This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/D7n5z-X4QhT0cqePH5_ymEPmodc.roa File: D7n5z-X4QhT0cqePH5_ymEPmodc.roa (raw, json) Hash identifier: o8sKCnE2zp0a9Xj0y7an5x9MEDGoNlR5ZqyI5pidfw0= Subject key identifier: 0F:B9:F9:CF:E5:F8:42:14:F4:72:A7:8F:1F:9F:F2:98:43:E6:A1:D7 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4BBEB32E99E4AB7F072BE65675FC Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/D7n5z-X4QhT0cqePH5_ymEPmodc.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12660 IP address blocks: 2.189.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4b:be:b3:2e:99:e4:ab:7f:07:2b:e6:56:75:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fb9f9cfe5f84214f472a78f1f9ff29843e6a1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:ba:4b:5d:ec:cf:1a:76:78:c0:3b:06:32: 99:43:13:5a:6c:fa:cd:61:e1:86:1d:d8:eb:cc:02: 58:9c:e9:1e:ab:11:43:ad:99:c8:e5:dd:c1:3a:ec: 40:e3:7c:68:83:66:cc:f3:11:33:67:66:ff:ed:b7: 1f:c7:ab:cf:9d:6a:62:3e:4d:59:de:4b:0f:96:3a: 1b:c2:40:b0:6b:df:42:78:18:24:bd:52:1d:2e:f6: e2:fe:4b:ab:fd:38:66:3e:ed:2f:fb:64:eb:2b:ae: 04:26:9f:d4:c4:80:23:b4:4d:e6:6b:8c:93:23:78: 74:30:46:d7:72:b0:a9:9e:09:dd:4e:56:91:85:36: f3:d5:e1:5f:e6:0c:68:72:2a:05:cc:b8:64:64:89: 87:28:6a:b9:54:2a:0c:5f:7a:96:9e:cb:bc:5d:b9: d7:0d:90:c4:15:a5:b3:21:a6:f4:04:6e:bf:97:f3: 4b:31:2e:c0:87:56:df:1f:ad:4f:5b:47:76:02:db: 5d:17:69:13:1f:73:86:2b:ec:de:11:1d:81:98:b2: 42:d2:d5:7e:70:db:37:ea:ad:9a:79:90:af:3d:a5: 61:72:2b:99:42:4e:61:eb:8c:aa:62:bc:e5:e1:a8: 36:4c:db:8a:80:60:cc:8b:39:82:51:fd:e0:a5:9b: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B9:F9:CF:E5:F8:42:14:F4:72:A7:8F:1F:9F:F2:98:43:E6:A1:D7 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/D7n5z-X4QhT0cqePH5_ymEPmodc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.189.80.0/21 Signature Algorithm: sha256WithRSAEncryption 38:05:82:8c:f9:1b:a2:c1:ab:51:93:41:2f:21:60:d0:cb:1d: fd:de:5a:20:a6:e1:fb:19:c1:e2:f5:a0:69:cc:ac:b3:8e:c2: 2f:57:99:43:23:e7:8b:63:59:d5:0d:ce:7a:0d:de:c6:fa:78: 98:c7:90:19:00:d6:4a:3c:eb:69:0d:0c:c9:17:6d:9b:3c:dd: 62:6b:86:28:cc:cb:46:cb:88:d7:e2:8e:af:aa:fb:21:66:c0: ca:10:4f:fc:4a:e9:de:f4:1f:66:9e:42:bb:a6:bb:16:c3:69: 44:90:9f:f1:dc:c5:25:19:df:1d:99:3a:e5:a7:3e:5d:19:21: 91:8c:06:6f:19:f9:83:1a:40:8e:ad:50:97:89:71:6e:73:bc: 39:f4:56:ef:74:47:30:73:9e:24:04:12:7c:89:07:7d:48:98: 38:d3:39:e7:a1:13:44:ee:e6:4d:04:dc:a6:3b:de:67:8c:1c: 72:87:0a:ed:31:da:67:8e:8a:47:f3:0f:f5:bc:f4:98:9b:6b: 9b:14:de:23:91:96:80:92:97:d8:f3:37:bf:1f:38:95:ef:8b: 67:b2:db:b9:4c:22:f7:a9:10:de:d0:8f:02:fd:77:df:f5:d7: b4:40:65:0f:cd:8e:f0:a3:86:24:56:89:fa:82:2b:f6:b6:b7: 6b:91:9d:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260u+sy6Z5Kt/ByvmVnX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmI5ZjljZmU1Zjg0MjE0ZjQ3MmE3OGYxZjlmZjI5ODQzZTZhMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTq6S13szxp2eMA7BjKZQxNabPrN YeGGHdjrzAJYnOkeqxFDrZnI5d3BOuxA43xog2bM8xEzZ2b/7bcfx6vPnWpiPk1Z 3ksPljobwkCwa99CeBgkvVIdLvbi/kur/ThmPu0v+2TrK64EJp/UxIAjtE3ma4yT I3h0MEbXcrCpngndTlaRhTbz1eFf5gxocioFzLhkZImHKGq5VCoMX3qWnsu8XbnX DZDEFaWzIab0BG6/l/NLMS7Ah1bfH61PW0d2AttdF2kTH3OGK+zeER2BmLJC0tV+ cNs36q2aeZCvPaVhciuZQk5h64yqYrzl4ag2TNuKgGDMizmCUf3gpZvqIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+5+c/l+EIU9HKnjx+f8phD5qHXMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvRDduNXotWDRRaFQwY3FlUEg1X3ltRVBtb2RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAr1QMA0G CSqGSIb3DQEBCwUAA4IBAQA4BYKM+RuiwatRk0EvIWDQyx393logpuH7GcHi9aBp zKyzjsIvV5lDI+eLY1nVDc56Dd7G+niYx5AZANZKPOtpDQzJF22bPN1ia4YozMtG y4jX4o6vqvshZsDKEE/8Sune9B9mnkK7prsWw2lEkJ/x3MUlGd8dmTrlpz5dGSGR jAZvGfmDGkCOrVCXiXFuc7w59FbvdEcwc54kBBJ8iQd9SJg40znnoRNE7uZNBNym O95njBxyhwrtMdpnjopH8w/1vPSYm2ubFN4jkZaAkpfY8ze/HziV74tnstu5TCL3 qRDe0I8C/Xff9de0QGUPzY7wo4YkVon6giv2trdrkZ2/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:41 2026 by rpki-client