This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/J72P5DI9aUZfHCEMMwWflr8uG8k.roa File: J72P5DI9aUZfHCEMMwWflr8uG8k.roa (raw, json) Hash identifier: FIxoJFJimB9dMBCV9pC5bRPsPazZNP7zbfoE1WYrso8= Subject key identifier: 27:BD:8F:E4:32:3D:69:46:5F:1C:21:0C:33:05:9F:96:BF:2E:1B:C9 Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Certificate serial: 019B7AC83BFE5B85D6438F6A0501F9EE3F6E Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/J72P5DI9aUZfHCEMMwWflr8uG8k.roa Signing time: Thu 01 Jan 2026 18:18:21 +0000 ROA not before: Thu 01 Jan 2026 18:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198694 IP address blocks: 92.249.20.0/22 maxlen: 22 2a13:62c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3b:fe:5b:85:d6:43:8f:6a:05:01:f9:ee:3f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27bd8fe4323d69465f1c210c33059f96bf2e1bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:20:09:01:47:96:ea:c6:af:3b:bc:f2:21: 22:44:b2:92:72:a5:a9:88:09:f0:db:a9:35:5c:44: ac:25:2f:cb:11:ec:d4:3c:63:1e:c0:e8:d4:e8:5d: f2:3d:28:99:a4:55:60:2d:1a:63:cc:9b:6f:46:e5: 52:f6:fe:5d:d2:99:81:1f:73:0d:0c:42:40:5a:18: c9:57:20:eb:8d:13:b5:4f:c4:9d:21:a9:58:62:48: a8:d9:37:5a:d3:79:87:49:1e:bb:f6:80:2c:80:5c: 50:df:ea:4d:5e:f1:0c:0a:d9:cc:bd:57:bd:47:29: 9a:a4:8b:1b:c8:71:73:f3:6d:c9:3e:60:ad:72:ed: e8:a5:10:f3:23:37:a3:8f:f9:2b:ff:6f:e5:3f:69: 5d:8b:37:03:33:cd:f1:a7:65:6a:17:db:5f:7a:5b: c8:8b:2e:d5:f0:0b:58:53:5c:67:ab:28:0f:3f:20: 2b:f9:d2:6f:dc:de:57:e4:40:6c:93:18:53:17:05: 7a:fb:94:e2:f6:2e:bc:45:c3:f2:3e:d1:21:7d:90: a2:f9:55:1f:5d:fc:f5:04:97:df:b0:b0:59:0a:3b: 56:d2:08:c2:0d:b3:b1:8a:08:89:d6:dc:d9:cd:f1: 86:48:ed:61:eb:a3:df:90:23:df:3c:f6:62:e8:6e: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:8F:E4:32:3D:69:46:5F:1C:21:0C:33:05:9F:96:BF:2E:1B:C9 X509v3 Authority Key Identifier: keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/J72P5DI9aUZfHCEMMwWflr8uG8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.20.0/22 IPv6: 2a13:62c0::/29 Signature Algorithm: sha256WithRSAEncryption 05:21:4a:40:ac:c7:21:d3:40:c6:8a:c6:ae:62:1c:a5:db:e9: 32:30:3e:a9:10:50:50:7d:36:1a:17:18:6b:7f:c3:b3:1b:ab: a0:b4:b9:ed:90:23:75:39:9f:ac:26:8f:d2:ab:98:ad:9e:5c: c8:fb:d0:49:ee:3f:31:1f:1d:a8:58:8a:64:0f:67:35:7c:64: 5a:de:05:bf:c6:e9:92:83:6e:83:76:dc:0c:17:5c:2f:6e:c7: 79:f0:17:fa:57:fb:a2:15:07:94:9f:a4:6c:9d:af:f5:cb:1c: 4c:59:d2:0e:92:a4:4b:20:53:18:e2:96:fe:fd:08:3a:55:04: 14:1c:f0:87:99:48:1b:95:cb:68:d0:bd:fc:b8:a1:11:fc:c1: 83:41:f9:1b:d2:35:3f:07:8c:3c:7b:58:d1:6e:85:7d:ce:2d: 39:36:a1:87:9e:ec:bc:9b:67:ca:e9:d2:05:1d:4e:e0:96:02: 1b:ff:9c:ec:8e:b9:fa:f9:e8:76:7e:46:b0:29:58:42:6d:04: e7:1f:2c:1f:d2:f9:bb:59:6a:80:7e:12:89:3e:33:c8:5e:1a: ce:53:a5:be:c5:05:d9:71:47:8b:4c:5b:7c:ac:36:ac:18:54: 57:f7:94:4a:cc:41:bc:7d:d7:e8:3c:8b:70:15:ae:d6:28:7f: 9f:77:df:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yDv+W4XWQ49qBQH57j9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj ZGI0YTkwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2JkOGZlNDMyM2Q2OTQ2NWYxYzIxMGMzMzA1OWY5NmJmMmUxYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8YgCQFHlurGrzu88iEiRLKScqWp iAnw26k1XESsJS/LEezUPGMewOjU6F3yPSiZpFVgLRpjzJtvRuVS9v5d0pmBH3MN DEJAWhjJVyDrjRO1T8SdIalYYkio2Tda03mHSR679oAsgFxQ3+pNXvEMCtnMvVe9 RymapIsbyHFz823JPmCtcu3opRDzIzejj/kr/2/lP2ldizcDM83xp2VqF9tfelvI iy7V8AtYU1xnqygPPyAr+dJv3N5X5EBskxhTFwV6+5Ti9i68RcPyPtEhfZCi+VUf Xfz1BJffsLBZCjtW0gjCDbOxigiJ1tzZzfGGSO1h66PfkCPfPPZi6G4FfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCe9j+QyPWlGXxwhDDMFn5a/LhvJMB8GA1UdIwQY MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt MDRmOWU2MTZhZjYwLzEvSjcyUDVESTlhVVpmSENFTU13V2Zscjh1RzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXPkUMA0E AgACMAcDBQMqE2LAMA0GCSqGSIb3DQEBCwUAA4IBAQAFIUpArMch00DGisauYhyl 2+kyMD6pEFBQfTYaFxhrf8OzG6ugtLntkCN1OZ+sJo/Sq5itnlzI+9BJ7j8xHx2o WIpkD2c1fGRa3gW/xumSg26DdtwMF1wvbsd58Bf6V/uiFQeUn6Rsna/1yxxMWdIO kqRLIFMY4pb+/Qg6VQQUHPCHmUgblcto0L38uKER/MGDQfkb0jU/B4w8e1jRboV9 zi05NqGHnuy8m2fK6dIFHU7glgIb/5zsjrn6+eh2fkawKVhCbQTnHywf0vm7WWqA fhKJPjPIXhrOU6W+xQXZcUeLTFt8rDasGFRX95RKzEG8fdfoPItwFa7WKH+fd998 -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:17 2026 by rpki-client