This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa File: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (raw, json) Hash identifier: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc= Subject key identifier: A4:9B:FF:8F:F2:B6:12:00:42:3D:52:A4:E8:18:1E:53:DB:07:7D:1D Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019B7EA51000683AEAF21BBF819E2FA35423 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa Signing time: Fri 02 Jan 2026 12:18:25 +0000 ROA not before: Fri 02 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.196.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:10:00:68:3a:ea:f2:1b:bf:81:9e:2f:a3:54:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jan 2 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49bff8ff2b61200423d52a4e8181e53db077d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:9a:cc:11:f4:84:5e:f9:8d:19:71:a1:b4: 2d:b1:43:f5:74:5b:d1:b4:89:7d:b5:34:e9:c7:b9: 4a:77:d5:0d:a6:a7:bc:84:dc:53:8c:35:03:34:1a: 6c:c6:e8:b7:64:c7:1a:f3:9d:33:2b:1c:5a:95:a7: 62:e5:13:6e:80:e3:7c:0b:f2:8b:69:61:b1:3f:cc: 8f:cd:0c:9f:d0:b8:fc:89:1b:cb:0c:93:17:8a:24: 8e:60:f0:3e:f5:ed:34:30:5c:45:6c:74:c7:e2:d3: 9b:9d:19:b4:05:54:a2:ac:d4:96:25:68:bf:aa:d7: 8e:a9:7c:b1:68:a6:54:ce:3b:b3:95:7a:b5:d0:df: 4d:58:41:6b:a0:f8:05:79:14:68:62:35:6c:61:80: c4:b4:21:cf:42:e1:53:38:dc:20:d1:6e:e9:de:52: 79:21:4a:3f:a5:30:2c:91:ae:3e:a7:ea:8c:14:da: 0e:e6:ba:d9:ce:f8:6d:28:ac:69:2f:65:9b:8f:ab: a6:45:da:f5:d4:55:e1:f7:92:e8:17:e1:5f:d2:06: a4:a6:63:9b:f8:cb:74:05:b9:3b:cd:06:ac:59:3b: 27:de:7d:4a:11:7f:ae:e4:7a:0b:66:8d:d3:f6:9d: e3:ba:97:0d:2d:72:8b:98:43:95:bc:43:4c:ad:f1: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9B:FF:8F:F2:B6:12:00:42:3D:52:A4:E8:18:1E:53:DB:07:7D:1D X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.221.0/24 Signature Algorithm: sha256WithRSAEncryption 28:03:e5:bb:14:25:e5:31:08:49:dd:00:2e:91:b4:f3:9b:17: d6:a0:b7:97:6b:25:45:5c:cc:f0:5b:72:88:aa:a8:32:d1:da: 74:5d:a7:d7:b6:62:86:e0:a3:2f:5b:d2:43:f1:80:00:1e:d4: 00:48:2e:d6:75:95:21:ff:8a:9c:79:2a:d0:07:81:0f:67:e8: a8:b5:33:70:ec:cc:0c:8d:63:b9:62:59:c8:11:9a:12:ef:c2: ae:d8:92:04:f8:89:59:9b:d1:f3:b7:be:77:30:7c:df:61:51: f5:79:38:6e:f1:49:1d:b4:76:f3:4a:f0:7b:95:86:ad:ad:ea: f8:f3:0a:0c:09:d3:08:95:8e:07:fb:85:20:71:b4:c5:69:9c: 81:3d:51:6d:34:9d:ec:26:07:7a:7c:0a:eb:ac:d9:63:63:5d: 5a:48:f8:04:1e:68:21:b2:6d:66:d8:59:16:6e:06:3c:85:b1: b0:3e:a8:97:11:40:d3:91:6c:10:e0:bd:6e:fe:3a:3c:64:cd: 16:22:78:31:e9:2e:16:80:87:42:fc:25:26:8d:1e:bd:83:ed: 2f:e5:56:ca:87:89:9c:db:7c:e2:26:7e:75:c9:6a:da:7c:ad: 32:b1:15:b0:ec:a0:7a:bf:74:06:86:a1:77:9e:2e:93:87:62: c8:d1:8a:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pRAAaDrq8hu/gZ4vo1QjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwMTAyMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDliZmY4ZmYyYjYxMjAwNDIzZDUyYTRlODE4MWU1M2RiMDc3ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFeazBH0hF75jRlxobQtsUP1dFvR tIl9tTTpx7lKd9UNpqe8hNxTjDUDNBpsxui3ZMca850zKxxaladi5RNugON8C/KL aWGxP8yPzQyf0Lj8iRvLDJMXiiSOYPA+9e00MFxFbHTH4tObnRm0BVSirNSWJWi/ qteOqXyxaKZUzjuzlXq10N9NWEFroPgFeRRoYjVsYYDEtCHPQuFTONwg0W7p3lJ5 IUo/pTAska4+p+qMFNoO5rrZzvhtKKxpL2Wbj6umRdr11FXh95LoF+Ff0gakpmOb +Mt0Bbk7zQasWTsn3n1KEX+u5HoLZo3T9p3jupcNLXKLmEOVvENMrfHrEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSb/4/ythIAQj1SpOgYHlPbB30dMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvcEp2X2pfSzJFZ0JDUFZLazZCZ2VVOXNIZlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucTdMA0G CSqGSIb3DQEBCwUAA4IBAQAoA+W7FCXlMQhJ3QAukbTzmxfWoLeXayVFXMzwW3KI qqgy0dp0XafXtmKG4KMvW9JD8YAAHtQASC7WdZUh/4qceSrQB4EPZ+iotTNw7MwM jWO5YlnIEZoS78Ku2JIE+IlZm9Hzt753MHzfYVH1eThu8UkdtHbzSvB7lYatrer4 8woMCdMIlY4H+4UgcbTFaZyBPVFtNJ3sJgd6fArrrNljY11aSPgEHmghsm1m2FkW bgY8hbGwPqiXEUDTkWwQ4L1u/jo8ZM0WIngx6S4WgIdC/CUmjR69g+0v5VbKh4mc 23ziJn51yWrafK0ysRWw7KB6v3QGhqF3ni6Th2LI0YqT -----END CERTIFICATE-----Generated at Fri Jan 23 09:22:43 2026 by rpki-client