This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa File: cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa (raw, json) Hash identifier: d08NWXtlSQGeDRPYfCwBaxm1c8qg8kNQWXxjIs+wmGU= Subject key identifier: 72:3F:8B:DA:B1:97:BD:82:98:93:A6:BE:01:D7:C5:94:51:70:6F:EB Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Certificate serial: 019B7BA53F1E92A73879F3BABA41B28432E1 Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62000 IP address blocks: 45.147.96.0/23 maxlen: 24 45.147.98.0/24 maxlen: 24 45.147.99.0/24 maxlen: 24 45.155.168.0/22 maxlen: 24 45.155.168.0/24 maxlen: 24 185.157.244.0/24 maxlen: 24 185.157.245.0/24 maxlen: 24 185.216.24.0/24 maxlen: 24 185.216.25.0/24 maxlen: 24 185.216.26.0/24 maxlen: 24 185.216.27.0/24 maxlen: 24 193.168.144.0/24 maxlen: 24 193.168.145.0/24 maxlen: 24 193.168.146.0/24 maxlen: 24 193.168.147.0/24 maxlen: 24 2a07:abc0::/29 maxlen: 64 2a09:6382::/32 maxlen: 64 2a09:6383::/32 maxlen: 64 2a09:6384::/32 maxlen: 64 2a09:6385::/32 maxlen: 64 2a09:6386::/32 maxlen: 32 2a0b:b140::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3f:1e:92:a7:38:79:f3:ba:ba:41:b2:84:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=723f8bdab197bd829893a6be01d7c59451706feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:16:88:09:7c:e0:e3:cd:20:ac:76:d0:52: ec:8a:80:b4:d6:19:76:1a:b3:f4:4a:84:e5:7f:e6: bb:b5:54:3c:af:18:bb:4f:df:bf:a9:9a:de:3d:f9: 55:1d:ca:75:6c:0d:3e:79:fb:86:38:6f:44:bb:da: 22:40:df:5b:ad:ad:55:30:83:d1:d4:3a:41:a8:d6: 6f:48:3b:69:89:c4:15:b7:d9:70:4d:8f:18:ce:13: af:2a:22:57:ea:29:fb:bf:53:2e:6a:a0:9f:85:62: 4a:2c:b7:17:f9:04:11:f6:f2:9d:02:0f:ef:8f:5a: d4:33:2d:04:55:7f:11:52:55:b8:a3:28:09:ac:c9: 5c:ef:5a:3f:50:99:39:34:15:09:57:30:13:17:af: d6:f9:24:1e:1b:a0:48:ab:ce:ad:94:62:05:ea:ce: fe:08:fb:b8:03:e4:c1:57:e0:c9:20:6f:31:32:ff: 3a:0e:6b:5f:d2:ea:f5:9b:bf:e6:a2:d1:3d:99:2f: 9f:f8:e6:6c:b0:a7:2a:4e:69:05:bc:9f:58:ac:d6: 5e:b4:e1:d3:dc:73:5a:95:95:a6:cc:62:99:66:63: 76:14:bc:6f:14:c3:46:5f:df:7a:e2:35:bc:6c:bc: 8d:86:ed:7e:5a:6d:ff:33:18:7d:09:5e:ce:d0:18: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:8B:DA:B1:97:BD:82:98:93:A6:BE:01:D7:C5:94:51:70:6F:EB X509v3 Authority Key Identifier: keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.96.0/22 45.155.168.0/22 185.157.244.0/23 185.216.24.0/22 193.168.144.0/22 IPv6: 2a07:abc0::/29 2a09:6382::-2a09:6386:ffff:ffff:ffff:ffff:ffff:ffff 