This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J09aJ3-xbb0-6403LNbesHsyM3o.roa File: J09aJ3-xbb0-6403LNbesHsyM3o.roa (raw, json) Hash identifier: vz6htnviB3r9QMb2eOeseqYYmtxhOVXG1cE2VYaZnLI= Subject key identifier: 27:4F:5A:27:7F:B1:6D:BD:3E:EB:8D:37:2C:D6:DE:B0:7B:32:33:7A Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B1FCFC91C77450689313462BEF65 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J09aJ3-xbb0-6403LNbesHsyM3o.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47771 IP address blocks: 77.77.164.0/24 maxlen: 24 77.77.165.0/24 maxlen: 24 77.77.166.0/24 maxlen: 24 77.77.167.0/24 maxlen: 24 87.119.64.0/24 maxlen: 24 87.119.65.0/24 maxlen: 24 87.119.66.0/24 maxlen: 24 87.119.67.0/24 maxlen: 24 87.119.68.0/24 maxlen: 24 87.119.69.0/24 maxlen: 24 87.119.70.0/24 maxlen: 24 87.119.71.0/24 maxlen: 24 87.119.100.0/24 maxlen: 24 87.119.101.0/24 maxlen: 24 87.119.102.0/24 maxlen: 24 87.119.103.0/24 maxlen: 24 87.119.104.0/24 maxlen: 24 87.119.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b1:fc:fc:91:c7:74:50:68:93:13:46:2b:ef:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=274f5a277fb16dbd3eeb8d372cd6deb07b32337a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:0e:96:eb:d9:5d:fd:0d:86:4e:b2:56:a9: e3:19:fd:54:08:b6:91:a0:ba:8d:13:e1:53:13:cc: 01:80:e0:26:41:06:c8:7b:c1:eb:6f:52:41:51:7f: 5f:2c:aa:01:9f:28:30:4b:1b:2b:c8:aa:d4:e7:29: bc:73:59:ef:86:33:4b:46:a4:ac:b1:b6:c8:ef:75: be:45:97:20:69:25:93:2e:b5:82:ca:13:0a:2d:c3: 58:bf:4b:25:98:6d:b4:f9:00:95:47:e5:3a:1d:c1: 8d:e8:5a:bc:b6:f5:76:2e:b8:2e:f2:ee:02:e5:43: e1:a8:07:8b:3e:aa:c7:95:86:d0:32:fb:d1:f4:13: da:e9:db:b7:73:78:45:6c:fa:8c:d7:92:65:e8:01: 04:9e:d4:e7:2b:7c:10:9d:61:22:6b:37:0d:b2:92: 7b:5a:5f:c5:a6:38:67:a9:fb:20:95:cb:1a:80:95: 97:ab:ed:06:21:10:cf:b7:80:cb:fc:d5:03:90:21: 3f:0e:b4:78:18:59:7a:32:2b:74:b3:1a:32:c0:89: 05:1f:ed:d1:cd:11:6f:b5:11:6b:27:97:04:9b:d8: bf:9d:5c:f8:96:c3:f7:93:25:0c:03:99:f2:f9:5e: bb:0f:a5:0e:a0:6a:5e:33:a8:3c:ca:19:e4:a2:78: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:5A:27:7F:B1:6D:BD:3E:EB:8D:37:2C:D6:DE:B0:7B:32:33:7A X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J09aJ3-xbb0-6403LNbesHsyM3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.77.164.0/22 87.119.64.0/21 87.119.100.0-87.119.105.255 Signature Algorithm: sha256WithRSAEncryption 81:8c:e4:bb:d8:90:82:4f:81:16:e1:d1:b8:71:4a:1e:d2:81: c5:e9:be:eb:d5:44:a7:a7:07:8e:bd:32:c5:6a:e6:7a:00:b2: 6a:10:b3:5d:2f:87:f3:b3:c3:d9:d7:fb:ee:56:18:6b:60:a4: b9:58:bc:4c:21:99:27:03:81:28:2c:95:8a:37:bf:3f:76:49: 88:a1:7c:fc:3b:62:0b:f2:ca:15:2f:f3:7d:d6:07:6b:af:4c: d1:0d:39:f3:4b:0a:9d:8d:82:d6:9e:76:7a:6f:6c:d2:72:40: e1:fd:2d:01:0f:a2:08:b2:e5:9e:e0:eb:39:f5:21:26:cb:5d: 39:4e:1f:48:36:7d:48:8d:90:6d:9c:1b:2e:12:0c:96:5c:f0: 7c:82:0c:7e:d3:3d:d7:71:61:84:b0:9e:64:1b:6a:e1:29:10: 53:c8:2c:33:26:13:a3:bd:aa:cc:87:aa:81:6f:f6:58:02:5d: 36:3b:d5:e2:ad:f7:bd:ca:5a:fe:5c:b5:b4:2f:e1:2b:72:83: 7f:e2:f8:9c:7f:2a:7e:0f:2d:8c:c1:bc:3b:ea:64:87:35:5b: e5:19:96:f0:99:66:fd:30:6e:7e:ff:05:1b:63:55:40:be:af: 73:d5:0f:02:d3:0f:29:1b:43:b1:1c:39:42:cc:f6:0e:03:a1: 9c:2e:3e:3e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FLH8/JHHdFBokxNGK+9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzRmNWEyNzdmYjE2ZGJkM2VlYjhkMzcyY2Q2ZGViMDdiMzIzMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzsOluvZXf0Nhk6yVqnjGf1UCLaR oLqNE+FTE8wBgOAmQQbIe8Hrb1JBUX9fLKoBnygwSxsryKrU5ym8c1nvhjNLRqSs sbbI73W+RZcgaSWTLrWCyhMKLcNYv0slmG20+QCVR+U6HcGN6Fq8tvV2Lrgu8u4C 5UPhqAeLPqrHlYbQMvvR9BPa6du3c3hFbPqM15Jl6AEEntTnK3wQnWEiazcNspJ7 Wl/FpjhnqfsglcsagJWXq+0GIRDPt4DL/NUDkCE/DrR4GFl6Mit0sxoywIkFH+3R zRFvtRFrJ5cEm9i/nVz4lsP3kyUMA5ny+V67D6UOoGpeM6g8yhnkonjUcwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCdPWid/sW29PuuNNyzW3rB7MjN6MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSjA5YUozLXhiYjAtNjQwM0xOYmVzSHN5TTNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCTU2kAwQD V3dAMAwDBAJXd2QDBAFXd2gwDQYJKoZIhvcNAQELBQADggEBAIGM5LvYkIJPgRbh 0bhxSh7SgcXpvuvVRKenB469MsVq5noAsmoQs10vh/Ozw9nX++5WGGtgpLlYvEwh mScDgSgslYo3vz92SYihfPw7YgvyyhUv833WB2uvTNENOfNLCp2NgtaednpvbNJy QOH9LQEPogiy5Z7g6zn1ISbLXTlOH0g2fUiNkG2cGy4SDJZc8HyCDH7TPddxYYSw nmQbauEpEFPILDMmE6O9qsyHqoFv9lgCXTY71eKt973KWv5ctbQv4Styg3/i+Jx/ Kn4PLYzBvDvqZIc1W+UZlvCZZv0wbn7/BRtjVUC+r3PVDwLTDykbQ7EcOULM9g4D oZwuPj4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:07 2026 by rpki-client