This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa File: J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa (raw, json) Hash identifier: smwtAA/DVPMUrh76xjUL7N4+Ou7I5DIwApsogoGYqpM= Subject key identifier: 27:E0:F6:41:35:79:18:57:BC:41:9B:EA:2D:35:BF:22:B5:1B:C8:D3 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA66B8A9C6DD164A4C60924CCAF8800 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209251 IP address blocks: 195.168.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6b:8a:9c:6d:d1:64:a4:c6:09:24:cc:af:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27e0f64135791857bc419bea2d35bf22b51bc8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:c4:e0:56:16:ff:62:c7:25:d3:34:e3:6f: 9a:9c:79:58:0d:03:7f:c2:fd:49:65:9c:22:78:88: 42:18:af:0d:b0:34:00:21:90:d0:f8:ac:d5:b9:2d: 30:75:4c:3c:b8:2d:c5:69:55:f8:51:68:77:fa:49: fd:17:45:aa:28:c9:1a:9b:2f:86:9b:cb:24:b6:89: 2b:10:f0:98:29:f4:7a:a5:88:71:17:58:e5:62:ee: 92:b2:1d:f7:3b:62:a4:5b:07:5f:b0:a0:25:56:de: 43:04:49:b1:72:20:6d:c0:56:70:82:8c:d5:da:09: 0d:60:83:c3:c1:c5:03:03:3b:89:d6:f9:72:8f:f3: 25:36:c0:ed:16:71:03:cd:8b:00:2b:9b:46:91:2f: a4:c6:c6:db:d5:6a:6a:5d:4d:6f:4f:a9:68:25:dc: 21:ee:a9:da:3f:2d:c4:54:d1:c3:96:ea:1d:7e:93: 1b:2a:65:d9:67:96:c9:d5:97:20:95:ed:ca:51:52: 46:18:ea:7b:5b:5d:be:9a:5e:bc:e1:66:cb:b7:61: c1:16:09:47:b6:d3:1a:d8:16:48:86:d1:93:dd:15: e0:07:05:de:fc:3e:8a:8c:5c:a9:42:fa:c9:70:b3: 8a:b7:ad:88:bc:16:23:26:4d:d2:0b:0a:0a:aa:9c: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E0:F6:41:35:79:18:57:BC:41:9B:EA:2D:35:BF:22:B5:1B:C8:D3 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.168.218.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ef:d2:f3:cf:63:47:d7:42:4e:65:b6:82:82:a4:15:da:38: c5:0e:a8:64:20:21:7e:d8:0a:3b:c6:29:b2:ab:39:74:d9:f2: 98:54:a0:5c:90:0f:86:f4:e1:36:4a:84:7f:b0:0a:a4:7e:c7: ab:b3:a3:f2:f7:8e:f2:a2:88:40:46:db:cf:78:81:c7:46:63: 0d:39:4f:45:f0:ef:31:04:04:28:21:a7:7b:fe:34:f8:d8:a8: a8:b7:de:1e:5d:58:81:c1:b4:ab:96:0a:67:52:ba:38:38:af: 30:46:d1:16:ce:50:87:5c:19:11:96:a5:b9:2e:db:76:31:76: 85:e8:ee:6c:43:1d:a2:01:0b:76:b0:69:16:1c:b4:35:6f:5f: e7:1d:16:dc:07:b5:59:31:7b:38:47:59:cc:50:d1:d0:9f:5b: 9c:f7:b3:9f:e5:0c:05:91:7e:f8:bf:82:91:bb:f5:bd:22:df: 78:ab:6c:1d:6b:0f:fd:7b:cc:58:8a:8a:75:35:03:0c:12:13: 4c:cf:7d:33:98:c0:2f:bd:a3:79:1e:b1:ec:a7:ff:80:2f:56: c7:cd:07:0c:12:e8:5e:85:77:af:1c:71:a1:cd:0a:d2:b1:2d: 18:9b:3c:54:55:51:71:28:4f:4d:43:3d:e2:5d:0e:96:1d:6c: 18:17:33:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmuKnG3RZKTGCSTMr4gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2UwZjY0MTM1NzkxODU3YmM0MTliZWEyZDM1YmYyMmI1MWJjOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPHE4FYW/2LHJdM042+anHlYDQN/ wv1JZZwieIhCGK8NsDQAIZDQ+KzVuS0wdUw8uC3FaVX4UWh3+kn9F0WqKMkamy+G m8sktokrEPCYKfR6pYhxF1jlYu6Ssh33O2KkWwdfsKAlVt5DBEmxciBtwFZwgozV 2gkNYIPDwcUDAzuJ1vlyj/MlNsDtFnEDzYsAK5tGkS+kxsbb1WpqXU1vT6loJdwh 7qnaPy3EVNHDluodfpMbKmXZZ5bJ1Zcgle3KUVJGGOp7W12+ml684WbLt2HBFglH ttMa2BZIhtGT3RXgBwXe/D6KjFypQvrJcLOKt62IvBYjJk3SCwoKqpyPfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfg9kE1eRhXvEGb6i01vyK1G8jTMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvSi1EMlFUVjVHRmU4UVp2cUxUV19JclVieU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6jaMA0G CSqGSIb3DQEBCwUAA4IBAQBr79Lzz2NH10JOZbaCgqQV2jjFDqhkICF+2Ao7ximy qzl02fKYVKBckA+G9OE2SoR/sAqkfsers6Py947yoohARtvPeIHHRmMNOU9F8O8x BAQoIad7/jT42Kiot94eXViBwbSrlgpnUro4OK8wRtEWzlCHXBkRlqW5Ltt2MXaF 6O5sQx2iAQt2sGkWHLQ1b1/nHRbcB7VZMXs4R1nMUNHQn1uc97Of5QwFkX74v4KR u/W9It94q2wdaw/9e8xYiop1NQMMEhNMz30zmMAvvaN5HrHsp/+AL1bHzQcMEuhe hXevHHGhzQrSsS0YmzxUVVFxKE9NQz3iXQ6WHWwYFzPv -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:35 2026 by rpki-client