This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa File: J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa (raw, json) Hash identifier: vYs9Iafl6ODvzqSPTNj74leQVCe3/0UGQl7TxkQZF/8= Subject key identifier: 27:A1:FC:25:21:6E:C5:5C:C5:39:2C:2A:79:59:FC:BD:3B:1F:75:51 Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab Certificate serial: 019B7F83127FF2EAA435E914F12C20C85299 Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa Signing time: Fri 02 Jan 2026 16:20:54 +0000 ROA not before: Fri 02 Jan 2026 16:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205572 IP address blocks: 185.213.84.0/22 maxlen: 22 2a0b:8540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:12:7f:f2:ea:a4:35:e9:14:f1:2c:20:c8:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab Validity Not Before: Jan 2 16:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a1fc25216ec55cc5392c2a7959fcbd3b1f7551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:cd:e6:c8:88:83:b9:39:48:73:1d:ed:5b: b6:bc:1b:ab:6e:3e:29:d6:ec:16:2e:19:8e:19:98: 26:99:d8:d0:33:0a:5a:ce:16:c6:fb:6d:f0:cd:76: 37:41:cf:11:d6:a9:58:66:3e:05:d2:61:7d:2e:aa: f4:4f:1d:80:7c:07:6b:f0:dd:86:b9:75:62:b8:5f: bb:23:08:48:45:9c:2f:32:ba:35:9a:09:40:2b:7c: d2:a5:e2:a3:0b:34:c7:f3:f4:60:bc:fa:70:db:e2: 4c:ca:88:b3:82:35:14:49:34:7a:a8:39:6c:2c:a9: 62:5f:c7:6e:a2:a7:52:f6:85:e1:ec:4b:90:ab:33: 16:0f:d8:68:cd:69:7a:9a:5d:d4:ab:69:c4:76:be: f9:ea:09:1e:3f:f6:0b:ae:4b:a9:a1:44:56:a2:0e: 01:17:87:7e:73:19:1a:49:f2:f7:7f:3e:48:c0:77: 4c:e0:ca:aa:a1:a7:7d:b0:ed:0b:c3:de:94:63:55: b4:72:b4:e4:1b:35:7a:a6:1a:a8:fc:8c:1a:36:cd: a8:31:2f:ac:5a:3d:58:2f:93:59:5a:ea:51:8c:8d: 25:1b:72:d8:0d:6c:30:4a:62:cf:04:0a:24:5c:41: c6:6b:9a:1d:cf:c1:d6:87:1f:29:5b:d1:fd:1a:5a: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A1:FC:25:21:6E:C5:5C:C5:39:2C:2A:79:59:FC:BD:3B:1F:75:51 X509v3 Authority Key Identifier: keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.84.0/22 IPv6: 2a0b:8540::/29 Signature Algorithm: sha256WithRSAEncryption 4f:13:60:71:4a:0a:75:2c:18:c5:3f:ed:d7:f2:78:ab:93:a5: 8f:c6:e1:b8:63:b6:58:cf:5c:ce:77:da:d0:a7:c1:5d:cb:2c: f7:cc:49:38:3b:8d:5d:ff:c2:5f:b6:e5:12:d0:cc:5e:2e:1e: fd:20:fc:8a:67:a6:4d:c1:64:a5:d8:0f:ee:8f:14:ee:eb:60: 43:50:33:2a:8d:c5:1c:71:d2:62:7a:46:09:c6:fb:dc:0a:2b: 24:da:30:87:60:4b:db:fb:39:29:ec:1c:fa:22:34:7f:05:d3: 37:e5:12:f4:2c:25:7a:a4:9d:5a:ba:9f:2a:0b:bb:97:49:99: 7b:71:c4:d3:fb:c7:8c:17:ce:6c:d8:5d:7c:ba:d0:3d:3f:bc: c2:1c:0f:32:c2:1a:9f:6a:38:35:8d:ea:d8:ac:d3:a5:ef:d1: bb:b8:ed:af:a7:c5:12:1c:60:cc:8c:c2:40:64:ea:d8:2f:60: 53:f1:61:a5:65:d5:03:e4:4b:1d:fa:bf:31:a7:7a:47:47:d6: 0c:fd:d3:c1:04:3d:98:40:25:eb:5d:54:62:5f:96:b3:b0:c6: b4:a2:e9:02:fb:42:9e:2a:f2:2b:b5:17:e2:28:fa:6f:c6:85: 98:9a:bb:11:c0:01:50:27:0c:10:32:de:a7:cb:39:b9:d8:65: be:3f:dd:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gxJ/8uqkNekU8SwgyFKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YWRhOTAxZDQwOGJmN2Y1Yjk0MzU5MjFlNDgwMGE4Zjgy ZGJkYWIwHhcNMjYwMTAyMTYyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2ExZmMyNTIxNmVjNTVjYzUzOTJjMmE3OTU5ZmNiZDNiMWY3NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OLN5siIg7k5SHMd7Vu2vBurbj4p 1uwWLhmOGZgmmdjQMwpazhbG+23wzXY3Qc8R1qlYZj4F0mF9Lqr0Tx2AfAdr8N2G uXViuF+7IwhIRZwvMro1mglAK3zSpeKjCzTH8/RgvPpw2+JMyoizgjUUSTR6qDls LKliX8duoqdS9oXh7EuQqzMWD9hozWl6ml3Uq2nEdr756gkeP/YLrkupoURWog4B F4d+cxkaSfL3fz5IwHdM4Mqqoad9sO0Lw96UY1W0crTkGzV6phqo/IwaNs2oMS+s Wj1YL5NZWupRjI0lG3LYDWwwSmLPBAokXEHGa5odz8HWhx8pW9H9GlpdOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCeh/CUhbsVcxTksKnlZ/L07H3VRMB8GA1UdIwQY MBaAFPWtqQHUCL9/W5Q1kh5IAKj4Lb2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2Yt YTMzNjQ5ZTNlMmM1LzEvSjZIOEpTRnV4VnpGT1N3cWVWbjh2VHNmZFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2YtYTMzNjQ5ZTNlMmM1 LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudVUMA0E AgACMAcDBQMqC4VAMA0GCSqGSIb3DQEBCwUAA4IBAQBPE2BxSgp1LBjFP+3X8nir k6WPxuG4Y7ZYz1zOd9rQp8Fdyyz3zEk4O41d/8JftuUS0MxeLh79IPyKZ6ZNwWSl 2A/ujxTu62BDUDMqjcUccdJiekYJxvvcCisk2jCHYEvb+zkp7Bz6IjR/BdM35RL0 LCV6pJ1aup8qC7uXSZl7ccTT+8eMF85s2F18utA9P7zCHA8ywhqfajg1jerYrNOl 79G7uO2vp8USHGDMjMJAZOrYL2BT8WGlZdUD5Esd+r8xp3pHR9YM/dPBBD2YQCXr XVRiX5azsMa0oukC+0KeKvIrtRfiKPpvxoWYmrsRwAFQJwwQMt6nyzm52GW+P91D -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:44 2026 by rpki-client