This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/JC7SpRs2Up1FyDKN9fRpb32kUNo.roa File: JC7SpRs2Up1FyDKN9fRpb32kUNo.roa (raw, json) Hash identifier: 4G4RVjTZuZAjn+Z3Oy76fDFT7GE1perVRfpxsazJC1k= Subject key identifier: 24:2E:D2:A5:1B:36:52:9D:45:C8:32:8D:F5:F4:69:6F:7D:A4:50:DA Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4 Certificate serial: 019B7DCB216C1B2C361B2E1A960C3DCD0D6F Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/JC7SpRs2Up1FyDKN9fRpb32kUNo.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24586 IP address blocks: 46.22.180.0/22 maxlen: 24 46.22.184.0/21 maxlen: 24 80.95.160.0/21 maxlen: 24 80.95.168.0/22 maxlen: 24 80.95.172.0/22 maxlen: 24 93.92.96.0/22 maxlen: 24 93.92.100.0/22 maxlen: 24 185.39.120.0/22 maxlen: 24 188.66.16.0/21 maxlen: 24 2001:4c10::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:21:6c:1b:2c:36:1b:2e:1a:96:0c:3d:cd:0d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=242ed2a51b36529d45c8328df5f4696f7da450da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:f9:a2:b8:a4:af:9c:81:11:1a:47:42:a7: 03:d5:53:1d:49:80:d4:e2:65:fc:36:81:a7:ba:7c: e1:1d:d0:2f:48:87:44:35:b0:7a:73:a3:11:91:bf: f4:8b:7e:78:33:53:a9:99:a4:e2:15:cc:86:57:af: 57:d5:68:72:d6:e5:f4:6e:45:9b:cd:5e:61:57:4e: 44:cf:51:59:21:96:b8:94:de:53:de:e1:d1:ac:72: 2b:a2:91:00:ef:98:42:42:ac:02:3c:f7:fe:5b:c9: 64:49:f2:10:49:0f:96:40:97:45:cd:f1:e5:d6:a6: 07:4d:48:83:54:1a:69:75:eb:78:ea:76:74:9e:d8: 97:30:95:28:ff:7a:de:55:a6:43:be:b7:0e:a9:43: e4:36:58:eb:bf:5e:4d:2b:4a:c0:ba:60:db:d5:3c: f5:63:62:1f:55:6f:86:b5:3a:1a:e0:4e:a2:07:da: ba:a4:e9:48:7f:0f:20:74:22:d4:d7:a6:21:0f:ec: 37:0a:e0:03:74:7c:40:c2:4f:65:cd:70:1a:93:d4: 53:aa:ab:83:1a:b3:77:a5:b5:92:cb:07:b6:8a:f8: 74:a5:95:80:ab:d0:07:84:76:ba:c0:84:d6:f8:e9: 43:a6:10:5f:9b:bb:54:46:fb:ea:24:b2:e2:64:e5: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:D2:A5:1B:36:52:9D:45:C8:32:8D:F5:F4:69:6F:7D:A4:50:DA X509v3 Authority Key Identifier: keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/JC7SpRs2Up1FyDKN9fRpb32kUNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.180.0-46.22.191.255 80.95.160.0/20 93.92.96.0/21 185.39.120.0/22 188.66.16.0/21 IPv6: 2001:4c10::/32 Signature Algorithm: sha256WithRSAEncryption 21:fd:68:f2:d6:f7:62:d7:f2:68:4e:75:db:61:13:0b:a9:dc: e6:83:f9:fe:b0:b5:51:2f:bf:3e:5c:d3:a6:58:75:04:ad:64: e9:73:9a:02:4e:38:7e:f0:7e:bc:76:e3:e9:96:5a:d1:e9:f3: 93:16:5d:2e:ce:3f:40:6c:ef:3c:3a:5b:6c:71:63:20:e5:f2: 70:80:77:b6:44:9a:4b:b9:2b:6c:6a:35:2c:ab:b2:ec:99:80: d7:55:ec:aa:f7:da:c5:c6:62:9c:fd:79:a9:90:e6:12:9e:02: c1:da:19:7c:98:d4:67:74:eb:a0:9a:cf:74:48:60:f1:3c:c3: f1:1e:e7:26:e1:12:35:4e:f0:35:e3:4b:bc:b1:d7:02:fd:e5: 0d:1f:b4:76:10:a7:dd:9b:7e:de:88:24:3b:0c:5d:4b:fc:f2: 62:bc:d6:fd:e6:ef:f0:f3:24:8e:e6:3a:25:1c:35:3b:3e:34: e5:d5:21:9a:9d:b4:7c:75:8c:07:78:cf:37:11:78:dc:51:7d: 35:37:aa:38:5b:37:2d:64:db:b7:ec:e0:8d:2e:d7:6a:32:d4: a5:97:2b:dd:82:f2:b4:53:8f:df:e6:1d:da:16:e7:28:6e:ca: 71:0a:7d:70:02:38:15:47:5f:b1:5a:f1:66:7a:81:0b:48:3e: e6:48:43:2e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9yyFsGyw2Gy4algw9zQ1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy NTUwZTQwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDJlZDJhNTFiMzY1MjlkNDVjODMyOGRmNWY0Njk2ZjdkYTQ1MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIf5orikr5yBERpHQqcD1VMdSYDU 4mX8NoGnunzhHdAvSIdENbB6c6MRkb/0i354M1OpmaTiFcyGV69X1Why1uX0bkWb zV5hV05Ez1FZIZa4lN5T3uHRrHIropEA75hCQqwCPPf+W8lkSfIQSQ+WQJdFzfHl 1qYHTUiDVBppdet46nZ0ntiXMJUo/3reVaZDvrcOqUPkNljrv15NK0rAumDb1Tz1 Y2IfVW+GtToa4E6iB9q6pOlIfw8gdCLU16YhD+w3CuADdHxAwk9lzXAak9RTqquD GrN3pbWSywe2ivh0pZWAq9AHhHa6wITW+OlDphBfm7tURvvqJLLiZOXyjQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFCQu0qUbNlKdRcgyjfX0aW99pFDaMB8GA1UdIwQY MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt MjkwNjJlODcwYjY0LzEvSkM3U3BSczJVcDFGeURLTjlmUnBiMzJrVU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0 LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAIuFrQD BAYuFoADBARQX6ADBANdXGADBAK5J3gDBAO8QhAwDQQCAAIwBwMFACABTBAwDQYJ KoZIhvcNAQELBQADggEBACH9aPLW92LX8mhOddthEwup3OaD+f6wtVEvvz5c06ZY dQStZOlzmgJOOH7wfrx24+mWWtHp85MWXS7OP0Bs7zw6W2xxYyDl8nCAd7ZEmku5 K2xqNSyrsuyZgNdV7Kr32sXGYpz9eamQ5hKeAsHaGXyY1Gd066Caz3RIYPE8w/Ee 5ybhEjVO8DXjS7yx1wL95Q0ftHYQp92bft6IJDsMXUv88mK81v3m7/DzJI7mOiUc NTs+NOXVIZqdtHx1jAd4zzcReNxRfTU3qjhbNy1k27fs4I0u12oy1KWXK92C8rRT j9/mHdoW5yhuynEKfXACOBVHX7Fa8WZ6gQtIPuZIQy4= -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:50 2026 by rpki-client