This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/jdSwXFGYkX-QEBXIuasgwFC2D7c.roa File: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (raw, json) Hash identifier: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw= Subject key identifier: 8D:D4:B0:5C:51:98:91:7F:90:10:15:C8:B9:AB:20:C0:50:B6:0F:B7 Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Certificate serial: 019B7BA4F448F1548FA58F0589EFE97909F5 Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/jdSwXFGYkX-QEBXIuasgwFC2D7c.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3549 IP address blocks: 185.27.249.0/24 maxlen: 24 185.27.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f4:48:f1:54:8f:a5:8f:05:89:ef:e9:79:09:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dd4b05c5198917f901015c8b9ab20c050b60fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:02:b8:c4:0b:ad:eb:16:6f:10:aa:08:d4: a4:21:c4:27:e6:b4:e6:d2:0d:86:ca:47:83:82:d7: 77:04:7d:be:bd:cb:cf:b4:e2:4b:48:d1:41:09:3b: 29:0b:de:70:95:3f:ab:57:0f:95:35:71:58:c9:9f: 80:1c:92:71:63:95:9c:d5:64:21:06:b1:50:31:c7: 33:d0:ac:ab:d6:d1:4b:6e:4d:f1:17:27:77:4c:35: 07:59:54:03:0a:79:8e:11:62:ff:7e:41:eb:d6:6c: 63:77:92:43:2e:e3:e7:be:0c:45:7e:5f:b0:46:36: 9c:22:6a:34:e9:42:0f:82:34:96:16:8a:51:46:5e: ea:53:21:32:af:d9:32:e6:a4:70:0b:38:ab:91:10: 0a:c6:29:05:55:2a:61:df:ee:f6:ee:ca:c4:c3:71: 5d:d0:89:23:91:23:d6:3b:c5:53:81:1e:ed:b0:e9: 00:02:14:2d:c5:65:b6:b4:b7:ab:4b:7e:d5:f4:36: aa:48:27:61:80:84:8a:54:bb:62:8f:02:5f:32:60: fd:56:cb:4b:42:04:48:39:16:d3:4a:92:7f:35:7c: 91:40:16:9f:96:0e:0c:26:e4:b3:4f:95:66:05:f7: 14:8e:36:91:26:51:02:eb:41:58:42:e2:d0:b9:dd: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:B0:5C:51:98:91:7F:90:10:15:C8:B9:AB:20:C0:50:B6:0F:B7 X509v3 Authority Key Identifier: keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/jdSwXFGYkX-QEBXIuasgwFC2D7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.249.0/24 185.27.251.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b6:68:dd:79:e4:09:37:26:16:22:e4:a7:80:f2:a3:17:06: a5:02:c1:cc:93:90:3a:e9:5b:6b:00:5a:e6:0f:72:f2:a8:10: 97:b5:12:fe:16:cb:25:48:3d:e3:46:62:67:0c:fa:bf:a3:5f: 4d:65:24:3e:41:87:87:fc:cc:0d:81:b6:3b:cb:b1:f0:5e:9e: c1:0b:0a:d3:eb:36:26:44:24:74:e4:e8:3f:f8:fd:d5:a4:60: 96:fd:2c:40:5a:96:f9:d4:f5:3e:3d:8d:96:f0:5e:9e:01:37: 87:b2:64:66:86:6d:ef:46:2c:55:50:77:a8:ef:48:b7:ba:49: 5d:68:fd:b8:31:e8:21:1f:df:47:b1:7e:ab:eb:63:0f:00:e2: 39:54:21:2e:b3:ac:96:53:e3:c7:25:1e:6b:eb:96:3e:db:89: c7:34:29:cb:e5:96:71:cf:79:64:b7:54:95:55:31:72:03:03: 78:6a:ba:18:31:ca:d4:d3:f2:15:c3:b4:5f:2a:fb:73:09:ed: 31:da:18:f4:eb:9f:ab:79:d5:bb:87:87:b8:cc:23:1c:98:47: b8:95:89:52:ec:8d:77:e6:97:f3:da:30:56:d3:ec:74:03:d1: ad:4f:bd:f5:bf:06:38:5c:57:3e:e1:cd:8d:98:2d:67:e6:9e: 9f:b5:0e:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pPRI8VSPpY8Fie/peQn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi M2JlN2QwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGQ0YjA1YzUxOTg5MTdmOTAxMDE1YzhiOWFiMjBjMDUwYjYwZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0CuMQLresWbxCqCNSkIcQn5rTm 0g2GykeDgtd3BH2+vcvPtOJLSNFBCTspC95wlT+rVw+VNXFYyZ+AHJJxY5Wc1WQh BrFQMccz0Kyr1tFLbk3xFyd3TDUHWVQDCnmOEWL/fkHr1mxjd5JDLuPnvgxFfl+w RjacImo06UIPgjSWFopRRl7qUyEyr9ky5qRwCzirkRAKxikFVSph3+727srEw3Fd 0IkjkSPWO8VTgR7tsOkAAhQtxWW2tLerS37V9DaqSCdhgISKVLtijwJfMmD9VstL QgRIORbTSpJ/NXyRQBaflg4MJuSzT5VmBfcUjjaRJlEC60FYQuLQud2sgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI3UsFxRmJF/kBAVyLmrIMBQtg+3MB8GA1UdIwQY MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt NWE2NGE1ZmM4YTY0LzEvamRTd1hGR1lrWC1RRUJYSXVhc2d3RkMyRDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0 LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRv5AwQA uRv7MA0GCSqGSIb3DQEBCwUAA4IBAQCetmjdeeQJNyYWIuSngPKjFwalAsHMk5A6 6VtrAFrmD3LyqBCXtRL+FsslSD3jRmJnDPq/o19NZSQ+QYeH/MwNgbY7y7HwXp7B CwrT6zYmRCR05Og/+P3VpGCW/SxAWpb51PU+PY2W8F6eATeHsmRmhm3vRixVUHeo 70i3ukldaP24MeghH99HsX6r62MPAOI5VCEus6yWU+PHJR5r65Y+24nHNCnL5ZZx z3lkt1SVVTFyAwN4aroYMcrU0/IVw7RfKvtzCe0x2hj065+redW7h4e4zCMcmEe4 lYlS7I135pfz2jBW0+x0A9GtT731vwY4XFc+4c2NmC1n5p6ftQ6l -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:46 2026 by rpki-client