This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jil2Xf5CXEY6D5-mLBwdepFrP7k.roa File: jil2Xf5CXEY6D5-mLBwdepFrP7k.roa (raw, json) Hash identifier: HuI1ETEHE5rq3Q55IY7fwIV6AkP3lT5Eh7F+L+wNoCM= Subject key identifier: 8E:29:76:5D:FE:42:5C:46:3A:0F:9F:A6:2C:1C:1D:7A:91:6B:3F:B9 Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf Certificate serial: 019B7AC8B1D66221E74E7132E17DE0C7424B Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jil2Xf5CXEY6D5-mLBwdepFrP7k.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211611 IP address blocks: 194.36.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b1:d6:62:21:e7:4e:71:32:e1:7d:e0:c7:42:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e29765dfe425c463a0f9fa62c1c1d7a916b3fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:08:c0:56:58:23:66:a5:e7:b5:88:72:32: 4c:b1:7d:6b:e6:93:5d:df:df:e0:0e:87:75:52:7a: 1c:ff:95:74:20:44:82:59:79:1f:0d:2f:8f:7b:4e: c5:60:e8:83:ed:9c:27:3b:af:c1:40:53:09:20:03: 04:69:7e:43:a1:da:3f:3a:bc:b6:f5:49:79:83:d1: 70:de:e8:75:76:57:b6:7a:7a:5f:10:1e:fe:7f:dc: fb:d9:d8:5a:68:5e:c6:2e:dc:a4:32:b6:4c:a9:51: 25:70:b3:d2:60:0d:e3:e2:46:f4:21:9a:9d:a2:56: d9:03:b3:b0:01:23:4a:af:26:ed:c3:5c:b0:c2:90: f0:e2:a5:a1:57:11:30:79:05:61:2d:f1:ab:13:9e: 12:24:5f:70:53:7c:af:f8:61:ca:44:c3:bf:75:14: 59:61:20:a5:93:3e:d9:72:db:3e:5a:6b:4a:b7:63: 74:3b:a5:03:28:4d:4b:f0:9d:77:ce:75:fc:48:ef: ce:0c:4a:c6:f0:59:42:0f:7a:0b:26:5c:f8:34:52: e8:42:24:0b:64:0e:8a:de:e3:83:5a:ff:c8:67:8b: 75:ca:f0:3a:9d:59:4f:69:5e:ba:8d:4d:57:0f:cd: 3d:32:5e:7b:1d:77:dc:f5:c7:f4:9a:7e:57:57:63: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:76:5D:FE:42:5C:46:3A:0F:9F:A6:2C:1C:1D:7A:91:6B:3F:B9 X509v3 Authority Key Identifier: keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jil2Xf5CXEY6D5-mLBwdepFrP7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.143.0/24 Signature Algorithm: sha256WithRSAEncryption 25:9d:bb:a0:58:f9:e7:59:51:d5:34:c8:69:6b:29:04:7c:4d: c6:95:8a:fe:51:87:f7:4a:10:0b:95:b1:90:ce:0e:4b:d8:02: d3:7b:fe:7d:ce:fc:e5:01:bf:2f:26:0a:d0:55:66:c4:8f:71: b6:6b:23:8a:e6:8f:73:24:93:72:fc:23:5e:9c:b5:3d:97:4c: 18:30:ac:ad:8d:9c:d8:23:3f:cc:09:73:76:fe:76:9b:bd:8d: dd:dd:6b:da:1b:14:0d:63:15:56:92:91:bf:07:a8:2b:56:a6: 79:0a:7f:9a:e8:f9:f4:c7:dc:9b:39:ce:68:72:1c:59:74:20: f9:8c:d4:3f:5b:39:bd:7d:ff:88:07:84:e6:2a:99:25:19:bd: c6:39:d2:b0:95:1e:59:e8:82:7a:5b:e2:96:78:89:be:35:1f: 02:79:9e:fc:c3:42:65:c4:73:0a:5f:a9:e1:0c:c8:8b:b1:22: db:c4:08:c9:69:6b:e1:24:df:bf:5a:3d:43:fc:ff:dd:48:5f: 94:81:92:17:ca:00:2c:2f:36:3b:69:03:4f:78:74:32:d7:03: d2:87:b9:c2:0d:b6:6d:80:f5:e1:9c:f5:c2:c5:78:99:de:b8: fd:66:de:ef:32:7b:f1:cf:e9:8d:7f:08:41:a4:8c:82:96:1a: e3:67:84:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLHWYiHnTnEy4X3gx0JLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjg0OWI5YmM5MDQyYTE1NTczMzE5MzdlNGFkNzE1MThh ZjYxY2YwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTI5NzY1ZGZlNDI1YzQ2M2EwZjlmYTYyYzFjMWQ3YTkxNmIzZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wIwFZYI2al57WIcjJMsX1r5pNd 39/gDod1Unoc/5V0IESCWXkfDS+Pe07FYOiD7ZwnO6/BQFMJIAMEaX5Dodo/Ory2 9Ul5g9Fw3uh1dle2enpfEB7+f9z72dhaaF7GLtykMrZMqVElcLPSYA3j4kb0IZqd olbZA7OwASNKrybtw1ywwpDw4qWhVxEweQVhLfGrE54SJF9wU3yv+GHKRMO/dRRZ YSClkz7Zcts+WmtKt2N0O6UDKE1L8J13znX8SO/ODErG8FlCD3oLJlz4NFLoQiQL ZA6K3uODWv/IZ4t1yvA6nVlPaV66jU1XD809Ml57HXfc9cf0mn5XV2NhAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4pdl3+QlxGOg+fpiwcHXqRaz+5MB8GA1UdIwQY MBaAFNC4Sbm8kEKhVXMxk35K1xUYr2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjkt NzJiYWQ5ZDczYzgwLzEvamlsMlhmNUNYRVk2RDUtbUxCd2RlcEZyUDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hM2ZiNjctZDUxNC00YWVlLWFkYjktNzJiYWQ5ZDczYzgw LzEvMExoSnVieVFRcUZWY3pHVGZrclhGUml2WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiSPMA0G CSqGSIb3DQEBCwUAA4IBAQAlnbugWPnnWVHVNMhpaykEfE3GlYr+UYf3ShALlbGQ zg5L2ALTe/59zvzlAb8vJgrQVWbEj3G2ayOK5o9zJJNy/CNenLU9l0wYMKytjZzY Iz/MCXN2/nabvY3d3WvaGxQNYxVWkpG/B6grVqZ5Cn+a6Pn0x9ybOc5ochxZdCD5 jNQ/Wzm9ff+IB4TmKpklGb3GOdKwlR5Z6IJ6W+KWeIm+NR8CeZ78w0JlxHMKX6nh DMiLsSLbxAjJaWvhJN+/Wj1D/P/dSF+UgZIXygAsLzY7aQNPeHQy1wPSh7nCDbZt gPXhnPXCxXiZ3rj9Zt7vMnvxz+mNfwhBpIyClhrjZ4SB -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:08 2026 by rpki-client