This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/J_6ozcvtDoYKAmCxlhoux76Ahfg.roa File: J_6ozcvtDoYKAmCxlhoux76Ahfg.roa (raw, json) Hash identifier: lv/v7VLFA2FqHauF9FdFYvoyrCMGxHrhesLrZHX2U9c= Subject key identifier: 27:FE:A8:CD:CB:ED:0E:86:0A:02:60:B1:96:1A:2E:C7:BE:80:85:F8 Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Certificate serial: 019B7D5AE7A2B1B8A8F664BC37502C8FDCA2 Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/J_6ozcvtDoYKAmCxlhoux76Ahfg.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48253 IP address blocks: 185.142.36.0/24 maxlen: 24 185.142.37.0/24 maxlen: 24 185.142.38.0/24 maxlen: 24 185.142.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e7:a2:b1:b8:a8:f6:64:bc:37:50:2c:8f:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27fea8cdcbed0e860a0260b1961a2ec7be8085f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2b:75:5d:0e:29:6d:87:7e:f8:38:32:9a:74: 90:36:1d:9b:ce:d7:2e:54:5d:ea:9e:d8:f8:bf:ab: 4d:2c:7b:3c:11:6a:5c:55:56:8e:b0:c3:8b:37:5f: 7c:b1:65:44:3a:64:83:8b:35:2e:c5:45:b9:41:7a: 17:23:2c:16:af:bb:90:b7:21:76:a2:bf:6c:91:bd: ba:e7:f8:4a:05:78:7a:78:cc:cb:1a:6f:d3:56:e1: 22:47:b7:b3:c8:e1:39:01:00:ce:6c:16:65:0d:7e: a8:5f:e0:7a:3c:eb:db:09:e9:a8:f5:56:13:7b:f3: 41:2b:14:5f:15:ea:bc:ad:56:6f:5c:45:77:46:44: 38:cf:3f:61:34:89:a7:42:eb:9f:36:ce:4c:b9:7d: 9e:aa:73:0c:5e:d3:66:76:c6:15:3c:27:7e:b5:93: a6:c7:0e:9f:d9:2d:93:f0:08:5f:af:bc:34:eb:0f: d2:90:dc:80:2f:f4:6d:4b:a2:5c:3f:a7:ab:79:27: 96:0e:11:4e:1c:63:d7:83:87:8e:1e:14:48:1b:33: 04:46:bb:f9:86:34:56:61:a1:1e:38:1b:5c:95:21: 42:2d:81:1c:0b:d3:84:d4:1f:de:bf:54:ba:23:f9: f0:a5:13:7c:ab:b0:1e:6b:0f:fa:69:21:3c:a0:33: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FE:A8:CD:CB:ED:0E:86:0A:02:60:B1:96:1A:2E:C7:BE:80:85:F8 X509v3 Authority Key Identifier: keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/J_6ozcvtDoYKAmCxlhoux76Ahfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.36.0/22 Signature Algorithm: sha256WithRSAEncryption 80:2d:0d:d6:a0:8a:a3:b6:37:19:7d:a6:8c:0c:d5:4c:80:ac: 7e:cf:f0:e9:f5:88:69:4e:28:af:6b:2f:08:ee:0b:9d:76:15: 67:79:7e:7f:db:9a:a6:a8:50:a4:f3:4d:99:25:c4:f7:eb:77: 8d:72:f7:c5:ac:1b:71:82:1b:67:25:41:04:da:77:94:8b:94: 5c:48:b5:fe:78:fe:4a:35:49:d4:72:6c:b6:d7:e1:fd:00:a2: 0a:0d:87:cf:c0:e0:33:f0:3d:b9:4f:44:47:c9:ff:ca:33:fd: 74:c0:3f:be:67:22:59:22:ef:32:3b:85:93:12:0c:ef:7d:a7: a1:a7:f0:35:ba:0e:38:40:c0:1f:a1:db:f1:ea:f8:89:c0:2a: 9a:7b:9b:15:ad:dc:30:c6:1c:2b:9b:d6:59:97:4a:3f:8e:1f: 18:b3:d6:b1:8f:24:01:7f:48:08:f3:6a:6e:b9:c1:aa:64:5c: b5:e9:df:a9:cd:9e:26:93:95:24:fd:87:75:f8:82:d8:33:28: a3:83:01:0b:97:39:97:24:8d:db:cc:fe:3d:2c:b0:7c:a5:da: 29:c8:a9:3b:ad:9e:d6:e4:c6:e2:48:f9:f0:e2:b5:0e:2d:62: 35:08:81:71:3e:e8:6a:d2:55:3a:f4:13:5d:07:6d:fa:78:a1: 6e:81:fc:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wueisbio9mS8N1Asj9yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm NTE3OGEwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2ZlYThjZGNiZWQwZTg2MGEwMjYwYjE5NjFhMmVjN2JlODA4NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yt1XQ4pbYd++DgymnSQNh2bztcu VF3qntj4v6tNLHs8EWpcVVaOsMOLN198sWVEOmSDizUuxUW5QXoXIywWr7uQtyF2 or9skb265/hKBXh6eMzLGm/TVuEiR7ezyOE5AQDObBZlDX6oX+B6POvbCemo9VYT e/NBKxRfFeq8rVZvXEV3RkQ4zz9hNImnQuufNs5MuX2eqnMMXtNmdsYVPCd+tZOm xw6f2S2T8Ahfr7w06w/SkNyAL/RtS6JcP6ereSeWDhFOHGPXg4eOHhRIGzMERrv5 hjRWYaEeOBtclSFCLYEcC9OE1B/ev1S6I/nwpRN8q7Aeaw/6aSE8oDPbSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCf+qM3L7Q6GCgJgsZYaLse+gIX4MB8GA1UdIwQY MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt M2NkZGYxNzUxZjU5LzEvSl82b3pjdnREb1lLQW1DeGxob3V4NzZBaGZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5 LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY4kMA0G CSqGSIb3DQEBCwUAA4IBAQCALQ3WoIqjtjcZfaaMDNVMgKx+z/Dp9YhpTiivay8I 7guddhVneX5/25qmqFCk802ZJcT363eNcvfFrBtxghtnJUEE2neUi5RcSLX+eP5K NUnUcmy21+H9AKIKDYfPwOAz8D25T0RHyf/KM/10wD++ZyJZIu8yO4WTEgzvfaeh p/A1ug44QMAfodvx6viJwCqae5sVrdwwxhwrm9ZZl0o/jh8Ys9axjyQBf0gI82pu ucGqZFy16d+pzZ4mk5Uk/Yd1+ILYMyijgwELlzmXJI3bzP49LLB8pdopyKk7rZ7W 5MbiSPnw4rUOLWI1CIFxPuhq0lU69BNdB236eKFugfy7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:52 2026 by rpki-client