This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/JF2M2FVJChHXjaz4-iqzuiKT9hQ.roa File: JF2M2FVJChHXjaz4-iqzuiKT9hQ.roa (raw, json) Hash identifier: ozsUgi55PqXrZMHU8/mL25nms4xgRUsWssZu7r5ne60= Subject key identifier: 24:5D:8C:D8:55:49:0A:11:D7:8D:AC:F8:FA:2A:B3:BA:22:93:F6:14 Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Certificate serial: 019B7A5AC91CF0D9F1021DE5ABAE10665D9B Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/JF2M2FVJChHXjaz4-iqzuiKT9hQ.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35299 IP address blocks: 85.31.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c9:1c:f0:d9:f1:02:1d:e5:ab:ae:10:66:5d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=245d8cd855490a11d78dacf8fa2ab3ba2293f614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:70:06:80:24:9f:30:9b:85:45:f4:34:e7: 7b:27:2d:a3:a7:f8:2c:91:be:b7:23:21:b5:bb:f3: 85:6b:87:a8:14:57:f8:b7:61:53:f4:d5:d3:ae:9d: 30:43:bf:1b:b9:4d:4c:1b:24:2a:be:b4:27:3a:b6: d3:47:11:c6:cc:cc:da:49:be:1b:32:4d:7f:90:3a: 23:e8:bb:72:5e:89:2a:0d:e2:18:4c:48:af:88:f4: 9f:9c:5f:b0:e8:cd:d9:12:0f:7a:39:ba:ba:2d:44: 08:82:59:6a:8c:89:c0:3c:1b:4d:21:33:2a:02:90: 37:32:d3:1c:12:64:37:2d:00:52:4c:e2:db:50:16: 9a:36:b9:d0:90:3b:65:d6:a8:76:86:8b:96:17:bb: 5b:3f:2e:79:d9:0b:bb:cd:fb:ea:2b:1c:48:76:f6: 01:c6:43:77:c8:36:9b:80:e2:56:7d:09:5d:88:13: a8:03:49:16:08:98:19:fb:2d:69:96:91:71:32:3c: 67:37:39:23:0a:a8:56:e0:c7:cb:89:62:bd:5d:bb: 7c:47:b3:51:1a:86:bc:4a:ab:b0:d8:55:47:e8:85: 7a:84:7e:71:bc:f0:7c:19:80:2d:39:d8:f0:f7:04: 77:ab:31:cf:cf:e3:70:88:c9:3e:00:6a:17:9e:8b: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:8C:D8:55:49:0A:11:D7:8D:AC:F8:FA:2A:B3:BA:22:93:F6:14 X509v3 Authority Key Identifier: keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/JF2M2FVJChHXjaz4-iqzuiKT9hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.136.0/21 Signature Algorithm: sha256WithRSAEncryption 60:b0:1e:19:82:3e:71:7e:71:c2:07:c1:4b:18:23:f1:73:ce: ae:07:6b:b8:aa:d0:8a:e0:63:71:02:0b:59:44:69:80:89:f1: b4:30:f1:14:44:1c:25:49:f8:9e:e9:cf:af:61:90:c5:48:bb: 79:de:9e:13:61:84:b5:1c:42:3f:d2:cd:d3:5b:11:6b:2e:e2: 40:dd:05:6c:4d:8a:b6:a9:6f:44:7e:39:77:1e:1b:a3:82:e8: 46:3b:74:ad:a2:ec:d1:88:5e:12:f7:bb:81:9a:1e:88:6d:40: 77:c2:ec:b6:f6:4e:5c:20:bd:6d:d0:c3:1e:d0:71:5f:d5:03: 82:69:39:94:5d:96:0d:12:f0:51:b5:6b:72:3e:16:fe:31:c7: 2f:91:e6:4d:4e:ac:cc:7a:c1:81:43:d7:47:e3:b5:b2:9f:a8: 2c:69:ac:f3:ef:b0:67:9d:cb:ed:3b:43:3e:e3:e8:66:63:05: 55:db:66:9e:2b:4a:58:30:78:50:a8:2f:21:a1:f9:9b:66:b5: 2f:5f:54:52:e9:5f:be:4b:12:a4:a9:27:de:1e:77:53:15:43: 2a:01:2b:7a:02:19:1e:27:e5:be:e0:11:1d:e5:7b:c9:22:5f: 76:b2:64:78:da:e8:94:13:4a:0e:78:9c:1d:d3:32:6b:e7:85: 84:9c:60:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wskc8NnxAh3lq64QZl2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWY0ZTgyZGJhODAyMzk5OWVmYmRhZDM0YjI3MWExZjQ4 OTJlOWUwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDVkOGNkODU1NDkwYTExZDc4ZGFjZjhmYTJhYjNiYTIyOTNmNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVwBoAknzCbhUX0NOd7Jy2jp/gs kb63IyG1u/OFa4eoFFf4t2FT9NXTrp0wQ78buU1MGyQqvrQnOrbTRxHGzMzaSb4b Mk1/kDoj6LtyXokqDeIYTEiviPSfnF+w6M3ZEg96Obq6LUQIgllqjInAPBtNITMq ApA3MtMcEmQ3LQBSTOLbUBaaNrnQkDtl1qh2houWF7tbPy552Qu7zfvqKxxIdvYB xkN3yDabgOJWfQldiBOoA0kWCJgZ+y1plpFxMjxnNzkjCqhW4MfLiWK9Xbt8R7NR Goa8Squw2FVH6IV6hH5xvPB8GYAtOdjw9wR3qzHPz+NwiMk+AGoXnosq/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCRdjNhVSQoR142s+Poqs7oik/YUMB8GA1UdIwQY MBaAFI2fToLbqAI5me+9rTSycaH0iS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMt ZmJkOWZlYjBmMTNjLzEvSkYyTTJGVkpDaEhYamF6NC1pcXp1aUtUOWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMtZmJkOWZlYjBmMTNj LzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVR+IMA0G CSqGSIb3DQEBCwUAA4IBAQBgsB4Zgj5xfnHCB8FLGCPxc86uB2u4qtCK4GNxAgtZ RGmAifG0MPEURBwlSfie6c+vYZDFSLt53p4TYYS1HEI/0s3TWxFrLuJA3QVsTYq2 qW9Efjl3HhujguhGO3StouzRiF4S97uBmh6IbUB3wuy29k5cIL1t0MMe0HFf1QOC aTmUXZYNEvBRtWtyPhb+MccvkeZNTqzMesGBQ9dH47Wyn6gsaazz77BnncvtO0M+ 4+hmYwVV22aeK0pYMHhQqC8hofmbZrUvX1RS6V++SxKkqSfeHndTFUMqASt6Ahke J+W+4BEd5XvJIl92smR42uiUE0oOeJwd0zJr54WEnGDv -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:42 2026 by rpki-client