This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JO5erv-vSOU_O-xUynzRSVbHmIc.roa File: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (raw, json) Hash identifier: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s= Subject key identifier: 24:EE:5E:AE:FF:AF:48:E5:3F:3B:EC:54:CA:7C:D1:49:56:C7:98:87 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E49B60F576D92F1E1DC3BFC9EBA3 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JO5erv-vSOU_O-xUynzRSVbHmIc.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49090 IP address blocks: 82.144.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e4:9b:60:f5:76:d9:2f:1e:1d:c3:bf:c9:eb:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ee5eaeffaf48e53f3bec54ca7cd14956c79887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:69:68:b3:52:14:46:33:23:64:de:a2:ce: 8f:14:47:16:a3:38:c2:e7:48:43:b2:b3:6b:18:5e: 97:ce:f9:86:d2:4f:83:d7:d9:ca:38:37:45:3e:ca: 05:4e:9c:63:65:24:7e:83:51:2b:98:cd:d6:a4:56: e5:b1:00:d0:88:d1:7c:54:ad:47:23:81:a5:54:b4: 08:b7:f5:26:35:d4:bc:c3:f0:57:1a:89:9b:d4:db: 98:cb:2d:82:80:8d:76:77:c6:b7:c3:e7:e8:d8:06: 21:f3:5c:48:d7:f5:2c:d5:f9:27:d9:e8:64:57:f1: d0:6a:66:4b:6b:e6:34:3c:62:01:ab:88:d7:4b:99: 6b:55:16:d6:df:11:18:4b:25:17:cd:a6:6d:ff:3f: 27:9d:87:eb:c9:5b:6a:63:15:43:10:2e:49:d7:0d: d2:91:35:46:0f:e3:b5:e0:d8:5d:58:2b:11:24:10: 14:2e:db:1d:40:82:b5:99:b6:42:74:f5:f1:e3:68: de:11:e6:ae:20:f7:07:20:bd:b3:5d:da:1a:93:9d: 24:15:6a:da:7f:a7:49:4c:cc:fd:2c:c9:66:01:0c: 74:03:bc:a4:f7:7c:c9:17:42:a3:03:b7:fd:d4:53: 7c:f1:66:76:26:ee:74:b5:9f:58:19:2b:47:87:95: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:5E:AE:FF:AF:48:E5:3F:3B:EC:54:CA:7C:D1:49:56:C7:98:87 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/JO5erv-vSOU_O-xUynzRSVbHmIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.144.184.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c5:a4:4c:4e:a1:81:8b:83:8a:94:8c:c1:72:b8:8d:d4:6a: e3:38:38:cb:1b:24:73:42:c1:c0:23:b0:8d:91:7f:58:45:9f: 2f:00:26:47:8f:dd:f3:33:dd:2d:b0:dc:6f:e9:1b:78:cc:cd: 20:4c:f6:7b:5d:cc:c0:fe:b9:0e:dc:05:2c:2f:da:28:94:49: 62:9c:64:70:53:38:bc:c2:66:74:c4:f7:4d:f2:04:d5:d3:77: bf:be:05:29:ac:b4:2d:ed:2f:47:00:c9:21:f6:24:27:e6:8b: 2d:fd:14:15:78:7a:9f:71:76:94:31:11:ec:78:8f:fe:95:a2: a0:f1:5e:b8:73:fc:dd:46:95:a9:79:82:53:ee:d8:18:ac:17: 0d:ce:a6:2b:03:6f:2f:00:e2:a8:54:80:6d:ee:5f:43:31:7c: 0a:5e:98:66:ea:ad:53:57:c2:6b:40:c1:6d:0a:d7:b4:83:e0: 71:8a:37:bc:b6:25:4d:38:5d:36:40:b7:71:73:34:47:bb:6a: e1:25:3b:b0:a4:dd:c1:a8:36:c6:b5:8e:ed:6a:d2:49:71:60: f1:98:51:48:8f:e3:8c:f2:ab:7c:5c:13:b9:4d:9c:d1:1c:3f: a3:b8:ce:bb:70:60:62:99:fa:76:6c:0c:fd:fb:5a:97:8d:b1: 33:fb:1f:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+SbYPV22S8eHcO/yeujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGVlNWVhZWZmYWY0OGU1M2YzYmVjNTRjYTdjZDE0OTU2Yzc5ODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWJpaLNSFEYzI2Teos6PFEcWozjC 50hDsrNrGF6XzvmG0k+D19nKODdFPsoFTpxjZSR+g1ErmM3WpFblsQDQiNF8VK1H I4GlVLQIt/UmNdS8w/BXGomb1NuYyy2CgI12d8a3w+fo2AYh81xI1/Us1fkn2ehk V/HQamZLa+Y0PGIBq4jXS5lrVRbW3xEYSyUXzaZt/z8nnYfryVtqYxVDEC5J1w3S kTVGD+O14NhdWCsRJBAULtsdQIK1mbZCdPXx42jeEeauIPcHIL2zXdoak50kFWra f6dJTMz9LMlmAQx0A7yk93zJF0KjA7f91FN88WZ2Ju50tZ9YGStHh5WhXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTuXq7/r0jlPzvsVMp80UlWx5iHMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvSk81ZXJ2LXZTT1VfTy14VXluelJTVmJIbUljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpC4MA0G CSqGSIb3DQEBCwUAA4IBAQCHxaRMTqGBi4OKlIzBcriN1GrjODjLGyRzQsHAI7CN kX9YRZ8vACZHj93zM90tsNxv6Rt4zM0gTPZ7XczA/rkO3AUsL9oolElinGRwUzi8 wmZ0xPdN8gTV03e/vgUprLQt7S9HAMkh9iQn5ost/RQVeHqfcXaUMRHseI/+laKg 8V64c/zdRpWpeYJT7tgYrBcNzqYrA28vAOKoVIBt7l9DMXwKXphm6q1TV8JrQMFt Cte0g+Bxije8tiVNOF02QLdxczRHu2rhJTuwpN3BqDbGtY7tatJJcWDxmFFIj+OM 8qt8XBO5TZzRHD+juM67cGBimfp2bAz9+1qXjbEz+x/t -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:20 2026 by rpki-client