This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa File: J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa (raw, json) Hash identifier: ZKoxCa2uj0cYbH0WJu6XJV9TAVwhK/nXaOs/emSjvm4= Subject key identifier: 27:99:16:29:A4:DE:7E:D7:31:37:74:FA:FF:B8:CA:70:F7:F7:43:88 Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700 Certificate serial: 019B78350EBA82E27A574EF207133665CDB4 Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57822 IP address blocks: 80.72.208.0/24 maxlen: 24 80.72.209.0/24 maxlen: 24 80.72.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0e:ba:82:e2:7a:57:4e:f2:07:13:36:65:cd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27991629a4de7ed7313774faffb8ca70f7f74388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:9e:d5:e0:97:bc:75:65:42:87:e3:9d:06: ec:6e:de:27:1e:35:14:c0:aa:f6:42:da:15:dc:3c: f1:73:31:91:f6:a3:b7:7d:15:de:a3:d5:ed:22:1f: 21:27:64:86:a4:f9:21:c2:dd:b0:9f:be:32:99:6e: d3:86:40:19:34:bf:a0:0f:f8:37:e2:e5:29:37:dc: 28:91:67:74:5e:af:61:bf:93:a2:68:15:da:28:a5: 60:b2:c2:6e:b9:55:e3:3c:bc:8f:a1:1a:6a:ce:24: 16:e2:b7:7e:35:aa:6a:44:6b:2a:3e:28:cf:80:69: 99:15:f3:6a:46:2d:8a:74:31:48:ca:2d:61:e5:9b: 48:dc:91:e5:91:95:33:ef:9f:9a:fe:fa:9c:c0:5b: 6e:a5:c3:a3:e7:4d:a2:50:63:57:52:f6:b0:c6:84: ed:5a:ba:2c:f0:41:f1:b8:af:c0:c8:cd:1d:d5:9d: d6:1a:9b:b1:4d:7c:d3:f3:e8:85:92:8b:39:60:7e: 8d:fb:11:e2:dc:60:f3:39:6c:33:e0:7f:7a:ec:50: 70:61:f0:28:5e:23:54:36:f5:7f:dc:ef:ab:fd:e8: 5e:ff:f6:6c:d2:2d:85:66:e2:79:0f:c2:e8:0f:a7: a9:9c:ca:15:05:db:de:9b:fd:01:68:09:45:79:7c: 6f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:99:16:29:A4:DE:7E:D7:31:37:74:FA:FF:B8:CA:70:F7:F7:43:88 X509v3 Authority Key Identifier: keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.208.0/23 80.72.215.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:82:cb:d0:ff:1a:46:98:8b:0f:14:17:00:a4:44:50:87:4e: 64:1e:ec:ac:83:30:84:f3:fb:a0:84:ed:e8:b7:77:e9:a7:33: 9d:3f:fe:b0:af:0e:da:98:66:fd:00:1b:31:81:8f:e3:a7:17: 22:e8:40:a7:e8:f4:cf:0f:84:2b:a8:0b:62:15:d9:87:c2:79: 4a:c9:41:1c:50:dd:ab:8d:f1:a6:41:e4:98:ec:fc:a5:7e:53: d1:97:60:7c:36:fd:5d:c6:3c:3e:77:33:d0:98:38:02:c8:35: 33:e4:54:de:10:41:f6:0c:41:4f:44:a2:86:34:a6:e3:2d:db: f4:c0:f6:3f:b6:b4:c8:88:54:63:0c:f1:0f:7b:d5:9f:29:ff: 80:30:ad:b9:0e:05:cc:9e:fe:8a:67:6a:db:5d:1d:a9:05:aa: ca:bb:8c:cc:4e:61:12:ec:7a:e5:c5:dd:63:3d:c6:f1:df:93: b2:0c:5e:55:d3:84:14:af:61:07:33:52:49:1f:59:af:65:a3: ab:28:ca:4d:f7:c5:5f:58:92:50:c5:ba:76:38:e1:aa:de:cf: f8:23:2e:0a:be:b1:5c:ea:46:93:fa:c1:f2:b4:66:38:9a:47: d5:5f:c8:5e:0e:3f:81:a7:cb:a4:75:f8:d3:89:cd:31:20:b0: bb:a1:7b:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NQ66guJ6V07yBxM2Zc20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTBlNzU5MzU0ZTgzY2MxOTMyMDM4MTEwOWRlMjJkYTBm MWE3MDAwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzk5MTYyOWE0ZGU3ZWQ3MzEzNzc0ZmFmZmI4Y2E3MGY3Zjc0Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCCe1eCXvHVlQofjnQbsbt4nHjUU wKr2QtoV3DzxczGR9qO3fRXeo9XtIh8hJ2SGpPkhwt2wn74ymW7ThkAZNL+gD/g3 4uUpN9wokWd0Xq9hv5OiaBXaKKVgssJuuVXjPLyPoRpqziQW4rd+NapqRGsqPijP gGmZFfNqRi2KdDFIyi1h5ZtI3JHlkZUz75+a/vqcwFtupcOj502iUGNXUvawxoTt Wros8EHxuK/AyM0d1Z3WGpuxTXzT8+iFkos5YH6N+xHi3GDzOWwz4H967FBwYfAo XiNUNvV/3O+r/ehe//Zs0i2FZuJ5D8LoD6epnMoVBdvem/0BaAlFeXxvXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCeZFimk3n7XMTd0+v+4ynD390OIMB8GA1UdIwQY MBaAFH/g51k1ToPMGTIDgRCd4i2g8acAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEt YjQwMmU4YTFkOTM0LzEvSjVrV0thVGVmdGN4TjNUNl83aktjUGYzUTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEtYjQwMmU4YTFkOTM0 LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUEjQAwQA UEjXMA0GCSqGSIb3DQEBCwUAA4IBAQA9gsvQ/xpGmIsPFBcApERQh05kHuysgzCE 8/ughO3ot3fppzOdP/6wrw7amGb9ABsxgY/jpxci6ECn6PTPD4QrqAtiFdmHwnlK yUEcUN2rjfGmQeSY7PylflPRl2B8Nv1dxjw+dzPQmDgCyDUz5FTeEEH2DEFPRKKG NKbjLdv0wPY/trTIiFRjDPEPe9WfKf+AMK25DgXMnv6KZ2rbXR2pBarKu4zMTmES 7Hrlxd1jPcbx35OyDF5V04QUr2EHM1JJH1mvZaOrKMpN98VfWJJQxbp2OOGq3s/4 Iy4KvrFc6kaT+sHytGY4mkfVX8heDj+Bp8ukdfjTic0xILC7oXtb -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:13 2026 by rpki-client