This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa File: J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa (raw, json) Hash identifier: Bfl8ObvmfqtyBp5KbMoNS07tnVUojBcqdmR2bkync4I= Subject key identifier: 27:BC:03:B2:4E:6C:F9:0F:F2:C8:59:3A:FA:36:5E:66:54:B9:69:A1 Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8 Certificate serial: 019B7C7F5B871F8FD0133BBD742AA14110B1 Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 147.78.229.0/24 maxlen: 32 147.78.230.0/24 maxlen: 32 147.78.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5b:87:1f:8f:d0:13:3b:bd:74:2a:a1:41:10:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8 Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27bc03b24e6cf90ff2c8593afa365e6654b969a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:24:1d:e3:e5:73:c4:69:64:b5:7c:50:9d: 06:85:a5:c8:39:0f:54:15:bd:96:5d:35:32:24:99: 00:9f:d5:99:05:98:84:3f:cf:51:aa:22:29:c8:9f: c9:d3:31:a0:c4:bf:9d:24:aa:c2:06:90:ad:29:c5: b7:c8:5f:1c:8e:6c:ba:72:a2:5a:cf:74:08:c8:23: 12:04:0f:c5:d6:bd:cb:83:d4:1d:cd:4e:fc:dd:fe: 8a:94:85:fc:b6:bc:50:b7:c5:2e:12:99:ee:f7:34: 25:09:31:0c:3f:9e:ef:7a:66:39:e4:f5:c4:1b:a3: 0a:ce:50:9c:84:e0:ee:ed:3e:2c:0f:0c:2c:0e:6b: 25:a4:7a:e5:7c:4d:7b:77:53:0c:c7:f2:5c:07:67: b8:ff:52:be:79:a4:7e:c6:65:4a:58:8d:0a:a9:11: a3:30:3c:45:9b:1f:0a:ad:87:03:76:75:c9:2c:ba: f4:1d:7b:49:c6:78:c8:73:19:22:92:ca:f2:4a:0c: c7:ea:d4:42:3e:93:36:c1:7d:f4:11:23:40:fb:12: 7f:0d:86:26:1f:6e:69:ad:52:82:3c:13:6a:f9:a2: 28:df:55:f1:be:21:35:3c:b2:2c:f6:e4:44:1e:82: 59:74:d8:63:94:74:e0:02:01:c5:d0:4e:e7:21:df: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:03:B2:4E:6C:F9:0F:F2:C8:59:3A:FA:36:5E:66:54:B9:69:A1 X509v3 Authority Key Identifier: keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.229.0-147.78.231.255 Signature Algorithm: sha256WithRSAEncryption 52:07:15:25:1a:16:52:20:29:24:f1:6d:cd:f1:ab:0c:ad:55: ac:07:d7:9f:db:15:05:45:a0:df:d7:a4:13:1b:7f:6a:4c:ab: 6e:cf:c8:03:46:91:43:af:6c:1f:03:ec:6f:91:86:b1:e8:7b: 52:df:d9:97:c7:b6:19:05:e2:1b:56:d8:33:d1:0d:0d:72:f5: 56:ac:21:ca:b3:7d:51:25:3b:e7:9c:66:0f:c3:a8:ec:e6:15: 04:18:50:e8:5a:f2:f0:5d:3d:8b:df:8b:f1:22:24:f2:2b:0a: d1:28:16:f7:82:04:cb:de:d2:ce:0f:f0:cf:34:ac:fb:04:3e: 6e:78:dc:21:c0:3e:1d:95:b5:dc:60:98:a7:85:48:83:54:78: e1:f3:10:1f:43:21:d0:d2:8b:26:1a:94:8f:d7:00:20:7a:dc: 2f:b4:0d:4e:11:ea:ff:ab:41:8c:07:fd:d5:a8:6b:ce:db:67: d0:57:ad:2e:05:e8:ca:17:74:35:5c:f3:0f:c3:13:0b:7b:d0: 91:12:6e:b4:a0:5e:36:67:dc:21:14:8d:67:48:16:5a:2f:34: fb:26:07:2b:03:28:c3:f9:30:62:e8:25:7d:d1:3a:da:e1:39: 3d:9d:18:2c:be:2d:5f:ab:c1:c4:96:e2:03:12:ea:e6:19:14: 28:96:b3:ac -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8f1uHH4/QEzu9dCqhQRCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjI0ZDg5NWJmOWMwYTVmZDAwMGE0NWEzNDc1MTBiMmEw ODdmYjgwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2JjMDNiMjRlNmNmOTBmZjJjODU5M2FmYTM2NWU2NjU0Yjk2OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBQkHePlc8RpZLV8UJ0GhaXIOQ9U Fb2WXTUyJJkAn9WZBZiEP89RqiIpyJ/J0zGgxL+dJKrCBpCtKcW3yF8cjmy6cqJa z3QIyCMSBA/F1r3Lg9QdzU783f6KlIX8trxQt8UuEpnu9zQlCTEMP57vemY55PXE G6MKzlCchODu7T4sDwwsDmslpHrlfE17d1MMx/JcB2e4/1K+eaR+xmVKWI0KqRGj MDxFmx8KrYcDdnXJLLr0HXtJxnjIcxkiksrySgzH6tRCPpM2wX30ESNA+xJ/DYYm H25prVKCPBNq+aIo31XxviE1PLIs9uREHoJZdNhjlHTgAgHF0E7nId82hQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCe8A7JObPkP8shZOvo2XmZUuWmhMB8GA1UdIwQY MBaAFFSyTYlb+cCl/QAKRaNHUQsqCH+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAt ZmNiOWJkMDViMWFiLzEvSjd3RHNrNXMtUV95eUZrNi1qWmVabFM1YWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAtZmNiOWJkMDViMWFi LzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACTTuUD BAOTTuAwDQYJKoZIhvcNAQELBQADggEBAFIHFSUaFlIgKSTxbc3xqwytVawH15/b FQVFoN/XpBMbf2pMq27PyANGkUOvbB8D7G+RhrHoe1Lf2ZfHthkF4htW2DPRDQ1y 9VasIcqzfVElO+ecZg/DqOzmFQQYUOha8vBdPYvfi/EiJPIrCtEoFveCBMve0s4P 8M80rPsEPm543CHAPh2VtdxgmKeFSINUeOHzEB9DIdDSiyYalI/XACB63C+0DU4R 6v+rQYwH/dWoa87bZ9BXrS4F6MoXdDVc8w/DEwt70JESbrSgXjZn3CEUjWdIFlov NPsmBysDKMP5MGLoJX3ROtrhOT2dGCy+LV+rwcSW4gMS6uYZFCiWs6w= -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:08 2026 by rpki-client