This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/J_JGBAO8KIt2LuR7chBCFKy5euA.roa File: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (raw, json) Hash identifier: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs= Subject key identifier: 27:F2:46:04:03:BC:28:8B:76:2E:E4:7B:72:10:42:14:AC:B9:7A:E0 Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019B7911462A39E1E99D83D3A207456A1726 Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/J_JGBAO8KIt2LuR7chBCFKy5euA.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39479 IP address blocks: 185.91.160.0/22 maxlen: 24 2a05:eb80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:2a:39:e1:e9:9d:83:d3:a2:07:45:6a:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f2460403bc288b762ee47b72104214acb97ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:f9:ed:b1:dc:3f:a7:bc:53:a5:71:ac:56: 28:d2:26:63:c3:0b:1f:ae:3d:41:b5:34:2b:5f:f7: 36:0d:3a:03:39:b4:c6:d5:ee:c2:e1:38:f3:bd:bd: 65:ef:e3:59:89:34:b5:b7:07:a9:0b:ac:d2:82:fe: e6:17:ce:f4:84:8c:62:2f:4d:bf:8e:ef:13:bd:31: 2a:ee:b7:5b:32:10:06:b8:0c:6a:49:45:f3:87:3d: 47:ae:f1:37:33:8c:e5:05:3b:ca:59:ba:40:6e:72: f0:86:9d:af:ac:f8:ba:08:f3:f9:55:18:39:42:b8: 8c:c0:e0:f0:e4:d6:b6:49:3a:df:3f:45:a3:45:95: 5c:f4:51:32:fa:ab:df:48:50:b3:34:d0:de:08:95: 07:cf:61:0c:4d:4b:39:ce:99:ea:8a:98:1d:4a:5d: 9a:ff:b4:ed:43:fc:db:32:e1:db:ff:9c:31:cd:9c: d9:da:49:72:ad:e7:92:e4:97:da:97:0e:e6:9f:91: 4d:4c:0e:34:c7:e7:73:16:28:12:a3:90:6f:ed:6e: 3f:84:06:d9:81:aa:70:d0:a5:6f:43:86:65:b9:40: 21:79:77:56:61:16:5f:b2:e4:4d:19:87:ca:88:30: d2:e6:28:3f:37:ff:7b:e2:0e:bc:26:af:1b:79:93: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F2:46:04:03:BC:28:8B:76:2E:E4:7B:72:10:42:14:AC:B9:7A:E0 X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/J_JGBAO8KIt2LuR7chBCFKy5euA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.160.0/22 IPv6: 2a05:eb80::/29 Signature Algorithm: sha256WithRSAEncryption 8b:3e:ea:e9:ac:61:4d:63:2f:13:9a:69:8c:e9:d6:7b:4d:59: 66:4b:a3:e4:c4:f2:95:c7:57:bb:23:63:b6:31:1f:5f:c5:79: 6e:91:49:26:06:2a:39:b4:a7:08:30:e2:b5:7c:2c:d4:2d:9d: 04:ea:89:10:35:4c:66:cc:0e:da:e1:24:c1:ce:07:a4:b9:cd: 6d:93:4e:1b:fb:32:04:d0:b6:e0:1c:ec:10:22:e3:f8:f9:c0: 58:94:be:53:f0:4b:15:79:c8:1a:98:77:0e:81:ba:8e:81:c2: 57:af:12:b1:8c:60:6d:a8:d9:81:e9:7d:71:11:8a:3c:d4:d6: f8:e0:2d:6e:7c:97:22:8a:8d:c2:72:b2:2b:87:86:80:88:8a: 98:28:c1:c8:da:05:02:70:3a:b3:ab:81:32:6f:3c:72:8c:e3: b8:fc:4d:74:41:cf:2a:37:33:12:2e:23:40:29:f6:c6:64:b1: ff:0e:f1:3e:e8:94:7a:f6:2c:a7:be:e7:ca:79:5a:f8:6c:df: d1:e3:89:a8:96:6b:e0:31:d0:6c:dd:66:02:7a:c5:54:ce:74: c6:4f:40:9c:7c:4b:01:99:13:ac:69:35:7c:f9:63:cd:ba:06: be:2c:ad:4a:20:74:82:2b:89:b4:f1:46:c8:a7:e9:3c:7a:88: 4c:1f:59:ff -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EUYqOeHpnYPTogdFahcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2YyNDYwNDAzYmMyODhiNzYyZWU0N2I3MjEwNDIxNGFjYjk3YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGr57bHcP6e8U6VxrFYo0iZjwwsf rj1BtTQrX/c2DToDObTG1e7C4Tjzvb1l7+NZiTS1twepC6zSgv7mF870hIxiL02/ ju8TvTEq7rdbMhAGuAxqSUXzhz1HrvE3M4zlBTvKWbpAbnLwhp2vrPi6CPP5VRg5 QriMwODw5Na2STrfP0WjRZVc9FEy+qvfSFCzNNDeCJUHz2EMTUs5zpnqipgdSl2a /7TtQ/zbMuHb/5wxzZzZ2klyreeS5Jfalw7mn5FNTA40x+dzFigSo5Bv7W4/hAbZ gapw0KVvQ4ZluUAheXdWYRZfsuRNGYfKiDDS5ig/N/974g68Jq8beZO7DwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCfyRgQDvCiLdi7ke3IQQhSsuXrgMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvSl9KR0JBTzhLSXQyTHVSN2NoQkNGS3k1ZXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVugMA0E AgACMAcDBQMqBeuAMA0GCSqGSIb3DQEBCwUAA4IBAQCLPurprGFNYy8TmmmM6dZ7 TVlmS6PkxPKVx1e7I2O2MR9fxXlukUkmBio5tKcIMOK1fCzULZ0E6okQNUxmzA7a 4STBzgekuc1tk04b+zIE0LbgHOwQIuP4+cBYlL5T8EsVecgamHcOgbqOgcJXrxKx jGBtqNmB6X1xEYo81Nb44C1ufJciio3CcrIrh4aAiIqYKMHI2gUCcDqzq4Eybzxy jOO4/E10Qc8qNzMSLiNAKfbGZLH/DvE+6JR69iynvufKeVr4bN/R44molmvgMdBs 3WYCesVUznTGT0CcfEsBmROsaTV8+WPNuga+LK1KIHSCK4m08UbIp+k8eohMH1n/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:56 2026 by rpki-client