This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/J2ePeeL-Vnk70QACx3LfiT8XrbE.roa File: J2ePeeL-Vnk70QACx3LfiT8XrbE.roa (raw, json) Hash identifier: z2t3api1uCbkFONQl/y9ACJzqCIvyFtQi+W3FXkf6vI= Subject key identifier: 27:67:8F:79:E2:FE:56:79:3B:D1:00:02:C7:72:DF:89:3F:17:AD:B1 Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f Certificate serial: 019B7C7F16D5056FDE10A633F9C0C1E166B8 Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/J2ePeeL-Vnk70QACx3LfiT8XrbE.roa Signing time: Fri 02 Jan 2026 02:17:42 +0000 ROA not before: Fri 02 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31529 IP address blocks: 45.142.220.0/24 maxlen: 24 45.142.221.0/24 maxlen: 24 45.142.222.0/24 maxlen: 24 45.142.223.0/24 maxlen: 24 2a0e:dbc0::/48 maxlen: 48 2a0e:dbc0:1::/48 maxlen: 48 2a0e:dbc0:2::/48 maxlen: 48 2a0e:dbc0:3::/48 maxlen: 48 2a0e:dbc0:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:16:d5:05:6f:de:10:a6:33:f9:c0:c1:e1:66:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f Validity Not Before: Jan 2 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27678f79e2fe56793bd10002c772df893f17adb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:83:8d:19:35:7b:12:2a:8a:aa:b8:43:d1: e5:b2:62:c6:50:19:c7:34:20:9c:9e:05:fe:ed:2a: df:f1:d0:9e:ad:42:03:fa:3e:6f:e8:0c:df:1f:43: 02:3b:73:18:4f:4c:a2:99:c6:73:78:28:80:25:82: cb:b0:70:15:9f:14:77:ff:34:51:f7:f2:fa:e7:98: 91:cd:78:0a:ea:57:90:00:85:6c:9a:84:4d:db:c4: 0c:fe:74:9b:4d:16:a3:a2:04:57:bc:77:00:b5:28: 34:d9:52:2c:ad:51:ff:01:82:cd:e9:d3:86:dc:b8: d1:73:b8:aa:2d:67:23:5e:2b:b6:0b:d7:5b:00:63: 68:04:ee:4a:e9:dd:22:a8:5a:8d:68:34:4b:42:57: 51:22:64:a8:55:6a:af:f5:62:6e:f1:3a:59:70:16: ad:f0:c9:e6:ef:c5:4f:79:0a:67:ab:6b:f3:52:87: f4:52:23:1b:0f:b9:94:4f:77:d7:e0:61:03:ac:46: 31:3b:4b:ab:5f:0b:45:40:71:e2:d6:ef:cb:38:92: a5:6c:62:0f:5e:6f:dd:2e:8d:d8:59:86:ca:80:9c: 45:b0:aa:b7:be:a3:ab:44:93:3b:2a:e1:39:c5:0f: 78:4a:16:fd:49:08:c3:bd:e1:7e:c4:fb:ff:97:ac: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:67:8F:79:E2:FE:56:79:3B:D1:00:02:C7:72:DF:89:3F:17:AD:B1 X509v3 Authority Key Identifier: keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/J2ePeeL-Vnk70QACx3LfiT8XrbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.220.0/22 IPv6: 2a0e:dbc0::/46 2a0e:dbc0:3000::/48 Signature Algorithm: sha256WithRSAEncryption 30:5f:7d:37:61:53:34:59:fd:ac:aa:23:c7:78:1a:f9:29:51: f0:04:3f:17:eb:5e:08:ae:b3:b9:75:4a:96:1c:c7:3e:d9:fb: 3f:7f:d1:87:56:ca:69:2a:a5:7b:7d:29:c3:a2:b6:47:eb:e9: 2f:56:bd:fc:cf:1e:63:a5:0f:f9:b1:89:39:ba:9b:01:4c:45: 3b:ad:0f:f6:74:0a:b8:d2:4d:6b:00:d4:e4:cd:1d:ea:9b:4a: 37:3c:9a:88:b8:37:f8:20:91:d8:85:a9:52:64:31:95:96:b4: 8b:f8:84:41:05:04:f4:fc:e6:e0:a9:e6:73:ac:d5:26:fc:d9: 90:04:37:38:fc:2d:95:27:2a:31:fc:93:a6:2a:e0:20:08:b4: 4e:e6:3c:68:74:b3:4a:38:20:dd:6d:2b:54:02:13:3d:67:fe: d3:63:6b:76:60:e5:eb:9c:55:c5:a6:9c:0c:b8:bb:e9:de:79: e1:9b:2b:a1:cf:7c:bd:26:65:0e:83:af:40:70:7b:8b:c7:dc: 38:71:60:6f:cd:83:cc:78:27:f3:01:32:32:f6:1d:a5:ac:3c: b7:e4:3a:e1:64:af:d2:5f:6b:82:5e:bd:dc:42:3d:7c:b4:47: c2:8e:94:8a:80:bf:9b:c6:4a:d1:f6:a4:90:09:73:a5:83:34: 8b:2f:22:a4 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8fxbVBW/eEKYz+cDB4Wa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4 YWU4MGYwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzY3OGY3OWUyZmU1Njc5M2JkMTAwMDJjNzcyZGY4OTNmMTdhZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaWDjRk1exIqiqq4Q9HlsmLGUBnH NCCcngX+7Srf8dCerUID+j5v6AzfH0MCO3MYT0yimcZzeCiAJYLLsHAVnxR3/zRR 9/L655iRzXgK6leQAIVsmoRN28QM/nSbTRajogRXvHcAtSg02VIsrVH/AYLN6dOG 3LjRc7iqLWcjXiu2C9dbAGNoBO5K6d0iqFqNaDRLQldRImSoVWqv9WJu8TpZcBat 8Mnm78VPeQpnq2vzUof0UiMbD7mUT3fX4GEDrEYxO0urXwtFQHHi1u/LOJKlbGIP Xm/dLo3YWYbKgJxFsKq3vqOrRJM7KuE5xQ94Shb9SQjDveF+xPv/l6wK7wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCdnj3ni/lZ5O9EAAsdy34k/F62xMB8GA1UdIwQY MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt NzliM2RiNjU5ZGZjLzEvSjJlUGVlTC1Wbms3MFFBQ3gzTGZpVDhYcmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCLY7cMBgE AgACMBIDBwIqDtvAAAADBwAqDtvAMAAwDQYJKoZIhvcNAQELBQADggEBADBffTdh UzRZ/ayqI8d4GvkpUfAEPxfrXgius7l1SpYcxz7Z+z9/0YdWymkqpXt9KcOitkfr 6S9WvfzPHmOlD/mxiTm6mwFMRTutD/Z0CrjSTWsA1OTNHeqbSjc8moi4N/ggkdiF qVJkMZWWtIv4hEEFBPT85uCp5nOs1Sb82ZAENzj8LZUnKjH8k6Yq4CAItE7mPGh0 s0o4IN1tK1QCEz1n/tNja3Zg5eucVcWmnAy4u+neeeGbK6HPfL0mZQ6Dr0Bwe4vH 3DhxYG/Ng8x4J/MBMjL2HaWsPLfkOuFkr9Jfa4JevdxCPXy0R8KOlIqAv5vGStH2 pJAJc6WDNIsvIqQ= -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:11 2026 by rpki-client