This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jbj7ynIvhap5I_QFhGzfNQth1KM.roa File: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (raw, json) Hash identifier: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU= Subject key identifier: 25:B8:FB:CA:72:2F:85:AA:79:23:F4:05:84:6C:DF:35:0B:61:D4:A3 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7A48679B226D7B20B41510CC4F07 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jbj7ynIvhap5I_QFhGzfNQth1KM.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201426 IP address blocks: 195.184.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:48:67:9b:22:6d:7b:20:b4:15:10:cc:4f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25b8fbca722f85aa7923f405846cdf350b61d4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:98:78:2f:6e:4c:36:ce:fd:67:6b:f7:eb: ec:bb:f9:93:a6:09:31:93:e9:50:80:32:f1:f3:b7: 69:5f:45:5c:d3:14:1f:86:f7:fe:1e:a6:15:ec:59: 4a:c9:70:d3:a3:22:57:ed:42:4c:ab:a3:d2:49:b9: 82:3c:10:25:87:23:d3:bd:79:8f:ac:23:1e:c0:92: a5:aa:1c:75:79:fd:28:ac:df:a6:aa:c4:54:0e:6a: 4f:d2:ae:e8:24:ef:35:41:2e:c5:cc:fd:45:10:7c: 10:23:24:5a:7c:63:5a:88:40:3c:72:fa:a8:e4:90: 03:aa:dc:b7:7b:b8:18:00:7e:ce:ed:2a:7a:ea:5e: 12:17:8f:e6:c6:74:63:79:83:53:28:61:68:f8:ed: 46:63:7f:aa:82:82:37:df:f2:11:7e:37:a8:8e:ad: d6:1d:b8:64:a2:5c:91:7e:fa:aa:1e:57:a4:ef:52: 8a:10:cd:79:90:a6:5f:28:71:0a:e8:24:a7:b6:74: 9e:91:7d:d1:9b:cf:59:86:a4:5a:fc:0d:65:ee:db: 9f:c3:8a:d6:ee:82:9f:79:1a:f1:e1:4a:db:35:9e: 1b:5c:cf:cd:c6:e2:9e:a9:8b:a7:f8:76:b3:2d:54: ce:a6:eb:84:19:be:51:b5:48:2d:fe:e7:e4:a6:27: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B8:FB:CA:72:2F:85:AA:79:23:F4:05:84:6C:DF:35:0B:61:D4:A3 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jbj7ynIvhap5I_QFhGzfNQth1KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.73.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3a:57:ce:28:ca:10:39:53:6e:4a:7f:9a:76:ed:7f:3d:77: fe:82:a5:22:83:14:3c:db:c8:31:9c:48:0f:9f:6b:17:e3:ed: 04:62:a0:01:af:fa:86:93:eb:17:c5:7c:03:45:14:30:90:40: cd:0a:64:69:31:81:5b:3e:09:88:03:c9:ef:2a:a6:90:a1:0f: 23:dd:45:b7:1e:33:44:53:c4:3b:d4:bd:15:79:0d:24:cf:44: 85:76:98:b5:76:85:da:da:fa:2f:e2:12:25:cd:ee:8a:d8:35: 5d:c4:a0:bd:c6:4a:99:1f:23:ed:63:e3:2e:26:6e:cd:ea:1b: 72:cf:8c:72:41:e5:3c:01:a2:f0:05:7b:d6:1d:63:a2:ce:9b: a9:36:52:91:db:67:a1:fb:9f:37:77:53:80:d6:ed:58:71:8a: f1:0d:3b:2a:ee:12:8f:1b:a0:b0:47:ba:83:5f:a1:a7:f1:cb: 19:4f:30:a6:e5:08:e0:6c:fe:d3:d6:76:36:9d:87:f8:9c:07: 05:10:8c:9a:be:71:89:07:62:91:ba:f2:25:82:d7:3c:32:bf: 38:e5:6c:fc:57:fb:b5:92:17:69:91:ee:f7:cf:40:8e:05:9f: 6d:84:1e:9b:b4:12:ee:f6:52:70:19:b6:f7:58:7e:87:f7:08: 4a:c9:05:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3pIZ5sibXsgtBUQzE8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWI4ZmJjYTcyMmY4NWFhNzkyM2Y0MDU4NDZjZGYzNTBiNjFkNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1qYeC9uTDbO/Wdr9+vsu/mTpgkx k+lQgDLx87dpX0Vc0xQfhvf+HqYV7FlKyXDToyJX7UJMq6PSSbmCPBAlhyPTvXmP rCMewJKlqhx1ef0orN+mqsRUDmpP0q7oJO81QS7FzP1FEHwQIyRafGNaiEA8cvqo 5JADqty3e7gYAH7O7Sp66l4SF4/mxnRjeYNTKGFo+O1GY3+qgoI33/IRfjeojq3W HbhkolyRfvqqHlek71KKEM15kKZfKHEK6CSntnSekX3Rm89ZhqRa/A1l7tufw4rW 7oKfeRrx4UrbNZ4bXM/NxuKeqYun+HazLVTOpuuEGb5RtUgt/ufkpieYdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCW4+8pyL4WqeSP0BYRs3zULYdSjMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvSmJqN3luSXZoYXA1SV9RRmhHemZOUXRoMUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7hJMA0G CSqGSIb3DQEBCwUAA4IBAQAzOlfOKMoQOVNuSn+adu1/PXf+gqUigxQ828gxnEgP n2sX4+0EYqABr/qGk+sXxXwDRRQwkEDNCmRpMYFbPgmIA8nvKqaQoQ8j3UW3HjNE U8Q71L0VeQ0kz0SFdpi1doXa2vov4hIlze6K2DVdxKC9xkqZHyPtY+MuJm7N6hty z4xyQeU8AaLwBXvWHWOizpupNlKR22eh+583d1OA1u1YcYrxDTsq7hKPG6CwR7qD X6Gn8csZTzCm5QjgbP7T1nY2nYf4nAcFEIyavnGJB2KRuvIlgtc8Mr845Wz8V/u1 khdpke73z0COBZ9thB6btBLu9lJwGbb3WH6H9whKyQXz -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:09 2026 by rpki-client