This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-X27IuJGjEWD538xJuX4fc13cFQ.roa File: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (raw, json) Hash identifier: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw= Subject key identifier: F9:7D:BB:22:E2:46:8C:45:83:E7:7F:31:26:E5:F8:7D:CD:77:70:54 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A3308F4ECB5A3E5AC0002A1C72C72B Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-X27IuJGjEWD538xJuX4fc13cFQ.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200778 IP address blocks: 84.47.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:8f:4e:cb:5a:3e:5a:c0:00:2a:1c:72:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97dbb22e2468c4583e77f3126e5f87dcd777054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:72:e3:a4:45:53:94:46:4a:5d:46:9c:41: 0a:f9:3b:b5:11:c3:32:70:ba:96:1d:c0:1c:51:63: 41:44:ae:a5:b3:a7:d8:c4:7e:7f:e1:0e:2c:01:a8: 72:ee:3e:c2:4f:0a:b6:da:ac:51:17:54:bd:33:ee: 24:a3:57:df:c3:43:19:3a:62:ca:b4:2c:ac:dd:f7: 08:b2:ec:43:26:8e:39:46:c1:9d:a8:f1:54:cf:08: b5:8a:16:0a:78:53:e0:cf:8d:e5:a6:64:df:cc:11: 0c:90:80:96:4b:83:2a:c5:80:0a:6a:32:ed:1c:28: d2:d0:6d:1d:43:c8:a2:50:27:0e:ee:8e:ea:29:a7: 76:4c:49:b5:56:3c:15:61:01:e6:8e:18:08:99:e7: 98:15:dd:c8:cb:13:67:94:d7:15:51:2c:2f:ef:f5: 08:d0:73:20:35:de:2d:63:33:dc:53:e2:fd:5e:f9: d0:e3:84:18:b1:f6:c6:d4:76:a4:f0:65:6c:7e:7d: c7:35:e7:f3:3a:19:88:e5:cc:37:aa:27:2f:11:d6: af:31:fb:1f:7d:e2:f5:d3:c7:17:88:de:2a:f2:64: 77:5a:cf:eb:39:ec:c5:6d:c0:6d:c6:18:54:dd:29: a4:e9:f3:e5:d4:f6:42:6d:48:5e:cb:06:e4:fa:89: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:BB:22:E2:46:8C:45:83:E7:7F:31:26:E5:F8:7D:CD:77:70:54 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-X27IuJGjEWD538xJuX4fc13cFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.130.0/24 Signature Algorithm: sha256WithRSAEncryption 89:af:16:7a:78:34:70:06:df:af:74:58:09:f7:e2:11:b9:7f: 77:2e:68:c6:87:c4:d9:d2:c8:9d:35:05:da:ea:c4:81:0f:68: e1:1e:b1:f5:9a:38:6a:a3:e7:51:d9:86:00:a3:c8:04:31:57: f0:a8:94:b7:94:c1:a4:56:e0:7e:c0:39:dc:e6:1f:5b:80:f0: 8c:3e:87:24:b1:34:95:d8:9f:c5:e2:81:ac:d7:6e:58:9e:8b: 8d:e4:1f:1b:3f:d7:94:de:38:31:1a:24:97:e3:72:ce:23:2f: 1a:0f:fb:21:06:eb:8d:7c:c2:d3:0e:40:2a:18:48:35:b7:e4: 48:31:21:e2:99:43:bd:c6:fa:e2:b7:e9:cd:73:4b:b2:69:9f: e3:7a:38:d7:cf:fa:b6:15:c5:b7:39:f0:3a:36:ea:a6:00:d5: 26:4d:1e:89:ce:13:a6:d5:b9:bc:c5:f6:23:50:20:af:32:84: 50:6f:94:1e:b9:81:04:9e:36:57:3e:2e:df:66:71:2f:5a:6d: 4d:33:c0:51:98:bd:ce:10:0f:3e:2d:e8:5b:d6:d6:ba:9a:e4: 43:a6:e0:7e:89:c3:1e:a1:b9:5c:ca:d8:27:61:7a:e8:15:67: 3d:40:b2:ca:ef:93:84:ac:6a:17:d0:e1:8e:ac:66:d1:a4:d0: 19:b4:42:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ozCPTstaPlrAACoccscrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTdkYmIyMmUyNDY4YzQ1ODNlNzdmMzEyNmU1Zjg3ZGNkNzc3MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6hy46RFU5RGSl1GnEEK+Tu1EcMy cLqWHcAcUWNBRK6ls6fYxH5/4Q4sAahy7j7CTwq22qxRF1S9M+4ko1ffw0MZOmLK tCys3fcIsuxDJo45RsGdqPFUzwi1ihYKeFPgz43lpmTfzBEMkICWS4MqxYAKajLt HCjS0G0dQ8iiUCcO7o7qKad2TEm1VjwVYQHmjhgImeeYFd3IyxNnlNcVUSwv7/UI 0HMgNd4tYzPcU+L9XvnQ44QYsfbG1Hak8GVsfn3HNefzOhmI5cw3qicvEdavMfsf feL108cXiN4q8mR3Ws/rOezFbcBtxhhU3Smk6fPl1PZCbUheywbk+omd+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPl9uyLiRoxFg+d/MSbl+H3Nd3BUMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvMS1YMjdJdUpHakVXRDUzOHhKdVg0ZmMxM2NGUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvMDlkYmE0LTFjOTMtNDlkNi04ODg4LWJmYjRiYTMwZTQ1 YS8xL2p6Z1lWVXBSZ0k3dnVDbnNkR1dqSWk4bkFTTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQvgjAN BgkqhkiG9w0BAQsFAAOCAQEAia8Weng0cAbfr3RYCffiEbl/dy5oxofE2dLInTUF 2urEgQ9o4R6x9Zo4aqPnUdmGAKPIBDFX8KiUt5TBpFbgfsA53OYfW4DwjD6HJLE0 ldifxeKBrNduWJ6LjeQfGz/XlN44MRokl+NyziMvGg/7IQbrjXzC0w5AKhhINbfk SDEh4plDvcb64rfpzXNLsmmf43o418/6thXFtznwOjbqpgDVJk0eic4TptW5vMX2 I1AgrzKEUG+UHrmBBJ42Vz4u32ZxL1ptTTPAUZi9zhAPPi3oW9bWuprkQ6bgfonD HqG5XMrYJ2F66BVnPUCyyu+ThKxqF9Dhjqxm0aTQGbRCYg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client