This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_jfhs9O-yH7Nhl-chX96_YEO5Rw.roa File: _jfhs9O-yH7Nhl-chX96_YEO5Rw.roa (raw, json) Hash identifier: vYIoBXsFs4I8B2mHqwDvnln26SZFhDEyNfRJVPo/OFo= Subject key identifier: FE:37:E1:B3:D3:BE:C8:7E:CD:86:5F:9C:85:7F:7A:FD:81:0E:E5:1C Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78AB8D7FEE8A9DED80ABC84A0265D Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_jfhs9O-yH7Nhl-chX96_YEO5Rw.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203279 IP address blocks: 81.15.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:8a:b8:d7:fe:e8:a9:de:d8:0a:bc:84:a0:26:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe37e1b3d3bec87ecd865f9c857f7afd810ee51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:78:24:25:78:f6:16:fd:49:f2:d8:79:68: 5e:89:c1:6c:65:52:7c:be:19:b9:39:57:4a:ab:6c: 24:b9:b9:ef:b0:0c:b3:d1:f8:e3:64:f5:2a:54:fd: 71:da:a6:0b:c1:72:dd:a7:18:72:80:af:55:0b:27: 1a:e6:6e:e5:20:48:65:5c:f3:a6:84:6a:e3:0e:2f: 1e:50:4b:d7:ac:4c:d5:cd:ed:1c:d9:6b:7f:2e:bf: ad:1f:db:02:b2:52:49:2e:03:3a:e2:38:71:88:fb: fe:fd:48:94:37:d8:88:28:f3:76:82:74:a9:8e:36: 2e:03:b4:a7:bd:ce:5a:61:ec:53:5a:78:be:8f:66: e7:de:c2:7f:46:b6:a5:6c:72:c9:92:1a:d9:d5:5b: 1b:07:b2:bd:5c:a6:7e:98:5e:15:f0:5f:9d:de:64: 2b:64:1e:a9:49:99:5b:fa:d7:77:3b:98:72:11:2f: 98:75:18:f2:3c:2a:76:e5:5d:63:16:b4:d6:85:4a: 18:65:8e:ca:8b:2d:3c:b0:20:e6:3d:d7:0c:37:c5: ba:12:1d:55:35:ab:7d:64:3a:6b:01:c5:f3:37:bb: de:fa:61:0f:12:1f:75:7f:45:46:33:d0:04:bb:71: b1:7d:cf:48:c0:34:11:bf:a1:f0:3a:a1:eb:33:b4: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:E1:B3:D3:BE:C8:7E:CD:86:5F:9C:85:7F:7A:FD:81:0E:E5:1C X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_jfhs9O-yH7Nhl-chX96_YEO5Rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.237.0/24 Signature Algorithm: sha256WithRSAEncryption 43:34:c1:f7:65:ca:04:86:0c:0d:0c:86:e9:83:15:ae:10:27: b7:b0:79:c3:fa:1d:0d:92:10:4e:3a:ad:fc:77:39:4f:47:20: 84:1a:e5:62:38:c3:3c:f2:e5:2d:26:1b:aa:39:4e:77:76:58: fc:81:68:6a:71:d6:b7:87:27:f6:45:81:78:ee:ff:f1:1d:cb: 3d:37:3b:c8:73:82:06:a4:3c:74:cb:d2:e0:3e:14:ad:0f:b0: a8:c3:1f:08:53:58:d0:cd:f2:38:bd:a8:14:7d:3a:b0:91:7f: 64:e1:da:ab:42:a3:f2:c7:45:81:76:91:b7:7a:f4:fb:9e:75: 3d:69:4a:ab:eb:eb:fd:45:ef:05:ea:17:3c:9a:54:0d:a6:82: 8e:a5:0d:cf:62:5c:4e:0f:b6:08:da:e7:16:25:bc:e9:de:96: af:66:ea:f9:ce:6e:52:81:d6:1e:86:6e:f5:9f:d7:3a:30:fe: e6:b3:e8:88:f8:f8:cc:74:9a:76:8b:76:86:5d:65:83:ee:33: e4:12:d9:33:12:85:00:4d:01:fe:f6:97:46:7c:62:40:11:7f: b9:15:c9:da:c7:1d:16:88:dd:38:4a:4f:7d:50:e6:0b:99:81: ed:a4:62:6a:4c:0d:9b:0c:c0:59:79:1f:0e:03:fb:96:f5:9d: 36:29:93:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4q41/7oqd7YCryEoCZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTM3ZTFiM2QzYmVjODdlY2Q4NjVmOWM4NTdmN2FmZDgxMGVlNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUR4JCV49hb9SfLYeWheicFsZVJ8 vhm5OVdKq2wkubnvsAyz0fjjZPUqVP1x2qYLwXLdpxhygK9VCyca5m7lIEhlXPOm hGrjDi8eUEvXrEzVze0c2Wt/Lr+tH9sCslJJLgM64jhxiPv+/UiUN9iIKPN2gnSp jjYuA7Snvc5aYexTWni+j2bn3sJ/RralbHLJkhrZ1VsbB7K9XKZ+mF4V8F+d3mQr ZB6pSZlb+td3O5hyES+YdRjyPCp25V1jFrTWhUoYZY7Kiy08sCDmPdcMN8W6Eh1V Nat9ZDprAcXzN7ve+mEPEh91f0VGM9AEu3Gxfc9IwDQRv6HwOqHrM7T7oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP434bPTvsh+zYZfnIV/ev2BDuUcMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvX2pmaHM5Ty15SDdOaGwtY2hYOTZfWUVPNVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ/tMA0G CSqGSIb3DQEBCwUAA4IBAQBDNMH3ZcoEhgwNDIbpgxWuECe3sHnD+h0NkhBOOq38 dzlPRyCEGuViOMM88uUtJhuqOU53dlj8gWhqcda3hyf2RYF47v/xHcs9NzvIc4IG pDx0y9LgPhStD7Cowx8IU1jQzfI4vagUfTqwkX9k4dqrQqPyx0WBdpG3evT7nnU9 aUqr6+v9Re8F6hc8mlQNpoKOpQ3PYlxOD7YI2ucWJbzp3pavZur5zm5SgdYehm71 n9c6MP7ms+iI+PjMdJp2i3aGXWWD7jPkEtkzEoUATQH+9pdGfGJAEX+5Fcnaxx0W iN04Sk99UOYLmYHtpGJqTA2bDMBZeR8OA/uW9Z02KZON -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:38 2026 by rpki-client