This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/J2nnsl4hy2WE-qoC70S5KQsrADI.roa File: J2nnsl4hy2WE-qoC70S5KQsrADI.roa (raw, json) Hash identifier: 31L418Se3H5NxhFPerS0cbyc5yLfPuyzYUI2VkqYY9Q= Subject key identifier: 27:69:E7:B2:5E:21:CB:65:84:FA:AA:02:EF:44:B9:29:0B:2B:00:32 Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e Certificate serial: 019B7CED5A14BCAE77E33E52D0437D6C7B05 Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/J2nnsl4hy2WE-qoC70S5KQsrADI.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204533 IP address blocks: 185.248.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5a:14:bc:ae:77:e3:3e:52:d0:43:7d:6c:7b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2769e7b25e21cb6584faaa02ef44b9290b2b0032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:57:1d:03:1e:4f:96:c5:38:07:5e:d8:8d: c8:ed:a9:8e:4c:7d:8b:37:d1:b3:5b:c7:43:a8:da: 00:4e:78:f4:0c:43:dd:17:c4:dc:50:67:ac:03:a6: 20:53:b1:cf:5e:77:1c:dc:38:e2:9c:bd:ac:ed:c3: 56:eb:43:bb:27:39:8a:06:a6:1d:05:a1:6f:15:d7: d6:5d:68:e0:41:01:1b:e1:50:02:be:e7:16:0b:ba: 22:67:79:6d:d2:d3:5e:97:54:d9:21:97:c9:04:e9: 0e:06:10:d9:80:8c:44:f3:15:1e:88:2d:1a:a3:37: 4f:88:10:1d:8f:e8:10:f7:6c:ef:e0:43:9f:8c:8b: 40:57:b6:8c:32:b7:f5:01:8a:1a:80:8f:78:f1:d8: f8:de:f1:d2:26:17:0e:27:59:b1:2b:1a:b8:9e:8a: 25:f9:b8:a5:3e:95:29:b7:44:25:76:77:9a:d9:15: 0b:fc:28:ab:63:11:b5:30:0c:6b:3d:0b:07:0f:59: 3f:91:96:da:4f:04:b0:f3:aa:d6:1c:c4:fa:4e:25: 65:d9:93:48:00:52:f0:42:4a:0b:02:75:43:fd:f7: fc:51:c1:53:a0:ee:e2:bd:1a:32:56:b6:2a:f5:27: 53:1d:93:44:ee:1f:77:bb:98:70:03:3f:c3:7d:eb: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:69:E7:B2:5E:21:CB:65:84:FA:AA:02:EF:44:B9:29:0B:2B:00:32 X509v3 Authority Key Identifier: keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/J2nnsl4hy2WE-qoC70S5KQsrADI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.32.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ba:58:84:4e:3d:d7:a9:65:4f:65:15:17:c9:ca:43:7a:54: 04:c0:ae:c0:7f:95:a9:d1:86:d0:20:16:18:aa:e9:a0:53:72: b9:b3:10:d4:e5:91:a2:14:a4:99:fa:37:ee:dc:eb:86:ff:90: b6:ba:2c:9b:24:36:e0:02:63:ca:0b:c6:62:68:61:47:7f:b1: 46:5d:44:43:6c:07:71:1c:f5:b4:1d:e6:63:ad:8c:66:10:76: 09:9f:3d:ff:f8:f1:a3:eb:46:90:65:7c:d4:49:51:c1:f1:1b: 17:4f:23:36:a2:5c:a7:f2:3b:09:d4:a8:54:c5:7a:32:f2:80: 57:b5:62:46:c6:e2:62:cb:c4:e4:d1:35:ae:22:dc:80:32:c8: 58:f0:17:3c:10:0f:c1:24:74:ef:8e:60:07:f8:2f:2a:bf:14: 62:3f:0d:36:9c:a1:76:20:d8:58:e9:79:af:be:05:26:19:47: da:b8:41:00:78:c1:e7:7f:d2:47:25:37:95:d0:70:d8:4b:d4: 93:c9:ab:14:14:f4:b9:63:b6:6d:5c:04:f9:33:39:9e:52:f9: 20:0e:00:45:4c:3a:4d:45:f4:1b:81:78:fa:0f:13:d3:b0:c8: 9c:a6:f6:46:2a:36:88:ab:15:25:bf:ab:be:6e:23:cc:47:86: 0e:9a:3a:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VoUvK534z5S0EN9bHsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4 ZmFiM2UwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzY5ZTdiMjVlMjFjYjY1ODRmYWFhMDJlZjQ0YjkyOTBiMmIwMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdVXHQMeT5bFOAde2I3I7amOTH2L N9GzW8dDqNoATnj0DEPdF8TcUGesA6YgU7HPXncc3DjinL2s7cNW60O7JzmKBqYd BaFvFdfWXWjgQQEb4VACvucWC7oiZ3lt0tNel1TZIZfJBOkOBhDZgIxE8xUeiC0a ozdPiBAdj+gQ92zv4EOfjItAV7aMMrf1AYoagI948dj43vHSJhcOJ1mxKxq4nool +bilPpUpt0Qldnea2RUL/CirYxG1MAxrPQsHD1k/kZbaTwSw86rWHMT6TiVl2ZNI AFLwQkoLAnVD/ff8UcFToO7ivRoyVrYq9SdTHZNE7h93u5hwAz/Dfeu4mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdp57JeIctlhPqqAu9EuSkLKwAyMB8GA1UdIwQY MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt MDQxMzEyMjQyZmYzLzEvSjJubnNsNGh5MldFLXFvQzcwUzVLUXNyQURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufggMA0G CSqGSIb3DQEBCwUAA4IBAQCpuliETj3XqWVPZRUXycpDelQEwK7Af5Wp0YbQIBYY qumgU3K5sxDU5ZGiFKSZ+jfu3OuG/5C2uiybJDbgAmPKC8ZiaGFHf7FGXURDbAdx HPW0HeZjrYxmEHYJnz3/+PGj60aQZXzUSVHB8RsXTyM2olyn8jsJ1KhUxXoy8oBX tWJGxuJiy8Tk0TWuItyAMshY8Bc8EA/BJHTvjmAH+C8qvxRiPw02nKF2INhY6Xmv vgUmGUfauEEAeMHnf9JHJTeV0HDYS9STyasUFPS5Y7ZtXAT5MzmeUvkgDgBFTDpN RfQbgXj6DxPTsMicpvZGKjaIqxUlv6u+biPMR4YOmjpj -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client