This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/J_DoxZa70H67ENOsS_n1eDhcFAQ.roa File: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (raw, json) Hash identifier: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0= Subject key identifier: 27:F0:E8:C5:96:BB:D0:7E:BB:10:D3:AC:4B:F9:F5:78:38:5C:14:04 Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932 Certificate serial: 019B78346B01935924505B1A23C3F613BD91 Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/J_DoxZa70H67ENOsS_n1eDhcFAQ.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207198 IP address blocks: 185.163.40.0/22 maxlen: 22 213.194.192.0/20 maxlen: 20 213.194.208.0/22 maxlen: 22 2a0a:a800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6b:01:93:59:24:50:5b:1a:23:c3:f6:13:bd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27f0e8c596bbd07ebb10d3ac4bf9f578385c1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:d0:e4:32:ca:29:8a:49:f9:b3:63:33:78: 6c:65:70:5e:31:d9:18:ee:fe:2e:1c:9a:e2:15:df: 09:c2:c5:cd:02:90:52:a1:2d:84:0b:9f:4b:9e:1f: 10:0e:24:54:0c:3c:81:06:65:51:c2:e8:05:80:09: d8:e5:ea:8c:cd:21:5a:bc:7f:f2:1e:87:19:b8:5b: 93:29:bd:7f:bf:e2:61:5e:ac:2d:2d:51:56:4c:74: 65:92:cf:46:15:0d:c6:d3:b2:65:6b:0a:2c:99:5e: 18:53:8f:fb:ca:8b:24:10:01:fa:d7:cc:8b:30:b8: 5b:9d:99:94:67:2c:5b:40:2e:03:9f:8b:5c:67:0d: be:74:82:3d:53:e3:be:56:4a:00:03:af:b5:17:e2: a0:da:ec:68:7f:af:81:f8:61:3e:1e:8b:76:02:40: b0:c4:11:6e:4c:66:fd:7c:90:27:6e:2c:ca:07:71: b7:d0:ca:64:42:57:69:7e:20:d0:6f:9c:ba:4e:3c: 41:81:67:9d:19:5f:58:9e:75:89:cd:96:ed:d3:ff: 97:c3:51:cb:1d:3c:4c:77:43:a3:b0:2c:33:bc:12: 58:7c:d9:f5:5c:b3:ac:95:d4:0b:a1:17:fe:e5:f1: 8d:88:2a:4d:43:32:40:21:31:5c:78:50:9d:62:84: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F0:E8:C5:96:BB:D0:7E:BB:10:D3:AC:4B:F9:F5:78:38:5C:14:04 X509v3 Authority Key Identifier: keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/J_DoxZa70H67ENOsS_n1eDhcFAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.40.0/22 213.194.192.0-213.194.211.255 IPv6: 2a0a:a800::/29 Signature Algorithm: sha256WithRSAEncryption a7:e1:08:4d:1f:5b:e5:6f:0c:6e:63:c3:5c:20:4a:35:9f:90: bb:4d:bc:36:52:1b:55:ce:ec:c3:25:b9:b9:ce:1b:85:63:e1: 20:46:a6:46:54:22:b2:d0:81:a5:ff:cc:42:42:41:35:89:43: c0:70:76:4f:19:5c:0d:9e:8f:de:45:ee:f7:a7:0f:99:21:1b: 97:97:84:a3:7b:64:9e:5e:68:a7:03:68:37:6c:23:80:6c:3f: 6a:d9:25:45:6e:c4:50:e4:ae:df:76:7a:8d:ea:d0:2b:f8:2c: 1e:8d:61:4e:04:7f:00:04:ad:ae:5e:07:ef:19:b0:8a:12:ee: 1b:cc:4f:97:3d:92:04:47:84:b3:45:5b:0e:b8:6b:14:e3:c5: 22:48:82:5e:c9:d6:5e:dd:2c:0d:6a:0a:92:a8:88:55:56:81: 96:3e:85:7d:21:fe:1d:57:6e:c2:26:54:ed:9e:f4:17:a0:2c: a9:1c:cd:51:25:44:65:6d:43:4b:ae:89:d7:bd:3b:f2:af:ba: c9:45:31:cb:53:ce:8e:90:c1:35:73:31:20:5a:4b:10:6f:ce: 6b:58:61:8a:cb:1b:44:7e:d6:b5:75:02:32:e8:ad:85:db:1f: 46:69:d9:be:d7:32:d7:2c:ef:36:a1:a6:3c:34:3f:41:7f:b3: 96:dd:c5:8e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4NGsBk1kkUFsaI8P2E72RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2ZlMGI5YzYzMGEzM2UxNzFhMGE1Yzc5M2YzNDBiNDM0 NDY5MzIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2YwZThjNTk2YmJkMDdlYmIxMGQzYWM0YmY5ZjU3ODM4NWMxNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbvQ5DLKKYpJ+bNjM3hsZXBeMdkY 7v4uHJriFd8JwsXNApBSoS2EC59Lnh8QDiRUDDyBBmVRwugFgAnY5eqMzSFavH/y HocZuFuTKb1/v+JhXqwtLVFWTHRlks9GFQ3G07JlawosmV4YU4/7yoskEAH618yL MLhbnZmUZyxbQC4Dn4tcZw2+dII9U+O+VkoAA6+1F+Kg2uxof6+B+GE+Hot2AkCw xBFuTGb9fJAnbizKB3G30MpkQldpfiDQb5y6TjxBgWedGV9YnnWJzZbt0/+Xw1HL HTxMd0OjsCwzvBJYfNn1XLOsldQLoRf+5fGNiCpNQzJAITFceFCdYoSqrQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCfw6MWWu9B+uxDTrEv59Xg4XBQEMB8GA1UdIwQY MBaAFIo/4LnGMKM+FxoKXHk/NAtDRGkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMt NTNhYWI0MmY0NzZlLzEvSl9Eb3haYTcwSDY3RU5Pc1NfbjFlRGhjRkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMtNTNhYWI0MmY0NzZl LzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuaMoMAwD BAbVwsADBALVwtAwDQQCAAIwBwMFAyoKqAAwDQYJKoZIhvcNAQELBQADggEBAKfh CE0fW+VvDG5jw1wgSjWfkLtNvDZSG1XO7MMlubnOG4Vj4SBGpkZUIrLQgaX/zEJC QTWJQ8Bwdk8ZXA2ej95F7venD5khG5eXhKN7ZJ5eaKcDaDdsI4BsP2rZJUVuxFDk rt92eo3q0Cv4LB6NYU4EfwAEra5eB+8ZsIoS7hvMT5c9kgRHhLNFWw64axTjxSJI gl7J1l7dLA1qCpKoiFVWgZY+hX0h/h1XbsImVO2e9BegLKkczVElRGVtQ0uuide9 O/KvuslFMctTzo6QwTVzMSBaSxBvzmtYYYrLG0R+1rV1AjLorYXbH0Zp2b7XMtcs 7zahpjw0P0F/s5bdxY4= -----END CERTIFICATE-----Generated at Fri Jan 2 19:47:49 2026 by rpki-client