This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/JezjNTAfPbdlulCLBoO7mgYw2Y4.roa File: JezjNTAfPbdlulCLBoO7mgYw2Y4.roa (raw, json) Hash identifier: DSa6N96/QE2hXNxEFptm9KXCtFZ3HWg6uWKpBPavcuk= Subject key identifier: 25:EC:E3:35:30:1F:3D:B7:65:BA:50:8B:06:83:BB:9A:06:30:D9:8E Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA612AA31A37DF6FCF03341FF0F537C Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/JezjNTAfPbdlulCLBoO7mgYw2Y4.roa Signing time: Fri 02 Jan 2026 12:19:31 +0000 ROA not before: Fri 02 Jan 2026 12:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203735 IP address blocks: 194.127.108.0/24 maxlen: 24 194.127.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:12:aa:31:a3:7d:f6:fc:f0:33:41:ff:0f:53:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25ece335301f3db765ba508b0683bb9a0630d98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:88:b0:ab:3f:6b:a9:0b:aa:71:31:39:1f: 46:9b:14:56:a5:0d:7d:36:18:d5:b0:ec:0b:b3:ca: 31:74:88:b5:81:3b:70:66:06:ee:ac:c3:c4:63:68: 2f:6e:73:9f:00:db:f7:f8:f1:15:6e:a7:a5:4f:51: bd:df:a3:45:1c:69:aa:f1:0e:7b:e2:a8:ab:95:8e: 62:42:90:03:86:06:4e:2f:4b:13:fc:65:e0:5e:bf: c3:a1:64:90:e5:ec:eb:c9:80:f8:71:52:7e:1c:07: 1c:21:62:67:0d:89:bd:6c:e5:20:0d:9d:4d:dd:70: 2a:f6:00:15:bc:e6:26:4f:5b:70:d5:7d:26:e8:a8: 74:2d:89:db:d4:04:50:1b:fc:0d:c9:6f:c3:5b:04: 8e:04:9d:68:43:d8:9f:a9:97:a7:a9:ae:a3:38:37: ad:56:fa:bb:92:15:1b:30:36:6a:ab:72:f4:ed:36: 84:7e:5b:63:61:33:b8:23:3e:6f:93:79:a8:e2:8b: 32:b8:b2:61:a4:f5:f8:5e:ec:ca:20:a7:98:ac:da: 40:01:46:27:5c:07:f7:0e:5c:4f:9c:5c:0c:7a:ba: 14:d8:6c:fc:a2:99:a2:fb:c3:e5:ce:1e:ec:51:30: 4c:96:9d:16:32:d0:c7:cd:b9:82:91:6c:97:55:20: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EC:E3:35:30:1F:3D:B7:65:BA:50:8B:06:83:BB:9A:06:30:D9:8E X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/JezjNTAfPbdlulCLBoO7mgYw2Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.108.0/24 194.127.110.0/24 Signature Algorithm: sha256WithRSAEncryption 36:f9:3d:70:da:61:79:fc:26:09:45:c3:02:14:e0:ae:38:3f: 1c:4d:44:ad:42:e5:81:73:a4:63:24:8c:15:23:5b:29:cb:79: bf:5f:5a:a6:ba:84:1c:92:01:01:15:d2:7b:09:b6:80:67:bd: 2b:7e:c7:47:64:65:14:d5:b6:05:53:f9:20:ee:3f:61:2c:19: b7:6a:11:95:44:2b:ec:d4:b3:06:30:1e:5b:81:5b:9b:e8:ab: 31:c1:c5:e0:6c:12:94:5d:e3:e4:6a:17:11:bc:ec:95:9c:e8: 69:f8:19:f8:53:aa:65:47:60:29:d1:9e:73:fb:80:b7:b8:97: 08:35:59:0e:9f:2c:3c:e5:d6:73:84:88:86:b7:d5:82:bd:5d: 9e:34:4e:1d:04:82:e1:f3:88:90:92:7f:d7:a3:18:33:f6:2f: c4:f0:ec:64:27:9e:d0:4b:62:08:27:d9:7f:a7:66:30:78:54: ff:91:e5:33:c5:48:eb:9a:ac:85:05:4b:35:08:2a:89:f0:9e: d9:2e:e0:83:4a:da:f1:57:88:94:b2:29:f6:90:79:e5:a4:8b: 83:df:e3:b6:5a:9d:23:d2:b2:74:be:61:ac:c5:d0:6f:1e:1d: df:f2:f2:76:63:f5:27:9a:e3:bb:4d:dc:2d:e4:17:0b:c7:7f: ce:30:1b:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+phKqMaN99vzwM0H/D1N8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWVjZTMzNTMwMWYzZGI3NjViYTUwOGIwNjgzYmI5YTA2MzBkOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqGIsKs/a6kLqnExOR9GmxRWpQ19 NhjVsOwLs8oxdIi1gTtwZgburMPEY2gvbnOfANv3+PEVbqelT1G936NFHGmq8Q57 4qirlY5iQpADhgZOL0sT/GXgXr/DoWSQ5ezryYD4cVJ+HAccIWJnDYm9bOUgDZ1N 3XAq9gAVvOYmT1tw1X0m6Kh0LYnb1ARQG/wNyW/DWwSOBJ1oQ9ifqZenqa6jODet Vvq7khUbMDZqq3L07TaEfltjYTO4Iz5vk3mo4osyuLJhpPX4XuzKIKeYrNpAAUYn XAf3DlxPnFwMeroU2Gz8opmi+8Plzh7sUTBMlp0WMtDHzbmCkWyXVSDgewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCXs4zUwHz23ZbpQiwaDu5oGMNmOMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvSmV6ak5UQWZQYmRsdWxDTEJvTzdtZ1l3Mlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwn9sAwQA wn9uMA0GCSqGSIb3DQEBCwUAA4IBAQA2+T1w2mF5/CYJRcMCFOCuOD8cTUStQuWB c6RjJIwVI1spy3m/X1qmuoQckgEBFdJ7CbaAZ70rfsdHZGUU1bYFU/kg7j9hLBm3 ahGVRCvs1LMGMB5bgVub6KsxwcXgbBKUXePkahcRvOyVnOhp+Bn4U6plR2Ap0Z5z +4C3uJcINVkOnyw85dZzhIiGt9WCvV2eNE4dBILh84iQkn/Xoxgz9i/E8OxkJ57Q S2IIJ9l/p2YweFT/keUzxUjrmqyFBUs1CCqJ8J7ZLuCDStrxV4iUsin2kHnlpIuD 3+O2Wp0j0rJ0vmGsxdBvHh3f8vJ2Y/UnmuO7Tdwt5BcLx3/OMBvB -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:00 2026 by rpki-client