This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/R-lJ9uPrNOrjY9hGnktGYO0jPg4.roa File: R-lJ9uPrNOrjY9hGnktGYO0jPg4.roa (raw, json) Hash identifier: rDcI7mb4RMBOir/lBv8jBWsos7a0IueiHQO02FakiSI= Subject key identifier: 47:E9:49:F6:E3:EB:34:EA:E3:63:D8:46:9E:4B:46:60:ED:23:3E:0E Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Certificate serial: 019B7EA6C0F6FCF31156017DF76D4AA2F43B Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/R-lJ9uPrNOrjY9hGnktGYO0jPg4.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204135 IP address blocks: 185.235.36.0/22 maxlen: 22 185.235.36.0/24 maxlen: 24 185.235.37.0/24 maxlen: 24 185.235.38.0/24 maxlen: 24 2a0e:1700::/32 maxlen: 32 2a0e:1701::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c0:f6:fc:f3:11:56:01:7d:f7:6d:4a:a2:f4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47e949f6e3eb34eae363d8469e4b4660ed233e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:f0:37:ea:f8:3e:05:6c:e7:1d:c0:44:2f: 9e:15:17:9e:12:9a:e1:41:4c:59:68:36:f3:e1:d4: b8:d0:d0:c4:62:e2:2e:78:09:e7:27:52:80:dd:70: 39:c3:15:0f:f9:bf:99:f7:ea:dd:9d:e5:df:f8:4d: 41:f1:b0:f3:34:c6:a9:3e:b4:94:be:2b:07:3b:be: f7:c9:63:f8:da:6b:c1:52:f2:45:06:23:02:fd:0a: 68:75:83:29:30:d5:28:9c:ba:42:69:13:9d:fa:ad: fb:fc:6a:db:0a:e0:33:ae:be:73:24:98:f8:bf:0a: 82:ee:7d:dc:1b:d9:45:5e:77:af:43:b8:79:66:a4: f8:53:7d:4a:e5:eb:78:e8:62:67:ec:a3:c5:84:0d: 1b:c7:c2:36:3a:8e:9f:33:48:ba:a3:76:97:53:d6: a6:96:61:67:b1:bf:a0:8f:3b:a7:35:2c:96:d4:18: 9b:dd:e2:c7:8d:9b:b8:92:cb:dd:01:51:96:ee:11: 0c:34:cb:07:4a:aa:4b:15:78:13:59:27:ff:00:6b: b0:a7:2f:e4:5e:45:d5:93:ab:11:75:d7:db:ca:2c: f6:79:24:73:64:1a:2b:d2:cd:c8:fe:a4:4e:20:cf: c3:d1:39:02:90:96:fb:3e:05:5c:01:f8:6e:a2:3e: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:49:F6:E3:EB:34:EA:E3:63:D8:46:9E:4B:46:60:ED:23:3E:0E X509v3 Authority Key Identifier: keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/R-lJ9uPrNOrjY9hGnktGYO0jPg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.36.0/22 IPv6: 2a0e:1700::/31 Signature Algorithm: sha256WithRSAEncryption 10:49:bf:35:e5:21:54:5d:db:23:f6:52:3a:de:5e:6f:12:2d: b6:4c:95:4e:c6:9a:ad:07:80:1a:2a:c2:2b:26:df:9e:7a:60: 99:92:9e:73:56:5d:bb:d0:16:6a:d4:14:7c:5c:55:5f:3a:b8: 55:4a:6a:c2:f6:17:73:54:34:33:9f:59:0e:8d:85:93:1c:df: ed:6c:86:c3:f5:6b:e9:11:39:52:fd:09:69:04:59:90:2c:e9: 5d:10:a8:77:a8:0e:93:f2:f0:b6:0c:9b:19:24:0f:01:2a:c4: 20:e7:10:95:7f:2f:37:f5:bf:7b:f7:eb:c5:d8:f6:c0:66:41: 45:30:e3:fa:d8:17:a8:80:c2:76:be:2f:ba:c0:f7:c4:35:53: 2a:f6:0f:5b:3c:cf:cf:35:b0:0f:50:0b:a3:b1:9a:56:34:89: 81:d8:20:b5:4a:bc:4f:66:00:0a:6d:fe:d0:9f:73:47:8e:81: e8:45:d0:fd:ba:68:c5:26:36:66:b4:4a:5f:d5:54:f7:cd:99: c3:bc:0d:0e:fa:9c:65:b6:18:ac:5d:ed:25:33:10:a9:0c:fe: 8e:20:50:e1:c9:2b:67:60:86:b4:98:91:2f:a3:cc:be:f6:17: 27:c4:16:1e:3c:e9:4a:03:ef:66:ff:51:ea:a2:ea:d9:b0:04: 76:81:33:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+psD2/PMRVgF9921KovQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWU2MjU3ZDBjM2EyYjkzMDU2MWFmMjUyMmQ5ZTVhZjdm OWNiYzcwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2U5NDlmNmUzZWIzNGVhZTM2M2Q4NDY5ZTRiNDY2MGVkMjMzZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r7wN+r4PgVs5x3ARC+eFReeEprh QUxZaDbz4dS40NDEYuIueAnnJ1KA3XA5wxUP+b+Z9+rdneXf+E1B8bDzNMapPrSU visHO773yWP42mvBUvJFBiMC/QpodYMpMNUonLpCaROd+q37/GrbCuAzrr5zJJj4 vwqC7n3cG9lFXnevQ7h5ZqT4U31K5et46GJn7KPFhA0bx8I2Oo6fM0i6o3aXU9am lmFnsb+gjzunNSyW1Bib3eLHjZu4ksvdAVGW7hEMNMsHSqpLFXgTWSf/AGuwpy/k XkXVk6sRddfbyiz2eSRzZBor0s3I/qROIM/D0TkCkJb7PgVcAfhuoj6TAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfpSfbj6zTq42PYRp5LRmDtIz4OMB8GA1UdIwQY MBaAFBLuYlfQw6K5MFYa8lItnlr3+cvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEt M2YzMzg2NjE5MmQwLzEvUi1sSjl1UHJOT3JqWTloR25rdEdZTzBqUGc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEtM2YzMzg2NjE5MmQw LzEvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueskMA0E AgACMAcDBQEqDhcAMA0GCSqGSIb3DQEBCwUAA4IBAQAQSb815SFUXdsj9lI63l5v Ei22TJVOxpqtB4AaKsIrJt+eemCZkp5zVl270BZq1BR8XFVfOrhVSmrC9hdzVDQz n1kOjYWTHN/tbIbD9WvpETlS/QlpBFmQLOldEKh3qA6T8vC2DJsZJA8BKsQg5xCV fy839b979+vF2PbAZkFFMOP62BeogMJ2vi+6wPfENVMq9g9bPM/PNbAPUAujsZpW NImB2CC1SrxPZgAKbf7Qn3NHjoHoRdD9umjFJjZmtEpf1VT3zZnDvA0O+pxlthis Xe0lMxCpDP6OIFDhyStnYIa0mJEvo8y+9hcnxBYePOlKA+9m/1HqourZsAR2gTMH -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:50 2026 by rpki-client