This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa File: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (raw, json) Hash identifier: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U= Subject key identifier: 27:83:1E:D8:76:38:C4:71:96:C8:4D:53:A7:E4:7C:7F:75:22:F5:0F Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688 Certificate serial: 019B7834B48C81D188E6B8AFC9C66AA79547 Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397451 IP address blocks: 45.67.100.0/24 maxlen: 24 185.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b4:8c:81:d1:88:e6:b8:af:c9:c6:6a:a7:95:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2893a4b284acb5d8a4164289045492109511688 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27831ed87638c47196c84d53a7e47c7f7522f50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:a5:59:a5:bd:0c:cf:be:f1:8c:c5:13:89: a7:f5:3b:65:30:77:10:ac:a1:18:2d:a0:3e:7d:06: 32:5b:f9:77:a1:a3:66:77:dd:c1:dc:82:43:86:d8: 1d:91:df:1e:a5:8e:cc:d5:b8:3a:72:2c:f8:fe:96: 56:bb:bf:29:ac:10:d1:d2:80:90:f9:de:45:bc:89: fe:78:5b:df:be:49:94:4c:a9:d5:13:dd:c3:40:8f: e6:d8:89:7b:f4:ed:2c:c7:f9:15:5c:cc:39:c8:7f: d9:25:df:55:36:ad:de:0d:fe:3d:16:f2:b2:73:a5: d4:db:73:96:25:11:a5:c7:e9:75:29:6b:95:9f:bf: 90:36:f0:a5:de:49:a9:a1:3d:30:1b:4a:ce:64:47: 10:7e:43:a2:7f:4e:60:9f:35:a6:16:67:6f:d1:c9: b6:03:8a:0c:c4:06:83:9b:0a:9b:1d:eb:42:a9:1a: 5f:28:9d:a5:33:8d:18:7d:a7:b1:6e:47:33:ba:fd: a0:16:83:c6:27:10:d8:55:c9:51:3e:96:3a:43:14: d1:2e:25:37:d6:1e:96:cf:b7:36:cf:e3:6b:3e:15: 73:98:bf:4f:c3:f7:57:44:ec:4b:b9:1b:b7:8a:e2: 8b:7c:12:d8:77:c3:42:b4:f3:25:e7:5b:8f:57:82: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:83:1E:D8:76:38:C4:71:96:C8:4D:53:A7:E4:7C:7F:75:22:F5:0F X509v3 Authority Key Identifier: keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.100.0/24 185.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 11:0c:f8:61:27:c0:77:33:da:48:27:6a:da:8d:25:fc:7b:a2: 8f:61:54:28:15:0c:54:ed:60:83:d9:27:81:61:d1:9c:25:74: a3:d5:24:25:05:4d:d4:e4:5b:74:72:f4:5c:cb:ad:65:ee:48: 48:15:37:8f:3a:47:1b:e2:28:e4:ae:56:31:f7:8e:5f:91:04: 67:84:e1:c1:76:ee:ee:1d:e5:e0:81:d1:81:3f:82:da:0b:98: a2:51:8e:38:f7:87:f4:87:66:4b:0e:a9:52:d9:4a:33:7e:15: 23:2e:b0:de:6c:86:44:35:e9:f0:d9:5f:67:aa:38:16:b9:36: bd:14:6c:d1:6e:fe:d2:13:a7:1e:4b:e2:a1:42:3c:30:a3:46: c5:26:5a:ec:b4:0a:19:7d:7b:16:72:08:f6:de:fc:89:ff:55: 91:db:a5:7a:69:d9:cc:42:52:d8:4f:18:e6:a7:b5:41:25:19: 0a:1c:bb:2d:8c:67:a0:58:be:30:12:e9:20:0f:09:74:38:eb: 7a:88:2c:fe:c7:4d:04:49:2e:fd:26:d6:ff:8b:86:1b:79:5e: 91:41:b1:43:a6:87:68:83:87:6d:54:30:c3:3a:ff:7f:50:90: 1e:c0:31:1a:eb:64:e2:76:6e:1e:bf:84:9a:bf:a2:90:df:ca: c0:16:fa:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NLSMgdGI5rivycZqp5VHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1 MTE2ODgwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzgzMWVkODc2MzhjNDcxOTZjODRkNTNhN2U0N2M3Zjc1MjJmNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VSlWaW9DM++8YzFE4mn9TtlMHcQ rKEYLaA+fQYyW/l3oaNmd93B3IJDhtgdkd8epY7M1bg6ciz4/pZWu78prBDR0oCQ +d5FvIn+eFvfvkmUTKnVE93DQI/m2Il79O0sx/kVXMw5yH/ZJd9VNq3eDf49FvKy c6XU23OWJRGlx+l1KWuVn7+QNvCl3kmpoT0wG0rOZEcQfkOif05gnzWmFmdv0cm2 A4oMxAaDmwqbHetCqRpfKJ2lM40Yfaexbkczuv2gFoPGJxDYVclRPpY6QxTRLiU3 1h6Wz7c2z+NrPhVzmL9Pw/dXROxLuRu3iuKLfBLYd8NCtPMl51uPV4LqWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCeDHth2OMRxlshNU6fkfH91IvUPMB8GA1UdIwQY MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt YTVkM2NiOTE4MjA2LzEvSjRNZTJIWTR4SEdXeUUxVHAtUjhmM1VpOVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2 LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUNkAwQA uRmcMA0GCSqGSIb3DQEBCwUAA4IBAQARDPhhJ8B3M9pIJ2rajSX8e6KPYVQoFQxU 7WCD2SeBYdGcJXSj1SQlBU3U5Ft0cvRcy61l7khIFTePOkcb4ijkrlYx945fkQRn hOHBdu7uHeXggdGBP4LaC5iiUY4494f0h2ZLDqlS2UozfhUjLrDebIZENenw2V9n qjgWuTa9FGzRbv7SE6ceS+KhQjwwo0bFJlrstAoZfXsWcgj23vyJ/1WR26V6adnM QlLYTxjmp7VBJRkKHLstjGegWL4wEukgDwl0OOt6iCz+x00ESS79Jtb/i4YbeV6R QbFDpodog4dtVDDDOv9/UJAewDEa62Tidm4ev4Sav6KQ38rAFvoB -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:30 2026 by rpki-client