This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/j7onYVKyg1iqOkhgPIlBhO1dKV4.roa File: j7onYVKyg1iqOkhgPIlBhO1dKV4.roa (raw, json) Hash identifier: khaXvMQHEBCcdY8/F/quXstwIlSJT3LdiRt0dJ8Ljrw= Subject key identifier: 8F:BA:27:61:52:B2:83:58:AA:3A:48:60:3C:89:41:84:ED:5D:29:5E Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Certificate serial: 019B7E37561B74069E118D484A4CBE43601D Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/j7onYVKyg1iqOkhgPIlBhO1dKV4.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3274 IP address blocks: 81.20.224.0/20 maxlen: 24 2001:67c:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:56:1b:74:06:9e:11:8d:48:4a:4c:be:43:60:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fba276152b28358aa3a48603c894184ed5d295e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:52:82:38:7a:9a:7e:14:81:8e:f3:ca:f5: df:0d:71:3f:2a:53:42:8e:b6:7c:88:96:29:96:07: a9:10:5d:8d:13:b8:60:7e:35:f2:30:f5:f3:a6:67: 00:13:83:a5:eb:af:b7:83:ce:d3:7b:99:cf:63:ac: 5d:a3:97:e8:3a:ee:1d:40:07:d2:31:34:dd:4e:cf: 8a:e4:5c:5a:3b:fd:33:f2:cb:d4:bd:ab:94:8c:1c: 64:93:59:71:ea:bf:6f:97:4c:d4:8d:23:2e:df:59: 20:0a:4b:13:fd:1b:5a:ae:ca:55:aa:3e:66:a0:42: 03:21:e7:c3:56:50:ef:bb:57:22:dc:58:12:ab:d9: 83:61:f2:16:87:07:f7:74:a5:d3:4e:80:13:a3:b7: 36:8f:d0:1c:0e:14:eb:aa:7f:b7:bd:b5:9b:03:31: 2f:66:5d:35:45:3c:34:c4:f7:c5:f6:95:c5:43:22: c2:f4:dc:1d:b0:ad:eb:33:8e:2d:9f:87:ac:7c:27: 57:26:8b:a5:3e:0e:07:f0:49:6d:64:d9:a7:b2:ce: 1b:6e:1c:99:d1:fe:4e:86:89:b5:f7:ac:fd:a1:ea: fd:99:fa:f9:a9:48:b1:ad:7c:d4:d4:68:37:d7:3b: f5:d9:23:f7:ec:71:30:98:88:bd:f8:76:28:3f:80: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:27:61:52:B2:83:58:AA:3A:48:60:3C:89:41:84:ED:5D:29:5E X509v3 Authority Key Identifier: keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/j7onYVKyg1iqOkhgPIlBhO1dKV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.224.0/20 IPv6: 2001:67c:110::/48 Signature Algorithm: sha256WithRSAEncryption 07:65:66:c7:3c:0e:55:2f:11:aa:4c:86:78:db:e8:e1:22:f6: 37:aa:0f:94:af:3a:da:49:1f:ad:14:37:ff:50:fa:02:32:66: be:50:5e:bc:a7:7b:a5:99:eb:83:a0:57:8d:dd:eb:5d:0c:ff: ae:00:05:50:de:b4:85:d1:f6:7d:c7:2a:9a:2a:14:67:3e:28: a0:0c:63:5e:88:5c:d5:30:8b:84:c0:d1:68:74:47:a3:eb:74: 2b:63:47:a4:0f:ed:65:a9:57:2f:e9:54:2a:c2:c2:7b:59:c9: ed:3e:bd:44:86:e8:ad:b3:90:45:52:17:2c:84:09:1e:65:77: 84:94:64:82:24:ff:62:db:01:44:d6:68:58:d7:2f:6a:de:f8: 03:76:e6:85:93:9f:cd:fe:d4:f1:2c:89:04:2f:8d:49:d8:3d: 79:b6:e6:3c:7e:f4:09:54:60:09:18:b9:cf:71:a6:87:05:c5: a4:02:bc:25:8d:84:23:63:8d:79:b9:73:a0:c6:ec:c5:74:0f: c2:65:3f:a1:10:b8:e9:56:bf:c0:0a:4b:50:f9:df:11:b7:d4: 5c:bb:59:50:aa:36:36:83:35:f4:f6:f0:28:97:06:71:4f:bf: 7a:a5:2c:6e:81:c3:e4:db:e0:be:cb:34:08:6b:a6:db:be:9f: 1b:2a:de:56 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N1YbdAaeEY1ISky+Q2AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz MTczNjIwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmJhMjc2MTUyYjI4MzU4YWEzYTQ4NjAzYzg5NDE4NGVkNWQyOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpxSgjh6mn4UgY7zyvXfDXE/KlNC jrZ8iJYplgepEF2NE7hgfjXyMPXzpmcAE4Ol66+3g87Te5nPY6xdo5foOu4dQAfS MTTdTs+K5FxaO/0z8svUvauUjBxkk1lx6r9vl0zUjSMu31kgCksT/RtarspVqj5m oEIDIefDVlDvu1ci3FgSq9mDYfIWhwf3dKXTToATo7c2j9AcDhTrqn+3vbWbAzEv Zl01RTw0xPfF9pXFQyLC9NwdsK3rM44tn4esfCdXJoulPg4H8EltZNmnss4bbhyZ 0f5Ohom196z9oer9mfr5qUixrXzU1Gg31zv12SP37HEwmIi9+HYoP4AuDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI+6J2FSsoNYqjpIYDyJQYTtXSleMB8GA1UdIwQY MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt OWU3MWY2YTg0ODAxLzEvajdvbllWS3lnMWlxT2toZ1BJbEJoTzFkS1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEURTgMA8E AgACMAkDBwAgAQZ8ARAwDQYJKoZIhvcNAQELBQADggEBAAdlZsc8DlUvEapMhnjb 6OEi9jeqD5SvOtpJH60UN/9Q+gIyZr5QXryne6WZ64OgV43d610M/64ABVDetIXR 9n3HKpoqFGc+KKAMY16IXNUwi4TA0Wh0R6PrdCtjR6QP7WWpVy/pVCrCwntZye0+ vUSG6K2zkEVSFyyECR5ld4SUZIIk/2LbAUTWaFjXL2re+AN25oWTn83+1PEsiQQv jUnYPXm25jx+9AlUYAkYuc9xpocFxaQCvCWNhCNjjXm5c6DG7MV0D8JlP6EQuOlW v8AKS1D53xG31Fy7WVCqNjaDNfT28CiXBnFPv3qlLG6Bw+Tb4L7LNAhrptu+nxsq 3lY= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:28 2026 by rpki-client