This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa File: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (raw, json) Hash identifier: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ= Subject key identifier: 44:9D:44:25:A6:B7:AA:32:59:5A:E0:70:95:0A:92:9B:0B:28:D6:38 Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Certificate serial: 019B7C805555EBC0B8C982AB27261C5809A2 Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203185 IP address blocks: 185.112.244.0/24 maxlen: 24 185.112.245.0/24 maxlen: 24 185.112.246.0/24 maxlen: 24 185.112.247.0/24 maxlen: 24 2a02:6e40:3::/48 maxlen: 48 2a02:6e40:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:55:eb:c0:b8:c9:82:ab:27:26:1c:58:09:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=449d4425a6b7aa32595ae070950a929b0b28d638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:8b:00:ce:07:4d:69:b8:53:08:ce:23:07: bf:d3:4c:04:65:92:73:7c:a1:45:32:0b:a8:9d:b4: 37:53:52:ed:ca:c0:3e:e3:37:3b:22:40:41:be:0e: 50:9e:10:0b:b6:a7:1a:42:fb:ad:c8:e3:38:ae:23: 1f:87:06:cc:05:eb:c8:4c:4b:57:37:df:4a:6e:a1: ec:0d:cb:7f:7b:82:c2:a5:57:ff:31:57:18:a6:f8: 40:3e:c2:15:6b:bf:c1:c4:2e:2c:ea:e1:21:1e:c2: 68:07:b9:bc:3d:74:12:79:50:52:e5:02:74:be:06: 83:07:b4:de:ea:0c:e9:48:32:3d:77:60:03:4e:25: 3e:ef:27:dc:c2:b1:04:3a:be:f7:0b:76:47:f2:4e: 0a:12:19:4d:de:84:72:ce:14:e9:00:dd:70:fd:b6: f7:73:ce:f7:5a:73:4d:af:29:c3:71:e7:6d:66:01: 5a:3d:41:02:4d:cf:79:74:0b:a1:1b:4e:dd:3c:f1: d3:ab:d7:e9:ef:12:40:e2:67:f1:a1:49:dc:76:0a: b1:d6:41:ea:2f:6b:c9:94:53:56:40:35:d2:d4:3e: 8a:b2:b2:e8:6c:2d:f6:a5:b2:3a:61:44:87:48:f9: df:b9:20:d5:35:94:25:42:72:b4:da:3e:ec:1d:19: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9D:44:25:A6:B7:AA:32:59:5A:E0:70:95:0A:92:9B:0B:28:D6:38 X509v3 Authority Key Identifier: keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.244.0/22 IPv6: 2a02:6e40:3::-2a02:6e40:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:dc:77:72:2a:d9:89:4b:1d:2a:33:77:2c:fd:4c:6e:d4:4c: 40:2e:f3:4b:1f:c0:21:46:ea:15:18:f7:29:e7:c9:2b:8f:58: 30:fe:25:be:5e:76:2b:11:b5:5a:5d:6c:1e:93:31:6f:79:e5: 4e:6c:f2:9d:9e:c2:91:26:68:e2:5e:3b:25:72:ee:57:b8:14: 7f:88:5c:a3:27:4c:d9:2c:92:b8:9b:09:5d:cf:13:c9:96:b7: 3f:a1:42:ca:82:10:30:44:ee:6c:64:dc:0b:81:99:f2:81:60: e9:04:6e:f8:3c:aa:ff:10:f2:42:34:ce:00:26:90:ed:d4:39: 34:ce:73:f3:91:86:47:bf:2a:6f:02:bc:76:2b:5e:09:c2:ca: e3:23:0b:55:27:b0:4b:05:b7:c5:f1:1f:a4:b3:e1:3c:40:4f: 4f:6a:c8:53:75:30:46:95:ce:15:bc:e3:a9:36:10:19:e7:73: 8a:ab:c7:0a:fc:02:3c:b5:5f:be:2e:cf:39:84:4a:a9:d9:e1: dc:f1:1f:73:23:75:a4:8d:51:b0:63:a7:24:2b:36:f2:f6:09: 6d:80:06:6f:4a:02:36:5d:19:14:c9:52:ed:42:7d:7a:3c:23: 70:a3:ac:87:fa:e0:01:f7:f5:25:34:0a:33:80:1b:98:d3:8e: 0b:41:c9:21 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8gFVV68C4yYKrJyYcWAmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5 MDJlMmQwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDlkNDQyNWE2YjdhYTMyNTk1YWUwNzA5NTBhOTI5YjBiMjhkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8SLAM4HTWm4UwjOIwe/00wEZZJz fKFFMguonbQ3U1LtysA+4zc7IkBBvg5QnhALtqcaQvutyOM4riMfhwbMBevITEtX N99KbqHsDct/e4LCpVf/MVcYpvhAPsIVa7/BxC4s6uEhHsJoB7m8PXQSeVBS5QJ0 vgaDB7Te6gzpSDI9d2ADTiU+7yfcwrEEOr73C3ZH8k4KEhlN3oRyzhTpAN1w/bb3 c873WnNNrynDcedtZgFaPUECTc95dAuhG07dPPHTq9fp7xJA4mfxoUncdgqx1kHq L2vJlFNWQDXS1D6KsrLobC32pbI6YUSHSPnfuSDVNZQlQnK02j7sHRnq+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFESdRCWmt6oyWVrgcJUKkpsLKNY4MB8GA1UdIwQY MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt MzY1NTMwMmJmMDA1LzEvUkoxRUphYTNxakpaV3VCd2xRcVNtd3NvMWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1 LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCuXD0MBoE AgACMBQwEgMHACoCbkAAAwMHACoCbkAABDANBgkqhkiG9w0BAQsFAAOCAQEAddx3 cirZiUsdKjN3LP1MbtRMQC7zSx/AIUbqFRj3KefJK49YMP4lvl52KxG1Wl1sHpMx b3nlTmzynZ7CkSZo4l47JXLuV7gUf4hcoydM2SySuJsJXc8TyZa3P6FCyoIQMETu bGTcC4GZ8oFg6QRu+Dyq/xDyQjTOACaQ7dQ5NM5z85GGR78qbwK8diteCcLK4yML VSewSwW3xfEfpLPhPEBPT2rIU3UwRpXOFbzjqTYQGedziqvHCvwCPLVfvi7POYRK qdnh3PEfcyN1pI1RsGOnJCs28vYJbYAGb0oCNl0ZFMlS7UJ9ejwjcKOsh/rgAff1 JTQKM4AbmNOOC0HJIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:17 2026 by rpki-client