This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa File: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (raw, json) Hash identifier: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M= Subject key identifier: 8C:E6:63:D4:2D:F1:19:3D:E5:08:E3:25:AF:C9:AB:54:27:06:BE:E5 Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94 Certificate serial: 019B76EAE2710371B2E0B9490F08453EC196 Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204366 IP address blocks: 185.250.65.0/24 maxlen: 24 185.250.66.0/24 maxlen: 24 185.250.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e2:71:03:71:b2:e0:b9:49:0f:08:45:3e:c1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94 Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce663d42df1193de508e325afc9ab542706bee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:c5:77:1b:e7:aa:40:da:bb:df:68:d8:51: 9b:88:c9:ff:38:71:7f:bc:72:de:c1:d4:04:65:cb: 10:72:1d:7d:82:43:5e:30:16:36:b2:8a:13:b9:e3: c4:d9:35:d2:fc:10:5e:a0:6e:5b:7d:92:51:99:38: 0a:f6:ed:01:09:e1:dc:2a:7d:d2:03:06:6e:3b:7b: fb:6e:9c:7b:e9:da:e4:19:7d:0e:39:ad:39:08:9a: 13:21:5d:99:7c:05:a9:b5:af:cc:ba:2e:e2:cc:b0: b5:c4:b8:b5:91:3b:d8:aa:21:65:8d:89:77:24:25: 89:2e:16:16:f5:f2:18:d7:8f:c3:ed:37:46:c9:d2: bc:54:f9:3a:c2:99:76:05:a5:1c:ed:fb:48:b2:27: 2f:e2:4e:bd:d0:c0:e4:e6:9f:1c:e4:90:b4:07:84: 2e:88:69:31:5b:36:28:1d:8d:17:7e:5c:c3:64:4c: d3:6c:a1:a6:4e:00:e6:02:8f:c9:c3:7f:cf:cb:20: 09:e7:59:6c:d0:59:99:bc:d9:5a:1b:3e:bd:22:d7: 54:30:e9:2f:b7:29:6f:5f:bb:4a:e8:28:c1:8c:b5: ed:3e:c3:7d:fc:18:5f:ec:04:9a:2e:85:ab:f9:e9: e4:dd:5e:e8:9a:2d:c7:4c:0d:12:f6:4e:cf:40:f9: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:63:D4:2D:F1:19:3D:E5:08:E3:25:AF:C9:AB:54:27:06:BE:E5 X509v3 Authority Key Identifier: keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.65.0-185.250.67.255 Signature Algorithm: sha256WithRSAEncryption 04:d1:21:9e:95:50:21:22:ce:ac:1c:f2:0c:89:a1:cc:8e:2b: 41:82:e2:21:2c:a9:74:cf:9c:e8:37:bb:e5:89:eb:ab:85:6d: 2d:46:38:94:37:08:75:08:8c:50:4c:11:b9:5d:9d:ae:c8:8e: 3a:61:0e:6e:5d:bb:6d:3d:8b:41:90:48:d3:61:e4:ae:f1:b6: 35:51:34:24:0b:ed:86:dc:11:10:78:1a:1e:71:a7:47:08:b5: 67:d3:5b:a4:64:54:83:4f:0d:16:ca:9c:1b:69:5d:db:5a:55: df:d0:bc:dd:66:8d:5f:a2:6b:66:ea:e2:ac:ab:45:3b:1b:28: 62:9a:f3:2d:a3:91:f9:3d:ad:c3:62:e1:87:70:80:cc:5c:9b: ee:c8:d0:28:5c:32:17:5f:61:68:78:4b:c9:ee:ff:ea:a0:7e: 94:91:98:98:5a:98:c2:8c:0d:be:a2:56:fd:bd:dc:93:6f:e9: 0b:87:3a:97:48:71:72:3b:07:f6:98:ca:05:21:13:87:f3:76: 46:5f:ff:9c:28:ce:af:c5:eb:d0:fb:1a:19:62:bd:36:59:de: 6c:00:57:53:f6:99:3c:b9:56:e0:16:63:f0:bd:b5:3a:a8:14: c7:4e:f8:a1:69:e8:64:15:bc:8d:34:5b:80:4e:b9:82:51:ab: 5a:75:e1:cc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26uJxA3Gy4LlJDwhFPsGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTU5YjY4Y2U0MTM2OGE5OWZlMTA3OWVjNTRjMzZjOWJi MWJmOTQwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2U2NjNkNDJkZjExOTNkZTUwOGUzMjVhZmM5YWI1NDI3MDZiZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2jFdxvnqkDau99o2FGbiMn/OHF/ vHLewdQEZcsQch19gkNeMBY2sooTuePE2TXS/BBeoG5bfZJRmTgK9u0BCeHcKn3S AwZuO3v7bpx76drkGX0OOa05CJoTIV2ZfAWpta/Mui7izLC1xLi1kTvYqiFljYl3 JCWJLhYW9fIY14/D7TdGydK8VPk6wpl2BaUc7ftIsicv4k690MDk5p8c5JC0B4Qu iGkxWzYoHY0XflzDZEzTbKGmTgDmAo/Jw3/PyyAJ51ls0FmZvNlaGz69ItdUMOkv tylvX7tK6CjBjLXtPsN9/Bhf7ASaLoWr+enk3V7omi3HTA0S9k7PQPlP8QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIzmY9Qt8Rk95QjjJa/Jq1QnBr7lMB8GA1UdIwQY MBaAFOgVm2jOQTaKmf4QeexUw2ybsb+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt MGYzYjZmOTY5OTBiLzEvak9aajFDM3hHVDNsQ09NbHI4bXJWQ2NHdnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi LzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5+kED BAK5+kAwDQYJKoZIhvcNAQELBQADggEBAATRIZ6VUCEizqwc8gyJocyOK0GC4iEs qXTPnOg3u+WJ66uFbS1GOJQ3CHUIjFBMEbldna7IjjphDm5du209i0GQSNNh5K7x tjVRNCQL7YbcERB4Gh5xp0cItWfTW6RkVINPDRbKnBtpXdtaVd/QvN1mjV+ia2bq 4qyrRTsbKGKa8y2jkfk9rcNi4YdwgMxcm+7I0ChcMhdfYWh4S8nu/+qgfpSRmJha mMKMDb6iVv293JNv6QuHOpdIcXI7B/aYygUhE4fzdkZf/5wozq/F69D7GhlivTZZ 3mwAV1P2mTy5VuAWY/C9tTqoFMdO+KFp6GQVvI00W4BOuYJRq1p14cw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:22 2026 by rpki-client