This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa File: J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa (raw, json) Hash identifier: yHzZkI8WBsUDrg6tstr8yujQqJ7rIkiUvhkoKj5fkYs= Subject key identifier: 27:8D:84:D5:16:EF:C4:33:D9:37:C8:52:52:DB:95:CC:48:16:11:0F Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019AC0BAC1501FC9222DEFF6C531B376494E Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa Signing time: Wed 26 Nov 2025 15:14:15 +0000 ROA not before: Wed 26 Nov 2025 15:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209242 IP address blocks: 185.251.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:ba:c1:50:1f:c9:22:2d:ef:f6:c5:31:b3:76:49:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Nov 26 15:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=278d84d516efc433d937c85252db95cc4816110f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:da:3b:61:39:13:0c:0d:6b:b2:80:62:bb: a1:22:d3:57:21:6d:5d:b1:57:38:8b:47:5d:68:86: 51:5d:35:b6:d8:6e:31:3b:0e:5d:37:20:0f:a0:c1: 9c:9d:27:c2:44:64:9e:e4:2d:47:33:3e:40:0b:f7: 09:68:c5:0f:e4:9c:b6:81:4b:b4:3f:7a:c9:56:9e: ef:08:9b:ec:70:1a:16:8b:17:12:5f:98:8c:04:53: 8f:5d:50:4c:df:52:6d:e5:9a:5d:6c:68:0c:8a:5b: 90:0c:31:87:80:fd:f6:40:7b:4d:ca:5c:0b:3b:95: 0f:79:3c:d7:65:6a:22:36:02:4d:50:6f:6a:92:ef: a7:f0:f9:4b:ba:16:2d:a8:c7:16:2b:06:fa:47:1c: a1:3a:44:90:8f:11:6e:21:2d:98:e8:20:53:86:97: 21:6b:59:16:7c:5c:fd:14:0d:34:5b:72:85:49:63: 86:68:c3:fb:f8:10:8b:d4:6d:78:e4:bd:fe:01:df: f2:36:81:56:29:83:17:97:7a:7a:71:75:0d:ae:43: d3:6b:6c:30:2f:b1:22:85:46:6e:0a:06:01:60:d7: bb:67:df:e4:c6:52:21:bf:02:00:dc:61:b9:bd:53: 74:a1:bf:34:a9:75:e6:a5:4f:5b:20:65:fe:61:00: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:84:D5:16:EF:C4:33:D9:37:C8:52:52:DB:95:CC:48:16:11:0F X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.80.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:25:3c:ce:0a:95:96:41:b6:04:2f:d9:f8:b9:0a:7f:f4:05: 92:c7:33:a7:b7:12:96:20:75:0e:1c:b3:9e:ad:c9:96:14:e7: 7b:ed:0f:7c:77:c6:e4:d7:99:c1:39:d4:32:fb:16:00:f8:a4: 2c:23:0e:d8:0a:b1:01:bd:7d:a9:03:35:d2:92:49:68:07:55: 5b:5f:3b:80:07:0a:64:82:80:38:e6:bc:1c:fe:78:ee:d4:76: f6:8e:9a:43:c7:34:0e:b6:ea:5f:19:b3:23:39:35:dc:0c:fb: 3a:36:d4:17:60:6a:70:b9:01:70:37:6b:86:fd:e3:08:06:67: 2a:75:56:7f:c1:e1:41:49:3e:6f:be:4a:17:3c:a4:e9:34:fd: 77:3c:34:b6:86:4d:24:71:f1:1b:a0:aa:6f:1b:4d:d9:98:c3: d4:9e:f7:52:ab:21:8d:00:97:fd:9b:8b:73:a1:bd:21:3f:55: b6:40:dc:f2:aa:0b:07:6b:5d:85:c0:cf:49:1c:fb:1a:1e:df: a7:b7:d4:0d:32:55:55:dc:97:9d:c3:7e:3f:19:66:cd:38:dc: aa:f8:70:c2:77:1a:75:a4:48:e6:8c:96:eb:d9:3c:50:0c:b7: 90:b8:51:df:a5:b8:31:6a:ad:1c:4d:69:fb:20:90:31:48:c5: 38:b0:cc:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAusFQH8kiLe/2xTGzdklOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMTI2MTUxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzhkODRkNTE2ZWZjNDMzZDkzN2M4NTI1MmRiOTVjYzQ4MTYxMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqvaO2E5EwwNa7KAYruhItNXIW1d sVc4i0ddaIZRXTW22G4xOw5dNyAPoMGcnSfCRGSe5C1HMz5AC/cJaMUP5Jy2gUu0 P3rJVp7vCJvscBoWixcSX5iMBFOPXVBM31Jt5ZpdbGgMiluQDDGHgP32QHtNylwL O5UPeTzXZWoiNgJNUG9qku+n8PlLuhYtqMcWKwb6RxyhOkSQjxFuIS2Y6CBThpch a1kWfFz9FA00W3KFSWOGaMP7+BCL1G145L3+Ad/yNoFWKYMXl3p6cXUNrkPTa2ww L7EihUZuCgYBYNe7Z9/kxlIhvwIA3GG5vVN0ob80qXXmpU9bIGX+YQCTVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeNhNUW78Qz2TfIUlLblcxIFhEPMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvSjQyRTFSYnZ4RFBaTjhoU1V0dVZ6RWdXRVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuftQMA0G CSqGSIb3DQEBCwUAA4IBAQCMJTzOCpWWQbYEL9n4uQp/9AWSxzOntxKWIHUOHLOe rcmWFOd77Q98d8bk15nBOdQy+xYA+KQsIw7YCrEBvX2pAzXSkkloB1VbXzuABwpk goA45rwc/nju1Hb2jppDxzQOtupfGbMjOTXcDPs6NtQXYGpwuQFwN2uG/eMIBmcq dVZ/weFBST5vvkoXPKTpNP13PDS2hk0kcfEboKpvG03ZmMPUnvdSqyGNAJf9m4tz ob0hP1W2QNzyqgsHa12FwM9JHPsaHt+nt9QNMlVV3Jedw34/GWbNONyq+HDCdxp1 pEjmjJbr2TxQDLeQuFHfpbgxaq0cTWn7IJAxSMU4sMy8 -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:12 2025 by rpki-client