This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-e2S3Co34V6GqxBwpLas1KlzPc.roa File: J-e2S3Co34V6GqxBwpLas1KlzPc.roa (raw, json) Hash identifier: bHmgsb6+ck75z0l3IkcQpbr1i2Fj+RaHGqcd5esVIMY= Subject key identifier: 27:E7:B6:4B:70:A8:DF:85:7A:1A:AC:41:C2:92:DA:B3:52:A5:CC:F7 Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B7BA31B9C118B5958ABA17BEF27AE8E82 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-e2S3Co34V6GqxBwpLas1KlzPc.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57391 IP address blocks: 94.139.176.0/20 maxlen: 20 94.139.191.0/24 maxlen: 24 109.162.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1b:9c:11:8b:59:58:ab:a1:7b:ef:27:ae:8e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27e7b64b70a8df857a1aac41c292dab352a5ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:2d:67:f4:2c:67:86:7e:18:b6:be:74:bc: 30:e5:d1:26:a5:7d:fe:29:d4:3d:32:58:49:09:cb: 75:55:ad:94:ea:0d:eb:c7:0c:49:99:28:5a:02:a7: a9:46:8f:74:57:ed:b8:c6:f8:58:3a:6c:a4:ea:39: eb:36:3d:9e:33:58:e5:82:06:0e:c0:d2:d7:77:5f: 6d:40:61:c2:9e:d3:18:a9:5e:23:ef:03:71:cb:c2: 7d:f3:4d:64:73:21:eb:d7:76:4c:bf:22:47:b9:67: 6c:7e:35:ba:7e:8a:7a:83:cf:ac:a3:29:5e:95:a6: 76:0a:06:09:82:1d:cd:03:fd:11:e0:b5:b3:2c:0a: 6f:06:e7:3a:ca:9e:66:aa:73:b4:7e:e0:36:8d:84: 0d:da:6e:69:46:1f:61:41:ec:af:17:3d:de:5b:48: bb:4f:4d:40:e9:07:ab:bf:6b:23:23:09:f0:83:3f: 7a:68:5b:aa:c7:90:6b:89:6e:c1:81:6f:f7:87:3a: 42:c0:3c:e8:93:35:9a:cd:67:07:d2:5f:6b:93:5e: 8d:14:f7:3a:01:a3:48:81:b2:3c:db:4d:11:0b:8c: 38:cf:5c:a6:7b:54:bb:a5:4b:b1:ad:b8:6b:bf:5c: 8f:21:f5:cd:50:63:f9:64:c8:c3:e3:81:da:a3:db: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E7:B6:4B:70:A8:DF:85:7A:1A:AC:41:C2:92:DA:B3:52:A5:CC:F7 X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-e2S3Co34V6GqxBwpLas1KlzPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.139.176.0/20 109.162.254.0/23 Signature Algorithm: sha256WithRSAEncryption 25:29:8d:ea:56:6f:c9:08:a7:10:0d:08:d0:79:d1:2b:8b:8f: dd:e1:8c:4a:1c:15:17:8d:16:45:df:ef:4f:82:eb:53:0b:73: a8:24:c1:69:ba:98:93:5c:8d:41:97:c3:21:ed:19:86:5b:8e: ad:08:c8:69:a1:30:5a:7c:17:7e:a1:22:21:a0:8f:97:76:ad: 81:79:5e:c6:2d:7a:cc:b6:dc:5a:09:97:f3:40:12:ed:0f:d2: ec:7d:ae:8f:42:12:67:6d:52:2d:ad:a5:6b:2b:55:2d:74:7a: 2a:56:c5:b5:c3:d5:97:02:2c:85:95:54:00:28:dc:78:f0:26: ee:ad:5b:46:9d:b3:95:87:cc:94:8c:f9:3d:c6:13:9f:99:3c: c4:67:6e:cb:e8:35:31:ae:75:61:4a:88:2d:35:3d:4c:de:33: c6:33:2f:1f:a2:91:b3:42:9e:fd:83:3c:25:f7:08:66:8c:38: fb:91:33:65:3e:5b:42:e9:7c:45:c8:80:ab:b9:a7:cd:05:75: 44:1a:74:be:7e:88:0a:b2:d6:98:ab:83:5b:6f:93:c7:96:e0: 6f:a7:7e:e4:3b:34:69:7d:36:6b:85:01:d0:45:41:7e:e3:10: 6f:4f:28:3f:4e:11:b8:ce:74:02:45:ba:8a:d7:1b:53:86:2a: 70:8f:36:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oxucEYtZWKuhe+8nro6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2U3YjY0YjcwYThkZjg1N2ExYWFjNDFjMjkyZGFiMzUyYTVjY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP8tZ/QsZ4Z+GLa+dLww5dEmpX3+ KdQ9MlhJCct1Va2U6g3rxwxJmShaAqepRo90V+24xvhYOmyk6jnrNj2eM1jlggYO wNLXd19tQGHCntMYqV4j7wNxy8J9801kcyHr13ZMvyJHuWdsfjW6fop6g8+soyle laZ2CgYJgh3NA/0R4LWzLApvBuc6yp5mqnO0fuA2jYQN2m5pRh9hQeyvFz3eW0i7 T01A6Qerv2sjIwnwgz96aFuqx5BriW7BgW/3hzpCwDzokzWazWcH0l9rk16NFPc6 AaNIgbI8200RC4w4z1yme1S7pUuxrbhrv1yPIfXNUGP5ZMjD44Hao9vP4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCfntktwqN+FehqsQcKS2rNSpcz3MB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvSi1lMlMzQ28zNFY2R3F4QndwTGFzMUtselBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXouwAwQB baL+MA0GCSqGSIb3DQEBCwUAA4IBAQAlKY3qVm/JCKcQDQjQedEri4/d4YxKHBUX jRZF3+9PgutTC3OoJMFpupiTXI1Bl8Mh7RmGW46tCMhpoTBafBd+oSIhoI+Xdq2B eV7GLXrMttxaCZfzQBLtD9Lsfa6PQhJnbVItraVrK1UtdHoqVsW1w9WXAiyFlVQA KNx48CburVtGnbOVh8yUjPk9xhOfmTzEZ27L6DUxrnVhSogtNT1M3jPGMy8fopGz Qp79gzwl9whmjDj7kTNlPltC6XxFyICruafNBXVEGnS+fogKstaYq4Nbb5PHluBv p37kOzRpfTZrhQHQRUF+4xBvTyg/ThG4znQCRbqK1xtThipwjzae -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client