This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/J4Lf5avBmz21tWITnn1S9vJPttA.roa File: J4Lf5avBmz21tWITnn1S9vJPttA.roa (raw, json) Hash identifier: patPnmmSQAUpJeWtoZy2NYmGtov23YpUvkpjiDCxUNY= Subject key identifier: 27:82:DF:E5:AB:C1:9B:3D:B5:B5:62:13:9E:7D:52:F6:F2:4F:B6:D0 Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Certificate serial: 019B7BA4CBA33F72BCE92FCB1C079AC1DA9A Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/J4Lf5avBmz21tWITnn1S9vJPttA.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31500 IP address blocks: 83.243.69.0/24 maxlen: 24 83.243.69.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cb:a3:3f:72:bc:e9:2f:cb:1c:07:9a:c1:da:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2782dfe5abc19b3db5b562139e7d52f6f24fb6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:b8:5f:65:6e:31:24:81:ae:92:05:3b:10: 52:c0:89:c3:3f:b8:83:21:9d:4d:20:98:fe:56:d9: d3:ac:2a:cf:5d:44:2c:9a:d6:17:85:00:2e:a5:c9: ba:fc:51:1f:26:c4:b9:f2:26:18:2f:53:b5:ac:a8: cd:45:ec:c9:02:83:89:d0:d9:ce:b8:e9:9d:d6:b8: c0:94:b7:fb:ba:70:2f:f4:6b:43:93:5a:8e:ff:e5: 75:b8:9f:99:b1:4c:b1:50:92:4f:59:f8:9a:b3:49: 9d:fa:e6:da:fe:b3:25:b3:62:01:68:9a:68:53:f0: 56:0e:27:72:2d:59:5b:37:f0:78:a1:2a:f6:94:70: c6:4e:2a:4c:58:e2:71:86:2c:8d:05:37:6a:a3:03: a9:de:a8:19:d8:2e:ef:cd:ae:3f:ee:46:4f:83:80: b6:82:df:f2:2d:9c:a5:5f:08:3e:97:ce:1a:7b:1e: 7b:f6:d3:db:29:7c:28:44:eb:9a:bb:7a:06:cd:33: fc:36:f8:b1:de:51:96:56:49:fc:0a:5b:85:24:c7: 59:bb:27:5c:4e:80:00:b3:66:47:eb:bf:ec:ce:1a: 55:01:9d:69:a1:b8:38:d5:da:f0:df:37:7c:82:cf: 4c:91:ab:ff:5a:a0:25:b1:52:d9:2a:d1:cb:b5:d0: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:DF:E5:AB:C1:9B:3D:B5:B5:62:13:9E:7D:52:F6:F2:4F:B6:D0 X509v3 Authority Key Identifier: keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/J4Lf5avBmz21tWITnn1S9vJPttA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.243.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:14:a7:52:d4:79:18:92:01:60:5f:eb:a8:4f:f4:43:a1:1f: 72:84:cb:a8:0e:a3:a7:05:3d:b6:07:4b:2a:41:9b:5e:2f:52: bf:e7:0b:31:1f:ad:4a:44:9d:f3:23:7c:ba:97:a2:80:f2:83: e2:ea:92:7a:ed:2e:89:f4:6b:25:ec:e7:01:a4:23:c2:93:ee: 3f:8b:43:1d:59:57:cd:1e:6e:68:ba:bb:d5:c8:97:8a:28:3c: 9a:a7:12:98:ff:66:24:21:55:d2:dc:b3:c6:9e:f2:75:92:d5: 7a:b8:be:e0:db:60:06:97:a6:b3:3b:10:ca:61:46:b2:f0:cd: 3c:62:22:9a:58:c9:5b:7e:91:b6:3e:d5:c9:87:f2:00:ae:9d: c5:6d:b0:73:9d:af:56:4c:3d:66:90:20:bf:ce:ae:87:13:52: e8:8f:82:42:2f:87:b3:73:9f:da:23:27:d9:c1:0a:7e:6c:20: 11:1b:ee:9a:cd:ed:ca:e5:30:79:bd:8e:c9:aa:e1:72:4c:b8: 2b:57:b9:07:f0:c3:4d:8f:11:25:2c:d6:42:93:7f:5a:75:03: d4:55:5d:f8:0c:33:6b:a1:34:6b:75:e9:7c:be:fa:64:fe:c9: 6c:52:e8:ff:f7:11:b0:68:dc:6e:8a:3b:ef:96:93:b6:30:71: 23:8e:40:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMujP3K86S/LHAeawdqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0 NGNhMWEwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzgyZGZlNWFiYzE5YjNkYjViNTYyMTM5ZTdkNTJmNmYyNGZiNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qu4X2VuMSSBrpIFOxBSwInDP7iD IZ1NIJj+VtnTrCrPXUQsmtYXhQAupcm6/FEfJsS58iYYL1O1rKjNRezJAoOJ0NnO uOmd1rjAlLf7unAv9GtDk1qO/+V1uJ+ZsUyxUJJPWfias0md+uba/rMls2IBaJpo U/BWDidyLVlbN/B4oSr2lHDGTipMWOJxhiyNBTdqowOp3qgZ2C7vza4/7kZPg4C2 gt/yLZylXwg+l84aex579tPbKXwoROuau3oGzTP8Nvix3lGWVkn8CluFJMdZuydc ToAAs2ZH67/szhpVAZ1pobg41drw3zd8gs9Mkav/WqAlsVLZKtHLtdCNqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeC3+WrwZs9tbViE559UvbyT7bQMB8GA1UdIwQY MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt OTYzYjI1ZmEzMDY4LzEvSjRMZjVhdkJtejIxdFdJVG5uMVM5dkpQdHRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4 LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/NFMA0G CSqGSIb3DQEBCwUAA4IBAQBqFKdS1HkYkgFgX+uoT/RDoR9yhMuoDqOnBT22B0sq QZteL1K/5wsxH61KRJ3zI3y6l6KA8oPi6pJ67S6J9Gsl7OcBpCPCk+4/i0MdWVfN Hm5ourvVyJeKKDyapxKY/2YkIVXS3LPGnvJ1ktV6uL7g22AGl6azOxDKYUay8M08 YiKaWMlbfpG2PtXJh/IArp3FbbBzna9WTD1mkCC/zq6HE1Loj4JCL4ezc5/aIyfZ wQp+bCARG+6aze3K5TB5vY7JquFyTLgrV7kH8MNNjxElLNZCk39adQPUVV34DDNr oTRrdel8vvpk/slsUuj/9xGwaNxuijvvlpO2MHEjjkBR -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client