This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa File: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (raw, json) Hash identifier: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE= Subject key identifier: D2:3F:84:DA:9E:F2:3D:03:1E:9A:01:AF:49:14:99:E0:CB:D1:08:D5 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B7F1550DC69C4C3D3D0666624DFA6841B Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28852 IP address blocks: 217.214.194.0/24 maxlen: 24 217.214.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:50:dc:69:c4:c3:d3:d0:66:66:24:df:a6:84:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d23f84da9ef23d031e9a01af491499e0cbd108d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:e2:70:53:69:3e:78:93:d5:60:82:5b:b0: 19:f5:b4:eb:94:61:2e:a1:7e:b8:1c:dc:f0:b0:4f: e5:48:54:b7:d7:d2:a1:7d:06:e0:fb:50:b9:52:fc: 70:cd:ad:c5:93:fd:77:a9:c5:24:2b:63:3c:0e:47: be:51:e2:74:fa:e4:8c:30:fb:eb:69:14:02:27:da: 52:4c:83:ea:ce:76:47:f9:bb:bb:9f:fb:8d:a2:42: 6d:e7:9d:b9:fb:7e:76:a3:ff:36:33:ca:39:38:45: 07:2c:9c:7d:3c:62:57:91:ae:c6:7f:d9:a3:02:6e: b5:dd:0d:ab:e4:31:e5:7f:45:1e:9f:21:fa:14:22: 08:12:aa:7a:24:e8:44:b3:06:d0:91:62:a8:6e:73: 82:fe:97:41:26:81:d3:7f:79:72:26:11:8e:e8:6e: fc:99:2a:70:e1:4d:fc:16:34:33:ed:86:4b:e1:84: 9f:e1:10:62:29:92:70:d1:e0:9c:6a:4a:ff:d0:a0: 3f:50:1e:15:1b:2a:f4:23:94:93:d3:cb:56:e4:8d: 22:72:5f:6b:9a:5e:3f:da:48:5e:7a:f6:ca:89:31: 6d:89:dc:86:29:07:8a:b0:5c:48:c8:2f:21:5f:77: d9:3b:f2:ff:99:75:f0:bb:54:4f:8d:4a:8f:f8:f8: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3F:84:DA:9E:F2:3D:03:1E:9A:01:AF:49:14:99:E0:CB:D1:08:D5 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.214.194.0/23 Signature Algorithm: sha256WithRSAEncryption 54:79:87:10:57:c3:6b:18:e5:4f:03:45:f7:e4:ba:b3:70:a8: ee:23:4d:27:1e:9e:10:a9:d5:5b:bd:95:77:16:7a:d4:d5:84: 93:4b:f1:40:97:5c:fe:a5:ad:4e:cf:8b:17:f4:a6:c9:d6:e6: dd:fc:49:27:dd:43:a2:a8:50:54:5c:49:cd:cb:e5:62:4e:d1: 36:89:93:63:93:61:69:e3:32:98:51:5c:e8:f0:99:15:60:9f: 48:55:b1:1a:d9:f4:cd:7e:24:e5:2e:d0:cb:42:60:12:40:74: 48:2d:84:f6:40:c3:83:2a:64:34:84:63:7d:a0:02:7a:82:53: a9:c6:c9:d6:94:8e:15:aa:e2:4d:fb:06:29:88:bb:b6:b9:0c: db:2b:ad:e2:ce:73:13:85:d7:21:4b:91:55:ba:2c:7b:6d:6a: 18:78:10:e8:40:d5:4c:32:6e:23:3c:4f:7e:bf:94:90:8b:64: 49:5f:7b:c5:db:22:48:80:cb:fc:15:18:1e:9e:1c:49:1f:bf: a0:67:02:e2:e1:69:f7:ab:97:0a:71:4e:a1:f1:fe:9c:21:b8: 4d:74:27:30:83:78:0a:12:cf:6d:44:2d:67:43:c1:8d:3a:8e: c3:e6:f1:5e:d8:4f:3f:3e:b3:da:13:b3:75:d2:7c:1f:f3:b6: 0d:65:c6:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVDcacTD09BmZiTfpoQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjNmODRkYTllZjIzZDAzMWU5YTAxYWY0OTE0OTllMGNiZDEwOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPicFNpPniT1WCCW7AZ9bTrlGEu oX64HNzwsE/lSFS319KhfQbg+1C5Uvxwza3Fk/13qcUkK2M8Dke+UeJ0+uSMMPvr aRQCJ9pSTIPqznZH+bu7n/uNokJt5525+352o/82M8o5OEUHLJx9PGJXka7Gf9mj Am613Q2r5DHlf0UenyH6FCIIEqp6JOhEswbQkWKobnOC/pdBJoHTf3lyJhGO6G78 mSpw4U38FjQz7YZL4YSf4RBiKZJw0eCcakr/0KA/UB4VGyr0I5ST08tW5I0icl9r ml4/2kheevbKiTFtidyGKQeKsFxIyC8hX3fZO/L/mXXwu1RPjUqP+PjOAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNI/hNqe8j0DHpoBr0kUmeDL0QjVMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvMGotRTJwN3lQUU1lbWdHdlNSU1o0TXZSQ05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2dbCMA0G CSqGSIb3DQEBCwUAA4IBAQBUeYcQV8NrGOVPA0X35LqzcKjuI00nHp4QqdVbvZV3 FnrU1YSTS/FAl1z+pa1Oz4sX9KbJ1ubd/Ekn3UOiqFBUXEnNy+ViTtE2iZNjk2Fp 4zKYUVzo8JkVYJ9IVbEa2fTNfiTlLtDLQmASQHRILYT2QMODKmQ0hGN9oAJ6glOp xsnWlI4VquJN+wYpiLu2uQzbK63iznMThdchS5FVuix7bWoYeBDoQNVMMm4jPE9+ v5SQi2RJX3vF2yJIgMv8FRgenhxJH7+gZwLi4Wn3q5cKcU6h8f6cIbhNdCcwg3gK Es9tRC1nQ8GNOo7D5vFe2E8/PrPaE7N10nwf87YNZcaV -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:34 2026 by rpki-client