This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bNA2kutP2fcn6EKqxM5e-6bce04.roa File: bNA2kutP2fcn6EKqxM5e-6bce04.roa (raw, json) Hash identifier: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg= Subject key identifier: 6C:D0:36:92:EB:4F:D9:F7:27:E8:42:AA:C4:CE:5E:FB:A6:DC:7B:4E Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a Certificate serial: 019B7D5CCBD8581163E2A3ED814552FDFAF7 Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bNA2kutP2fcn6EKqxM5e-6bce04.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210236 IP address blocks: 212.48.111.144/29 maxlen: 29 212.48.111.152/29 maxlen: 29 212.53.147.0/24 maxlen: 24 212.53.178.0/24 maxlen: 24 212.53.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cb:d8:58:11:63:e2:a3:ed:81:45:52:fd:fa:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a89539520004270d34253bdc16d87784156e1a Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cd03692eb4fd9f727e842aac4ce5efba6dc7b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:1e:26:62:18:cf:70:8d:8c:fe:11:32:a7: aa:10:a1:8c:8e:5d:0b:31:40:45:84:d9:e2:38:51: 44:ca:cc:01:e3:70:cb:b3:75:80:e7:0e:a3:4c:23: 8e:f0:5c:64:57:a8:9c:aa:a0:e9:cb:19:06:d0:f8: c5:40:2c:fd:7d:ce:a7:36:a8:1d:70:5a:99:cf:54: 87:9a:b1:b2:7b:11:cd:9a:91:00:8b:88:0c:b1:53: 6d:c1:4c:be:54:bb:1e:29:fc:53:95:91:18:2d:f0: 40:37:80:4b:d6:51:82:2c:df:b2:48:97:09:94:11: 61:f1:b2:18:9c:3e:83:a8:ac:51:29:88:90:7d:5f: ee:72:18:82:b6:9c:68:70:9a:5d:4f:08:23:44:0c: d3:bf:22:49:5a:4d:f5:57:bf:34:b0:28:af:c4:b9: 5f:d3:a5:19:0d:ba:ff:25:e8:e1:39:c8:46:4b:e9: 41:e9:fb:d7:9e:7c:8c:65:cb:07:b0:ee:80:29:f5: 54:89:4f:1e:5f:bd:5f:db:4e:50:88:2a:75:5d:31: eb:1c:59:40:9e:59:fe:d0:33:eb:0a:24:ca:e9:4e: 46:6e:56:a3:02:fe:1a:c7:56:3b:58:e3:ed:c2:34: 76:ba:9a:88:f4:85:e0:b7:54:ea:c8:91:7e:4f:24: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:36:92:EB:4F:D9:F7:27:E8:42:AA:C4:CE:5E:FB:A6:DC:7B:4E X509v3 Authority Key Identifier: keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/bNA2kutP2fcn6EKqxM5e-6bce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.48.111.144/28 212.53.147.0/24 212.53.178.0/24 212.53.193.0/24 Signature Algorithm: sha256WithRSAEncryption 03:1e:90:7c:72:e4:63:5b:bc:74:79:36:57:82:f3:87:c6:7f: 16:47:8e:ae:d0:0d:01:de:7d:53:1c:fe:a0:11:1d:8d:63:5a: c7:c7:fe:3f:5c:dd:a1:38:ea:db:ef:2d:f2:f5:cf:0f:80:2b: f8:b1:f8:69:05:58:55:87:52:3a:62:7d:a6:0a:dd:79:07:d3: 69:cb:ba:1a:b3:57:58:a1:e4:56:59:71:b1:e3:3f:36:d3:d4: 65:18:76:52:6f:25:0f:2e:23:42:37:08:24:7a:c2:a8:11:df: 96:6a:bd:8b:cb:09:e4:7f:fb:38:40:46:8d:06:21:d7:45:44: be:84:bd:ac:b8:ce:cc:f3:b7:03:2c:df:a7:4a:0b:ee:c6:6f: fe:43:4b:29:5d:23:56:cd:41:cc:fe:4e:18:e4:ce:7f:b3:c9: 26:4a:3b:70:f4:b7:e5:f5:76:0e:5f:7b:36:65:03:3f:f7:c3: 3d:cd:63:08:92:9f:32:be:07:66:e4:5e:e5:cf:e4:45:4a:77: 28:ad:5d:d2:5f:9c:77:39:27:28:39:8c:31:60:ed:01:2f:7d: e8:fe:84:d7:52:04:26:e1:fa:65:99:b4:7d:64:83:1a:b0:cc: fa:42:5d:38:3f:e2:ba:8d:34:eb:1d:a5:25:9f:aa:14:d3:1d: 34:d5:8d:9f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt9XMvYWBFj4qPtgUVS/fr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx NTZlMWEwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2QwMzY5MmViNGZkOWY3MjdlODQyYWFjNGNlNWVmYmE2ZGM3YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8QeJmIYz3CNjP4RMqeqEKGMjl0L MUBFhNniOFFEyswB43DLs3WA5w6jTCOO8FxkV6icqqDpyxkG0PjFQCz9fc6nNqgd cFqZz1SHmrGyexHNmpEAi4gMsVNtwUy+VLseKfxTlZEYLfBAN4BL1lGCLN+ySJcJ lBFh8bIYnD6DqKxRKYiQfV/uchiCtpxocJpdTwgjRAzTvyJJWk31V780sCivxLlf 06UZDbr/JejhOchGS+lB6fvXnnyMZcsHsO6AKfVUiU8eX71f205QiCp1XTHrHFlA nln+0DPrCiTK6U5GblajAv4ax1Y7WOPtwjR2upqI9IXgt1TqyJF+TyR6dQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFGzQNpLrT9n3J+hCqsTOXvum3HtOMB8GA1UdIwQY MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt ZDAwNTI2YjkxNjA1LzEvYk5BMmt1dFAyZmNuNkVLcXhNNWUtNmJjZTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1 LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwUE1DBvkAME ANQ1kwMEANQ1sgMEANQ1wTANBgkqhkiG9w0BAQsFAAOCAQEAAx6QfHLkY1u8dHk2 V4Lzh8Z/FkeOrtANAd59Uxz+oBEdjWNax8f+P1zdoTjq2+8t8vXPD4Ar+LH4aQVY VYdSOmJ9pgrdeQfTacu6GrNXWKHkVllxseM/NtPUZRh2Um8lDy4jQjcIJHrCqBHf lmq9i8sJ5H/7OEBGjQYh10VEvoS9rLjOzPO3Ayzfp0oL7sZv/kNLKV0jVs1BzP5O GOTOf7PJJko7cPS35fV2Dl97NmUDP/fDPc1jCJKfMr4HZuRe5c/kRUp3KK1d0l+c dzknKDmMMWDtAS996P6E11IEJuH6ZZm0fWSDGrDM+kJdOD/iuo006x2lJZ+qFNMd NNWNnw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:58 2026 by rpki-client