This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/J_L79ASLCwSAkgJu6pzNpEau-lY.roa File: J_L79ASLCwSAkgJu6pzNpEau-lY.roa (raw, json) Hash identifier: Z7//Xmin3OxWSjpSwFXHuqhq6AcPkFdn6IFPT1Gryg0= Subject key identifier: 27:F2:FB:F4:04:8B:0B:04:80:92:02:6E:EA:9C:CD:A4:46:AE:FA:56 Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Certificate serial: 019B77C7436742DA87E2575FB2B84043600D Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/J_L79ASLCwSAkgJu6pzNpEau-lY.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32338 IP address blocks: 45.84.28.0/23 maxlen: 23 45.84.30.0/24 maxlen: 24 45.84.31.0/24 maxlen: 24 185.73.220.0/22 maxlen: 24 185.149.132.0/23 maxlen: 23 185.149.134.0/23 maxlen: 24 185.149.134.0/24 maxlen: 24 185.213.88.0/22 maxlen: 24 2a05:44c0::/29 maxlen: 32 2a07:68c0::/29 maxlen: 48 2a0b:85c0::/29 maxlen: 32 2a0e:9480::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:43:67:42:da:87:e2:57:5f:b2:b8:40:43:60:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f2fbf4048b0b048092026eea9ccda446aefa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:ba:f5:08:19:48:23:46:dc:6e:66:67:dc: b0:1e:54:fe:02:2e:64:3b:0e:6d:8b:b8:07:e7:2f: 1a:e6:e9:8f:28:a4:4f:10:8f:04:47:44:7f:6d:a1: bb:1a:d2:73:3a:de:46:b4:1e:e6:3b:92:fe:b4:2f: 16:62:95:99:2e:c7:52:1c:d9:8b:68:81:f5:76:e9: b8:b3:24:a7:bd:bf:fc:13:62:21:f2:1e:06:06:63: 15:01:e5:41:59:54:79:96:2f:bb:d6:26:65:2f:05: 60:52:de:85:bf:ba:4a:97:9e:c2:6b:a0:f8:c9:9d: 81:41:d8:b4:68:90:01:44:78:5a:da:38:80:56:b8: ec:68:f5:db:b1:ff:81:6d:c7:11:d6:08:40:d5:1e: 0d:89:3d:0d:45:55:4a:4a:9f:50:35:a7:ce:94:6b: ca:b2:1a:42:f1:fc:e1:69:26:a3:91:6d:73:66:9a: 8e:8a:15:a5:b0:a9:e7:ef:8b:bd:03:54:08:7c:8c: b2:e9:96:89:f2:36:2d:c4:1f:73:d6:96:d8:ef:76: 25:db:9a:18:08:93:29:56:ca:0a:b2:74:3a:7b:e5: d6:4c:6c:20:55:6d:92:15:fd:f8:61:a4:99:63:b1: ad:c1:68:02:d4:7c:b1:07:7d:1d:67:d0:e6:c7:6f: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F2:FB:F4:04:8B:0B:04:80:92:02:6E:EA:9C:CD:A4:46:AE:FA:56 X509v3 Authority Key Identifier: keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/J_L79ASLCwSAkgJu6pzNpEau-lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.28.0/22 185.73.220.0/22 185.149.132.0/22 185.213.88.0/22 IPv6: 2a05:44c0::/29 2a07:68c0::/29 2a0b:85c0::/29 2a0e:9480::/29 Signature Algorithm: sha256WithRSAEncryption 73:98:00:f7:9f:39:44:3e:76:69:a9:3c:12:b6:30:bf:94:50: 06:bc:15:8a:6f:b3:5f:1e:57:90:6c:95:80:7b:8b:5c:ef:62: e3:18:09:58:09:43:9c:98:2c:cb:20:b7:e2:ab:ab:fc:77:0e: 83:4e:17:51:af:30:77:0e:b7:7c:6e:a1:d8:99:8f:fc:fb:82: 0c:d8:7b:80:a9:c6:92:b5:77:8e:08:97:05:cc:90:26:91:e9: 8b:00:ce:bc:75:f9:cc:c4:4a:93:d7:25:cb:f3:f9:e4:40:ca: 1f:07:67:de:15:2a:6f:e9:bc:a1:9c:0f:f8:01:41:bd:ae:4a: 1c:c0:f4:f9:f3:63:2b:00:25:76:8d:d6:ea:fd:f3:e9:12:bd: e3:ff:7a:20:00:02:d8:b1:be:b5:e6:5d:1c:15:b2:44:ad:2c: f5:a7:f4:0d:25:8c:43:32:63:d8:af:6a:f2:61:6e:5e:8c:b5: 6d:12:9a:20:52:e5:24:0b:af:45:af:90:7c:e3:57:2c:99:8d: 12:76:96:34:b1:f4:62:39:42:43:57:90:10:a4:4a:fc:e8:90: 21:c5:79:52:77:bc:75:30:51:13:83:4d:79:ee:82:21:0b:6a: d8:c7:73:2c:5b:af:4d:c1:ca:59:0d:52:54:20:2b:18:e5:eb: 86:a9:41:fd -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt3x0NnQtqH4ldfsrhAQ2ANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk NTA1YmIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2YyZmJmNDA0OGIwYjA0ODA5MjAyNmVlYTljY2RhNDQ2YWVmYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2u69QgZSCNG3G5mZ9ywHlT+Ai5k Ow5ti7gH5y8a5umPKKRPEI8ER0R/baG7GtJzOt5GtB7mO5L+tC8WYpWZLsdSHNmL aIH1dum4sySnvb/8E2Ih8h4GBmMVAeVBWVR5li+71iZlLwVgUt6Fv7pKl57Ca6D4 yZ2BQdi0aJABRHha2jiAVrjsaPXbsf+BbccR1ghA1R4NiT0NRVVKSp9QNafOlGvK shpC8fzhaSajkW1zZpqOihWlsKnn74u9A1QIfIyy6ZaJ8jYtxB9z1pbY73Yl25oY CJMpVsoKsnQ6e+XWTGwgVW2SFf34YaSZY7GtwWgC1HyxB30dZ9Dmx29srwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCfy+/QEiwsEgJICbuqczaRGrvpWMB8GA1UdIwQY MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt Y2U1MDA4MjdmZjdmLzEvSl9MNzlBU0xDd1NBa2dKdTZwek5wRWF1LWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAeBAIAATAYAwQCLVQcAwQC uUncAwQCuZWEAwQCudVYMCIEAgACMBwDBQMqBUTAAwUDKgdowAMFAyoLhcADBQMq DpSAMA0GCSqGSIb3DQEBCwUAA4IBAQBzmAD3nzlEPnZpqTwStjC/lFAGvBWKb7Nf HleQbJWAe4tc72LjGAlYCUOcmCzLILfiq6v8dw6DThdRrzB3Drd8bqHYmY/8+4IM 2HuAqcaStXeOCJcFzJAmkemLAM68dfnMxEqT1yXL8/nkQMofB2feFSpv6byhnA/4 AUG9rkocwPT582MrACV2jdbq/fPpEr3j/3ogAALYsb615l0cFbJErSz1p/QNJYxD MmPYr2ryYW5ejLVtEpogUuUkC69Fr5B841csmY0SdpY0sfRiOUJDV5AQpEr86JAh xXlSd7x1MFETg0157oIhC2rYx3MsW69NwcpZDVJUICsY5euGqUH9 -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:08 2026 by rpki-client