This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/Jb2gO1BQcML39rnxFGep61phXGU.roa File: Jb2gO1BQcML39rnxFGep61phXGU.roa (raw, json) Hash identifier: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM= Subject key identifier: 25:BD:A0:3B:50:50:70:C2:F7:F6:B9:F1:14:67:A9:EB:5A:61:5C:65 Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Certificate serial: 019B7F852622B8D5EE1D846752BBF6C1DC03 Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/Jb2gO1BQcML39rnxFGep61phXGU.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12731 IP address blocks: 45.130.192.0/23 maxlen: 23 2a0e:57c0:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:26:22:b8:d5:ee:1d:84:67:52:bb:f6:c1:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25bda03b505070c2f7f6b9f11467a9eb5a615c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:d8:9f:a4:7e:6e:cc:93:97:09:9d:0b:5e: 0e:c9:e3:fa:36:0d:29:47:2a:f2:49:04:86:25:6e: bd:1d:89:5e:27:f8:60:d6:ef:88:0f:88:25:df:7d: a2:de:55:2a:36:4a:e1:0b:f8:e3:d8:7c:28:ee:d6: dd:41:87:47:a7:c4:e5:98:f7:31:37:90:ff:9e:b5: 72:2b:1a:18:d8:b3:82:42:97:f2:f1:c5:0a:d5:8d: 43:ba:33:e7:f2:87:bc:6c:46:a8:b1:cc:63:88:ba: c3:9c:ea:48:48:48:c4:3a:e2:ac:3e:6f:46:af:c4: 87:a0:4b:93:e1:1b:43:00:96:81:27:26:90:e4:4a: 11:80:cd:c5:97:b0:96:c2:b9:ba:fd:8c:92:fd:c2: f3:57:e1:cb:c5:f7:33:fe:07:5e:c5:56:95:3e:c0: 76:da:cf:5a:7a:2a:7d:75:fa:71:3d:4e:90:48:c9: a8:93:5f:09:f4:6d:12:55:0b:a2:11:97:95:f8:19: 50:29:4e:66:67:83:66:31:58:bd:b0:34:fd:17:7c: 34:36:e0:e0:e3:a3:bd:85:77:9c:ec:5e:35:0c:09: f4:39:8f:49:4b:33:00:0b:2b:20:2c:51:81:bf:e0: 97:f7:6a:1c:17:f8:96:42:7a:79:0e:33:b9:5b:02: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BD:A0:3B:50:50:70:C2:F7:F6:B9:F1:14:67:A9:EB:5A:61:5C:65 X509v3 Authority Key Identifier: keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/Jb2gO1BQcML39rnxFGep61phXGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.192.0/23 IPv6: 2a0e:57c0:800::/38 Signature Algorithm: sha256WithRSAEncryption 9e:20:e3:9f:ae:88:22:41:4e:dc:9f:45:6e:60:6f:cb:be:36: 90:43:b1:d0:ca:8f:74:11:1c:82:17:04:a5:9f:2a:47:b5:2f: 60:d3:0c:c7:19:20:bc:a4:e2:fd:7b:40:a0:70:ad:91:f9:76: 5d:af:04:5b:01:5c:36:ce:26:ea:8d:1c:d4:7f:b4:54:b1:d3: 63:63:b6:2e:fb:2e:f7:c2:b8:46:b7:f2:32:70:e7:43:f3:23: 2e:cd:ce:70:e0:96:1b:d0:f8:40:26:22:a8:2f:6e:13:b1:38: 5a:54:90:65:7a:44:a6:e4:3a:7b:31:02:6a:c0:5d:32:b7:b2: fc:34:eb:bc:c3:0a:45:8c:3b:b3:36:46:8d:5a:bf:d9:7b:33: 22:a9:17:1a:1e:49:5b:57:a5:f1:90:e7:31:06:40:bf:90:36: 23:cd:58:f3:1c:30:8f:75:8c:a3:17:b6:49:57:d5:4f:f9:94: 57:65:83:a4:ee:42:f5:bc:91:fb:14:2c:d0:27:8e:d9:f5:26: 4b:d4:b3:32:ca:49:7e:d1:dd:4a:5b:d1:2b:39:2b:5a:7c:03: 66:0f:72:1a:12:3e:47:1d:13:db:ca:e7:e2:e0:4c:ac:06:75: 57:c3:69:88:44:7a:4b:46:2a:2e:e9:e1:c0:62:fd:68:8d:d0: 2a:f2:c5:b6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/hSYiuNXuHYRnUrv2wdwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3 ZWVkNmEwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWJkYTAzYjUwNTA3MGMyZjdmNmI5ZjExNDY3YTllYjVhNjE1YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7vYn6R+bsyTlwmdC14OyeP6Ng0p RyrySQSGJW69HYleJ/hg1u+ID4gl332i3lUqNkrhC/jj2Hwo7tbdQYdHp8TlmPcx N5D/nrVyKxoY2LOCQpfy8cUK1Y1DujPn8oe8bEaoscxjiLrDnOpISEjEOuKsPm9G r8SHoEuT4RtDAJaBJyaQ5EoRgM3Fl7CWwrm6/YyS/cLzV+HLxfcz/gdexVaVPsB2 2s9aeip9dfpxPU6QSMmok18J9G0SVQuiEZeV+BlQKU5mZ4NmMVi9sDT9F3w0NuDg 46O9hXec7F41DAn0OY9JSzMACysgLFGBv+CX92ocF/iWQnp5DjO5WwLbuwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFCW9oDtQUHDC9/a58RRnqetaYVxlMB8GA1UdIwQY MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt ZWFiZTM0ZTgwMmI0LzEvSmIyZ08xQlFjTUwzOXJueEZHZXA2MXBoWEdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0 LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBLYLAMA4E AgACMAgDBgIqDlfACDANBgkqhkiG9w0BAQsFAAOCAQEAniDjn66IIkFO3J9FbmBv y742kEOx0MqPdBEcghcEpZ8qR7UvYNMMxxkgvKTi/XtAoHCtkfl2Xa8EWwFcNs4m 6o0c1H+0VLHTY2O2Lvsu98K4RrfyMnDnQ/MjLs3OcOCWG9D4QCYiqC9uE7E4WlSQ ZXpEpuQ6ezECasBdMrey/DTrvMMKRYw7szZGjVq/2XszIqkXGh5JW1el8ZDnMQZA v5A2I81Y8xwwj3WMoxe2SVfVT/mUV2WDpO5C9byR+xQs0CeO2fUmS9SzMspJftHd SlvRKzkrWnwDZg9yGhI+Rx0T28rn4uBMrAZ1V8NpiER6S0YqLunhwGL9aI3QKvLF tg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:53 2026 by rpki-client