This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/2JTjCNKMAxBu0WpDBBMJTO7JE08.roa File: 2JTjCNKMAxBu0WpDBBMJTO7JE08.roa (raw, json) Hash identifier: tj4BSTj23X17OmZWgILj54BaiHHtzK2DS2th4uQEtHw= Subject key identifier: D8:94:E3:08:D2:8C:03:10:6E:D1:6A:43:04:13:09:4C:EE:C9:13:4F Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019A54C0829BC262D6488D7970DA06434191 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/2JTjCNKMAxBu0WpDBBMJTO7JE08.roa Signing time: Wed 05 Nov 2025 16:01:33 +0000 ROA not before: Wed 05 Nov 2025 16:01:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199883 IP address blocks: 89.36.220.0/22 maxlen: 24 89.38.144.0/22 maxlen: 24 89.40.120.0/22 maxlen: 24 94.177.248.0/22 maxlen: 24 94.177.252.0/22 maxlen: 24 185.43.208.0/22 maxlen: 24 185.58.224.0/22 maxlen: 24 217.61.16.0/21 maxlen: 24 2a01:6e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:c0:82:9b:c2:62:d6:48:8d:79:70:da:06:43:41:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Nov 5 16:01:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d894e308d28c03106ed16a430413094ceec9134f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:18:e2:4a:a5:5e:ba:db:ac:11:90:9d:1f: 39:80:96:8d:41:11:54:b3:8c:b9:38:5e:e9:b7:09: 44:77:a0:4c:29:a1:c1:59:63:c9:e3:52:2e:4c:32: 04:c3:e2:4a:3a:9f:7b:ad:e5:95:9c:91:85:e0:5d: ca:bc:a6:2f:cf:38:de:a7:97:19:aa:5b:5f:1a:8f: 60:e2:23:98:10:f5:a8:61:01:4d:6a:b2:f6:e4:d2: ff:fb:a4:98:8f:5b:e3:05:93:7e:39:de:6f:9b:dd: 98:89:2e:3d:b4:4d:df:be:d6:3d:f1:24:b3:87:0c: f1:5b:a6:24:2e:28:b9:a0:9c:eb:08:d6:ec:5d:e1: cc:93:2d:bf:53:ac:55:c1:23:ed:ef:d2:7c:be:61: 22:e0:b4:04:0d:0f:39:a4:cf:72:c9:8d:67:16:fa: 26:03:7d:0c:8f:fc:f3:7e:c3:c4:6f:f9:0c:23:aa: c6:5d:41:6d:59:2d:68:ca:e4:bc:3f:cd:6e:31:d4: 24:9e:9b:3b:80:36:5b:fb:fa:f3:10:e4:a6:f0:6d: 49:0e:f0:34:73:a9:ca:7b:67:ed:10:4b:63:c3:df: a5:7d:e2:75:c2:67:b1:c8:e9:d4:d5:e5:4b:90:8e: 1e:c4:7d:ce:4a:8f:76:76:db:a6:ba:c6:12:16:60: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:94:E3:08:D2:8C:03:10:6E:D1:6A:43:04:13:09:4C:EE:C9:13:4F X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/2JTjCNKMAxBu0WpDBBMJTO7JE08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.220.0/22 89.38.144.0/22 89.40.120.0/22 94.177.248.0/21 185.43.208.0/22 185.58.224.0/22 217.61.16.0/21 IPv6: 2a01:6e60::/32 Signature Algorithm: sha256WithRSAEncryption 94:08:72:c4:47:01:a9:1b:3f:ad:c8:7f:e1:ae:55:74:41:8e: 26:f1:df:6c:4a:28:d8:d7:78:5b:6c:a4:95:37:01:4e:53:30: 13:31:f3:a8:72:68:b6:24:c7:d0:9b:d8:64:3e:23:b8:c3:d0: 6c:77:68:27:c0:05:20:e6:a4:32:36:05:20:de:12:c5:da:ac: 53:4f:4a:89:f4:af:cd:ce:c7:e5:2c:ed:9f:b8:26:5e:29:04: 94:00:b6:77:79:37:61:be:ce:14:16:85:9b:e1:5b:dc:80:eb: ca:6b:62:f9:16:00:53:26:f4:7b:fc:66:d2:a5:fe:7f:a9:93: 84:69:73:90:94:5e:f6:a2:3d:0f:66:8f:fd:33:54:28:69:fd: 5d:11:11:35:a0:d3:5e:fe:00:49:74:87:83:f0:06:1a:97:37: ce:07:d5:6d:cc:cd:2d:00:41:e6:cc:7d:bc:57:2e:80:83:d0: 3a:62:e0:fc:be:0d:33:ba:93:e5:6f:db:9b:d8:a8:17:cd:d1: f5:a2:a3:6f:e6:5e:09:03:13:f4:44:2b:cb:b0:39:6f:8e:33: 8c:d9:b0:b1:e1:ed:6d:a9:73:35:04:ec:be:bc:2e:5c:94:25: 85:c3:9b:36:a8:46:17:92:69:20:09:1a:21:16:d7:7d:f5:f8: b1:1e:8e:40 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZpUwIKbwmLWSI15cNoGQ0GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMTA1MTYwMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODk0ZTMwOGQyOGMwMzEwNmVkMTZhNDMwNDEzMDk0Y2VlYzkxMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve0Y4kqlXrrbrBGQnR85gJaNQRFU s4y5OF7ptwlEd6BMKaHBWWPJ41IuTDIEw+JKOp97reWVnJGF4F3KvKYvzzjep5cZ qltfGo9g4iOYEPWoYQFNarL25NL/+6SYj1vjBZN+Od5vm92YiS49tE3fvtY98SSz hwzxW6YkLii5oJzrCNbsXeHMky2/U6xVwSPt79J8vmEi4LQEDQ85pM9yyY1nFvom A30Mj/zzfsPEb/kMI6rGXUFtWS1oyuS8P81uMdQknps7gDZb+/rzEOSm8G1JDvA0 c6nKe2ftEEtjw9+lfeJ1wmexyOnU1eVLkI4exH3OSo92dtumusYSFmD16wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFNiU4wjSjAMQbtFqQwQTCUzuyRNPMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMkpUakNOS01BeEJ1MFdwREJCTUpUTzdKRTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCWSTcAwQC WSaQAwQCWSh4AwQDXrH4AwQCuSvQAwQCuTrgAwQD2T0QMA0EAgACMAcDBQAqAW5g MA0GCSqGSIb3DQEBCwUAA4IBAQCUCHLERwGpGz+tyH/hrlV0QY4m8d9sSijY13hb bKSVNwFOUzATMfOocmi2JMfQm9hkPiO4w9Bsd2gnwAUg5qQyNgUg3hLF2qxTT0qJ 9K/NzsflLO2fuCZeKQSUALZ3eTdhvs4UFoWb4VvcgOvKa2L5FgBTJvR7/GbSpf5/ qZOEaXOQlF72oj0PZo/9M1Qoaf1dERE1oNNe/gBJdIeD8AYalzfOB9VtzM0tAEHm zH28Vy6Ag9A6YuD8vg0zupPlb9ub2KgXzdH1oqNv5l4JAxP0RCvLsDlvjjOM2bCx 4e1tqXM1BOy+vC5clCWFw5s2qEYXkmkgCRohFtd99fixHo5A -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:46 2025 by rpki-client