This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa File: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (raw, json) Hash identifier: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M= Subject key identifier: 25:FD:AF:4C:43:CD:77:C3:63:A1:C5:69:12:97:5C:4A:CB:89:04:F8 Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Certificate serial: 019B7EA4C9D6B16FDEE7B4F39D69D9E7A9E0 Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa Signing time: Fri 02 Jan 2026 12:18:07 +0000 ROA not before: Fri 02 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1200 IP address blocks: 91.200.16.0/22 maxlen: 22 91.236.189.0/24 maxlen: 24 185.55.136.0/22 maxlen: 22 185.55.136.0/24 maxlen: 24 185.55.137.0/24 maxlen: 24 185.55.138.0/24 maxlen: 24 185.55.139.0/24 maxlen: 24 193.105.101.0/24 maxlen: 24 195.60.82.128/26 maxlen: 26 195.69.144.0/22 maxlen: 22 195.69.145.0/24 maxlen: 24 2001:67c:1a8::/48 maxlen: 48 2a02:4b60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c9:d6:b1:6f:de:e7:b4:f3:9d:69:d9:e7:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25fdaf4c43cd77c363a1c56912975c4acb8904f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:a2:24:9a:1f:2b:74:9e:0d:a9:0d:4b:13: c4:c3:b9:c0:31:1c:a0:c4:46:f8:42:17:f7:6f:82: ec:f3:31:b2:a2:e2:83:2f:5f:39:9d:04:27:38:8c: a2:2f:82:6b:9b:99:2d:14:5c:f2:89:b7:4f:55:ab: 93:a1:ce:10:4b:a7:dd:44:03:82:23:fe:03:47:92: 64:8e:c1:e7:1a:fb:df:06:f4:7a:f7:4b:05:24:6f: 0f:35:d3:02:da:c9:13:a1:7b:72:8e:67:c4:d3:13: 34:76:6a:5a:6d:7a:ff:9b:80:af:09:66:a6:98:e4: fb:b9:b2:6a:73:06:26:bf:97:e0:75:26:bc:91:37: 4c:24:12:1a:3e:7f:6c:41:4b:7e:82:d8:a7:57:34: 4b:ff:35:3c:5d:73:d9:f2:08:c1:27:65:82:4e:89: 5d:b4:d0:be:c9:d1:7e:0e:c1:8d:91:28:94:66:b8: dd:5e:29:3e:f6:52:8c:18:62:a0:99:1f:f0:58:d8: 65:fa:e6:88:db:a2:01:bc:b1:f4:19:48:28:a0:84: 58:9f:fc:95:18:fd:9b:a6:33:a4:cb:ba:e6:2f:70: dd:d4:f2:8f:f8:45:0d:79:23:85:da:42:0b:69:4d: 5f:ce:2e:c3:3e:84:d1:1b:5a:d2:b9:94:13:4e:7b: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FD:AF:4C:43:CD:77:C3:63:A1:C5:69:12:97:5C:4A:CB:89:04:F8 X509v3 Authority Key Identifier: keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.16.0/22 91.236.189.0/24 185.55.136.0/22 193.105.101.0/24 195.60.82.128/26 195.69.144.0/22 IPv6: 2001:67c:1a8::/48 2a02:4b60::/32 Signature Algorithm: sha256WithRSAEncryption 56:36:b2:86:c8:fa:db:7a:b2:02:a3:80:de:45:40:58:0f:53: fd:6d:00:a0:ca:63:42:70:ec:9d:5b:92:c5:d7:83:7b:0a:5d: 43:94:91:fb:cc:59:f7:54:82:e2:92:8e:43:8e:73:89:9c:95: c0:11:52:61:8a:42:c7:42:46:2f:bd:36:31:0c:3e:2c:4d:85: 28:78:9b:19:1d:03:91:13:08:aa:8e:92:c2:46:31:e9:3e:aa: ab:67:ef:ed:98:f4:5a:33:1a:bc:ec:0b:df:df:13:c8:aa:f4: 04:22:fc:0d:1f:15:a6:4c:0b:62:a6:3d:f4:7f:77:a4:39:bf: cb:e6:59:12:fe:28:14:49:e8:53:6a:cd:9f:1b:00:84:98:e2: 20:40:de:07:1c:16:da:89:7c:60:ca:cc:7d:87:ce:7f:1d:e0: 2f:50:98:64:87:0d:6d:47:4a:95:5e:35:13:92:26:aa:7f:33: f7:24:de:44:2b:6d:f2:98:e2:da:2a:af:ff:5c:d3:56:0d:2e: aa:f0:67:75:4d:f2:ec:7e:30:8b:de:7c:dc:95:9c:b4:d9:26: 90:88:d1:da:4e:ef:d5:4f:f0:f3:39:30:96:5b:c4:3e:b0:65: ea:d0:21:54:d3:0d:5f:6f:73:bc:4e:16:6e:a8:ac:5e:0e:24: ee:15:ed:16 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt+pMnWsW/e57TznWnZ56ngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj MzBlNDUwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZkYWY0YzQzY2Q3N2MzNjNhMWM1NjkxMjk3NWM0YWNiODkwNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EKiJJofK3SeDakNSxPEw7nAMRyg xEb4Qhf3b4Ls8zGyouKDL185nQQnOIyiL4Jrm5ktFFzyibdPVauToc4QS6fdRAOC I/4DR5JkjsHnGvvfBvR690sFJG8PNdMC2skToXtyjmfE0xM0dmpabXr/m4CvCWam mOT7ubJqcwYmv5fgdSa8kTdMJBIaPn9sQUt+gtinVzRL/zU8XXPZ8gjBJ2WCTold tNC+ydF+DsGNkSiUZrjdXik+9lKMGGKgmR/wWNhl+uaI26IBvLH0GUgooIRYn/yV GP2bpjOky7rmL3Dd1PKP+EUNeSOF2kILaU1fzi7DPoTRG1rSuZQTTnsm6wIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFCX9r0xDzXfDY6HFaRKXXErLiQT4MB8GA1UdIwQY MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt NzM1NGE3M2JkYTdlLzEvSmYydlRFUE5kOE5qb2NWcEVwZGNTc3VKQlBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTArBAIAATAlAwQCW8gQAwQA W+y9AwQCuTeIAwQAwWllAwUGwzxSgAMEAsNFkDAWBAIAAjAQAwcAIAEGfAGoAwUA KgJLYDANBgkqhkiG9w0BAQsFAAOCAQEAVjayhsj623qyAqOA3kVAWA9T/W0AoMpj QnDsnVuSxdeDewpdQ5SR+8xZ91SC4pKOQ45ziZyVwBFSYYpCx0JGL702MQw+LE2F KHibGR0DkRMIqo6SwkYx6T6qq2fv7Zj0WjMavOwL398TyKr0BCL8DR8VpkwLYqY9 9H93pDm/y+ZZEv4oFEnoU2rNnxsAhJjiIEDeBxwW2ol8YMrMfYfOfx3gL1CYZIcN bUdKlV41E5Imqn8z9yTeRCtt8pji2iqv/1zTVg0uqvBndU3y7H4wi9583JWctNkm kIjR2k7v1U/w8zkwllvEPrBl6tAhVNMNX29zvE4WbqisXg4k7hXtFg== -----END CERTIFICATE-----Generated at Fri Jan 9 18:02:34 2026 by rpki-client