This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/j2oK7garGa64vPG9Zj-3eHhby28.roa File: j2oK7garGa64vPG9Zj-3eHhby28.roa (raw, json) Hash identifier: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0= Subject key identifier: 8F:6A:0A:EE:06:AB:19:AE:B8:BC:F1:BD:66:3F:B7:78:78:5B:CB:6F Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758846BFAB304244CFA3A18EA8EB41B Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/j2oK7garGa64vPG9Zj-3eHhby28.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2088 IP address blocks: 193.51.58.0/24 maxlen: 24 193.54.33.0/24 maxlen: 24 193.55.5.0/24 maxlen: 24 194.254.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:6b:fa:b3:04:24:4c:fa:3a:18:ea:8e:b4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6a0aee06ab19aeb8bcf1bd663fb778785bcb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:f9:63:7e:1e:51:ed:2e:42:1d:e9:8f:ff: 57:74:09:13:96:6b:30:54:8a:0a:c1:c3:65:a0:e1: 31:de:32:20:76:a6:d4:01:86:b5:69:74:3f:84:8a: f2:13:5c:86:c0:36:f2:5f:6f:4e:ac:ea:57:20:ca: 86:85:61:43:8e:52:97:ad:79:81:fc:99:4c:5e:55: 4c:71:60:20:62:37:50:2f:2a:60:83:64:8d:19:36: 39:73:c4:10:d6:ce:76:6f:af:9f:b8:15:4e:f1:d2: 50:25:5e:20:cc:a1:81:14:a9:b5:29:a8:ef:36:6a: ac:07:25:85:da:21:f8:ee:ec:83:a0:17:22:10:d6: 9e:19:5b:54:bf:28:04:71:cc:2c:86:2e:40:cf:84: f4:9d:56:6f:7b:ff:4a:7f:94:9f:44:ea:cd:ec:a7: 35:2c:84:72:1b:72:da:75:34:fb:7e:09:2b:08:1c: bd:57:80:43:9a:1a:da:a7:ea:f1:e2:93:2f:85:bb: dc:47:ab:b1:65:5e:18:fd:e9:70:fc:83:06:1a:db: 18:db:ac:34:6e:5c:31:16:6e:90:9d:88:1a:29:b4: 30:91:b3:bc:e9:a0:1d:84:ff:35:ee:bd:f1:2b:b3: 95:1c:96:50:c8:ff:93:cc:5d:b3:c4:ed:73:e2:b6: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:0A:EE:06:AB:19:AE:B8:BC:F1:BD:66:3F:B7:78:78:5B:CB:6F X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/j2oK7garGa64vPG9Zj-3eHhby28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.51.58.0/24 193.54.33.0/24 193.55.5.0/24 194.254.188.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:81:29:77:fa:5d:3b:89:84:8e:74:e7:db:83:68:27:d9:25: 50:56:94:2c:06:c4:52:7f:b7:ba:07:9e:a5:df:da:e5:87:9b: 10:61:da:2a:fe:ae:62:dd:b9:8f:ae:20:2f:fe:ac:5f:94:86: dd:6d:33:bc:80:15:04:9c:af:b2:c4:d4:8c:1a:1f:41:27:4b: 51:4a:13:1c:de:1a:98:1e:f4:09:c2:38:fc:f8:e6:9a:21:a4: 18:a4:80:3e:60:a9:26:53:7d:4f:1e:c6:c5:81:cb:a3:34:51: 60:8b:52:f8:47:c4:63:e2:5d:cb:64:b5:f5:b9:49:ec:d0:d3: 65:83:2a:cf:a4:00:57:4f:04:b8:f1:bf:d5:6a:13:25:92:7a: 4d:5f:01:8b:02:f0:9f:74:21:8b:77:ed:c4:61:bb:25:58:83: cb:80:1c:64:92:c2:63:63:96:fd:7f:98:77:64:3e:c2:48:0d: 95:6f:f1:68:68:22:12:43:6a:c7:69:4e:4e:c1:be:f1:af:a3: c3:87:65:e5:0b:6f:73:2f:24:f7:86:e6:a7:7a:a2:79:d4:9d: 78:13:59:bc:e3:de:28:bd:2e:45:7c:fb:bc:aa:95:ab:66:9a: 38:b3:61:be:d3:bf:0d:ab:95:3f:6e:1d:e6:f5:0e:11:33:30: 7d:fe:8f:29 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WIRr+rMEJEz6OhjqjrQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZhMGFlZTA2YWIxOWFlYjhiY2YxYmQ2NjNmYjc3ODc4NWJjYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDD5Y34eUe0uQh3pj/9XdAkTlmsw VIoKwcNloOEx3jIgdqbUAYa1aXQ/hIryE1yGwDbyX29OrOpXIMqGhWFDjlKXrXmB /JlMXlVMcWAgYjdQLypgg2SNGTY5c8QQ1s52b6+fuBVO8dJQJV4gzKGBFKm1Kajv NmqsByWF2iH47uyDoBciENaeGVtUvygEccwshi5Az4T0nVZve/9Kf5SfROrN7Kc1 LIRyG3LadTT7fgkrCBy9V4BDmhrap+rx4pMvhbvcR6uxZV4Y/elw/IMGGtsY26w0 blwxFm6QnYgaKbQwkbO86aAdhP817r3xK7OVHJZQyP+TzF2zxO1z4raVewIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI9qCu4GqxmuuLzxvWY/t3h4W8tvMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvajJvSzdnYXJHYTY0dlBHOVpqLTNlSGhieTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTM6AwQA wTYhAwQAwTcFAwQAwv68MA0GCSqGSIb3DQEBCwUAA4IBAQAcgSl3+l07iYSOdOfb g2gn2SVQVpQsBsRSf7e6B56l39rlh5sQYdoq/q5i3bmPriAv/qxflIbdbTO8gBUE nK+yxNSMGh9BJ0tRShMc3hqYHvQJwjj8+OaaIaQYpIA+YKkmU31PHsbFgcujNFFg i1L4R8Rj4l3LZLX1uUns0NNlgyrPpABXTwS48b/VahMlknpNXwGLAvCfdCGLd+3E YbslWIPLgBxkksJjY5b9f5h3ZD7CSA2Vb/FoaCISQ2rHaU5Owb7xr6PDh2XlC29z LyT3huaneqJ51J14E1m8494ovS5FfPu8qpWrZpo4s2G+078Nq5U/bh3m9Q4RMzB9 /o8p -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:45 2026 by rpki-client