This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa File: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (raw, json) Hash identifier: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw= Subject key identifier: 25:58:4C:DD:86:DE:B5:FB:3C:BB:89:59:0B:10:92:A7:1F:29:25:D5 Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Certificate serial: 019B783510754FDE34C1DA3A4C57278E40BB Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15589 IP address blocks: 81.200.130.0/23 maxlen: 23 81.200.132.0/22 maxlen: 22 81.200.136.0/22 maxlen: 22 81.200.136.0/23 maxlen: 23 81.200.138.0/24 maxlen: 24 81.200.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:10:75:4f:de:34:c1:da:3a:4c:57:27:8e:40:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25584cdd86deb5fb3cbb89590b1092a71f2925d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:86:5c:92:8f:7b:dd:7d:4b:9a:fe:21:07: e7:58:81:e9:b7:af:c0:99:7e:64:a3:6f:67:89:84: f9:b8:cb:2b:15:50:47:dc:4b:09:ac:72:f4:d8:0c: 4b:68:0a:08:94:db:de:f4:a0:20:11:7b:9a:35:55: 40:24:4f:7b:fa:3e:8c:03:28:e4:34:4c:e9:89:40: 41:4e:43:28:de:63:de:99:0f:c3:ab:60:bd:5e:76: a1:9b:e9:74:c8:a2:8f:cf:ed:c6:0c:68:9b:06:19: 95:cc:54:d8:80:db:97:65:bd:79:b0:64:59:c5:25: c4:e8:87:ba:06:ae:44:ca:f0:dc:09:14:c8:39:d3: 9b:cd:6d:04:8f:1f:1e:6d:01:8a:d6:c9:a5:ae:9f: 10:d3:c7:41:7f:90:b9:8d:9f:f5:31:4f:a5:35:2f: 73:47:2c:a6:bb:92:5a:09:10:b8:31:b1:f0:b1:3f: c4:87:0c:f7:e2:3a:cc:8e:23:16:9b:37:db:2f:3a: 27:95:8a:e2:2e:9c:83:1c:eb:7a:53:7a:ea:e5:4a: c6:ad:72:d2:98:79:d6:a8:81:f0:3b:d5:9d:0d:6b: a5:b7:38:c8:e7:88:40:30:6b:d4:be:46:ee:03:50: 1a:95:ca:69:5b:9d:3b:f3:ae:c3:7a:a2:41:ea:a5: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:4C:DD:86:DE:B5:FB:3C:BB:89:59:0B:10:92:A7:1F:29:25:D5 X509v3 Authority Key Identifier: keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.130.0-81.200.139.255 Signature Algorithm: sha256WithRSAEncryption 10:65:1f:9a:86:d4:51:5f:ab:8a:bf:7f:e6:1b:d6:93:70:30: d7:54:f0:72:49:d1:74:b2:cb:d0:ed:4b:da:cc:f3:d6:8c:61: 13:30:25:5f:e7:5b:01:36:ce:5d:ec:e5:69:55:e8:ea:d2:87: 22:73:61:30:63:1c:d5:24:5e:4a:79:50:00:29:82:9d:67:12: 9c:22:f1:21:d5:0c:22:cb:b9:b6:1a:63:0d:b4:a1:03:8d:ba: 28:4b:f4:11:0e:71:a8:85:f7:fe:69:91:49:7f:5f:64:d8:1d: 2d:cc:ff:f0:dd:1f:95:8f:48:30:26:19:ce:fb:d9:20:e8:c0: a5:4a:e4:d2:48:5e:d1:35:20:e4:0c:eb:2d:50:00:49:49:75: c4:82:99:b3:b6:04:03:50:39:68:b7:fe:5c:82:60:a3:46:ae: 8b:e8:8a:e5:d8:b5:30:e2:c1:1b:0f:b4:a6:73:75:cf:70:d7: 5e:8c:a8:0d:58:ba:0a:19:50:6f:d0:e8:da:70:6a:92:28:98: f4:6a:85:6b:55:fa:3e:6c:31:26:84:72:b3:24:57:98:d3:74: 59:a9:32:40:31:7d:c7:45:2f:6d:b3:f3:04:53:49:1b:7a:94: 2f:b6:d1:ec:5e:3c:a1:3c:c1:8b:2b:39:08:e0:b0:49:1d:a9: 44:2a:8f:50 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NRB1T940wdo6TFcnjkC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh OWZjMGYwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTU4NGNkZDg2ZGViNWZiM2NiYjg5NTkwYjEwOTJhNzFmMjkyNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+GXJKPe919S5r+IQfnWIHpt6/A mX5ko29niYT5uMsrFVBH3EsJrHL02AxLaAoIlNve9KAgEXuaNVVAJE97+j6MAyjk NEzpiUBBTkMo3mPemQ/Dq2C9Xnahm+l0yKKPz+3GDGibBhmVzFTYgNuXZb15sGRZ xSXE6Ie6Bq5EyvDcCRTIOdObzW0Ejx8ebQGK1smlrp8Q08dBf5C5jZ/1MU+lNS9z Ryymu5JaCRC4MbHwsT/Ehwz34jrMjiMWmzfbLzonlYriLpyDHOt6U3rq5UrGrXLS mHnWqIHwO9WdDWultzjI54hAMGvUvkbuA1AalcppW507867DeqJB6qWtLwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCVYTN2G3rX7PLuJWQsQkqcfKSXVMB8GA1UdIwQY MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt NmVhM2NiZmQzYTg0LzEvSlZoTTNZYmV0ZnM4dTRsWkN4Q1NweDhwSmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0 LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFRyIID BAJRyIgwDQYJKoZIhvcNAQELBQADggEBABBlH5qG1FFfq4q/f+Yb1pNwMNdU8HJJ 0XSyy9DtS9rM89aMYRMwJV/nWwE2zl3s5WlV6OrShyJzYTBjHNUkXkp5UAApgp1n Epwi8SHVDCLLubYaYw20oQONuihL9BEOcaiF9/5pkUl/X2TYHS3M//DdH5WPSDAm Gc772SDowKVK5NJIXtE1IOQM6y1QAElJdcSCmbO2BANQOWi3/lyCYKNGrovoiuXY tTDiwRsPtKZzdc9w116MqA1YugoZUG/Q6NpwapIomPRqhWtV+j5sMSaEcrMkV5jT dFmpMkAxfcdFL22z8wRTSRt6lC+20exePKE8wYsrOQjgsEkdqUQqj1A= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:14 2026 by rpki-client