This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj_OOkHwrLSXOlTpC_hOmkUTj1Q.roa File: nj_OOkHwrLSXOlTpC_hOmkUTj1Q.roa (raw, json) Hash identifier: 7op8rSwL+xIhX3FQWsuhA/QnMe5Y3AvfFLw3yyb2nLY= Subject key identifier: 9E:3F:CE:3A:41:F0:AC:B4:97:3A:54:E9:0B:F8:4E:9A:45:13:8F:54 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14BE8FF9C8BBFE594048FB662734A8 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj_OOkHwrLSXOlTpC_hOmkUTj1Q.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 135.196.218.0/24 maxlen: 24 135.196.227.0/24 maxlen: 24 213.201.132.0/24 maxlen: 24 213.201.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:be:8f:f9:c8:bb:fe:59:40:48:fb:66:27:34:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3fce3a41f0acb4973a54e90bf84e9a45138f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:af:9d:41:d0:0d:27:07:00:a0:b6:e1:9f: 53:62:ec:13:8f:3d:d2:ef:d1:5f:fe:99:07:f7:61: 7a:85:9e:63:82:b2:b3:83:c6:e2:6d:43:33:79:99: 5a:17:1b:7e:1a:0c:4f:76:0c:4c:f0:11:7f:3e:c6: 9c:25:bd:67:43:12:5d:60:f5:ce:e5:45:ea:9f:17: 45:a3:0e:0e:76:2e:ac:be:50:9e:5e:e0:44:20:ea: bb:05:46:ee:82:54:f8:eb:2b:0d:58:35:5a:7c:4f: a2:da:60:34:0c:c8:7e:bf:0a:ee:44:56:41:97:c6: 63:0b:e8:e7:d2:f1:54:0d:60:9e:8d:ac:0f:24:b3: 6c:95:94:5e:56:e9:50:a9:05:79:67:bf:51:1a:0e: 08:49:63:7d:9d:68:1c:4d:6b:73:26:62:63:ef:a8: fe:41:c2:b3:05:23:1f:07:c1:6d:f2:95:20:46:60: 9c:f3:30:b0:da:a1:ef:c1:48:1e:ba:e7:66:8f:d4: b8:2f:44:14:e9:83:77:43:32:cc:3e:90:a6:6c:82: 9d:c0:ea:56:ec:16:41:28:fb:08:87:df:63:12:c9: 94:9d:c5:74:ce:17:54:77:dc:a0:f7:fd:32:ff:76: b6:b0:76:83:80:c9:4f:85:9c:d9:21:c6:60:24:7b: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:CE:3A:41:F0:AC:B4:97:3A:54:E9:0B:F8:4E:9A:45:13:8F:54 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nj_OOkHwrLSXOlTpC_hOmkUTj1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.218.0/24 135.196.227.0/24 213.201.132.0/24 213.201.139.0/24 Signature Algorithm: sha256WithRSAEncryption aa:af:5d:5b:16:af:24:91:21:e5:11:90:46:55:33:de:d3:7f: 41:a2:91:88:0a:33:a5:4f:69:1a:48:ac:82:a6:49:ad:5d:d9: ca:1e:71:ab:fa:2f:0a:80:f5:22:75:e6:d3:ba:5c:db:2c:a0: 7c:90:9d:da:57:91:86:82:7f:83:a9:6b:90:16:07:cd:ba:17: a0:bc:54:e7:cc:0e:ae:5b:de:2d:64:e0:2b:72:f5:15:18:1a: c1:45:db:16:cd:91:cf:1d:34:30:8b:a4:04:76:ee:48:f6:f5: b0:2b:91:0f:95:e3:27:be:d1:d7:45:a5:bc:e6:a8:42:c3:73: b3:60:45:5f:08:6d:e2:97:eb:5a:3b:1b:48:f2:8f:a0:c0:46: a1:8a:1a:93:2e:c3:c9:c8:0d:33:91:e0:05:f9:6d:ce:e1:e6: ee:f5:2b:51:15:74:0b:63:71:da:35:d4:a3:14:4f:96:9c:53: 8e:72:21:97:cc:b8:89:ef:2a:a9:99:95:b9:40:32:db:85:56: a2:31:b2:a8:90:7e:35:3b:cb:80:e0:ce:95:25:f5:46:9e:30: 0d:fa:b3:4d:48:81:8b:80:38:c2:e8:f8:f3:28:fb:96:d7:1e: 6d:c2:7c:b6:3b:42:7e:44:24:50:02:33:e9:3d:df:e0:19:97: ec:22:7b:07 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FL6P+ci7/llASPtmJzSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTNmY2UzYTQxZjBhY2I0OTczYTU0ZTkwYmY4NGU5YTQ1MTM4ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/avnUHQDScHAKC24Z9TYuwTjz3S 79Ff/pkH92F6hZ5jgrKzg8bibUMzeZlaFxt+GgxPdgxM8BF/PsacJb1nQxJdYPXO 5UXqnxdFow4Odi6svlCeXuBEIOq7BUbuglT46ysNWDVafE+i2mA0DMh+vwruRFZB l8ZjC+jn0vFUDWCejawPJLNslZReVulQqQV5Z79RGg4ISWN9nWgcTWtzJmJj76j+ QcKzBSMfB8Ft8pUgRmCc8zCw2qHvwUgeuudmj9S4L0QU6YN3QzLMPpCmbIKdwOpW 7BZBKPsIh99jEsmUncV0zhdUd9yg9/0y/3a2sHaDgMlPhZzZIcZgJHvKwQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ4/zjpB8Ky0lzpU6Qv4TppFE49UMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvbmpfT09rSHdyTFNYT2xUcENfaE9ta1VUajFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAh8TaAwQA h8TjAwQA1cmEAwQA1cmLMA0GCSqGSIb3DQEBCwUAA4IBAQCqr11bFq8kkSHlEZBG VTPe039BopGICjOlT2kaSKyCpkmtXdnKHnGr+i8KgPUidebTulzbLKB8kJ3aV5GG gn+DqWuQFgfNuhegvFTnzA6uW94tZOArcvUVGBrBRdsWzZHPHTQwi6QEdu5I9vWw K5EPleMnvtHXRaW85qhCw3OzYEVfCG3il+taOxtI8o+gwEahihqTLsPJyA0zkeAF +W3O4ebu9StRFXQLY3HaNdSjFE+WnFOOciGXzLiJ7yqpmZW5QDLbhVaiMbKokH41 O8uA4M6VJfVGnjAN+rNNSIGLgDjC6PjzKPuW1x5twny2O0J+RCRQAjPpPd/gGZfs InsH -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:29 2026 by rpki-client