This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa File: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (raw, json) Hash identifier: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4= Subject key identifier: 7B:E2:40:DB:E6:C5:CB:B0:7C:06:46:26:A4:F6:0D:27:57:71:04:A7 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B76EAB5EBD41D3392924D432300A06F06 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60700 IP address blocks: 176.120.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b5:eb:d4:1d:33:92:92:4d:43:23:00:a0:6f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be240dbe6c5cbb07c064626a4f60d27577104a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:f9:1f:ad:d5:07:5c:2d:2f:f6:02:65:1c: b8:11:95:02:da:87:49:63:1c:bd:68:5b:7b:f5:f9: 4b:04:cc:c1:af:2d:74:5b:41:6a:27:7f:66:ba:73: 3b:2d:49:07:1a:02:4c:a5:f4:ff:93:e8:0a:7f:3e: b1:ce:b0:6c:35:51:be:14:af:49:c1:db:95:cd:b7: 09:4b:9b:40:e9:47:5c:07:ea:93:5e:86:90:72:9d: fb:a8:0d:de:88:31:00:d9:63:90:c8:91:85:de:ed: b9:91:d9:6b:4e:c8:89:4f:da:2e:1d:a1:a6:cf:09: 68:22:70:92:1f:35:88:77:56:93:fa:78:77:b6:44: 65:dd:ce:cc:79:e8:7a:d8:00:af:47:00:6d:0c:22: af:a2:ae:c9:32:8e:58:10:49:31:1e:d6:cb:c6:71: 4c:50:59:15:84:34:e9:4c:b2:1f:3d:f1:4c:be:26: 06:03:90:2c:36:8c:de:da:3f:85:19:03:b3:45:02: 4a:73:0c:f3:c7:59:42:e7:73:c1:6c:38:64:96:b9: 98:14:d4:80:52:bd:19:0f:78:d5:69:ac:6c:48:18: a9:59:d9:06:7b:7f:03:aa:3f:60:33:7e:4c:a7:e0: 37:93:7b:a7:60:00:d5:b4:8b:bc:ad:95:61:a8:89: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:40:DB:E6:C5:CB:B0:7C:06:46:26:A4:F6:0D:27:57:71:04:A7 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.107.0/24 Signature Algorithm: sha256WithRSAEncryption 93:22:9d:86:e2:81:26:bd:fa:d3:9e:a0:7b:9e:07:d4:73:45: 80:b7:d6:65:dc:2f:ff:72:40:b9:34:ff:6d:a6:7f:d0:d7:fe: cc:61:7e:47:63:4c:c2:2f:18:6e:29:f4:d1:d0:2f:07:c1:39: ae:70:da:b0:9f:17:c2:2f:a6:48:5c:cd:f2:b5:08:49:1a:2d: ab:7c:3f:10:7d:76:85:1f:af:d6:18:c7:3f:76:8a:ed:7d:b2: 4b:a0:e4:43:60:bb:0b:23:ab:fc:2a:ec:0c:18:6b:a6:3e:98: 9c:11:08:0d:6d:89:10:1b:5a:de:60:1d:bf:f1:c5:1c:1b:84: fd:8c:06:71:da:1b:72:d4:88:3c:c6:ba:d2:ce:27:9a:26:03: fb:53:5c:b4:f0:b1:66:a4:8c:13:a0:cb:c4:8e:6e:a7:f1:15: 1c:ce:62:70:60:66:fe:66:e4:c2:5d:c8:f7:a7:6f:f6:8b:33: 3e:fc:c7:d7:bc:05:46:d8:5e:64:c8:ac:6b:a7:18:1a:ab:28: 82:e5:65:a0:a1:90:74:14:8c:d9:89:4d:d1:4c:6e:aa:bd:91: bd:e6:88:2d:ae:fb:c4:ad:d6:cf:26:4c:06:7e:0e:a7:b7:88: 12:24:aa:3a:48:1d:ca:8b:49:b5:f2:bb:69:c1:9e:78:02:91: 54:30:39:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rXr1B0zkpJNQyMAoG8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmUyNDBkYmU2YzVjYmIwN2MwNjQ2MjZhNGY2MGQyNzU3NzEwNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4b5H63VB1wtL/YCZRy4EZUC2odJ Yxy9aFt79flLBMzBry10W0FqJ39munM7LUkHGgJMpfT/k+gKfz6xzrBsNVG+FK9J wduVzbcJS5tA6UdcB+qTXoaQcp37qA3eiDEA2WOQyJGF3u25kdlrTsiJT9ouHaGm zwloInCSHzWId1aT+nh3tkRl3c7Meeh62ACvRwBtDCKvoq7JMo5YEEkxHtbLxnFM UFkVhDTpTLIfPfFMviYGA5AsNoze2j+FGQOzRQJKcwzzx1lC53PBbDhklrmYFNSA Ur0ZD3jVaaxsSBipWdkGe38Dqj9gM35Mp+A3k3unYADVtIu8rZVhqImQFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHviQNvmxcuwfAZGJqT2DSdXcQSnMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvZS1KQTItYkZ5N0I4QmtZbXBQWU5KMWR4QktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhrMA0G CSqGSIb3DQEBCwUAA4IBAQCTIp2G4oEmvfrTnqB7ngfUc0WAt9Zl3C//ckC5NP9t pn/Q1/7MYX5HY0zCLxhuKfTR0C8HwTmucNqwnxfCL6ZIXM3ytQhJGi2rfD8QfXaF H6/WGMc/dortfbJLoORDYLsLI6v8KuwMGGumPpicEQgNbYkQG1reYB2/8cUcG4T9 jAZx2hty1Ig8xrrSzieaJgP7U1y08LFmpIwToMvEjm6n8RUczmJwYGb+ZuTCXcj3 p2/2izM+/MfXvAVG2F5kyKxrpxgaqyiC5WWgoZB0FIzZiU3RTG6qvZG95ogtrvvE rdbPJkwGfg6nt4gSJKo6SB3Ki0m18rtpwZ54ApFUMDkF -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:34 2026 by rpki-client