This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/J78VM0qajB7rh9yu3sFqYPoFQ5E.roa File: J78VM0qajB7rh9yu3sFqYPoFQ5E.roa (raw, json) Hash identifier: +P584eQDqt5VMIbzVnH+2JMF7g7sBvRvoJsnsuzsctc= Subject key identifier: 27:BF:15:33:4A:9A:8C:1E:EB:87:DC:AE:DE:C1:6A:60:FA:05:43:91 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 019B7F83FBE92D5F7F84B8435CFA2C459388 Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/J78VM0qajB7rh9yu3sFqYPoFQ5E.roa Signing time: Fri 02 Jan 2026 16:21:54 +0000 ROA not before: Fri 02 Jan 2026 16:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 77.83.152.0/24 maxlen: 24 77.83.153.0/24 maxlen: 24 77.83.154.0/24 maxlen: 24 77.83.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fb:e9:2d:5f:7f:84:b8:43:5c:fa:2c:45:93:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jan 2 16:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27bf15334a9a8c1eeb87dcaedec16a60fa054391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:76:72:5b:02:57:f2:33:50:94:33:8a:1c: af:c0:8d:44:45:47:2d:fa:c7:4b:aa:12:12:41:88: 4c:f7:79:c0:89:79:7c:6e:fe:a8:38:07:9a:a5:a0: 24:ca:a1:78:b4:f0:a5:1d:bc:da:b1:a9:a8:5d:e6: 59:84:fc:ae:b9:f2:e5:6f:ec:74:da:0f:32:45:c0: aa:ae:93:2e:dd:6b:e3:fb:18:11:3d:ac:e8:f4:99: d8:e0:e6:50:59:1b:fe:34:d4:bc:16:ba:6e:3a:c5: 00:11:38:e9:1b:19:5c:0a:56:37:43:a3:55:87:8d: b8:90:5c:00:f3:75:0a:fe:61:5d:63:24:6d:c0:ed: a0:e6:39:97:de:b2:b6:a8:45:90:64:0d:e3:ed:77: 4b:b7:13:5c:a6:d7:61:bd:57:b8:68:55:d6:97:67: 1a:65:6c:38:7c:f1:9a:74:53:d4:5e:07:7e:1b:d3: f0:89:a8:6b:e2:cd:b6:5b:3a:34:96:a9:9d:f8:c8: 7d:38:0f:7f:28:30:8a:01:a4:4f:de:ff:67:95:06: ba:17:80:86:4b:68:55:a8:0a:0c:cf:28:58:49:d1: a9:77:e7:96:ac:20:c3:23:5c:96:bd:d7:66:f2:89: b9:5b:17:f4:6e:1f:c3:cd:62:c7:5c:01:e6:84:2f: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BF:15:33:4A:9A:8C:1E:EB:87:DC:AE:DE:C1:6A:60:FA:05:43:91 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/J78VM0qajB7rh9yu3sFqYPoFQ5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.152.0/22 Signature Algorithm: sha256WithRSAEncryption 09:6c:fa:4d:60:8a:6f:64:8a:19:0c:49:9b:22:4f:0c:ff:31: 83:bb:3c:97:28:3a:0a:91:5a:9d:f0:ff:82:a6:83:53:64:02: 33:85:33:b5:a0:6a:66:4d:08:10:5d:d2:cb:04:15:ec:dc:d0: 56:55:19:a5:2c:0f:c2:a6:f9:fe:67:1c:60:8c:a0:71:10:38: 8e:e5:8e:d1:55:72:d1:41:92:a2:79:50:6b:59:24:b0:ee:16: cb:5a:ba:c1:35:52:3d:c7:b1:12:78:6e:93:42:9c:6c:34:62: 84:37:79:7c:c1:f2:9b:94:4b:22:89:9a:db:e2:eb:11:77:2b: 25:f3:55:07:af:c9:79:78:cf:e7:33:3d:b3:a2:d7:c3:87:28: cb:18:7f:d3:27:64:ef:18:f7:ca:a5:9f:8e:c1:a5:0f:df:54: 39:9a:8d:2d:e9:dd:cc:52:f7:37:b0:a8:0b:1c:f6:92:3e:30: 61:53:fa:ab:9b:dd:52:a6:d9:2b:08:ce:2a:9f:65:d0:ae:5b: 66:89:ba:83:9b:99:73:34:c8:e9:16:46:bb:c4:e0:30:23:ee: c0:76:6e:29:fe:3b:24:f9:1f:33:df:8b:73:6d:c0:57:53:87: c5:93:71:bb:75:65:48:f5:c6:de:70:fb:1d:22:20:52:c5:27: 27:8d:5c:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g/vpLV9/hLhDXPosRZOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjYwMTAyMTYyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2JmMTUzMzRhOWE4YzFlZWI4N2RjYWVkZWMxNmE2MGZhMDU0MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLh2clsCV/IzUJQzihyvwI1ERUct +sdLqhISQYhM93nAiXl8bv6oOAeapaAkyqF4tPClHbzasamoXeZZhPyuufLlb+x0 2g8yRcCqrpMu3Wvj+xgRPazo9JnY4OZQWRv+NNS8FrpuOsUAETjpGxlcClY3Q6NV h424kFwA83UK/mFdYyRtwO2g5jmX3rK2qEWQZA3j7XdLtxNcptdhvVe4aFXWl2ca ZWw4fPGadFPUXgd+G9Pwiahr4s22Wzo0lqmd+Mh9OA9/KDCKAaRP3v9nlQa6F4CG S2hVqAoMzyhYSdGpd+eWrCDDI1yWvddm8om5Wxf0bh/DzWLHXAHmhC+o9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCe/FTNKmowe64fcrt7BamD6BUORMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvSjc4Vk0wcWFqQjdyaDl5dTNzRnFZUG9GUTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVOYMA0G CSqGSIb3DQEBCwUAA4IBAQAJbPpNYIpvZIoZDEmbIk8M/zGDuzyXKDoKkVqd8P+C poNTZAIzhTO1oGpmTQgQXdLLBBXs3NBWVRmlLA/Cpvn+ZxxgjKBxEDiO5Y7RVXLR QZKieVBrWSSw7hbLWrrBNVI9x7ESeG6TQpxsNGKEN3l8wfKblEsiiZrb4usRdysl 81UHr8l5eM/nMz2zotfDhyjLGH/TJ2TvGPfKpZ+OwaUP31Q5mo0t6d3MUvc3sKgL HPaSPjBhU/qrm91SptkrCM4qn2XQrltmibqDm5lzNMjpFka7xOAwI+7Adm4p/jsk +R8z34tzbcBXU4fFk3G7dWVI9cbecPsdIiBSxScnjVwH -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:48 2026 by rpki-client