This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Jb979-aOtFrxIQewqtQtN3rvkPY.roa File: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (raw, json) Hash identifier: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI= Subject key identifier: 25:BF:7B:F7:E6:8E:B4:5A:F1:21:07:B0:AA:D4:2D:37:7A:EF:90:F6 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3EB4535743DC98194B74D9D405A1F Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Jb979-aOtFrxIQewqtQtN3rvkPY.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211595 IP address blocks: 79.120.220.0/24 maxlen: 24 82.141.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:eb:45:35:74:3d:c9:81:94:b7:4d:9d:40:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25bf7bf7e68eb45af12107b0aad42d377aef90f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:17:55:32:8d:b3:9d:66:86:ab:08:41:f3: 64:82:35:04:e8:27:bf:08:5d:13:08:94:99:b3:9c: fe:41:85:e0:da:2d:81:5f:a6:de:34:2a:ea:83:bc: bd:a5:c5:b4:6e:4e:a9:d3:87:22:d0:63:49:6c:ac: 92:a0:53:02:72:9b:ee:38:06:5e:86:dd:e6:7e:61: 9e:36:c4:8f:5d:dd:38:a3:81:f7:fd:3b:04:b1:af: 01:90:37:a3:21:8e:22:93:dc:dc:d2:b2:bf:17:97: 7c:2e:61:ce:7d:dd:bd:5c:8f:d6:50:4b:53:42:87: 99:26:cd:cc:19:17:ad:a3:f9:e5:4b:bb:ba:3f:8b: eb:53:83:f7:bf:4d:b7:58:17:de:99:f3:f1:70:2b: 4b:40:27:f1:8e:b4:0c:9e:c7:88:e6:a2:55:60:22: 5d:2e:b3:17:53:1c:6a:99:21:dd:c0:7a:24:7e:d6: eb:a1:2a:74:81:2b:09:a3:76:d8:39:2d:70:09:62: 39:35:e4:48:05:c8:d2:53:dc:81:b5:c2:14:4a:89: ec:0a:d2:ad:38:14:4c:1c:8c:5e:a7:3a:84:19:e6: df:ac:eb:19:e8:60:3f:4b:7f:0a:dd:b5:d4:da:18: 37:e8:e8:17:90:dd:2b:c2:39:cf:a2:8f:e6:53:cc: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BF:7B:F7:E6:8E:B4:5A:F1:21:07:B0:AA:D4:2D:37:7A:EF:90:F6 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Jb979-aOtFrxIQewqtQtN3rvkPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.120.220.0/24 82.141.139.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ee:8d:7f:bd:a0:f5:51:ed:55:5f:6f:0a:f0:3f:42:67:06: a9:da:45:dd:8f:7f:50:81:44:96:f4:3f:90:d3:dd:a1:74:ff: bd:e9:cc:49:ec:75:65:e4:03:af:2b:b8:b2:b4:44:ca:e4:d4: 59:9e:15:d7:68:7c:33:b2:bf:74:db:2b:41:8a:d1:f2:fb:94: dd:78:3f:a1:6c:c0:17:6f:9d:42:77:1a:18:98:e6:64:64:fa: 8d:ee:38:6f:76:10:73:e9:d5:0d:ef:80:ad:a7:27:fa:c0:c0: 4d:8e:72:7a:74:76:d2:4f:d3:e2:a2:26:34:87:5d:78:57:ae: 29:0c:91:99:52:09:41:c7:4a:cd:9e:55:3a:5f:7b:eb:2f:5a: 79:15:dc:f2:32:00:5f:a8:c5:d1:e9:7a:99:ed:3e:40:1d:92: 04:c0:d5:f5:b6:27:6c:ee:2b:86:50:7d:d1:b3:70:2d:ef:37: bc:52:c0:16:f7:16:1a:62:7c:e4:14:f5:00:2c:25:97:10:c3: e2:79:12:66:7c:62:b8:fe:e6:be:a0:fc:7c:b3:7a:a4:49:ae: 1e:aa:bb:fa:57:da:aa:4e:c3:25:55:3f:7d:a9:a0:e6:d8:f4: 7c:82:61:cd:b0:03:b5:43:6e:45:4f:50:19:97:ed:1c:7a:f6: 71:88:75:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o+tFNXQ9yYGUt02dQFofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWJmN2JmN2U2OGViNDVhZjEyMTA3YjBhYWQ0MmQzNzdhZWY5MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud0XVTKNs51mhqsIQfNkgjUE6Ce/ CF0TCJSZs5z+QYXg2i2BX6beNCrqg7y9pcW0bk6p04ci0GNJbKySoFMCcpvuOAZe ht3mfmGeNsSPXd04o4H3/TsEsa8BkDejIY4ik9zc0rK/F5d8LmHOfd29XI/WUEtT QoeZJs3MGReto/nlS7u6P4vrU4P3v023WBfemfPxcCtLQCfxjrQMnseI5qJVYCJd LrMXUxxqmSHdwHokftbroSp0gSsJo3bYOS1wCWI5NeRIBcjSU9yBtcIUSonsCtKt OBRMHIxepzqEGebfrOsZ6GA/S38K3bXU2hg36OgXkN0rwjnPoo/mU8wJ0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCW/e/fmjrRa8SEHsKrULTd675D2MB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvSmI5NzktYU90RnJ4SVFld3F0UXROM3J2a1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT3jcAwQA Uo2LMA0GCSqGSIb3DQEBCwUAA4IBAQBc7o1/vaD1Ue1VX28K8D9CZwap2kXdj39Q gUSW9D+Q092hdP+96cxJ7HVl5AOvK7iytETK5NRZnhXXaHwzsr902ytBitHy+5Td eD+hbMAXb51CdxoYmOZkZPqN7jhvdhBz6dUN74Ctpyf6wMBNjnJ6dHbST9PioiY0 h114V64pDJGZUglBx0rNnlU6X3vrL1p5FdzyMgBfqMXR6XqZ7T5AHZIEwNX1tids 7iuGUH3Rs3At7ze8UsAW9xYaYnzkFPUALCWXEMPieRJmfGK4/ua+oPx8s3qkSa4e qrv6V9qqTsMlVT99qaDm2PR8gmHNsAO1Q25FT1AZl+0cevZxiHXm -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:01 2026 by rpki-client