This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa File: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (raw, json) Hash identifier: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg= Subject key identifier: 25:65:7C:47:84:DF:45:1A:0E:F0:42:91:91:64:04:84:60:58:6B:AC Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019BEB16ACAF6A067D4BA2BDC19C88CC62EE Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa Signing time: Fri 23 Jan 2026 13:41:30 +0000 ROA not before: Fri 23 Jan 2026 13:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43902 IP address blocks: 81.27.70.0/24 maxlen: 24 2a11:4141:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:16:ac:af:6a:06:7d:4b:a2:bd:c1:9c:88:cc:62:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Jan 23 13:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25657c4784df451a0ef042919164048460586bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:71:44:72:c9:b7:a2:f2:1d:26:02:ff:7c: bc:ad:a2:aa:02:f7:98:3d:90:71:f4:b1:30:1f:ad: d8:07:a4:57:50:1a:23:56:83:d1:58:4c:9c:6d:64: bd:32:c1:34:15:33:91:72:77:bd:07:0d:e6:bd:9d: 18:a7:0d:80:e0:0a:a7:05:83:db:5c:84:e1:94:49: 6c:85:08:bd:b1:09:4e:41:43:80:61:e2:02:37:08: 34:15:15:b7:75:99:d9:ee:f2:b3:25:0d:95:8f:24: 7b:d4:8a:d9:f9:fe:be:81:cd:69:9b:f4:0f:2d:a1: 9f:b9:88:6a:7a:2e:cc:9d:38:3b:be:3c:00:fd:e0: ba:f7:eb:1d:75:8f:83:2d:47:f9:a2:85:0a:e0:df: a8:ba:0b:bc:f1:61:cb:36:ef:4c:7a:f5:79:2a:b6: 8e:85:1d:4d:b0:4b:37:40:da:34:30:4f:fc:ca:77: d6:36:8f:6f:ca:d8:47:e4:0d:59:9f:0e:a4:2e:af: 79:59:e8:0a:72:b4:7c:91:e1:98:4e:21:46:56:cc: 8f:f8:af:a9:af:9c:f7:c8:37:9d:21:f4:b0:94:13: 08:59:64:1c:fe:ac:bc:80:6c:e9:b9:e6:f6:1d:da: 66:30:10:f6:ff:a0:cf:04:2b:1e:59:12:ea:97:f4: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:65:7C:47:84:DF:45:1A:0E:F0:42:91:91:64:04:84:60:58:6B:AC X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.70.0/24 IPv6: 2a11:4141:2001::/48 Signature Algorithm: sha256WithRSAEncryption 1c:7f:38:29:d9:82:1d:d2:a4:9e:17:76:69:d9:65:0e:3d:de: 5c:e7:74:7b:2e:8f:4e:d8:49:53:ad:20:76:43:00:e5:21:dc: 13:1a:54:62:c7:6e:53:5f:ba:41:96:ed:89:a9:1f:90:82:48: 86:8e:6a:c2:27:35:4d:e8:86:24:f0:39:af:12:9c:62:a1:93: 4c:f8:e3:6f:c7:f0:0f:b9:c0:66:f9:a2:2b:e1:41:40:1a:a5: 1b:cf:2e:36:17:31:85:ad:95:99:4c:33:2c:83:a4:6a:01:23: 5d:be:f1:8d:5a:c8:47:a5:fa:d1:af:41:ae:7d:be:18:b3:68: 3a:5b:9b:81:dd:83:e4:84:c6:0d:87:f7:11:a9:8c:aa:7a:50: 1d:32:63:51:a1:f7:29:4c:00:ab:d6:6f:b4:c5:c5:30:f7:7e: eb:a7:06:5c:a5:c2:2f:d4:80:5d:f2:1f:52:99:08:98:48:ce: db:70:8f:e7:85:15:fa:b7:e5:c2:c4:60:a5:a5:23:8a:7b:0e: 43:3a:fa:7d:80:6c:ca:9b:31:b7:6e:36:c3:94:71:ff:67:2f: 11:af:2b:fe:57:ca:a6:59:85:a5:a8:c4:83:c0:01:94:33:fe: 3b:bc:d1:fb:07:f0:4b:f0:c9:89:84:72:00:df:11:13:31:f9: 2d:e5:c8:62 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZvrFqyvagZ9S6K9wZyIzGLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjYwMTIzMTM0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTY1N2M0Nzg0ZGY0NTFhMGVmMDQyOTE5MTY0MDQ4NDYwNTg2YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0dxRHLJt6LyHSYC/3y8raKqAveY PZBx9LEwH63YB6RXUBojVoPRWEycbWS9MsE0FTORcne9Bw3mvZ0Ypw2A4AqnBYPb XIThlElshQi9sQlOQUOAYeICNwg0FRW3dZnZ7vKzJQ2VjyR71IrZ+f6+gc1pm/QP LaGfuYhqei7MnTg7vjwA/eC69+sddY+DLUf5ooUK4N+ougu88WHLNu9MevV5KraO hR1NsEs3QNo0ME/8ynfWNo9vythH5A1Znw6kLq95WegKcrR8keGYTiFGVsyP+K+p r5z3yDedIfSwlBMIWWQc/qy8gGzpueb2HdpmMBD2/6DPBCseWRLql/TC9wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCVlfEeE30UaDvBCkZFkBIRgWGusMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvSldWOFI0VGZSUm9POEVLUmtXUUVoR0JZYTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAURtGMA8E AgACMAkDBwAqEUFBIAEwDQYJKoZIhvcNAQELBQADggEBABx/OCnZgh3SpJ4XdmnZ ZQ493lzndHsuj07YSVOtIHZDAOUh3BMaVGLHblNfukGW7YmpH5CCSIaOasInNU3o hiTwOa8SnGKhk0z442/H8A+5wGb5oivhQUAapRvPLjYXMYWtlZlMMyyDpGoBI12+ 8Y1ayEel+tGvQa59vhizaDpbm4Hdg+SExg2H9xGpjKp6UB0yY1Gh9ylMAKvWb7TF xTD3fuunBlylwi/UgF3yH1KZCJhIzttwj+eFFfq35cLEYKWlI4p7DkM6+n2AbMqb MbduNsOUcf9nLxGvK/5XyqZZhaWoxIPAAZQz/ju80fsH8EvwyYmEcgDfERMx+S3l yGI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client