This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa File: J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa (raw, json) Hash identifier: llpZQ9/tPuCwPDtcXQrfq/Zd/gdnLAnw8oHK6Zm0ygk= Subject key identifier: 27:9A:09:D3:26:3E:D1:BC:CA:D4:77:C0:CF:56:3F:86:58:12:5F:C3 Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Certificate serial: 019B7C7F34D5707A65528833D10A882FE7C1 Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa Signing time: Fri 02 Jan 2026 02:17:49 +0000 ROA not before: Fri 02 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209365 IP address blocks: 85.208.100.0/24 maxlen: 24 85.208.101.0/24 maxlen: 24 85.208.103.0/24 maxlen: 24 185.206.62.0/24 maxlen: 24 185.206.63.0/24 maxlen: 24 2a09:85c0:10::/48 maxlen: 48 2a09:85c0:20::/48 maxlen: 48 2a09:85c0:30::/48 maxlen: 48 2a09:85c0:40::/48 maxlen: 48 2a09:85c0:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:34:d5:70:7a:65:52:88:33:d1:0a:88:2f:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=279a09d3263ed1bccad477c0cf563f8658125fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:16:ff:5d:77:11:2f:df:cb:b1:7f:d1:63: c9:f6:ca:e6:89:75:c7:b4:e3:85:37:87:63:74:d3: 41:ba:b7:23:d7:56:b4:5f:78:f4:7c:e2:68:82:51: a2:4f:89:03:25:b1:81:d5:c9:88:f7:3b:4a:27:dd: 0f:0d:33:15:1f:2f:ff:b8:7a:8a:65:b4:d3:82:8a: 2a:41:2d:b9:9c:94:2e:5b:66:a7:23:23:ff:a5:95: 69:01:65:3b:49:b3:e0:a9:8b:fb:a6:02:d3:3b:d6: 26:f8:d4:cc:e8:11:bf:fe:a6:df:1e:40:12:2c:6c: 0d:cb:e5:dd:52:ce:74:7b:51:fb:a2:6a:00:87:8f: de:8d:c5:a5:22:2f:26:da:01:9e:b5:d7:d4:04:72: 02:29:e9:89:2b:60:1c:e3:1a:2d:a6:79:47:cd:69: f3:78:21:8b:25:52:a8:b7:7c:f4:58:1e:9c:f0:7e: 64:1f:0f:85:fa:fc:be:a3:16:eb:9a:e5:75:41:c8: 72:04:99:ea:bf:bf:d4:dd:35:a9:0b:44:4d:f7:e0: 90:df:f4:91:fd:e3:0c:d5:65:8b:a2:ef:33:bb:8d: 75:4c:67:38:bc:12:3b:e6:70:77:93:40:37:ca:fe: 11:95:71:18:a6:d5:70:1c:0e:b5:2f:33:67:21:c7: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9A:09:D3:26:3E:D1:BC:CA:D4:77:C0:CF:56:3F:86:58:12:5F:C3 X509v3 Authority Key Identifier: keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.100.0/23 85.208.103.0/24 185.206.62.0/23 IPv6: 2a09:85c0:10::/48 2a09:85c0:20::/48 2a09:85c0:30::/48 2a09:85c0:40::/48 2a09:85c0:50::/48 Signature Algorithm: sha256WithRSAEncryption 73:d1:00:c3:2a:11:10:2e:ff:f4:9b:1f:3f:06:41:2e:26:c6: 2d:a6:95:ff:18:4f:42:dd:74:16:be:12:57:07:df:a4:07:b8: 03:df:7c:3d:72:bc:1f:ec:3a:2c:a9:91:df:68:ff:9f:81:3b: 50:96:96:53:48:ac:e5:9f:ed:31:72:35:5b:dd:2c:24:ba:7b: f5:d0:1e:18:18:13:62:7d:54:ae:d9:9e:28:82:8c:5f:9d:ff: 57:7e:0f:bd:e6:b0:ce:d4:d5:5d:3e:81:e0:56:26:b5:2e:30: d0:ed:50:f4:ff:f6:39:a2:0d:57:d6:74:64:3b:cd:64:40:07: 81:6e:69:16:b4:ec:72:41:3f:d3:84:22:e2:e2:6c:04:c7:f4: 8b:46:54:79:8e:dd:d7:9d:75:8e:b3:bd:ab:50:ad:06:6a:61: e9:98:17:c3:04:84:57:21:86:8f:bc:18:19:a9:b5:23:c7:6d: a1:f7:ca:19:65:c0:8e:59:ec:17:ad:da:09:ac:8c:5c:14:32: 2b:bc:42:8d:8e:d8:e8:3f:b6:54:0a:b1:e1:0f:2c:f4:a3:68: a1:69:9d:f2:99:85:2d:72:c1:1b:3e:d2:fc:76:83:22:85:4c: 22:aa:e0:b2:a0:ee:c8:8e:b3:71:4e:df:a2:ac:49:fc:1c:2c: 2a:e1:01:b4 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt8fzTVcHplUogz0QqIL+fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi NWQ1YzkwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzlhMDlkMzI2M2VkMWJjY2FkNDc3YzBjZjU2M2Y4NjU4MTI1ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW4W/113ES/fy7F/0WPJ9srmiXXH tOOFN4djdNNBurcj11a0X3j0fOJoglGiT4kDJbGB1cmI9ztKJ90PDTMVHy//uHqK ZbTTgooqQS25nJQuW2anIyP/pZVpAWU7SbPgqYv7pgLTO9Ym+NTM6BG//qbfHkAS LGwNy+XdUs50e1H7omoAh4/ejcWlIi8m2gGetdfUBHICKemJK2Ac4xotpnlHzWnz eCGLJVKot3z0WB6c8H5kHw+F+vy+oxbrmuV1QchyBJnqv7/U3TWpC0RN9+CQ3/SR /eMM1WWLou8zu411TGc4vBI75nB3k0A3yv4RlXEYptVwHA61LzNnIceuQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCeaCdMmPtG8ytR3wM9WP4ZYEl/DMB8GA1UdIwQY MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt NDljNmZkYmJhZmI3LzEvSjVvSjB5WS0wYnpLMUhmQXoxWV9obGdTWDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3 LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAYBAIAATASAwQBVdBkAwQA VdBnAwQBuc4+MDMEAgACMC0DBwAqCYXAABADBwAqCYXAACADBwAqCYXAADADBwAq CYXAAEADBwAqCYXAAFAwDQYJKoZIhvcNAQELBQADggEBAHPRAMMqERAu//SbHz8G QS4mxi2mlf8YT0LddBa+ElcH36QHuAPffD1yvB/sOiypkd9o/5+BO1CWllNIrOWf 7TFyNVvdLCS6e/XQHhgYE2J9VK7ZniiCjF+d/1d+D73msM7U1V0+geBWJrUuMNDt UPT/9jmiDVfWdGQ7zWRAB4FuaRa07HJBP9OEIuLibATH9ItGVHmO3deddY6zvatQ rQZqYemYF8MEhFchho+8GBmptSPHbaH3yhllwI5Z7Bet2gmsjFwUMiu8Qo2O2Og/ tlQKseEPLPSjaKFpnfKZhS1ywRs+0vx2gyKFTCKq4LKg7siOs3FO36KsSfwcLCrh AbQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:30 2026 by rpki-client