This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J8XCJm04ue43S1o72VZinrmDgC0.roa File: J8XCJm04ue43S1o72VZinrmDgC0.roa (raw, json) Hash identifier: CiB3kqP+IxAIPevRNiA5Ju17+z1RtYkkMlsgfymy2/I= Subject key identifier: 27:C5:C2:26:6D:38:B9:EE:37:4B:5A:3B:D9:56:62:9E:B9:83:80:2D Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Certificate serial: 019AC4A7113160591678255046B080AC0BC8 Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J8XCJm04ue43S1o72VZinrmDgC0.roa Signing time: Thu 27 Nov 2025 09:31:14 +0000 ROA not before: Thu 27 Nov 2025 09:31:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 95.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:a7:11:31:60:59:16:78:25:50:46:b0:80:ac:0b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Validity Not Before: Nov 27 09:31:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27c5c2266d38b9ee374b5a3bd956629eb983802d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:cf:90:2f:45:5d:79:cb:79:c1:68:4d:5c: bf:1d:f6:f1:82:05:e6:bf:cc:dc:ef:b1:83:cd:e3: 66:ef:20:b8:4b:b9:b5:b8:fd:b7:3f:0c:b5:29:a8: 86:ab:5c:61:c8:34:10:18:4c:6d:51:e5:b7:e3:c4: 3f:73:1b:2c:d9:06:22:8b:3e:7b:85:64:22:3a:b0: 28:a3:41:b3:fa:12:4f:1f:e6:fa:ec:b2:8a:dd:9b: 60:bf:c2:76:f9:df:86:5f:3b:be:b4:da:e3:b4:14: 8f:e4:ca:d5:cb:82:c1:cb:8e:a8:8c:55:da:15:e0: 2c:38:f8:e9:0e:89:58:66:a4:74:95:32:02:bb:dd: 16:d9:f5:c1:b6:d6:7b:58:e7:ce:81:ac:2a:d8:18: 05:67:0f:bb:e7:c8:f4:d5:bd:59:65:5d:b3:9f:65: dc:7e:45:78:94:f0:38:bd:3b:b5:54:98:f5:20:e4: 3a:d1:66:21:53:6f:5a:ad:05:4a:bf:f1:5c:33:8b: 0e:3b:33:93:dd:aa:81:40:37:6b:ee:6e:17:6f:7b: 09:0a:bb:f9:c5:8b:17:6f:4c:68:52:10:78:78:cc: 29:7f:75:7b:05:fe:fa:c1:a6:ae:0a:00:62:44:f0: 2c:e0:47:ea:04:85:1d:6b:35:cc:70:0c:ec:5f:c7: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C5:C2:26:6D:38:B9:EE:37:4B:5A:3B:D9:56:62:9E:B9:83:80:2D X509v3 Authority Key Identifier: keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J8XCJm04ue43S1o72VZinrmDgC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.196.0/24 Signature Algorithm: sha256WithRSAEncryption 74:47:ad:5c:13:b3:b6:79:90:52:d8:d6:9f:83:9d:0a:a4:e7: a8:a7:b3:a4:69:a6:61:98:89:1d:b2:4d:97:94:b6:13:fd:7f: fc:d4:21:82:d7:72:28:6a:ca:31:fd:92:2a:a5:ee:6a:d9:12: e9:36:4b:1d:a3:63:21:50:9b:8c:ea:1a:87:8d:91:7f:b5:88: 39:d4:bd:90:bf:f2:bd:98:eb:63:c7:7d:2e:4b:a6:c5:4f:62: 9e:cb:54:fc:fc:21:24:97:a2:54:24:3e:1a:30:32:58:51:2c: 76:15:d4:37:72:44:d2:ae:54:53:b6:49:a5:be:2d:49:71:a7: ec:02:b4:1d:fb:a5:e7:26:50:1d:79:27:7f:af:d9:67:6a:5c: 0a:14:23:d0:34:82:c1:65:58:65:99:fe:8b:4a:4c:61:97:36: e2:21:0e:76:6f:bd:ea:fb:d8:8b:34:2d:35:d7:3b:d7:4d:03: f6:17:f9:5a:cb:87:7a:32:63:1e:7a:d2:28:d8:67:4d:55:32: 37:44:19:84:56:e1:f1:7f:cc:ea:da:28:16:0f:1c:59:da:0b: c7:e5:35:f6:74:41:09:0e:f4:5f:2b:f8:ac:04:d6:4c:6d:37: 3a:51:8c:ae:e4:50:d4:2a:63:43:f4:82:ec:08:b8:cd:4b:0f: c1:66:fa:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEpxExYFkWeCVQRrCArAvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTFhN2I4ZWU4NDQwNTIyYjBiNTUzMGM4NWRjZTFkNzNm OTY3YjcwHhcNMjUxMTI3MDkzMTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2M1YzIyNjZkMzhiOWVlMzc0YjVhM2JkOTU2NjI5ZWI5ODM4MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXHPkC9FXXnLecFoTVy/HfbxggXm v8zc77GDzeNm7yC4S7m1uP23Pwy1KaiGq1xhyDQQGExtUeW348Q/cxss2QYiiz57 hWQiOrAoo0Gz+hJPH+b67LKK3Ztgv8J2+d+GXzu+tNrjtBSP5MrVy4LBy46ojFXa FeAsOPjpDolYZqR0lTICu90W2fXBttZ7WOfOgawq2BgFZw+758j01b1ZZV2zn2Xc fkV4lPA4vTu1VJj1IOQ60WYhU29arQVKv/FcM4sOOzOT3aqBQDdr7m4Xb3sJCrv5 xYsXb0xoUhB4eMwpf3V7Bf76waauCgBiRPAs4EfqBIUdazXMcAzsX8e5XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfFwiZtOLnuN0taO9lWYp65g4AtMB8GA1UdIwQY MBaAFCeRp7juhEBSKwtVMMhdzh1z+We3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUt OWVjZDhjYzUwYTg4LzEvSjhYQ0ptMDR1ZTQzUzFvNzJWWmlucm1EZ0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUtOWVjZDhjYzUwYTg4 LzEvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DEMA0G CSqGSIb3DQEBCwUAA4IBAQB0R61cE7O2eZBS2Nafg50KpOeop7OkaaZhmIkdsk2X lLYT/X/81CGC13Ioasox/ZIqpe5q2RLpNksdo2MhUJuM6hqHjZF/tYg51L2Qv/K9 mOtjx30uS6bFT2Key1T8/CEkl6JUJD4aMDJYUSx2FdQ3ckTSrlRTtkmlvi1Jcafs ArQd+6XnJlAdeSd/r9lnalwKFCPQNILBZVhlmf6LSkxhlzbiIQ52b73q+9iLNC01 1zvXTQP2F/lay4d6MmMeetIo2GdNVTI3RBmEVuHxf8zq2igWDxxZ2gvH5TX2dEEJ DvRfK/isBNZMbTc6UYyu5FDUKmND9ILsCLjNSw/BZvol -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:51 2025 by rpki-client