This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/sjPesBIIA06CEd69RkfrjPMQWDw.roa File: sjPesBIIA06CEd69RkfrjPMQWDw.roa (raw, json) Hash identifier: yILvkFkjNMnr+ERjSfm5WnXK67VNMt3otW/1DbB0ZNY= Subject key identifier: B2:33:DE:B0:12:08:03:4E:82:11:DE:BD:46:47:EB:8C:F3:10:58:3C Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835 Certificate serial: 019B7DCA56A094D80CC9034403A0F0AA63AD Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/sjPesBIIA06CEd69RkfrjPMQWDw.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62353 IP address blocks: 185.22.12.0/22 maxlen: 24 185.22.12.0/23 maxlen: 24 185.22.14.0/23 maxlen: 24 185.81.8.0/22 maxlen: 24 185.81.8.0/23 maxlen: 24 185.81.8.0/24 maxlen: 24 185.81.10.0/23 maxlen: 24 185.81.11.0/24 maxlen: 24 213.159.16.0/21 maxlen: 24 213.159.16.0/22 maxlen: 24 213.159.20.0/22 maxlen: 24 2a00:5d60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:56:a0:94:d8:0c:c9:03:44:03:a0:f0:aa:63:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b233deb01208034e8211debd4647eb8cf310583c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:86:3e:37:30:be:4e:5f:75:0c:eb:78:cf: 7b:19:74:f0:8d:c1:10:4a:09:52:7b:7a:ec:1f:28: ac:ba:7b:90:c2:17:18:95:80:6f:b4:2c:14:0a:2d: 1f:9b:cf:23:b7:18:62:3c:a7:ae:b9:f3:84:5d:40: cb:a2:13:16:47:17:56:ac:20:43:49:07:0e:28:eb: e3:5e:52:3f:70:c5:ce:e9:7d:b4:5a:83:68:4f:d1: 90:eb:ab:85:08:f8:e9:e6:21:0e:03:f6:37:d2:a3: 57:61:2c:9a:6e:c7:5d:ac:63:b4:3c:f0:f4:81:70: 2e:f3:b4:49:6e:18:7c:c6:87:d3:b1:38:9a:b4:1c: a5:76:63:c5:99:f6:e7:ae:a7:59:75:10:2e:f3:97: 1e:a5:f0:0d:bb:32:de:5e:e2:3b:b0:f6:a1:25:dd: 48:29:12:14:2d:7a:13:e2:72:a5:b0:f4:8e:d6:b3: 11:b1:fa:58:37:4f:e3:b6:1d:61:75:a6:0a:67:03: bb:b9:94:e7:b8:6a:f4:80:ba:24:81:da:d4:ef:dd: 93:4a:84:03:ed:da:57:03:09:4f:6b:50:5a:26:54: 35:ab:32:e3:29:8a:66:03:4a:ee:4d:07:d9:49:10: d5:30:06:8b:6a:94:1b:81:05:cd:65:f9:40:59:95: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:33:DE:B0:12:08:03:4E:82:11:DE:BD:46:47:EB:8C:F3:10:58:3C X509v3 Authority Key Identifier: keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/sjPesBIIA06CEd69RkfrjPMQWDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.12.0/22 185.81.8.0/22 213.159.16.0/21 IPv6: 2a00:5d60::/32 Signature Algorithm: sha256WithRSAEncryption 2c:d3:67:2c:af:42:16:cd:f7:78:51:b2:54:28:04:98:8c:24: 69:be:9f:b9:7e:1f:03:2c:74:a8:bb:48:e5:d6:b6:f0:91:34: c7:2c:b1:cd:3d:08:63:5c:43:e2:9c:fa:4e:6c:fa:8a:76:e9: b7:2e:45:79:a0:13:be:bd:69:4c:52:88:0f:8b:11:d2:e3:22: 94:3e:27:d1:4e:b1:05:72:5e:07:51:05:fa:b5:c4:06:f4:b0: e3:e0:35:79:b1:4d:cb:95:d2:ab:86:9f:04:f2:7e:ae:5d:fd: 6c:c3:a5:5c:ab:4e:9d:50:66:09:6c:ac:af:91:fd:f0:b8:39: 92:8b:93:c2:5e:a8:e1:d2:a5:c2:36:25:f7:e5:09:29:df:90: 1e:5d:4c:b2:10:7c:42:f4:31:8d:45:45:2e:a5:b2:44:b2:d3: 39:97:91:f3:97:9f:d8:d7:9a:b7:49:f8:31:a0:ef:08:97:f3: a7:99:3b:0e:01:19:12:72:70:48:86:b6:e4:3b:25:c2:af:aa: e7:8c:ca:e6:13:4b:d1:2b:92:a1:a8:b1:85:58:d0:b3:27:05: 0b:09:ec:97:12:62:a8:92:30:ba:c0:f8:5f:ed:8b:e0:19:5e: 13:58:ad:90:af:5e:07:b7:0a:44:44:5c:41:af:c6:a9:22:5d: 47:f0:b1:59 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9ylaglNgMyQNEA6DwqmOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTlmNmFjMTczZjc1ZWQ5ZTU4NWVjN2Q4NzJhNTg2NWNl ZjI4MzUwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjMzZGViMDEyMDgwMzRlODIxMWRlYmQ0NjQ3ZWI4Y2YzMTA1ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aeGPjcwvk5fdQzreM97GXTwjcEQ SglSe3rsHyisunuQwhcYlYBvtCwUCi0fm88jtxhiPKeuufOEXUDLohMWRxdWrCBD SQcOKOvjXlI/cMXO6X20WoNoT9GQ66uFCPjp5iEOA/Y30qNXYSyabsddrGO0PPD0 gXAu87RJbhh8xofTsTiatByldmPFmfbnrqdZdRAu85cepfANuzLeXuI7sPahJd1I KRIULXoT4nKlsPSO1rMRsfpYN0/jth1hdaYKZwO7uZTnuGr0gLokgdrU792TSoQD 7dpXAwlPa1BaJlQ1qzLjKYpmA0ruTQfZSRDVMAaLapQbgQXNZflAWZVenQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLIz3rASCANOghHevUZH64zzEFg8MB8GA1UdIwQY MBaAFAdZ9qwXP3Xtnlhex9hypYZc7yg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUt N2JlM2JkYTA1OTI3LzEvc2pQZXNCSUlBMDZDRWQ2OVJrZnJqUE1RV0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUtN2JlM2JkYTA1OTI3 LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRYMAwQC uVEIAwQD1Z8QMA0EAgACMAcDBQAqAF1gMA0GCSqGSIb3DQEBCwUAA4IBAQAs02cs r0IWzfd4UbJUKASYjCRpvp+5fh8DLHSou0jl1rbwkTTHLLHNPQhjXEPinPpObPqK dum3LkV5oBO+vWlMUogPixHS4yKUPifRTrEFcl4HUQX6tcQG9LDj4DV5sU3LldKr hp8E8n6uXf1sw6Vcq06dUGYJbKyvkf3wuDmSi5PCXqjh0qXCNiX35Qkp35AeXUyy EHxC9DGNRUUupbJEstM5l5Hzl5/Y15q3SfgxoO8Il/OnmTsOARkScnBIhrbkOyXC r6rnjMrmE0vRK5KhqLGFWNCzJwULCeyXEmKokjC6wPhf7YvgGV4TWK2Qr14HtwpE RFxBr8apIl1H8LFZ -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:37 2026 by rpki-client