This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JB7ZiriaFnMWoodPhgVw_fe6IfY.roa File: JB7ZiriaFnMWoodPhgVw_fe6IfY.roa (raw, json) Hash identifier: FMxUNsqZOu+8pEVx5FLpUncKW1LL8iubxwZyCFI5PuY= Subject key identifier: 24:1E:D9:8A:B8:9A:16:73:16:A2:87:4F:86:05:70:FD:F7:BA:21:F6 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F1504214BAA9FAC8CEE240F3497BD62 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JB7ZiriaFnMWoodPhgVw_fe6IfY.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204393 IP address blocks: 81.12.78.0/24 maxlen: 24 87.107.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:04:21:4b:aa:9f:ac:8c:ee:24:0f:34:97:bd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=241ed98ab89a167316a2874f860570fdf7ba21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:eb:e9:0f:c4:82:a3:b7:c4:0b:32:57:e1: 62:22:5b:32:41:0e:c4:8d:a0:85:5a:b7:26:7f:3c: 63:9a:26:31:27:66:bd:d1:c9:bd:5a:dd:0d:b7:50: 8e:4c:a1:81:4f:c6:0e:2e:a8:7a:8c:a6:41:fc:e0: 50:ac:c7:d2:e5:4f:46:b4:29:8f:3c:d4:44:c1:67: c5:33:8d:56:9e:1d:58:02:6b:fc:90:f6:b7:d0:e8: 28:40:f8:83:2d:00:bd:a6:f6:30:15:a4:dd:09:02: 08:81:c2:1f:bd:f7:1d:9b:42:52:21:77:01:b5:6f: 0f:e9:a3:1c:29:66:72:cf:3d:3e:03:76:02:68:8e: e9:27:a7:77:a5:d6:00:aa:02:90:11:bf:ca:49:7c: 29:a2:2e:65:54:e0:f6:68:d9:18:05:72:9d:a1:da: f6:9c:9d:d3:66:03:e1:85:f6:15:26:f2:75:98:99: 34:8b:7c:28:97:40:41:f6:2d:8e:70:bd:18:c2:8c: 59:ea:d1:08:e2:78:83:e1:10:3b:cf:56:08:b6:8d: 68:bc:ab:d5:53:c4:e8:b2:f1:a7:36:8f:43:ad:74: 29:b9:04:9e:ef:c1:38:37:64:75:bb:da:43:e6:0a: 19:ea:a2:11:7c:ef:a4:47:f1:92:e4:b6:94:fb:45: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:D9:8A:B8:9A:16:73:16:A2:87:4F:86:05:70:FD:F7:BA:21:F6 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JB7ZiriaFnMWoodPhgVw_fe6IfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.78.0/24 87.107.36.0/24 Signature Algorithm: sha256WithRSAEncryption 34:31:35:a3:8e:7f:2e:1a:01:a7:fa:47:55:a8:6d:6a:20:f7: 25:0f:08:31:16:33:d8:0f:ed:ec:f4:50:44:f0:4f:74:8a:55: a8:09:26:47:09:1f:e5:ed:cc:86:d0:35:2c:c0:2f:61:1c:d7: 46:1c:41:94:8d:76:c0:a9:0f:41:0d:af:c4:ee:c9:24:a7:0b: e8:87:69:8e:c8:26:df:d1:a6:c2:34:82:96:3b:9f:98:2b:ce: 60:8d:4f:d2:6d:4f:00:19:32:0f:26:1e:18:0c:86:58:77:5e: 4c:a4:79:94:aa:7e:6d:fd:5d:15:35:f8:74:25:16:9f:41:c5: e5:a4:f8:6d:9d:96:48:4d:a8:2b:a7:91:9c:02:c4:d8:57:3f: 1f:67:ff:75:a8:e6:18:68:cd:e6:36:51:b4:53:2b:9a:45:3b: 3a:8a:27:65:bd:a6:bf:e4:71:bf:44:ca:9d:5b:38:80:0b:6d: ed:99:fa:82:ab:38:4d:a5:cb:8b:1a:9b:0d:73:18:ac:49:2a: 5f:17:2d:e8:57:ef:77:c8:18:0b:d8:67:8b:d7:58:2b:ef:fc: 1c:9f:6a:98:c7:1e:a5:f7:4b:e8:70:d6:4d:77:f5:3a:2c:c0: 21:42:5a:ee:13:f6:e9:86:a0:d0:67:88:5f:09:60:e7:e9:4b: 29:a8:c9:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQQhS6qfrIzuJA80l71iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDFlZDk4YWI4OWExNjczMTZhMjg3NGY4NjA1NzBmZGY3YmEyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcPr6Q/EgqO3xAsyV+FiIlsyQQ7E jaCFWrcmfzxjmiYxJ2a90cm9Wt0Nt1COTKGBT8YOLqh6jKZB/OBQrMfS5U9GtCmP PNREwWfFM41Wnh1YAmv8kPa30OgoQPiDLQC9pvYwFaTdCQIIgcIfvfcdm0JSIXcB tW8P6aMcKWZyzz0+A3YCaI7pJ6d3pdYAqgKQEb/KSXwpoi5lVOD2aNkYBXKdodr2 nJ3TZgPhhfYVJvJ1mJk0i3wol0BB9i2OcL0YwoxZ6tEI4niD4RA7z1YIto1ovKvV U8TosvGnNo9DrXQpuQSe78E4N2R1u9pD5goZ6qIRfO+kR/GS5LaU+0W6bQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCQe2Yq4mhZzFqKHT4YFcP33uiH2MB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvSkI3WmlyaWFGbk1Xb29kUGhnVndfZmU2SWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQxOAwQA V2skMA0GCSqGSIb3DQEBCwUAA4IBAQA0MTWjjn8uGgGn+kdVqG1qIPclDwgxFjPY D+3s9FBE8E90ilWoCSZHCR/l7cyG0DUswC9hHNdGHEGUjXbAqQ9BDa/E7skkpwvo h2mOyCbf0abCNIKWO5+YK85gjU/SbU8AGTIPJh4YDIZYd15MpHmUqn5t/V0VNfh0 JRafQcXlpPhtnZZITagrp5GcAsTYVz8fZ/91qOYYaM3mNlG0UyuaRTs6iidlvaa/ 5HG/RMqdWziAC23tmfqCqzhNpcuLGpsNcxisSSpfFy3oV+93yBgL2GeL11gr7/wc n2qYxx6l90vocNZNd/U6LMAhQlruE/bphqDQZ4hfCWDn6UspqMmO -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:15 2026 by rpki-client