This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa File: J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa (raw, json) Hash identifier: rk9skdq4jJ58Yezr/EGSdkIl0oNJ4Rc1ouYxvWKZPx4= Subject key identifier: 27:B9:F1:1C:94:76:AB:FE:7E:5D:2C:4F:24:82:2B:38:47:7F:DA:A3 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B78A2677D7BD4E7B399C6CDE72A457A43 Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136744 IP address blocks: 91.227.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:67:7d:7b:d4:e7:b3:99:c6:cd:e7:2a:45:7a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b9f11c9476abfe7e5d2c4f24822b38477fdaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:24:ce:88:9a:d0:a5:7b:a1:96:7e:bf:f6: 39:90:90:0c:bb:bf:d2:9a:3e:bb:14:fc:ae:04:17: 89:e8:f8:e4:1c:d3:5d:5f:4b:3d:9d:d8:00:a0:b6: 9a:ea:89:2e:cd:a7:92:bb:eb:28:d5:83:43:6d:74: 87:36:e8:c9:4a:c6:e6:e7:4c:28:96:aa:5f:87:69: 3d:a4:2b:12:be:91:19:4f:b1:5b:9a:71:36:53:cb: 82:b9:06:3c:47:ff:1d:5e:72:23:ac:0f:76:bf:23: 71:bb:9b:ed:82:28:19:bb:e6:17:79:5a:a7:06:ec: 5c:31:1a:9d:f8:82:d1:7d:e9:7f:c7:f8:d0:7a:76: ef:a1:88:00:c1:54:ec:6d:0b:e0:5a:1d:54:43:8b: a5:07:60:ca:eb:58:13:4c:b0:17:77:84:c2:0d:f4: da:ab:22:95:96:68:50:fa:5c:bd:39:d9:30:00:3a: 43:de:ff:a3:d7:6a:e7:ba:e8:29:38:69:bf:8c:68: d3:dd:7b:bd:67:bd:cc:1b:39:4b:c0:c9:c7:79:4d: d0:7b:ff:90:74:cf:83:0c:ca:2d:c2:d4:ef:b6:e2: a5:a6:b1:40:89:87:5a:4d:4e:27:93:05:fb:3a:65: 3c:ef:ac:de:d6:94:67:72:d7:df:54:2f:19:a5:db: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B9:F1:1C:94:76:AB:FE:7E:5D:2C:4F:24:82:2B:38:47:7F:DA:A3 X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.137.0/24 Signature Algorithm: sha256WithRSAEncryption bb:79:02:1e:cd:68:5a:0f:53:4c:bb:84:9b:4f:78:52:3d:b2: 68:8b:24:12:1c:e2:3c:c9:38:a3:2b:ad:9a:48:93:41:64:a0: 3b:94:12:3e:88:4e:0d:18:23:08:53:51:e2:f5:28:ac:6b:05: cc:b2:35:f5:49:60:8c:3a:1c:e4:d7:75:8f:09:0c:9c:bf:13: ce:58:78:f9:57:6f:a8:81:8a:5b:c4:25:a8:ff:e7:2f:d1:80: f8:65:d2:76:e5:a7:31:45:39:3c:ea:64:7e:16:18:05:5a:60: 18:73:4d:44:50:36:10:f1:22:be:ff:22:86:a7:2d:7d:14:b3: 66:ee:6f:b4:b0:33:f0:5c:d6:fa:61:ae:ae:da:31:31:ac:c7: 0e:c7:c3:cf:81:65:87:cb:69:88:3d:86:2c:f9:73:d0:fa:55: bc:c8:f0:63:07:39:dc:90:31:ea:92:32:b3:bf:3d:eb:62:3b: b5:26:4d:1d:c6:54:7b:2a:54:d6:7b:84:ee:d7:e2:0c:0c:61: fc:ad:f1:13:8f:41:4e:13:6a:ee:cd:f8:56:ae:a0:9b:b0:db: 05:c2:d7:5b:f9:73:3b:a7:c9:ac:e3:48:d3:62:c6:20:03:a1: 2c:0a:d3:12:47:ed:5a:f7:10:04:17:f3:0f:f6:c6:9b:51:d7: b5:d7:df:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omd9e9Tns5nGzecqRXpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2I5ZjExYzk0NzZhYmZlN2U1ZDJjNGYyNDgyMmIzODQ3N2ZkYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wkkzoia0KV7oZZ+v/Y5kJAMu7/S mj67FPyuBBeJ6PjkHNNdX0s9ndgAoLaa6okuzaeSu+so1YNDbXSHNujJSsbm50wo lqpfh2k9pCsSvpEZT7FbmnE2U8uCuQY8R/8dXnIjrA92vyNxu5vtgigZu+YXeVqn BuxcMRqd+ILRfel/x/jQenbvoYgAwVTsbQvgWh1UQ4ulB2DK61gTTLAXd4TCDfTa qyKVlmhQ+ly9OdkwADpD3v+j12rnuugpOGm/jGjT3Xu9Z73MGzlLwMnHeU3Qe/+Q dM+DDMotwtTvtuKlprFAiYdaTU4nkwX7OmU876ze1pRnctffVC8Zpds8OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCe58RyUdqv+fl0sTySCKzhHf9qjMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvSjdueEhKUjJxXzUtWFN4UEpJSXJPRWRfMnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+OJMA0G CSqGSIb3DQEBCwUAA4IBAQC7eQIezWhaD1NMu4SbT3hSPbJoiyQSHOI8yTijK62a SJNBZKA7lBI+iE4NGCMIU1Hi9SisawXMsjX1SWCMOhzk13WPCQycvxPOWHj5V2+o gYpbxCWo/+cv0YD4ZdJ25acxRTk86mR+FhgFWmAYc01EUDYQ8SK+/yKGpy19FLNm 7m+0sDPwXNb6Ya6u2jExrMcOx8PPgWWHy2mIPYYs+XPQ+lW8yPBjBznckDHqkjKz vz3rYju1Jk0dxlR7KlTWe4Tu1+IMDGH8rfETj0FOE2ruzfhWrqCbsNsFwtdb+XM7 p8ms40jTYsYgA6EsCtMSR+1a9xAEF/MP9sabUde119/H -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:14 2026 by rpki-client