This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa File: J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa (raw, json) Hash identifier: +bn5GNQ981Cor98nOGEnbtJBrJvB+NRvavwCrVsojT8= Subject key identifier: 27:8E:44:00:3F:E4:12:D8:C1:5C:66:0B:56:A2:C3:41:3E:49:78:B4 Certificate issuer: /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3 Certificate serial: 019B79ECBCBA78AEA0B89BB56E4CFB84594E Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202213 IP address blocks: 185.112.228.0/22 maxlen: 22 185.112.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:ba:78:ae:a0:b8:9b:b5:6e:4c:fb:84:59:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=278e44003fe412d8c15c660b56a2c3413e4978b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:e3:bd:d1:69:23:25:af:9b:08:63:64:f0: 17:e3:b2:8d:ab:29:cb:e1:af:cf:97:e6:35:38:28: 39:2a:ea:c8:91:ac:95:96:8c:5b:05:8f:82:08:4c: 55:a7:e6:b8:dc:46:43:8d:46:4f:29:a1:6a:a5:93: 38:42:2d:e6:fe:57:24:b2:b7:6a:ff:10:08:63:04: e3:16:14:a1:64:95:c5:0c:2c:96:26:23:c0:00:7b: d2:57:94:58:92:a0:b4:3b:1d:23:3a:36:16:1c:8f: e9:18:91:8e:fb:fc:90:b9:5b:cd:21:3d:61:6e:16: a0:d0:43:d5:36:5e:0f:fd:e7:90:78:f6:7d:f9:2f: 8c:d2:bd:dd:dd:f9:96:25:33:e9:8d:56:81:c5:8d: 1c:bf:7d:c1:26:39:8a:97:3a:4b:09:41:69:8b:6f: 14:d0:6e:bd:c4:aa:10:f0:53:8a:1a:eb:7b:5b:ed: d9:d3:a6:ee:c4:55:ef:15:fb:31:4e:8c:c7:6a:31: 06:bc:51:65:f1:68:fd:03:75:ea:64:16:3d:04:29: 78:bf:f0:5c:42:29:eb:9b:34:77:ad:22:0c:7e:7a: 12:4f:8b:e0:b6:24:ce:0c:54:20:15:be:24:46:a0: 70:1a:7d:80:d9:9d:13:c8:3e:02:c4:ec:02:97:47: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:44:00:3F:E4:12:D8:C1:5C:66:0B:56:A2:C3:41:3E:49:78:B4 X509v3 Authority Key Identifier: keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/J45EAD_kEtjBXGYLVqLDQT5JeLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.228.0/22 Signature Algorithm: sha256WithRSAEncryption 32:81:47:1e:a8:9c:f2:e5:97:ad:cd:08:b0:5a:24:bb:e7:b8: b1:c7:42:cf:49:0a:41:25:5d:91:0d:b1:0b:a1:20:52:92:fd: 89:fb:9f:58:7b:57:c4:8d:8a:f9:8a:62:79:ea:6f:0e:8f:67: 94:51:5a:ea:36:90:84:1d:bf:41:37:b5:ea:de:af:03:bc:e6: 17:ce:7e:5b:7f:a5:b9:22:e0:e0:eb:7f:71:35:64:22:c9:b5: 10:13:e9:b7:d8:73:9f:d2:86:e5:fc:fe:6c:ef:5f:e5:65:88: fc:e8:14:26:56:c3:8c:15:7b:3c:21:d2:f1:ab:b7:5c:58:f3: f5:99:61:e3:ce:cf:75:46:6c:36:f8:d8:8d:45:f4:d4:aa:15: ae:5d:33:93:51:75:0f:6f:78:56:de:17:44:02:7d:a2:fd:7d: c5:09:ff:9c:5d:6e:c9:64:7f:ca:40:b5:30:4b:53:b7:9e:a1: 02:48:bb:ec:9d:97:ac:c5:bd:d9:51:1c:ff:99:29:84:85:6b: 4b:24:3b:71:81:26:02:c8:28:50:67:cc:eb:98:d5:84:3d:46: 4d:35:92:61:91:35:1e:fa:6f:84:a0:6c:89:82:58:68:d7:18: 63:a5:06:ed:29:2b:12:04:86:46:5c:1b:47:e3:5c:e5:e0:3b: 31:b0:f6:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ly6eK6guJu1bkz7hFlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZmI3ZjA4Zjk1NmQzYWY5NTcxOWM1MzdmYjNmOWI3ZTMz MDA2YjMwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzhlNDQwMDNmZTQxMmQ4YzE1YzY2MGI1NmEyYzM0MTNlNDk3OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwfjvdFpIyWvmwhjZPAX47KNqynL 4a/Pl+Y1OCg5KurIkayVloxbBY+CCExVp+a43EZDjUZPKaFqpZM4Qi3m/lcksrdq /xAIYwTjFhShZJXFDCyWJiPAAHvSV5RYkqC0Ox0jOjYWHI/pGJGO+/yQuVvNIT1h bhag0EPVNl4P/eeQePZ9+S+M0r3d3fmWJTPpjVaBxY0cv33BJjmKlzpLCUFpi28U 0G69xKoQ8FOKGut7W+3Z06buxFXvFfsxTozHajEGvFFl8Wj9A3XqZBY9BCl4v/Bc QinrmzR3rSIMfnoST4vgtiTODFQgFb4kRqBwGn2A2Z0TyD4CxOwCl0flqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeORAA/5BLYwVxmC1aiw0E+SXi0MB8GA1UdIwQY MBaAFJj7fwj5VtOvlXGcU3+z+bfjMAazMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTkt ZDVjMjExZWIzOTU2LzEvSjQ1RUFEX2tFdGpCWEdZTFZxTERRVDVKZUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZWZiMzUtOTc4Ny00NmYwLWI3OTktZDVjMjExZWIzOTU2 LzEvbVB0X0NQbFcwNi1WY1p4VGY3UDV0LU13QnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXDkMA0G CSqGSIb3DQEBCwUAA4IBAQAygUceqJzy5ZetzQiwWiS757ixx0LPSQpBJV2RDbEL oSBSkv2J+59Ye1fEjYr5imJ56m8Oj2eUUVrqNpCEHb9BN7Xq3q8DvOYXzn5bf6W5 IuDg639xNWQiybUQE+m32HOf0obl/P5s71/lZYj86BQmVsOMFXs8IdLxq7dcWPP1 mWHjzs91Rmw2+NiNRfTUqhWuXTOTUXUPb3hW3hdEAn2i/X3FCf+cXW7JZH/KQLUw S1O3nqECSLvsnZesxb3ZURz/mSmEhWtLJDtxgSYCyChQZ8zrmNWEPUZNNZJhkTUe +m+EoGyJglho1xhjpQbtKSsSBIZGXBtH41zl4DsxsPbf -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:25 2026 by rpki-client