:f6:5a:be:77:ee:09:c6:39: 1f:f6:f8:d5:3a:41:7c:c9:f4:47:0f:d4:53:e6:ec:db:cf:7c: 7d:72:1a:4b:ca:6d:f6:9b:9e:aa:ea:ac:50:c0:dc:19:9d:40: b7:db:18:5d:65:b1:e6:ee:58:af:ca:8b:74:b1:8c:1c:18:70: a4:e9:d3:f0:ae:6b:08:89:95:16:61:e4:b3:d1:ed:82:6a:ce: 4e:24:c3:c9:de:35:ed:9a:03:71:30:e6:cf:00:8f:72:6e:a6: b0:97:9c:88:8e:1d:45:11:5e:24:ba:b1:3c:e7:01:a5:91:ea: 99:05:96:31:de:4e:b0:66:8b:e2:a3:36:25:73:3f:39:2d:71: ca:30:e1:56 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9WvVLw/WNjUvdNgHuowpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2VkNGM2ODdjZDkwZDlhMDZkNGNiZTFmMjNkMGU4MmFhNDE0MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a98Auve30ZFKxIPXBM/ZVzJwInT WzNjOiGscg9Bm+MR1wsom32CAFJiWtZNutEz3rr/1VVxz7DbCrIPpSEIZ7czycDO piAu85tlHTCgXSgrWwFeH/0HCAJGd+xz7Q1BUw7SXkD8MbeqPJjXojEOQ5UwEXRr J1wyPTffd0oTSlOc8ZMrXiQ7eU0mV0QTwu8XU7bey5zNG9wYq2uSx5lyMODQ6lBy uKUN8fD/t00AjPY1yrRWaNLLtg4A7IfdrJjwWI1ywgWbzEoH+Uq5COP+0sP9LHYb RMgIU3EjLNEVR8S2wGync+16UW97IMprlBnChMP6gtCsH5FaNMjxzaZSEQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCftTGh82Q2aBtTL4fI9DoKqQUKmMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvSi0xTWFIelpEWm9HMU12aDhqME9ncXBCUXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSpVMAwD BABdcbEDBABdcbIDBAFdclowDQYJKoZIhvcNAQELBQADggEBABoYsk92pNVMIBCB a817vEgMKJMxoWw/uQvGS4IkHfkeA66OlMI4oLwJ9fB9hi0Z2WC4aLzAnv1muLbR b6fRS35ftvlTfEJ8lRL2bdGEeafHKAy769bJXv3arGadbMxcS8yIrgyjg4V/PYVz 51Wic81BDTLlSUz2Wr537gnGOR/2+NU6QXzJ9EcP1FPm7NvPfH1yGkvKbfabnqrq rFDA3BmdQLfbGF1lsebuWK/Ki3SxjBwYcKTp0/CuawiJlRZh5LPR7YJqzk4kw8ne Ne2aA3Ew5s8Aj3JuprCXnIiOHUURXiS6sTznAaWR6pkFljHeTrBmi+KjNiVzPzkt ccow4VY= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client