This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/J8Z_fRqUuDMxcWn_EWFM0JgBshQ.roa File: J8Z_fRqUuDMxcWn_EWFM0JgBshQ.roa (raw, json) Hash identifier: zSPOfGaXaCsCLPmgbNShWxvnKmSowobJp8cbcQ0l6bI= Subject key identifier: 27:C6:7F:7D:1A:94:B8:33:31:71:69:FF:11:61:4C:D0:98:01:B2:14 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775941E6A7BF18F2D57B3D863B713FDF Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/J8Z_fRqUuDMxcWn_EWFM0JgBshQ.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33925 IP address blocks: 188.240.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:e6:a7:bf:18:f2:d5:7b:3d:86:3b:71:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27c67f7d1a94b833317169ff11614cd09801b214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:3b:c6:b6:a7:6b:7e:6d:11:8c:d2:b3:04: 49:f1:24:e8:5d:0a:6e:50:82:35:5c:da:19:dd:20: 6d:ca:75:21:de:f2:1c:8c:ab:9f:14:f2:63:a3:5c: 1b:13:24:68:49:a1:05:45:15:eb:49:0c:e3:02:f5: 55:3c:da:20:9c:4d:46:fb:ec:07:c9:8a:b8:36:87: 07:ac:7e:00:07:8f:93:36:79:a5:73:d1:ac:e1:7a: ff:4b:3a:f6:bf:4a:01:fe:97:02:dd:f0:96:7c:fc: bd:08:51:59:41:3e:4c:0b:5f:7d:33:76:c3:5d:90: a4:18:de:9f:ea:1a:2c:74:1f:ce:3a:09:88:fc:22: 22:aa:66:a0:ab:18:bb:ea:33:19:22:8b:6c:ed:d0: 63:e3:2f:b8:58:3f:e0:e9:9c:9b:00:78:16:89:56: 03:d4:8b:9b:2f:f2:15:ec:e7:04:3f:9d:d7:80:c4: e0:7f:29:42:db:27:94:2b:76:9b:dd:a9:6f:83:1a: 03:2c:c9:42:7e:0a:55:df:63:26:eb:20:2a:79:74: 5b:8e:fd:4a:41:c7:23:ca:36:fd:1b:f9:f0:b3:65: 82:21:ac:d9:58:bb:c7:6b:64:b6:22:d2:33:0f:de: da:2c:c4:bd:1b:a5:19:53:5f:23:96:8d:6e:02:13: 11:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C6:7F:7D:1A:94:B8:33:31:71:69:FF:11:61:4C:D0:98:01:B2:14 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/J8Z_fRqUuDMxcWn_EWFM0JgBshQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.240.89.0/24 Signature Algorithm: sha256WithRSAEncryption 24:d4:d4:8a:01:c4:d3:7e:b4:ce:98:a9:c7:d2:06:a1:9f:24: 17:6a:8a:12:69:ab:a8:7d:b8:3f:09:95:00:81:91:be:a0:a0: d6:1a:a3:39:bd:50:db:a4:49:35:88:65:5d:98:02:43:18:10: f0:ee:eb:88:0b:02:95:3c:27:ce:1d:33:9e:9e:63:7c:0f:ff: 29:cf:00:8f:c3:47:ae:56:bd:b4:fa:09:1c:70:63:20:9b:ea: 4a:ff:74:e8:dc:ce:87:a0:98:c9:f2:72:38:35:fb:72:15:af: 5a:3b:a4:09:17:0e:b3:cc:a7:c7:89:04:88:0b:c6:65:96:2d: b5:c7:06:3e:b4:a0:c0:58:57:4b:b8:36:54:19:be:c7:82:2c: 0a:f5:b3:2f:e7:0b:38:55:e1:fd:17:ca:34:d7:eb:63:5c:4a: a4:af:ba:75:8c:86:43:8c:17:53:a3:16:fb:23:50:81:d7:0e: 8d:02:64:9d:01:1f:fd:97:95:4a:74:34:ad:9b:ce:0d:64:cb: b9:cd:95:95:d0:43:cc:9f:52:0d:bf:59:a1:29:74:78:86:5d: 4f:95:ae:59:99:d1:d2:0c:83:1e:5e:8a:13:74:ec:88:f5:75: 53:33:ab:d9:37:5b:87:12:41:b1:a1:a6:9f:fd:34:26:9c:a5: a0:95:ab:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUHmp78Y8tV7PYY7cT/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2M2N2Y3ZDFhOTRiODMzMzE3MTY5ZmYxMTYxNGNkMDk4MDFiMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/I7xrana35tEYzSswRJ8SToXQpu UII1XNoZ3SBtynUh3vIcjKufFPJjo1wbEyRoSaEFRRXrSQzjAvVVPNognE1G++wH yYq4NocHrH4AB4+TNnmlc9Gs4Xr/Szr2v0oB/pcC3fCWfPy9CFFZQT5MC199M3bD XZCkGN6f6hosdB/OOgmI/CIiqmagqxi76jMZIots7dBj4y+4WD/g6ZybAHgWiVYD 1IubL/IV7OcEP53XgMTgfylC2yeUK3ab3alvgxoDLMlCfgpV32Mm6yAqeXRbjv1K Qccjyjb9G/nws2WCIazZWLvHa2S2ItIzD97aLMS9G6UZU18jlo1uAhMRnQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCfGf30alLgzMXFp/xFhTNCYAbIUMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0o4Wl9mUnFVdURNeGNXbl9FV0ZNMEpnQnNoUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC88Fkw DQYJKoZIhvcNAQELBQADggEBACTU1IoBxNN+tM6YqcfSBqGfJBdqihJpq6h9uD8J lQCBkb6goNYaozm9UNukSTWIZV2YAkMYEPDu64gLApU8J84dM56eY3wP/ynPAI/D R65WvbT6CRxwYyCb6kr/dOjczoegmMnycjg1+3IVr1o7pAkXDrPMp8eJBIgLxmWW LbXHBj60oMBYV0u4NlQZvseCLAr1sy/nCzhV4f0XyjTX62NcSqSvunWMhkOMF1Oj FvsjUIHXDo0CZJ0BH/2XlUp0NK2bzg1ky7nNlZXQQ8yfUg2/WaEpdHiGXU+VrlmZ 0dIMgx5eihN07Ij1dVMzq9k3W4cSQbGhpp/9NCacpaCVq9E= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:10 2026 by rpki-client