This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/J25M-UnReNKmuFmrWYqkMEZsa5k.roa File: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (raw, json) Hash identifier: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0= Subject key identifier: 27:6E:4C:F9:49:D1:78:D2:A6:B8:59:AB:59:8A:A4:30:46:6C:6B:99 Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5 Certificate serial: 019B77C69EACD7BAFA38E491787A2CE98E22 Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/J25M-UnReNKmuFmrWYqkMEZsa5k.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47836 IP address blocks: 91.208.175.0/24 maxlen: 24 185.161.88.0/22 maxlen: 24 2a00:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:ac:d7:ba:fa:38:e4:91:78:7a:2c:e9:8e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=276e4cf949d178d2a6b859ab598aa430466c6b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:de:b9:ab:3f:10:77:18:97:5d:59:82:3c: 7d:5b:84:60:e6:25:bd:c4:4b:fa:38:4e:e1:95:86: 1c:fe:2a:4c:e9:d8:e4:ac:86:cd:6a:6d:94:44:c8: 30:b9:ca:3c:ed:9e:51:ab:eb:fd:d1:16:e7:25:64: 03:e0:08:84:2d:ae:c9:f5:4e:a0:11:d2:4d:48:af: 88:27:2a:f0:78:4e:18:a5:07:bb:9a:b6:fe:b4:de: a0:96:01:7c:db:48:f4:1d:45:ae:f9:41:5c:85:40: a0:c8:47:9f:0d:29:c7:10:ca:1b:fd:27:8d:77:4d: 5d:a6:b6:7f:54:3f:d5:98:6c:0b:67:ba:61:46:82: 96:82:3b:ee:e1:e9:31:4d:f9:58:a5:c3:99:e9:56: a3:53:68:9f:20:74:e6:0f:a1:5c:35:a1:07:bb:1f: c3:d6:89:dc:b4:45:8b:f3:75:64:8e:86:37:b4:23: a8:33:1f:ff:bb:af:d0:96:78:e9:19:43:a7:29:6b: c5:51:fd:be:fd:24:1b:a5:d7:77:0c:97:73:5e:85: 04:d6:8a:ce:48:52:c8:e9:79:85:aa:d9:3c:5e:6d: b2:77:ae:33:8d:ed:4b:2e:27:ec:37:b0:f8:b1:80: 94:d1:24:33:44:f5:be:1d:a8:0a:1c:44:72:a0:1f: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:4C:F9:49:D1:78:D2:A6:B8:59:AB:59:8A:A4:30:46:6C:6B:99 X509v3 Authority Key Identifier: keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/J25M-UnReNKmuFmrWYqkMEZsa5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.175.0/24 185.161.88.0/22 IPv6: 2a00:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 28:db:56:a7:ca:fb:1d:55:40:c5:59:c3:35:ac:63:22:be:7a: e1:bf:c3:c7:16:09:b5:db:78:65:c1:88:1b:93:65:4e:97:66: 40:bc:de:2f:6e:96:79:f1:e9:15:98:1b:fd:49:13:8e:38:57: 7e:0b:ab:68:5d:11:e0:f2:c5:15:53:2f:92:0d:59:0b:d5:7c: 7d:59:3f:44:d8:be:22:ce:8a:67:c4:04:0c:48:e8:4c:08:5c: 28:f1:4a:26:1a:d1:16:04:7d:d9:98:6f:d6:d3:1c:bf:e8:14: 11:ab:74:05:b0:12:9e:00:71:e8:9d:59:1c:ff:82:3e:0f:fc: 06:3e:6c:16:ca:ce:b6:7a:6a:10:65:de:27:f2:18:95:a5:7f: ab:21:30:de:01:02:37:8c:b4:b9:af:0b:44:21:49:97:f0:ad: d9:3d:f9:fc:f1:e6:31:73:ba:03:16:33:45:2d:c3:3d:da:05: 34:42:3c:2d:8b:de:4d:a7:2b:12:f0:29:ff:bc:07:d2:75:59: 1f:f2:40:9c:97:16:e2:7b:a7:df:22:6e:18:1b:2f:c2:af:ff: 70:e2:0c:85:37:82:cb:80:6d:1a:6c:f5:71:bf:ad:33:5e:23: 31:3f:03:00:86:3d:57:20:3a:19:b2:8d:78:02:77:e3:ca:ee: f6:41:60:30 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xp6s17r6OOSReHos6Y4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2 MDk5ZjUwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzZlNGNmOTQ5ZDE3OGQyYTZiODU5YWI1OThhYTQzMDQ2NmM2Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/euas/EHcYl11Zgjx9W4Rg5iW9 xEv6OE7hlYYc/ipM6djkrIbNam2URMgwuco87Z5Rq+v90RbnJWQD4AiELa7J9U6g EdJNSK+IJyrweE4YpQe7mrb+tN6glgF820j0HUWu+UFchUCgyEefDSnHEMob/SeN d01dprZ/VD/VmGwLZ7phRoKWgjvu4ekxTflYpcOZ6VajU2ifIHTmD6FcNaEHux/D 1onctEWL83VkjoY3tCOoMx//u6/QlnjpGUOnKWvFUf2+/SQbpdd3DJdzXoUE1orO SFLI6XmFqtk8Xm2yd64zje1LLifsN7D4sYCU0SQzRPW+HagKHERyoB/GSwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCduTPlJ0XjSprhZq1mKpDBGbGuZMB8GA1UdIwQY MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt OGM5ZmNiYjNlYzUyLzEvSjI1TS1VblJlTkttdUZtcldZcWtNRVpzYTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9CvAwQC uaFYMA0EAgACMAcDBQAqAN3AMA0GCSqGSIb3DQEBCwUAA4IBAQAo21anyvsdVUDF WcM1rGMivnrhv8PHFgm123hlwYgbk2VOl2ZAvN4vbpZ58ekVmBv9SROOOFd+C6to XRHg8sUVUy+SDVkL1Xx9WT9E2L4izopnxAQMSOhMCFwo8UomGtEWBH3ZmG/W0xy/ 6BQRq3QFsBKeAHHonVkc/4I+D/wGPmwWys62emoQZd4n8hiVpX+rITDeAQI3jLS5 rwtEIUmX8K3ZPfn88eYxc7oDFjNFLcM92gU0Qjwti95NpysS8Cn/vAfSdVkf8kCc lxbie6ffIm4YGy/Cr/9w4gyFN4LLgG0abPVxv60zXiMxPwMAhj1XIDoZso14Anfj yu72QWAw -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:43 2026 by rpki-client