This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/JQ2CDROzVuWPqXgateu16umo7lg.roa File: JQ2CDROzVuWPqXgateu16umo7lg.roa (raw, json) Hash identifier: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg= Subject key identifier: 25:0D:82:0D:13:B3:56:E5:8F:A9:78:1A:B5:EB:B5:EA:E9:A8:EE:58 Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019B7B35DB19FFEC4B0D677CB358C68B9D78 Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/JQ2CDROzVuWPqXgateu16umo7lg.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.211.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:db:19:ff:ec:4b:0d:67:7c:b3:58:c6:8b:9d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=250d820d13b356e58fa9781ab5ebb5eae9a8ee58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:fc:75:da:ac:6e:20:6b:1e:ff:fe:32:88: f1:d9:c3:42:7a:4d:b5:94:e0:f3:b0:03:f7:e5:b5: aa:6d:ee:e8:41:8f:60:21:a4:01:c2:09:7b:a8:ae: 99:bc:eb:1b:42:de:4a:c2:3b:bb:25:b6:8f:ae:5b: f8:15:e5:ee:e9:a3:af:1c:2d:81:40:3a:71:fe:38: 3a:5c:d7:4e:87:f4:b1:88:4d:b0:36:f2:1f:af:05: ed:12:bf:53:6d:f3:88:58:ac:6b:c1:7e:f3:a6:65: cd:23:e6:fe:fa:11:fc:22:b8:33:d0:f4:e1:54:c0: 3a:10:b5:ed:5f:7b:0d:f8:bd:d6:d2:1f:80:bf:96: 8b:16:77:26:99:3f:fc:bf:2f:b8:a8:32:4f:5a:4c: ad:05:0b:e3:95:fd:a2:34:3b:44:f3:e7:52:9e:0a: e2:18:8e:5d:4b:97:c0:54:93:54:28:c6:ff:8f:71: d2:2d:a9:61:05:05:18:88:07:fb:ea:25:a0:b1:cd: 44:71:c9:5d:10:41:39:bd:f8:de:93:64:8b:f4:ca: c2:c1:a8:c0:17:f3:49:04:06:fe:44:f6:cf:c5:c8: cb:fd:59:d0:18:ac:51:c3:2e:e4:66:05:a5:ee:ea: 2d:6c:a6:8a:70:de:e8:ce:c1:a7:43:37:74:de:93: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:82:0D:13:B3:56:E5:8F:A9:78:1A:B5:EB:B5:EA:E9:A8:EE:58 X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/JQ2CDROzVuWPqXgateu16umo7lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.208.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ad:70:3b:b3:6a:1d:61:8a:9b:33:af:0c:73:f0:ec:34:c3: 1d:7b:08:1f:21:1f:f7:bd:80:9e:e3:19:89:b4:fb:65:3f:d1: 49:70:b4:ad:8b:69:3e:b3:b3:f0:99:3d:6d:55:a4:0a:ac:4a: 0e:85:af:7e:bf:ed:d3:b4:46:b2:9c:a7:92:cb:cb:e3:93:66: 73:ed:ad:f5:19:38:02:66:ae:40:81:38:e1:db:b5:3d:07:1d: 3b:1e:7a:34:4f:b6:01:6f:8e:a6:f2:ee:96:6b:49:1c:77:81: a1:44:3b:ee:de:83:ce:ee:aa:de:93:90:3e:c3:35:22:ce:3f: 00:0f:4e:63:1e:9a:3e:fc:22:60:05:1d:34:60:53:5e:05:7e: dc:de:72:cd:66:dd:81:70:26:88:15:f5:24:9c:ca:bc:7c:68: cd:29:21:8b:a5:6f:d8:0c:5d:59:21:3a:61:41:0a:da:9b:22: 65:1d:3a:4b:50:08:46:37:4b:28:5f:7d:70:21:ca:c9:a8:ed: 0f:b8:a9:e7:e0:15:c2:e8:f1:0b:fb:ee:05:72:39:2a:da:5e: 31:2a:7a:a9:2b:07:04:94:39:ca:d0:f6:71:6c:e9:8e:84:66: 10:67:45:d4:2f:8c:af:88:59:7b:e1:ee:31:2c:94:bd:ea:c9: ad:20:e5:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdsZ/+xLDWd8s1jGi514MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTBkODIwZDEzYjM1NmU1OGZhOTc4MWFiNWViYjVlYWU5YThlZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVL8ddqsbiBrHv/+Mojx2cNCek21 lODzsAP35bWqbe7oQY9gIaQBwgl7qK6ZvOsbQt5Kwju7JbaPrlv4FeXu6aOvHC2B QDpx/jg6XNdOh/SxiE2wNvIfrwXtEr9TbfOIWKxrwX7zpmXNI+b++hH8Irgz0PTh VMA6ELXtX3sN+L3W0h+Av5aLFncmmT/8vy+4qDJPWkytBQvjlf2iNDtE8+dSngri GI5dS5fAVJNUKMb/j3HSLalhBQUYiAf76iWgsc1EccldEEE5vfjek2SL9MrCwajA F/NJBAb+RPbPxcjL/VnQGKxRwy7kZgWl7uotbKaKcN7ozsGnQzd03pMCNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUNgg0Ts1blj6l4GrXrterpqO5YMB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvSlEyQ0RST3pWdVdQcVhnYXRldTE2dW1vN2xnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudPQMA0G CSqGSIb3DQEBCwUAA4IBAQA6rXA7s2odYYqbM68Mc/DsNMMdewgfIR/3vYCe4xmJ tPtlP9FJcLSti2k+s7PwmT1tVaQKrEoOha9+v+3TtEaynKeSy8vjk2Zz7a31GTgC Zq5AgTjh27U9Bx07Hno0T7YBb46m8u6Wa0kcd4GhRDvu3oPO7qrek5A+wzUizj8A D05jHpo+/CJgBR00YFNeBX7c3nLNZt2BcCaIFfUknMq8fGjNKSGLpW/YDF1ZITph QQramyJlHTpLUAhGN0soX31wIcrJqO0PuKnn4BXC6PEL++4Fcjkq2l4xKnqpKwcE lDnK0PZxbOmOhGYQZ0XUL4yviFl74e4xLJS96smtIOWG -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client