This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/J2C83EkvxD6iiZWZI7R55RnGw40.roa File: J2C83EkvxD6iiZWZI7R55RnGw40.roa (raw, json) Hash identifier: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ= Subject key identifier: 27:60:BC:DC:49:2F:C4:3E:A2:89:95:99:23:B4:79:E5:19:C6:C3:8D Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B7C7F97878BBD52A7F702014FA65DFBCA Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/J2C83EkvxD6iiZWZI7R55RnGw40.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61225 IP address blocks: 86.106.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:97:87:8b:bd:52:a7:f7:02:01:4f:a6:5d:fb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2760bcdc492fc43ea289959923b479e519c6c38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:7f:af:36:a9:ec:51:3e:d2:a7:bf:3c:7a: d8:3c:a4:4a:38:91:01:cd:a2:10:d5:26:d2:5f:12: 1f:e9:e2:1b:35:0a:5d:62:aa:25:71:64:f4:b3:36: eb:1d:1b:ca:9b:7e:87:5c:cd:00:1f:c5:ab:c8:31: 74:e8:8b:ad:5f:76:65:54:e7:1e:b0:f4:a6:04:a2: 3b:ee:ed:80:19:fd:d8:0f:55:f6:b9:2d:e5:d2:36: 8f:31:e5:69:89:76:ec:a3:ee:55:3e:a8:71:86:2d: e2:1d:c9:f2:b0:1e:f9:83:7d:09:91:08:6e:6e:a2: e4:73:1e:d1:92:16:e6:31:18:52:38:91:07:7a:c1: c9:b5:11:1f:39:a2:ba:b3:fd:79:1b:d3:43:4c:6e: 09:ae:42:42:bd:36:0e:e7:bf:fc:70:96:33:b4:6c: 45:bf:5d:82:be:8f:21:fa:3a:48:08:02:16:14:6e: a2:4d:c2:b0:15:1f:4a:2c:37:30:2a:f9:ad:e1:fe: 86:fd:26:17:5c:92:a9:57:3a:b3:be:8f:98:06:c8: 51:3f:53:85:77:a2:ef:92:9b:ce:b8:62:9f:53:d9: 36:83:d4:02:c5:a4:ac:7b:47:a3:c7:79:04:a8:72: ca:1c:f4:40:1e:5e:dc:e3:33:7e:2e:73:05:a4:6b: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:BC:DC:49:2F:C4:3E:A2:89:95:99:23:B4:79:E5:19:C6:C3:8D X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/J2C83EkvxD6iiZWZI7R55RnGw40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.159.0/24 Signature Algorithm: sha256WithRSAEncryption b2:6e:52:f4:89:c7:1c:27:32:5c:9d:a6:f5:f5:67:6f:37:3a: 49:ce:2c:36:61:19:c9:65:28:a5:bd:db:c4:f5:41:74:26:3b: d5:76:7d:c7:77:0c:5e:0b:b4:ab:37:8a:b0:ff:50:de:8a:df: 16:97:3d:9d:21:c5:5c:99:c8:4a:6c:26:b2:76:e7:62:08:12: a5:34:2c:db:6f:8b:5e:49:82:6f:b6:36:40:1e:2e:cc:4c:eb: a6:6b:6b:f2:20:e9:6b:2f:2d:98:85:30:26:45:ee:91:5d:f8: 94:e9:49:89:1c:82:be:ef:d8:85:64:a8:09:84:e7:f1:85:c5: ed:5c:80:b5:21:64:30:0c:f7:14:36:19:b9:40:5a:4d:b8:4f: 96:97:34:81:09:bd:b7:51:55:ac:6a:42:72:53:6e:69:45:33: ad:99:0c:b1:0c:ad:e8:4a:3e:53:77:96:fa:7a:53:a9:aa:97: 74:7b:45:43:4e:ec:75:43:ee:55:70:e4:6e:73:fb:bd:19:91: 5e:0a:a5:75:14:80:b7:2c:af:62:8f:a6:86:73:c9:85:23:4f: 4d:fe:b5:d8:fb:65:ac:01:04:e1:59:b3:cd:d1:56:e2:ba:a3: 1d:b3:dd:bb:51:78:7d:15:ec:80:a2:f7:ad:83:0e:e8:ab:fd: b1:24:47:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5eHi71Sp/cCAU+mXfvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzYwYmNkYzQ5MmZjNDNlYTI4OTk1OTkyM2I0NzllNTE5YzZjMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gJ/rzap7FE+0qe/PHrYPKRKOJEB zaIQ1SbSXxIf6eIbNQpdYqolcWT0szbrHRvKm36HXM0AH8WryDF06IutX3ZlVOce sPSmBKI77u2AGf3YD1X2uS3l0jaPMeVpiXbso+5VPqhxhi3iHcnysB75g30JkQhu bqLkcx7RkhbmMRhSOJEHesHJtREfOaK6s/15G9NDTG4JrkJCvTYO57/8cJYztGxF v12Cvo8h+jpICAIWFG6iTcKwFR9KLDcwKvmt4f6G/SYXXJKpVzqzvo+YBshRP1OF d6LvkpvOuGKfU9k2g9QCxaSse0ejx3kEqHLKHPRAHl7c4zN+LnMFpGtWPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdgvNxJL8Q+oomVmSO0eeUZxsONMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvSjJDODNFa3Z4RDZpaVpXWkk3UjU1Um5HdzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmqfMA0G CSqGSIb3DQEBCwUAA4IBAQCyblL0icccJzJcnab19WdvNzpJziw2YRnJZSilvdvE 9UF0JjvVdn3HdwxeC7SrN4qw/1Deit8Wlz2dIcVcmchKbCaydudiCBKlNCzbb4te SYJvtjZAHi7MTOuma2vyIOlrLy2YhTAmRe6RXfiU6UmJHIK+79iFZKgJhOfxhcXt XIC1IWQwDPcUNhm5QFpNuE+WlzSBCb23UVWsakJyU25pRTOtmQyxDK3oSj5Td5b6 elOpqpd0e0VDTux1Q+5VcORuc/u9GZFeCqV1FIC3LK9ij6aGc8mFI09N/rXY+2Ws AQThWbPN0VbiuqMds927UXh9FeyAovetgw7oq/2xJEeY -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:49 2026 by rpki-client