This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/J3trJnMvDZJ0BcVGu5fGaJyrupg.roa File: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (raw, json) Hash identifier: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0= Subject key identifier: 27:7B:6B:26:73:2F:0D:92:74:05:C5:46:BB:97:C6:68:9C:AB:BA:98 Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Certificate serial: 019B797ECBE17CA7714BDC6532F39B64966C Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/J3trJnMvDZJ0BcVGu5fGaJyrupg.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44973 IP address blocks: 93.88.224.0/22 maxlen: 22 185.130.8.0/22 maxlen: 22 2a02:218::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cb:e1:7c:a7:71:4b:dc:65:32:f3:9b:64:96:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=277b6b26732f0d927405c546bb97c6689cabba98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:f0:83:9d:20:4f:77:bf:6b:d8:84:bc:c7: 0d:04:ce:9f:c4:56:da:78:74:06:77:36:83:b2:98: 4c:f5:31:6c:c5:c7:ab:4e:37:ad:34:28:0d:cc:ad: 37:24:99:4c:fb:31:18:66:c5:48:05:e8:d2:df:9f: d0:7f:48:e2:96:89:42:09:c3:a6:a3:1a:dd:66:0e: 34:2e:12:c5:b8:57:4d:f5:c7:42:14:19:78:bd:5d: 66:99:29:18:f4:bf:6a:fa:10:eb:a4:e2:45:b3:ba: 8b:8a:b0:75:99:21:c4:28:68:6a:c3:c5:96:a6:d1: 0d:cd:bf:51:6d:11:2b:82:81:e3:0e:d5:ae:a1:cc: 88:10:19:bb:73:77:ec:f3:f4:f6:21:c7:b6:b2:8a: 1f:f7:a8:29:6c:0e:a5:a9:9e:33:51:a2:8e:01:84: 6b:04:d8:a6:bb:d4:cd:cb:78:53:cc:ea:94:bd:ad: 3c:53:b8:82:23:2b:0e:4d:36:da:00:e2:96:bc:ca: ed:70:61:22:58:f6:4c:5f:51:f6:ec:4e:fd:3e:88: 63:65:76:5f:f7:13:f1:e7:c6:c8:e1:fa:50:4c:66: cc:61:56:3c:13:ae:c9:67:f9:8c:5c:58:0f:b9:6d: fa:72:47:9f:a3:c5:b0:56:83:df:f2:09:3a:15:20: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:6B:26:73:2F:0D:92:74:05:C5:46:BB:97:C6:68:9C:AB:BA:98 X509v3 Authority Key Identifier: keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/J3trJnMvDZJ0BcVGu5fGaJyrupg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.224.0/22 185.130.8.0/22 IPv6: 2a02:218::/29 Signature Algorithm: sha256WithRSAEncryption 69:2b:c8:9c:63:78:0c:9f:3f:46:6b:c4:25:cf:91:45:be:26: 25:a4:b8:5e:c9:d7:80:c0:6c:39:b4:7f:da:6f:47:b8:47:9d: e1:25:a8:c6:f9:4e:a1:37:be:d6:47:4b:41:9e:17:df:de:31: fe:e1:0d:80:be:35:74:42:e9:fa:ce:3d:df:31:2b:fa:c4:e9: d4:d0:31:3a:7e:80:ac:fb:e2:d1:41:59:0f:7a:db:99:6a:15: 06:03:7f:bb:01:8d:e4:f6:f9:72:f4:51:e8:0e:8e:54:a8:93: 0e:47:e7:4a:8a:ea:9d:60:f0:11:78:74:5b:cd:d6:66:0e:39: 19:91:16:ba:82:04:8f:59:27:64:90:83:23:3d:1b:7f:ef:7a: 41:bf:37:ce:20:63:0a:fb:69:00:7b:e4:3c:67:86:ac:50:ed: 2e:b2:62:e8:ad:19:2a:95:60:5e:0e:27:f2:2e:ab:14:b9:83: ab:d2:bf:62:52:a9:9d:98:a4:6d:cc:f3:33:70:26:4e:8a:83: 5c:3c:49:c6:9e:dd:28:bf:68:33:1d:e0:63:98:62:94:77:49: 49:d6:a4:f2:6e:33:d1:ef:fb:d6:3d:91:f3:18:b9:15:da:ff: 47:2d:e3:85:cb:56:e0:86:4b:1f:a3:48:df:89:9e:9f:7b:5f: a6:36:4a:68 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fsvhfKdxS9xlMvObZJZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTg1MWQ1OTM1NmNhOTVkNGFlNzhmYTY5MzZiYTFiOGEy YjFjN2EwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdiNmIyNjczMmYwZDkyNzQwNWM1NDZiYjk3YzY2ODljYWJiYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmDwg50gT3e/a9iEvMcNBM6fxFba eHQGdzaDsphM9TFsxcerTjetNCgNzK03JJlM+zEYZsVIBejS35/Qf0jilolCCcOm oxrdZg40LhLFuFdN9cdCFBl4vV1mmSkY9L9q+hDrpOJFs7qLirB1mSHEKGhqw8WW ptENzb9RbRErgoHjDtWuocyIEBm7c3fs8/T2Ice2soof96gpbA6lqZ4zUaKOAYRr BNimu9TNy3hTzOqUva08U7iCIysOTTbaAOKWvMrtcGEiWPZMX1H27E79PohjZXZf 9xPx58bI4fpQTGbMYVY8E67JZ/mMXFgPuW36ckefo8WwVoPf8gk6FSBLswIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCd7ayZzLw2SdAXFRruXxmicq7qYMB8GA1UdIwQY MBaAFGCoUdWTVsqV1K54+mk2uhuKKxx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYt NTQ4ZTdiN2ZhNGUxLzEvSjN0ckpuTXZEWkowQmNWR3U1ZkdhSnlydXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYtNTQ4ZTdiN2ZhNGUx LzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCXVjgAwQC uYIIMA0EAgACMAcDBQMqAgIYMA0GCSqGSIb3DQEBCwUAA4IBAQBpK8icY3gMnz9G a8Qlz5FFviYlpLheydeAwGw5tH/ab0e4R53hJajG+U6hN77WR0tBnhff3jH+4Q2A vjV0Qun6zj3fMSv6xOnU0DE6foCs++LRQVkPetuZahUGA3+7AY3k9vly9FHoDo5U qJMOR+dKiuqdYPAReHRbzdZmDjkZkRa6ggSPWSdkkIMjPRt/73pBvzfOIGMK+2kA e+Q8Z4asUO0usmLorRkqlWBeDifyLqsUuYOr0r9iUqmdmKRtzPMzcCZOioNcPEnG nt0ov2gzHeBjmGKUd0lJ1qTybjPR7/vWPZHzGLkV2v9HLeOFy1bghksfo0jfiZ6f e1+mNkpo -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:43 2026 by rpki-client