This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa File: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (raw, json) Hash identifier: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM= Subject key identifier: 27:BA:82:E9:6E:56:25:16:EC:52:C0:3B:36:BD:B3:6F:AB:7A:DE:3F Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Certificate serial: 019B797EED32806D5D1E80EFF156AC72E44E Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51306 IP address blocks: 194.127.244.0/22 maxlen: 24 2a07:cf80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ed:32:80:6d:5d:1e:80:ef:f1:56:ac:72:e4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27ba82e96e562516ec52c03b36bdb36fab7ade3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:34:e8:56:e2:0a:c1:8d:12:63:ef:9a:72: 70:59:15:cd:d0:02:d1:cd:94:e9:16:f7:44:4a:29: 24:25:7c:fe:5f:45:37:0d:43:66:ef:22:72:1d:97: dc:9c:06:dc:0b:c4:fc:3d:c8:5d:5a:91:10:cb:1e: ae:7b:95:6c:ec:e8:3e:1f:19:91:c4:23:f9:ba:a4: 34:58:66:cd:02:9a:1f:e6:40:7b:8c:90:f6:99:b5: 64:07:17:43:80:1b:d0:74:65:5d:1f:9f:7f:81:52: af:4b:e8:5d:70:a3:41:c5:73:a1:51:4d:47:2b:a4: 14:63:9d:b8:e9:63:75:bb:84:3b:23:59:af:69:ec: 61:ea:4a:94:fd:d8:ea:2b:a5:83:68:05:ea:40:34: d5:2f:15:e5:33:5f:2a:97:3c:57:16:3f:9b:60:64: ee:3e:04:45:07:ae:80:4a:56:0b:77:b5:21:1c:36: b3:b5:92:58:eb:cf:fe:2a:42:31:67:b8:40:7a:e4: 28:3f:8a:4e:d6:64:2c:41:6a:70:e1:2a:e9:3f:79: f4:dd:bb:18:4a:dc:d0:88:32:4f:04:66:4c:77:4a: 96:ba:6f:55:04:d3:53:0e:51:10:4f:79:52:c7:b1: 1e:8e:b6:3e:85:a8:b1:a6:da:eb:f3:ba:9d:61:5b: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BA:82:E9:6E:56:25:16:EC:52:C0:3B:36:BD:B3:6F:AB:7A:DE:3F X509v3 Authority Key Identifier: keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.244.0/22 IPv6: 2a07:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:ae:eb:08:eb:4c:bc:fe:ec:0d:06:c9:1d:ca:6a:83:b6:25: aa:35:c5:aa:a9:52:89:7d:49:d0:6c:48:ba:b7:fa:8d:c2:d6: 0b:bd:48:6d:83:8a:ec:b2:fd:36:87:4b:d1:64:d1:2e:4f:bc: de:a4:5a:1f:7f:9b:ca:d2:ca:a3:36:06:5c:65:31:53:c1:65: f2:fd:32:71:b2:44:b4:90:ea:57:4e:ef:ba:ef:fb:08:b7:ef: 89:03:ed:d7:9f:15:0d:1e:21:c6:bb:7c:fa:bd:54:8a:df:7a: 3d:8f:ce:b6:9e:f0:84:fe:4e:72:c2:c6:e5:98:4a:4b:a9:e6: 30:6c:bc:c4:e2:aa:bb:3b:7e:ec:bb:9a:24:ad:4d:26:0b:43: d2:ad:d9:d5:fc:50:00:1b:ea:15:b7:c2:4c:84:f6:c4:09:a7: ec:fa:22:92:b0:65:a0:fa:28:ba:84:e2:ec:0b:46:be:19:ab: 7d:13:a5:76:19:e2:99:d0:95:45:e5:94:1e:e5:76:a3:b8:f9: d1:0c:2f:06:22:ed:12:82:9f:4c:e4:1f:a5:00:86:84:16:41: 32:91:03:83:33:64:19:35:c9:6f:fa:ce:c6:a1:67:10:8c:a7: ca:f0:26:63:2d:5b:6b:fb:0e:01:22:76:a0:6a:78:52:80:93: d8:78:33:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fu0ygG1dHoDv8VascuROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl YTYzYjUwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2JhODJlOTZlNTYyNTE2ZWM1MmMwM2IzNmJkYjM2ZmFiN2FkZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsks06FbiCsGNEmPvmnJwWRXN0ALR zZTpFvdESikkJXz+X0U3DUNm7yJyHZfcnAbcC8T8PchdWpEQyx6ue5Vs7Og+HxmR xCP5uqQ0WGbNApof5kB7jJD2mbVkBxdDgBvQdGVdH59/gVKvS+hdcKNBxXOhUU1H K6QUY5246WN1u4Q7I1mvaexh6kqU/djqK6WDaAXqQDTVLxXlM18qlzxXFj+bYGTu PgRFB66ASlYLd7UhHDaztZJY68/+KkIxZ7hAeuQoP4pO1mQsQWpw4SrpP3n03bsY StzQiDJPBGZMd0qWum9VBNNTDlEQT3lSx7EejrY+haixptrr87qdYVtktwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCe6guluViUW7FLAOza9s2+ret4/MB8GA1UdIwQY MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt ODRmOTA1OTM5MTNjLzEvSjdxQzZXNVdKUmJzVXNBN05yMnpiNnQ2M2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwn/0MA0E AgACMAcDBQAqB8+AMA0GCSqGSIb3DQEBCwUAA4IBAQBcrusI60y8/uwNBskdymqD tiWqNcWqqVKJfUnQbEi6t/qNwtYLvUhtg4rssv02h0vRZNEuT7zepFoff5vK0sqj NgZcZTFTwWXy/TJxskS0kOpXTu+67/sIt++JA+3XnxUNHiHGu3z6vVSK33o9j862 nvCE/k5ywsblmEpLqeYwbLzE4qq7O37su5okrU0mC0PSrdnV/FAAG+oVt8JMhPbE Cafs+iKSsGWg+ii6hOLsC0a+Gat9E6V2GeKZ0JVF5ZQe5XajuPnRDC8GIu0Sgp9M 5B+lAIaEFkEykQODM2QZNclv+s7GoWcQjKfK8CZjLVtr+w4BInaganhSgJPYeDOR -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:19 2026 by rpki-client