This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/JeFks6SyUKUdGcPpnRu7HceMVqI.roa File: JeFks6SyUKUdGcPpnRu7HceMVqI.roa (raw, json) Hash identifier: fG7mhBWGrI11+SMkgosBLh6lyTzRJMTAZnL7F7NiLMY= Subject key identifier: 25:E1:64:B3:A4:B2:50:A5:1D:19:C3:E9:9D:1B:BB:1D:C7:8C:56:A2 Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Certificate serial: 019B7910DFCC720F4D5F3DD4E14AE2D03137 Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/JeFks6SyUKUdGcPpnRu7HceMVqI.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15547 IP address blocks: 185.205.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:df:cc:72:0f:4d:5f:3d:d4:e1:4a:e2:d0:31:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25e164b3a4b250a51d19c3e99d1bbb1dc78c56a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:3e:81:48:b8:f4:33:bb:b4:13:a4:43:9d: 8c:37:bc:a6:8f:2e:03:03:13:7f:17:61:53:c6:ea: 60:34:64:2d:26:26:66:a6:4c:02:e5:09:95:cf:61: 9b:33:9a:67:22:8d:a4:42:70:ef:e4:b4:47:ef:b2: 2a:d0:fe:9c:d7:12:6c:5a:f1:8c:2e:a1:3d:72:e0: 30:f6:80:dc:f7:44:a1:ba:a4:1f:f2:b5:27:72:9f: 65:62:41:23:df:3f:0f:b2:e4:96:9c:1a:63:24:3e: a0:48:68:24:47:d4:32:70:10:c2:c7:e5:5d:94:cf: 32:04:38:47:c5:d9:ab:b3:01:61:cf:7c:f6:5e:ee: 64:93:b5:a4:39:69:f2:8c:fd:ba:3a:a4:1b:9b:6c: 38:7c:0e:28:65:28:9e:b4:6b:ad:4a:75:fa:d3:55: 7c:7e:68:5a:6d:3e:22:47:22:31:bd:85:14:41:c4: 17:2b:4f:03:c4:74:a8:a9:75:fd:13:ff:49:b0:48: 6a:46:96:19:99:03:0d:19:17:a9:74:a7:c6:f6:3b: 42:21:01:e7:29:f8:a0:63:2f:73:ab:70:b7:c2:93: fc:66:a0:6f:a3:0e:3b:22:80:8d:da:bc:94:a4:87: dd:61:41:0d:e9:ab:8d:2a:de:48:92:43:dc:57:f0: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:64:B3:A4:B2:50:A5:1D:19:C3:E9:9D:1B:BB:1D:C7:8C:56:A2 X509v3 Authority Key Identifier: keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/JeFks6SyUKUdGcPpnRu7HceMVqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.108.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:c3:30:d0:71:17:6e:7f:f8:d8:91:99:60:04:ef:61:0c:58: 19:9d:a4:d9:c5:74:7e:99:c0:ca:7c:6a:77:10:ba:dc:d5:80: 4b:d7:d7:c5:67:3a:bf:a9:c2:92:4a:78:37:42:9e:54:aa:d0: 04:a8:d2:55:d6:82:92:cb:e5:cb:6f:56:e1:e7:21:e0:e0:af: 28:ce:69:c1:ac:78:e6:cd:30:c2:cf:3e:c4:e5:32:d4:fb:20: d5:9a:02:cc:94:31:1f:5c:b3:65:d1:64:0e:96:4b:4d:13:2f: 8c:b5:74:7e:87:21:68:1d:87:22:20:38:bf:40:1f:8b:71:6f: 6b:71:b5:eb:af:50:81:97:39:bd:9f:16:ff:16:0a:47:89:9e: c2:04:10:94:71:b6:a8:82:94:34:61:3b:87:c7:3e:fd:5e:c7: d9:bb:0d:df:e3:4c:09:76:b4:50:ed:c5:0e:31:05:63:9e:7f: dd:ac:fa:48:5e:51:f0:18:a8:88:83:2d:39:60:83:fa:7e:a3: e4:a4:8a:5e:0d:27:ce:d4:7a:29:96:55:09:52:e6:88:bb:21: f6:ff:f0:de:da:3d:5b:20:b5:7d:60:c1:93:d2:e2:11:28:64: a4:25:74:22:be:bd:9e:c1:62:82:a3:36:9f:6c:a7:9b:50:99: 4c:60:4b:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EN/Mcg9NXz3U4Uri0DE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5 ODJhM2QwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWUxNjRiM2E0YjI1MGE1MWQxOWMzZTk5ZDFiYmIxZGM3OGM1NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1g+gUi49DO7tBOkQ52MN7ymjy4D AxN/F2FTxupgNGQtJiZmpkwC5QmVz2GbM5pnIo2kQnDv5LRH77Iq0P6c1xJsWvGM LqE9cuAw9oDc90ShuqQf8rUncp9lYkEj3z8PsuSWnBpjJD6gSGgkR9QycBDCx+Vd lM8yBDhHxdmrswFhz3z2Xu5kk7WkOWnyjP26OqQbm2w4fA4oZSietGutSnX601V8 fmhabT4iRyIxvYUUQcQXK08DxHSoqXX9E/9JsEhqRpYZmQMNGRepdKfG9jtCIQHn KfigYy9zq3C3wpP8ZqBvow47IoCN2ryUpIfdYUEN6auNKt5IkkPcV/AlCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXhZLOkslClHRnD6Z0bux3HjFaiMB8GA1UdIwQY MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt MDhmMTdjNDEwNzY1LzEvSmVGa3M2U3lVS1VkR2NQcG5SdTdIY2VNVnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1 LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc1sMA0G CSqGSIb3DQEBCwUAA4IBAQBPwzDQcRduf/jYkZlgBO9hDFgZnaTZxXR+mcDKfGp3 ELrc1YBL19fFZzq/qcKSSng3Qp5UqtAEqNJV1oKSy+XLb1bh5yHg4K8ozmnBrHjm zTDCzz7E5TLU+yDVmgLMlDEfXLNl0WQOlktNEy+MtXR+hyFoHYciIDi/QB+LcW9r cbXrr1CBlzm9nxb/FgpHiZ7CBBCUcbaogpQ0YTuHxz79XsfZuw3f40wJdrRQ7cUO MQVjnn/drPpIXlHwGKiIgy05YIP6fqPkpIpeDSfO1HopllUJUuaIuyH2//De2j1b ILV9YMGT0uIRKGSkJXQivr2ewWKCozafbKebUJlMYEsZ -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:00 2026 by rpki-client