This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/J_Or8KZX1wZ3vXfvww5iG8YKGng.roa File: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (raw, json) Hash identifier: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E= Subject key identifier: 27:F3:AB:F0:A6:57:D7:06:77:BD:77:EF:C3:0E:62:1B:C6:0A:1A:78 Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Certificate serial: 019B7910F7E486EE997898BC1CE20BF65160 Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/J_Or8KZX1wZ3vXfvww5iG8YKGng.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216286 IP address blocks: 91.199.2.0/24 maxlen: 24 2a13:e440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:e4:86:ee:99:78:98:bc:1c:e2:0b:f6:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f3abf0a657d70677bd77efc30e621bc60a1a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e5:20:d0:1c:02:19:0c:eb:59:7e:24:ab:80: 71:97:6a:6c:f8:3e:be:a1:05:14:ce:6f:1b:bf:af: d1:48:ba:48:35:4b:32:66:62:d7:9e:a8:ba:0f:c6: 1d:a0:92:7b:ab:17:fb:eb:af:ab:33:b0:08:e7:94: fc:58:47:95:8d:e7:c1:b2:49:2b:04:56:7b:27:65: 53:7e:27:0a:a1:4a:8c:2b:a5:8b:b2:64:a4:01:3a: 14:4f:7b:1d:b7:4a:d4:b5:dc:de:01:4e:4d:ac:fa: de:fc:aa:d9:63:d6:9f:04:66:72:e7:82:78:4e:dd: 80:6c:21:df:98:37:7e:92:bb:49:ec:dd:a2:01:e6: a1:99:5a:b3:c9:42:e5:d3:94:af:75:0c:59:cb:fe: ed:d6:c3:0c:71:98:a9:9f:56:89:d1:f8:b8:bb:68: c4:f2:0b:84:50:0c:b1:7f:50:23:2e:0e:b1:35:6e: aa:f9:1b:51:05:ab:51:35:b9:08:b8:69:7e:ca:2b: 1a:78:9f:46:5f:9b:56:b3:35:a3:93:96:95:24:ee: 58:2b:ee:e3:01:5e:44:86:83:ab:02:f1:db:31:6c: 25:01:97:da:b9:1a:c1:cf:75:69:8d:9d:ea:6c:b0: 59:6e:ef:5e:96:34:e2:0c:da:71:16:73:ce:b7:da: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F3:AB:F0:A6:57:D7:06:77:BD:77:EF:C3:0E:62:1B:C6:0A:1A:78 X509v3 Authority Key Identifier: keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/J_Or8KZX1wZ3vXfvww5iG8YKGng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.2.0/24 IPv6: 2a13:e440::/29 Signature Algorithm: sha256WithRSAEncryption 24:28:28:8e:a3:0c:d9:ae:db:f7:4a:31:70:54:e0:b1:a1:86: 0d:87:4f:b6:d0:57:ad:43:a1:60:0a:17:b7:9c:c3:12:d4:c2: 13:0a:92:f3:8f:94:a5:e4:d1:48:14:19:23:57:52:56:af:e8: 37:5b:0f:5e:ad:2c:a8:07:10:5d:0b:19:68:f1:0e:f5:20:da: f7:d4:71:57:aa:34:a8:de:0f:a6:a4:15:b1:1f:4b:12:50:4f: f1:8e:1b:1d:a3:b6:f0:78:23:84:7e:f9:88:66:ad:cd:c0:c9: 86:3a:85:06:2a:0f:b2:3c:f2:78:dd:41:c0:03:74:dd:2f:f9: ed:c9:0a:4b:3b:95:e0:33:09:f2:05:e5:7e:d7:64:7d:c8:c9: 05:bc:14:a6:28:8c:04:ca:aa:b7:ad:5b:a4:d0:d4:95:3e:31: 52:43:0d:3f:f6:22:ed:c9:1d:cc:fb:bf:cb:9c:d0:03:5d:6c: 7f:d8:f8:a6:4f:4f:3b:4b:43:82:9d:82:98:86:b2:2e:75:ed: 21:18:37:de:d1:fe:d1:a4:10:b5:de:41:9c:9e:09:df:57:83: 85:a7:dc:9a:6e:13:47:1c:bc:6f:c4:b3:b7:d5:ab:43:90:68: 5e:14:bd:81:c7:bf:ba:96:da:4d:c5:36:4c:ed:6c:98:62:03: dd:f0:6f:f5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EPfkhu6ZeJi8HOIL9lFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj ZjIxZDMwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2YzYWJmMGE2NTdkNzA2NzdiZDc3ZWZjMzBlNjIxYmM2MGExYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+Ug0BwCGQzrWX4kq4Bxl2ps+D6+ oQUUzm8bv6/RSLpINUsyZmLXnqi6D8YdoJJ7qxf766+rM7AI55T8WEeVjefBskkr BFZ7J2VTficKoUqMK6WLsmSkAToUT3sdt0rUtdzeAU5NrPre/KrZY9afBGZy54J4 Tt2AbCHfmDd+krtJ7N2iAeahmVqzyULl05SvdQxZy/7t1sMMcZipn1aJ0fi4u2jE 8guEUAyxf1AjLg6xNW6q+RtRBatRNbkIuGl+yisaeJ9GX5tWszWjk5aVJO5YK+7j AV5EhoOrAvHbMWwlAZfauRrBz3VpjZ3qbLBZbu9eljTiDNpxFnPOt9o/9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCfzq/CmV9cGd71378MOYhvGChp4MB8GA1UdIwQY MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt MDk1ZGNlMGUwMTllLzEvSl9PcjhLWlgxd1ozdlhmdnd3NWlHOFlLR25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8cCMA0E AgACMAcDBQMqE+RAMA0GCSqGSIb3DQEBCwUAA4IBAQAkKCiOowzZrtv3SjFwVOCx oYYNh0+20FetQ6FgChe3nMMS1MITCpLzj5Sl5NFIFBkjV1JWr+g3Ww9erSyoBxBd Cxlo8Q71INr31HFXqjSo3g+mpBWxH0sSUE/xjhsdo7bweCOEfvmIZq3NwMmGOoUG Kg+yPPJ43UHAA3TdL/ntyQpLO5XgMwnyBeV+12R9yMkFvBSmKIwEyqq3rVuk0NSV PjFSQw0/9iLtyR3M+7/LnNADXWx/2PimT087S0OCnYKYhrIude0hGDfe0f7RpBC1 3kGcngnfV4OFp9yabhNHHLxvxLO31atDkGheFL2Bx7+6ltpNxTZM7WyYYgPd8G/1 -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:14 2026 by rpki-client