2a0b:b140::/29 Signature Algorithm: sha256WithRSAEncryption 2a:31:fd:bc:88:95:67:64:62:8a:83:a5:08:8d:20:b8:44:3a: 5a:e9:f4:a0:ad:f3:e8:ff:1f:de:ee:d2:e8:94:6a:b8:6e:f1: 45:32:45:46:fb:ee:fc:d8:4b:14:e9:d3:d0:8c:18:d0:d2:0f: f6:e0:22:97:26:0a:f4:fa:f0:96:db:ea:e9:ed:c6:f9:57:d0: 83:9d:74:c8:c0:dd:b6:ce:f2:99:e2:d2:8e:1d:e1:82:09:88: 18:c6:00:a7:c7:81:2c:b9:d0:8e:d2:a4:53:7d:24:d3:5e:dc: 26:8c:2d:60:c8:98:31:9a:c6:f2:55:0d:cb:47:dc:3c:2f:9e: 4d:0c:02:f8:3b:c1:34:e0:84:f6:06:ca:25:9c:2d:92:b7:4d: 92:6d:fa:13:e1:e4:96:eb:71:2b:cb:9e:4d:13:74:d9:b8:09: 81:e2:14:a2:a9:6a:d7:49:6a:c2:e1:de:41:41:e3:c6:1a:56: a6:8c:59:2d:79:91:fc:9a:ab:0d:50:9b:b5:16:90:da:0e:0b: ea:84:a4:f6:33:b0:09:0a:b5:fd:2d:65:7d:6a:40:2e:f3:26: 60:69:91:1e:dd:c9:74:53:c7:03:bc:94:25:48:18:33:13:a3: de:7a:82:6d:28:04:16:75:94:ca:a0:49:72:db:6e:37:9c:b4: 2f:63:65:f7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt7pT8ekqc4efO6ukGyhDLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl YmQwYjgwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjNmOGJkYWIxOTdiZDgyOTg5M2E2YmUwMWQ3YzU5NDUxNzA2ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucWiAl84OPNIKx20FLsioC01hl2 GrP0SoTlf+a7tVQ8rxi7T9+/qZrePflVHcp1bA0+efuGOG9Eu9oiQN9bra1VMIPR 1DpBqNZvSDtpicQVt9lwTY8YzhOvKiJX6in7v1MuaqCfhWJKLLcX+QQR9vKdAg/v j1rUMy0EVX8RUlW4oygJrMlc71o/UJk5NBUJVzATF6/W+SQeG6BIq86tlGIF6s7+ CPu4A+TBV+DJIG8xMv86Dmtf0ur1m7/motE9mS+f+OZssKcqTmkFvJ9YrNZetOHT 3HNalZWmzGKZZmN2FLxvFMNGX9964jW8bLyNhu1+Wm3/Mxh9CV7O0BjN0QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFHI/i9qxl72CmJOmvgHXxZRRcG/rMB8GA1UdIwQY MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt YzQxZGNjYThiNzc1LzEvY2otTDJyR1h2WUtZazZhLUFkZkZsRkZ3Yi1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1 LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAkBAIAATAeAwQCLZNgAwQC LZuoAwQBuZ30AwQCudgYAwQCwaiQMCQEAgACMB4DBQMqB6vAMA4DBQEqCWOCAwUA KgljhgMFAyoLsUAwDQYJKoZIhvcNAQELBQADggEBACox/byIlWdkYoqDpQiNILhE Olrp9KCt8+j/H97u0uiUarhu8UUyRUb77vzYSxTp09CMGNDSD/bgIpcmCvT68Jbb 6untxvlX0IOddMjA3bbO8pni0o4d4YIJiBjGAKfHgSy50I7SpFN9JNNe3CaMLWDI mDGaxvJVDctH3Dwvnk0MAvg7wTTghPYGyiWcLZK3TZJt+hPh5JbrcSvLnk0TdNm4 CYHiFKKpatdJasLh3kFB48YaVqaMWS15kfyaqw1Qm7UWkNoOC+qEpPYzsAkKtf0t ZX1qQC7zJmBpkR7dyXRTxwO8lCVIGDMTo956gm0oBBZ1lMqgSXLbbjectC9jZfc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:29 2026 by rpki-client