This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa File: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (raw, json) Hash identifier: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI= Subject key identifier: 27:6F:9F:6F:86:ED:D8:2B:5C:B4:19:B3:99:F0:BC:1F:C9:34:F9:9A Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A2C62B043508E801DF179608DF44 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23344 IP address blocks: 157.23.224.0/20 maxlen: 24 2a0e:bbc0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a2:c6:2b:04:35:08:e8:01:df:17:96:08:df:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=276f9f6f86edd82b5cb419b399f0bc1fc934f99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:99:c3:8b:ab:29:b0:fd:c0:8d:ad:fa:26: 3f:f8:69:13:88:a5:d2:df:b3:2a:52:99:d7:9d:8b: 11:ca:8f:75:97:84:1b:c7:4d:9e:13:c6:9d:a9:80: f2:87:5c:48:3c:3d:3a:c2:cf:c3:70:b6:e1:81:8e: e2:22:c1:da:b9:11:31:f6:51:47:20:ea:d2:08:bd: b3:55:09:0d:81:24:2a:85:7b:80:fc:f3:e3:63:4f: df:22:51:50:19:7d:bc:a6:f8:4b:b0:8b:a7:ce:01: e6:b3:61:14:40:c0:5c:e2:b7:f4:2c:f5:6a:72:0e: e3:80:7d:bd:0e:e3:ca:6e:91:9d:9c:7e:38:1f:5b: f8:10:65:fc:b5:e6:2c:c4:73:48:93:3c:52:60:20: 2f:ea:b9:a0:a5:53:6d:f2:bd:f3:f4:2f:06:c7:f5: a0:49:f9:ea:39:e6:fe:8e:59:10:cb:35:c9:75:6d: eb:8f:01:36:58:a7:74:5c:9e:78:94:40:0f:91:22: 33:83:50:87:f1:cb:9c:3c:bf:ae:04:5c:93:eb:0d: 8c:4b:2e:a3:64:de:84:2b:26:7f:2c:b5:98:db:e1: 43:a4:8b:f6:4a:5a:5d:aa:4c:78:64:6a:31:5a:ac: d0:5c:1e:45:04:eb:1c:36:00:94:36:d2:a9:b5:e0: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6F:9F:6F:86:ED:D8:2B:5C:B4:19:B3:99:F0:BC:1F:C9:34:F9:9A X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.224.0/20 IPv6: 2a0e:bbc0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:57:09:07:4b:be:8f:e5:7c:a3:d2:e1:3b:64:48:20:79:49: 2a:35:d7:26:9c:53:68:a1:cd:a9:77:67:cf:e6:3e:aa:6e:56: b7:9c:f3:14:56:64:54:65:b6:77:c2:6e:25:cd:9a:e9:f4:b7: 2b:db:85:c2:9e:62:2e:d3:f4:87:2e:a8:28:6c:84:35:6d:d1: a6:d9:59:6e:4d:f5:d3:b9:5f:c7:12:44:35:5c:5f:da:f4:38: 43:1d:29:aa:70:56:f2:5a:22:a6:f3:e6:e4:7f:cc:dc:75:da: ef:90:d2:8b:81:44:74:4f:37:7a:5b:be:35:a6:ff:7f:ee:c1: 39:dc:da:a0:0f:ff:b9:d7:51:96:8a:37:d7:dc:7f:8d:ea:12: 8b:e2:15:f8:7b:b1:55:97:05:9a:53:04:6f:9e:4f:79:e7:d6: 1a:30:58:e6:94:c1:62:30:97:b7:c8:be:00:66:d5:b3:53:d9: 34:0a:d1:51:1e:8e:4c:a7:9c:52:69:36:b7:dd:1e:62:b8:13: ba:31:03:c0:2d:1c:96:ac:02:5e:d1:c1:71:61:ec:43:77:d0: 93:0b:14:c2:e2:49:2d:c0:42:73:27:e9:24:b4:c9:7d:da:fb: 5b:58:ff:da:97:b9:fb:c4:e6:30:09:5d:aa:d6:f5:7b:91:ac: 56:c8:c2:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pqLGKwQ1COgB3xeWCN9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzZmOWY2Zjg2ZWRkODJiNWNiNDE5YjM5OWYwYmMxZmM5MzRmOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4qZw4urKbD9wI2t+iY/+GkTiKXS 37MqUpnXnYsRyo91l4Qbx02eE8adqYDyh1xIPD06ws/DcLbhgY7iIsHauREx9lFH IOrSCL2zVQkNgSQqhXuA/PPjY0/fIlFQGX28pvhLsIunzgHms2EUQMBc4rf0LPVq cg7jgH29DuPKbpGdnH44H1v4EGX8teYsxHNIkzxSYCAv6rmgpVNt8r3z9C8Gx/Wg SfnqOeb+jlkQyzXJdW3rjwE2WKd0XJ54lEAPkSIzg1CH8cucPL+uBFyT6w2MSy6j ZN6EKyZ/LLWY2+FDpIv2Slpdqkx4ZGoxWqzQXB5FBOscNgCUNtKpteAMkQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFCdvn2+G7dgrXLQZs5nwvB/JNPmaMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvSjItZmI0YnQyQ3RjdEJtem1mQzhIOGswLVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEnRfgMA4E AgACMAgDBgAqDrvAgDANBgkqhkiG9w0BAQsFAAOCAQEAOlcJB0u+j+V8o9LhO2RI IHlJKjXXJpxTaKHNqXdnz+Y+qm5Wt5zzFFZkVGW2d8JuJc2a6fS3K9uFwp5iLtP0 hy6oKGyENW3RptlZbk3107lfxxJENVxf2vQ4Qx0pqnBW8loipvPm5H/M3HXa75DS i4FEdE83elu+Nab/f+7BOdzaoA//uddRloo319x/jeoSi+IV+HuxVZcFmlMEb55P eefWGjBY5pTBYjCXt8i+AGbVs1PZNArRUR6OTKecUmk2t90eYrgTujEDwC0clqwC XtHBcWHsQ3fQkwsUwuJJLcBCcyfpJLTJfdr7W1j/2pe5+8TmMAldqtb1e5GsVsjC 5w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:31 2026 by rpki-client